4 ms·
It may not expose it to the employee at the register, but the card number (actually, there are two numbers) is still sent to their merchant bank.
by jeremyjh 7y ago
It may not expose it to the employee at the register, but the card number (actually, there are two numbers) is still sent to their merchant bank.
- dstaley 7y agoI don't think this is accurate. I'm fairly sure Apple Pay uses tokenization, so the merchant/merchant bank never sees the actual card details. The only party in the transaction who knows the actual card details is the issuing bank.
- deleted 7y ago[deleted]
- jeremyjh 7y agoYou are right, I was mistaken. The DPAN is the tokenized card number, and that is the only account number an acquirer will have. My experience seeing both in the auth system log was from the issuer side.