What this article is, and is not
The title calls this an experiment, but nothing was run, tested or measured for it. It is an explainer of how phone-based wallets work in general terms, with no brands named. Details differ between providers and countries, and this is general information rather than advice about any particular product.
What a digital wallet holds
A digital wallet is software, usually an app on a phone or watch, that stores things you would otherwise carry in a leather wallet. The most common contents are payment cards, but wallets may also hold loyalty cards, transit passes, event tickets and, in some places, identity documents or keys.
The important point is what is stored. A well-designed wallet generally does not keep your actual card number in a form a shop can read. Instead, it holds a substitute.
Tokens instead of card numbers
When you add a card, the wallet asks the card issuer to approve it. The issuer then supplies a token, a number that stands in for the real card number. The token is linked to your account behind the scenes but is only useful in limited ways, for example with a particular device.
This matters because a shop that receives a token never sees the real number. If the shop’s systems are breached, the stolen token is typically far less useful than a real card number would be. The idea is related to the broader one in the article on digital tokens, though a payment token is a security substitute rather than an asset.
Wallets also commonly produce a one-time code for each payment, sometimes called a cryptogram. It is valid for a single transaction, so copying it from one purchase does not allow it to be reused for another.
How tap-to-pay works
Tap-to-pay uses near-field communication, a short-range radio technology that works over a few centimeters. When you hold your phone near a payment terminal:
- The terminal and phone exchange a brief message over the short-range link.
- The phone sends the token and a one-time code, after you have unlocked it or confirmed with a fingerprint, face scan or passcode.
- The terminal passes the information to the payment network, which maps the token to the real account, checks funds and fraud signals, and approves or declines.
- The terminal shows the result, usually within a second or two.
The short range is a deliberate safeguard. Someone would need to be very close to pick up the signal, and the data they could capture is of limited value because of the single-use code.
Online and in-app payments follow a similar logic: the wallet supplies a token and a confirmation rather than typing out a card number into a form. Some wallets also support QR code payments, where a code is scanned instead.
Where your secrets live
Phones usually have a protected area of hardware or software designed to store sensitive material, kept separate from ordinary apps. Credentials are held there, and it is meant to resist extraction even if other software on the phone misbehaves. Unlocking with your face or fingerprint is checked on the device, and the biometric data is generally intended to stay on the phone rather than being sent to the shop. How the matching works is explained in the article on biometric authentication, including the fact that no method is perfect.
Security basics for users
- Keep a strong lock on the phone. A wallet is only as secure as the screen lock protecting it. Use a passcode that is not easy to guess.
- Keep software current. Software updates close known weaknesses.
- Turn on tracking and remote lock features. If a phone is lost, a remote lock or erase option can protect the wallet, and many card issuers can suspend a token without canceling the card itself.
- Watch notifications. Alerts for each transaction help you notice something unfamiliar quickly.
- Be wary of messages asking you to add a card or read out a code. Many attacks involve tricking the person into approving something, as with phishing scams, rather than defeating the technology. A bank will not normally need you to read out a one-time verification code to them.
- Use two-factor authentication on the account tied to your wallet and the phone itself.
- Download wallet apps only from official stores, and be cautious about unknown apps asking for broad permissions.
- Review statements and report problems promptly to your card issuer.
Benefits and limits
Potential benefits include convenience, less cash handling, and extra protection from tokens and device-based authentication. Some people find that paying with a phone is faster than finding a card.
There are limits. A dead battery or lost phone can leave you unable to pay, so many people still carry a backup. Not every merchant accepts every kind of wallet, and some wallets work only in certain countries. Wallets also generate data about where and when you spend, which links to data privacy and how providers use transaction information. Reading a provider’s privacy settings and policies is sensible.
Fraud is not eliminated. Protections for unauthorized transactions differ by country and card type, and they usually apply less clearly if you were persuaded to authorize a payment yourself. Checking your issuer’s terms can clarify what is covered.
The wider picture
Digital wallets are one part of the move toward electronic payments, which has implications for access, cost and privacy that are discussed in the pillar article on digital payments. Their long-term effects, including on cash use and small merchants, remain open questions.