Poor registration process
Reading the article, it seems that, in order to register a card with Apply Pay, all you need is the card number, and poor security by the bank allows the card to be used without any further checks.
Whenever I use by debit or credit card online, I am redirected to the Verified By Visa or Mastercard Securecode verification site to enter digits from my password.
Why is this not part of the Apple Pay registration? Seems to me that a card number and SSN are available from the darker corners of the internet. Have Visa and Mastercard also had lists of passwords stolen too? I don't remember reading about that.
It may not be the smoothest of processes but, surely this would be better:
You type in your card number and 3-digit code off the back
You enter your Visa/Mastercard verification details
Your bank then calls you on the number they have for your account, that you provided
They confirm some details that are not easily accessible
They post a registration code to your registered postal address
You enter that code into ApplePay
Now you can use it to buy things.
Not 100% foolproof, but, having access to your card, phone and home are all required. A card number and SSN are useless on their own. Yes it's a little more inconvenient and may take a week to get it all sorted, but, is that really such a big problem?
Biting the hand that feeds IT
