Rights relating to fraudulent ApplePay transaction

Drummergirl123

Hi,
My daughter recently had money taken from her bank account from a website which doesn’t even exist (www.leanwarriors.com - this just appears to be a domain name, not an actual site). Her bank account says the transaction was made by ApplePay and therefore authorised by Face ID so won’t refund it.
The only Apple Pay transaction she made was to a different site, wallpapers-clan.com, which “charged” her £0.00 to download an app for her phone.
I’m assuming this is some sort of phishing thing, but she has had no response from contact to the phone app site, and the other domain name doesn’t have any means to contact them ( let alone to send them any sort of payment).
Am planning to try the bank again and try and argue her case, but does she have any kind of rights or protection in this scenario? Is there any other way we can try to get her money back?
thanks

glennevis

Looks like you've added 2+2 and made 5.

The app icons site appears genuine and nothing to do with the other website which, by the way, does exist.

(https://) www.leanwarriors.com has the look and feel of a scam website. The domain name was registered very recently. Website has little content with links to fat burning and weight loss ada (ring any bells?).

What does the Wallet app record about this transaction? You don't say how much was taken. If it was low value could Apple Pay be configured to authorise this transaction without FaceID or other biometric?