Comment by juiceland

3 hours ago

When you add a card, your bank creates a device-specific Device Account Number, encrypts it, and sends it to Apple w/ a key used to generate a unique sec code for each transaction.

And is that information stored on the phone? Do Apple's servers need to be running for me to make a purchase?

  • Not if you're tapping in a store. Apple's servers re-encrypt the payment data for specific merchants if you buy in an app or on a website. Apple brokers requests for adding a card, or suspending one via Find My, or setting one up again whenever a person changes phones.