Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Just received an email from JLP about Strong Customer Authentication.

It’s got this note about contactless device payments suggesting the associated card may be required for authentication purposes.

Anyone got more knowledge on this?
 

Attachments

  • F2EDEB44-F13B-48E6-9F66-BC420D43F03F.jpeg
    F2EDEB44-F13B-48E6-9F66-BC420D43F03F.jpeg
    230.9 KB · Views: 237
Just received an email from JLP about Strong Customer Authentication.

It’s got this note about contactless device payments suggesting the associated card may be required for authentication purposes.

Anyone got more knowledge on this?
I got this same email and thought I'd come here to let people know. This is one of the problems with Apple Pay, Android Pay and Samsung Pay etc. Retailers still do not understand the security benefits of these new payment methods.
 
  • Like
Reactions: arkitect
I got this same email and thought I'd come here to let people know. This is one of the problems with Apple Pay, Android Pay and Samsung Pay etc. Retailers still do not understand the security benefits of these new payment methods.

I’m sure someone in that retail company is filling his bank up by scaremongering.
 
Just received an email from JLP about Strong Customer Authentication.

It’s got this note about contactless device payments suggesting the associated card may be required for authentication purposes.

Anyone got more knowledge on this?
That is terrible — just defeats the whole purpose of contactless.

Mind you I have been getting lots of email from banks about "changes coming in September for your security"… so god knows what the banks are cooking up.

This would be a massive step backward. I seldom have my cards with me these days… iPhone, keys and… errm… that's it. To have to return to the days of a wallet stuffed with cards would be very annoying.
 
Last edited:
  • Like
Reactions: azing
I got the same email. I thought we were trying to get to a place where we do not need plasitic cards, feels like a step backwards!

Apple Pay is secure! That's the whole point of it.
 
  • Like
Reactions: azing and arkitect
Just received an email from JLP about Strong Customer Authentication.

It’s got this note about contactless device payments suggesting the associated card may be required for authentication purposes.

Anyone got more knowledge on this?
So basically to use Apple Pay you have to also insert your physical card and put in your pin? That 100% defeats the point haha, ridiculous.
 
I’ve done some reading and Strong Customer Authentication is part of a new EU payment services directive. The majority of payments will require two factor authentication.

This includes online transactions, which will likely be verified via one time passcode text message.

Of course Apple Pay is two factor already - 1. phone/watch and 2. fingerprint/face.

Since Apple Pay meets the SCA requirements there shouldn’t be any changes required for online or in person payments. I’m therefore hopeful that John Lewis have got this wrong, which would be concerning but perhaps not surprising given the miscommunication/misunderstanding of Apple Pay in the past.

Exemptions for two factor authentication include low value transactions (eg. Current £30 limit for card contactless)

Another part of the directive seems to be resulting in changes to online banking login processes for a many banks/building societies.
 
  • Like
Reactions: azing and cepenpark
I’ve done some reading and Strong Customer Authentication is part of a new EU payment services directive. The majority of payments will require two factor authentication.

This includes online transactions, which will likely be verified via one time passcode text message.

Of course Apple Pay is two factor already - 1. phone/watch and 2. fingerprint/face.

Since Apple Pay meets the SCA requirements there shouldn’t be any changes required for online or in person payments. I’m therefore hopeful that John Lewis have got this wrong, which would be concerning but not unsurprising given the miscommunication/misunderstanding of Apple Pay in the past.

Exemptions for two factor authentication include low value transactions (eg. Current £30 limit for card contactless)

Another part of the directive seems to be resulting in changes to online banking login processes for a many banks/building societies.
Might be worth replying to the email and including the text in this post. Would be interested in the response.
 
My take on it is this: I guess some people have gone out shopping, without their cards, reached the point where their issuing bank performs a ‘PIN check’ and probably kicked off.
 
Apple's Merchant support page says this about the PIN number

"
When customers pay with Apple Pay, do they need to sign a receipt or enter a PIN?
When paying in stores with Apple Pay in some countries and regions, if your customer's transaction exceeds a certain amount, they might need to enter their PIN. In some cases, they might need to sign a receipt or use a different payment method.4

Apple Cash5 doesn't require a PIN as every payment is authenticated by Face ID, Touch ID, or a secure passcode. Some terminals may still request a PIN to complete any debit transaction. If prompted, advise customers to enter a four-digit code such as 0000.
"
 
Apple's Merchant support page says this about the PIN number

"
When customers pay with Apple Pay, do they need to sign a receipt or enter a PIN?
When paying in stores with Apple Pay in some countries and regions, if your customer's transaction exceeds a certain amount, they might need to enter their PIN. In some cases, they might need to sign a receipt or use a different payment method.4

Apple Cash5 doesn't require a PIN as every payment is authenticated by Face ID, Touch ID, or a secure passcode. Some terminals may still request a PIN to complete any debit transaction. If prompted, advise customers to enter a four-digit code such as 0000.
"

The linked page very specifically says this about the UK -> "You might not be able to use Apple Pay for purchases over 30 GBP."

There is no noted provision in the UK for entering pins or signing receipts.
 
  • Like
Reactions: Fried_Gold
The linked page very specifically says this about the UK -> "You might not be able to use Apple Pay for purchases over 30 GBP."

There is no noted provision in the UK for entering pins or signing receipts.

Genuinely curious how BREXIT will impact all of this Pay/Apple Card stuff with the UK... that's still slated for October 31, 2019.
 
Apple have reportedly registered a trademark for Apple Card here in the U.K. so whatever happens in the next few weeks I'd imagine we may see it at some point.

If we do leave it'll also be interesting to see if the Government remove the EU rules on Interchange Fees; that is why I suspect any offerings from Apple won't be as generous as they might've been before it came into effect.
 
Update from JL

At John Lewis & Partners, we are committed to ensuring you have a safe and secure experience when shopping with us. On Monday 2 September we sent you an email about Strong Customer Authentication (SCA) and the importance of your card issuer having your most up-to-date contact information.

We incorrectly suggested that you may be asked to insert your card and key in your PIN when using Apple Pay and Samsung Pay. We are pleased to tell you that you are not required to present your card or enter your PIN when using these payment methods, and you can continue to use Apple Pay and Samsung Pay as normal.
 
Was able to use Apple Pay with Mr Tyre in Langley Mill last week; spending £120 on new tyres and tracking never felt so painful and painless at the same time!
 
Was able to use Apple Pay with Mr Tyre in Langley Mill last week; spending £120 on new tyres and tracking never felt so painful and painless at the same time!
I think, in my experience at least, I'm more surprised when places don't accept Apple Pay. I feel like I'm very rarely having to use Chip and PIN which is great!
 
  • Like
Reactions: iGeek2019
It is indeed; I just hope with the rules being introduced in 2020 that shops have to have contactless payments means more places accept >£30.

Figure nothing was announced about Apple Cash today at iPhone launch.
 
Some info regarding contactless payments from Starling. It may be bank specific but I’d imagine it’s the same across the board.

won’t ask you for your PIN after five transactions and you’ll be able to pay through contactless as many times in a row as you like. The same goes for Digital Wallets such as Apple Pay and Google Pay, so if you haven’t started using yours yet, now’s the time.

https://www.starlingbank.com/blog/making-contactless-more-secure/
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.