Contactless card fraud cases continue to surface following MSE investigation

takman

LadyDee wrote: »

In theory very good idea, but how do you disable the app if your phone is stolen, or you don't notice that it's gone. They could be taking money out at the next cashpoint within minutes, or do you have to enter a key?

My purse was stolen with my cards in some time ago, luckily I realised within five minutes that it had gone, went into the bank which was just a minute or two up the road, and within that time an attempt had been made to withdraw money from an ATM at another bank 50 yards away.

I can erase my phone from any other device if I needed too. I can also lock it and track it. So if someone started to make transactions using my phone I would just erase it all, everyone on my phone is automatically backed up so I wouldn't hesitate in doing it if I needed too.
Also Android pay transactions appear on my bank apps pending payments almost immediately so I will know as soon as it's used.

But none of this should be necessary because the way android pay works it can easily be disabled by the bank permanently, but it always good to have other options.

takman

20aday wrote: »

Barclays are trialling contactless withdrawals from ATMs (think it's sometime in 2017) but you still need the PIN to complete the transaction.

At present Apple/Android Pay cannot be used to withdraw cash from the hole in the wall; you need your physical card still.

One thing I like about Apple Pay over Android Pay is the fact EVERY transaction requires a registered fingerprint or for the thief to know what the phone's passcode is; whereas if the thief knows the passcode (£30 or less with Android Pay) and they unlock the phone they don't need a fingerprint to complete a purchase.

The reason Android pay doesn't require fingerprints for every transaction is because Android is open source and not many compatible phones actually have a fingerprint "scanner".
As you say less than £30 requires the phone to be woken up and more than £30 required it to be unlocked. So it's just like a normal contactless card for less than £30 transactions and it's up to the user to secure their phone for larger amounts. Just like you shouldn't give out your pin code for your debit card, you shouldn't give out your phone unlock code or add untrustworthy people to the fingerprint list.