Topic
Payment security method that swaps a card number for a limited-use token at checkout, so the credential can be scoped or revoked without exposing the account.
UMass Amherst researchers showed at USENIX Security 2026 that an expired contactless card still pays in stores once a relay rewrites its expiry date. Issuers that trust the terminal's reported expiry approve the sale, a dev.to write-up says, so a reissued card leaves the old chip usable.
Reality
Apple Pay went live in India on 30 September, and at launch the only cards users can add are Axis Bank's Visa and Mastercard credit cards. Until another bank signs up, every Apple Pay purchase in the country runs on an Axis credit card, whatever the merchant or processor.
Perspective Coverage
10 publishersReality
ASB Bank, Bank of America, Capital One, Commonwealth Bank of Australia, ING Group and NatWest set out transparency, safety, privacy, choice and interoperability in a document KeyBanc called voluntary and non-binding.
Reality
American Banker reports that Walmart, the biggest wallet holdout until now, is supporting Apple Pay. Its sources put the cost on issuers whose cards are not the default credential in a customer's phone.
Reality
Alchemy's agent credential links back to the user's own Mastercard, and both the user and the issuer can cap it by amount, merchant category and geography before the agent spends anything.
Reality