I recently made a purchase using Apple Pay by using my AMEX card. I clarified with AMEX if AMEX shared my card number to the merchant or if a unique number was sent to the merchant since Apple Pay claims to use a unique number code per transaction. AMEX told me that they saw I used Apple Pay Wallet in which my card number was shared with the merchant to submit the transaction detail. In the receipt from the merchant, I saw the last 4 digits of my AMEX. I’m confused because I thought Apple Pay sends a unique number per transaction or am I getting it wrong? Please help.
The unique code per transaction is the security code (i.e., the one that replaces the 3 digit security code found on the back of all cards or 4 digits on the front for Amex cards), but no one gets to see that one. As for the card number, your actual card number is not shared with the merchant. Instead, the merchant receives a different “card” number assigned to your device, called the device account number. That one doesn’t change per transaction, but it is more secure in that it’s different from your actual card number and it’s tied to your device, so in the remote case that anyone were able to hack it from the store terminal they wouldn’t be able to use it to put fraudulent charges on your account. Besides, because it’s another number your physical card wouldn’t be compromised.
In some cases such as online purchases, the merchant may get the last four digits of your actual card because they are also stored in your iphone as a reference for you to know which card you’re using (that’s why they appear on screen when you pull up apple pay to pay), but I believe they never get your full account info.