Don't have a citation handy but I have read that some banks would authorize cards for Apple Pay without any decent authentication. So thieves that had stolen c

Don't have a citation handy but I have read that some banks would authorize cards for Apple Pay without any decent authentication. So thieves that had stolen credit card numbers elsewhere registered those cards on their Apple Pay devices and then used those to charge them. The credit card numbers had already been stolen, but Apple Pay was used to buy things on those accounts. There is not - that I have ever seen - any indication that Apple Pay has been hacked. The real fight here is not about Apple at all. It's about banks (who want a new secure standard) vs merchants (who want to maintain their tracking abilities and maybe get out from under the 2% fees).