Researchers find Apple Pay, Visa contactless hack

Large unauthorised contactless payments can be made on locked iPhones by exploiting how an Apple Pay feature designed to help commuters pay quickly at ticket barriers works with Visa.

In a video, researchers demonstrated making a contactless Visa payment of £1,000 from a locked iPhone.

Apple said the matter was "a concern with a Visa system".

Visa said payments were secure and attacks of this type were impractical outside of a lab.

The problem, researchers say, applies to Visa cards set up in 'Express Transit' mode in an iPhone's wallet.

"Express Transit" is an Apple Pay feature which enables commuters to make quick contactless payments without unlocking their phone, for example touching-in and touching-out at a London Underground ticket barrier.

read more https://www.bbc.com/news/technology-58719891