Cybercriminals are exploiting tap-to-pay technology by stealing credit card details and attempting to add the cards to Apple Wallet or other mobile wallets. They may obtain card information through phishing messages, fake bank calls, data breaches, skimming devices, or compromised payment systems.
Adding a stolen card usually requires an authentication code. Scammers may impersonate a bank representative and convince the victim to share the one-time verification code. Once the card is approved, the thief can use a phone to make contactless purchases at compatible point-of-sale terminals.
Because mobile-wallet transactions can appear legitimate, victims may not notice the fraud until they review their statements. Criminals may begin with small purchases to test the stolen card before attempting larger transactions or buying items that can be quickly resold.
Businesses should monitor point-of-sale transactions for unusual purchasing patterns, repeated declined payments, and multiple contactless transactions involving high-value products. Employees should follow established fraud-prevention procedures and avoid confronting suspected thieves directly.
Cardholders should never share verification codes, even with someone claiming to represent their bank. Enable transaction alerts, review statements regularly, and immediately contact the card issuer if an unfamiliar wallet-enrollment message or tap-to-pay purchase appears.