Contactless cards have been universally accepted on the London transport network for quite a while – this includes Apple Pay, and I assume Android Pay too. Con

Contactless cards have been universally accepted on the London transport network for quite a while – this includes Apple Pay, and I assume Android Pay too. Contactless/NFC has no security in the sense that it requires no interaction in order to charge a card. Security is provided by bank guarantees to refund fraudulent transactions, capping transactions to low-ish values, and requiring a PIN-authed transaction every 5 contactless transactions. Card data cannot be extracted from a transaction in this way, and fraudulent terminals are unlikely to appear due to the need for merchant accounts and the associated paper trail. In the case of Apple Pay and presumably Android Pay, there is the additional requirement that transactions are authenticated on the device (TouchID / passcode for Apple Pay).