Apple pay and credit card reissue

[Sam Luis Obispo]

Recently had to get a credit card reissued that was loaded into Apple Pay. After cancelling the card, I removed the card from the wallet and noticed that the number did not match the old number. The wallet on my phone apparently knew what the new credit card number was going to be before the new card was mailed???

How does that work, exactly??? Does the bank push a notification directly to my phone? OR does the bank push a notification to Apple, which then pushes a notification to my phone?

From the Apple website:
"The safer way to pay.

When you make a purchase, Apple Pay uses a device-specific number and unique transaction code. So your card number is never stored on your device or our servers, and when you pay, your card numbers are never shared by Apple with merchants."

 

[Rigby]

Recently had to get a credit card reissued that was loaded into Apple Pay. After cancelling the card, I removed the card from the wallet and noticed that the number did not match the old number. The wallet on my phone apparently knew what the new credit card number was going to be before the new card was mailed???

How does that work, exactly??? Does the bank push a notification directly to my phone? OR does the bank push a notification to Apple, which then pushes a notification to my phone?

Yes, the bank can update the card in Wallet using push notifications (that's also how the list of transactions is updated in Wallet). But the bank does not push the full credit card number, only the last 4 digits so you can identify the card. So this is really just a cosmetic change. The DAN (which is the "virtual" credit card number used for Apple Pay transactions) usually doesn't change when a new physical card is issued.

 

[nicho]

So this is really just a cosmetic change

Even better, they can change the whole look of the card (an actual cosmetic change!)

I have a co-branded card in apple pay, but originally when apple pay came to china they hadn't set them all up properly, it seems, so it appeared as a generic credit card from them. suddenly one day, bam, there's the new credit card image that looks exactly like the actual credit card!

 

[ImBuz]

Had to get a new debit card for a stolen one, befire I left bank new card on iPhone with new face.

 

[Tech198]

The DAN (which is the "virtual" credit card number used for Apple Pay transactions) usually doesn't change when a new physical card is issued.

Therefore, the DAN changing with new credit card would be more secure, but Apple is only going by the security as the transaction action itself being secure only.

Perhaps this cannot be possible? Apple already can tie this to the serial number of the phone anyway, so i don't see why it needs to be the same.

 

[Rigby]

Therefore, the DAN changing with new credit card would be more secure

Why do you think it would be more secure to change the DAN when a new physical card is issued?

but Apple is only going by the security as the transaction action itself being secure only.

?

 

[Tech198]

Why do you think it would be more secure to change the DAN when a new physical card is issued?
?

anything that changes is good for security..

changing it every time a new card added would help keep it 'more secure'.

Apple goes by their unique security transaction code, and specific device number only, as the only measure to protect us, and lessors the secure of everything else. I would double those chances... even if its secure enough, and you probably wouldn't gain anything else by it, it wouldn't hurt to follow it all.

Not saying Apple pay isn't secure, but that's what i would do.