Money & Finance › Payments & money movement › Credit and debit card payments: how a swipe or tap gets paid
Mobile wallets and tap-to-pay: Apple Pay and Google Pay
Apple Pay, Oct 2014· Asset or instrument
Fact, law or dataA rule, statute, definition or measured number.
Phone and watch apps that store cards as secure tokens and pay by tapping a contactless terminal.
See it on the Money & Finance map →How it works
Adding a card to Apple Pay (October 2014) or Google Pay has the network issue a 'token', a stand-in card number tied to that device. At checkout the phone sends the token and a one-time code over NFC after Face ID or a fingerprint; the real card number never reaches the merchant. It then runs as a normal card payment, with the same fees and dispute rights. Main fraud risk: scammers tricking victims into sharing codes that load their card onto a thief's phone.
Why it matters
Tokens make stolen merchant data nearly useless and cut in-store fraud, while putting Apple and Google between banks and their customers.
Facts, rules and data
EMVCo tokenization specifications, Visa and Mastercard token-service documents, Apple and Google announcements, and the EU's 2024 settlement opening iPhone tap-to-pay to rivals.
Debates and risks
Whether Apple's control of iPhone tap-to-pay hurts competition, a claim in the Justice Department's 2024 antitrust suit, is not settled.
Connections (2)
▸Mobile wallets and tap-to-pay: Apple Pay and Google Pay store card tokens issued by Card networks: Visa, Mastercard, American Express, DiscoverFact, law or data
The connection
When a card is added to Apple Pay or Google Pay, the network's token service, Visa Token Service or Mastercard's MDES, replaces the card number with a device token and keeps the link. Each payment then runs on the same network, with a one-time cryptogram proving it came from that phone.
When and why
Launched with Apple Pay in October 2014, built on EMVCo's payment-token standard.
How we know
Visa and Mastercard token-service documentation and EMVCo's published tokenization framework.
Debates and risks
Whether networks' control of tokens mainly strengthens security or entrenches them against new payment rails is debated.
▸Mobile wallets and tap-to-pay: Apple Pay and Google Pay replaced the swipe with a tap in Credit and debit card payments: how a swipe or tap gets paidFact, law or data
The connection
A wallet payment is still a card payment: same issuer, network, fees and dispute rights. What changed is checkout: an NFC tap confirmed by Face ID or a fingerprint replaces the magnetic swipe, which was easy to copy. Contactless cards spread tapping further after 2020.
When and why
US stores from 2014, accelerating during COVID-19 in 2020–21.
How we know
Network and issuer data on contactless share, and EMV chip liability rules in place since October 2015.
Debates and risks
Whether phones will replace physical cards entirely, or both persist for years, is open.