> The card itself may have contained other security features such as a holosticker or a serial number in human readable form.
Not sure what country you are from TRT, but in the UK I can gain access to the Transport for London network by using contactless payment, and that inlcudes Apple/Google Pay from my phone via NFC. In this situation (which is likely to become more and more common) the actual card is immaterial. To ensure I have paid the valid fare, ticket inspectors scan the method of payment used to ensure there is a transaction. Having said that, if his card was cancelled and he hadn't tapped in, it is academic anyway.
Biting the hand that feeds IT
