Originally Posted by
tmiw
I have an EMV reader on my phone. I basically had to put my DC card right on the phone in order for it to get read. That attack is definitely unlikely, but some posters did have a point about merchants taking cards from them and tapping without being able to verify the amount first.
Isn't the point of PayPass and payWave so the merchant doesn't have to take the card from you? Or is that only a benefit in the US? Obviously with a smartphone its best to let the customer tap, in the case of Apple's system, required....I had to reach over the counter to use Apple Pay at a Mongolian grill because they didn't have a customer facing PIN pad.