4 ms·

I am not sure if I'm losing it but the following statement doesn't make sense in my head: > Your same card used through Apple Pay on your iPhone and iPad will

I am not sure if I'm losing it but the following statement doesn't make sense in my head: > Your same card used through Apple Pay on your iPhone and iPad will show different DPANs, though since each device gets its own number. That 'though' does not compute. > Basically, when that Apple Pay card pops up when you’re checking out, expect everything on that card to be sent to the merchant Apple Pay. But what about Apple Pay? You know, the one in store, where you hold your phone against the NFC reader?

w-ll 3y ago
I might be wrong but they are acutally differnt CC numbers, with the prefix linked to ApplePay, and then they resolve or proxy to your acutally CC. You can use NFC Sniffers like the Flipper to see this in action. Same how ApplePay on the watch works without network, cuz it has already preset the AppleCC prefix on ur watch, and its just emulating that AppleCC to the card receiver. Same for the phone.
p_l 3y ago
It will transmit everything in EMV contactless spec, tokenized like always. DPAN is just token to represent a combination of device+card.
- WirelessGigabit 3y ago
  But it will not contain my address right? So if I use Apple Pay in store, at say Kroger for 100 times, can they track me? Or do I get a new credit card number every time?
  - p_l 3y ago
    You'll get every time the same card number, with said card being specific to the device. So they will be able to track that the same buyer is doing the purchase, which is what most POS-based analytics are interested in. Way more important is the (sometimes filtered) dump of everything on your bill that is passed on to various corporations (Nielsen, sometimes direct to suppliers), and how in-store analytics then build data at neighbourhood or per-store level. Store analytics need not know that specifically "WirelessGigabit" bought something, store analytics is more interested in "we have repeated customers with such and such spending and purchases" and "in this zip code we have this kind of population with associated types of buyers" and "This is how much people are buying certain products and when, so that suppliers can plan campaigns and production"
superzamp 3y ago
> That 'though' does not compute. s/", though"/"though, "

w-ll 3y ago

I might be wrong but they are acutally differnt CC numbers, with the prefix linked to ApplePay, and then they resolve or proxy to your acutally CC. You can use NFC Sniffers like the Flipper to see this in action. Same how ApplePay on the watch works without network, cuz it has already preset the AppleCC prefix on ur watch, and its just emulating that AppleCC to the card receiver. Same for the phone.

p_l 3y ago

It will transmit everything in EMV contactless spec, tokenized like always. DPAN is just token to represent a combination of device+card.

WirelessGigabit 3y ago
But it will not contain my address right? So if I use Apple Pay in store, at say Kroger for 100 times, can they track me? Or do I get a new credit card number every time?
- p_l 3y ago
  You'll get every time the same card number, with said card being specific to the device. So they will be able to track that the same buyer is doing the purchase, which is what most POS-based analytics are interested in. Way more important is the (sometimes filtered) dump of everything on your bill that is passed on to various corporations (Nielsen, sometimes direct to suppliers), and how in-store analytics then build data at neighbourhood or per-store level. Store analytics need not know that specifically "WirelessGigabit" bought something, store analytics is more interested in "we have repeated customers with such and such spending and purchases" and "in this zip code we have this kind of population with associated types of buyers" and "This is how much people are buying certain products and when, so that suppliers can plan campaigns and production"

superzamp 3y ago

> That 'though' does not compute. s/", though"/"though, "