Apple Pay didn't generate a new Device Account Number for my card

Hello i add card on Apple Pay and i see (Device Account Number )1196, i delete it card and add again see same Device Account Number 1196 and last transaction. Why now Apple Pay don't generated new Device Account Number for my card for safe payment?


[Re-Titled by Moderator]

Posted on Jul 14, 2023 1:15 PM

Reply
Question marked as Top-ranking reply

Posted on Jul 14, 2023 3:37 PM

The device account number stays the same until your device changes. The DAN is encrypted. Apple doesn’t have a key, your device doesn’t have a key, the merchant doesn’t have a key. Only your bank has a key to unencrypt the number.


Who is seeing the non-encrypted number? Merchant doesn’t have a key, you don’t have a key, Apple doesn’t have a key, who has a key to see the number?

13 replies
Question marked as Top-ranking reply

Jul 14, 2023 3:37 PM in response to pathrone

The device account number stays the same until your device changes. The DAN is encrypted. Apple doesn’t have a key, your device doesn’t have a key, the merchant doesn’t have a key. Only your bank has a key to unencrypt the number.


Who is seeing the non-encrypted number? Merchant doesn’t have a key, you don’t have a key, Apple doesn’t have a key, who has a key to see the number?

Jul 15, 2023 12:57 PM in response to pathrone

I’m telling you the bank generates the DPAN as part of the verification process. How can iPhone generate an encrypted number and the bank just develop the key? The information to produce the DPAN is transmitted to the bank. Bank verifies device is credit card account owners by contacting owner through the contact methods bank has on file.


Once device is verified to be owners, bank then encrypts data, sends to device and stores key securely on bank servers. iPhone only stores encrypted data and display last 4 digits of DPAN. DPAN is used by merchant for refunds and to verify transaction.

Jul 15, 2023 1:22 PM in response to pathrone

Jeff is spot-on.


The Device Account Number (DAN) is a fixed, permanent proxy representing one “card” on your one device.


The exact same card installed on a different device (e.g. iPad) would have a different DAN.


Your DAN is only one element of the longer data message sent during payment processing.


Only the Token Service Provider (TSP) can decrypt the cryptogram and “cross” the DAN to your “actual/real” Personal Account Number (PAN) … which it then forwards-on for payment processing.


Excerpted from:

https://codeburst.io/how-does-apple-pay-actually-work-f52f7d9348b7


Jul 14, 2023 4:01 PM in response to Jeff Donald

When a card is added to Apple Pay, it is encrypted through tokenization, a DPAN is created each time after a card is added, it is unique, this was created for the user's safety, I now have the same DPAN, and I'm afraid for my card security, 2 days ago, literally, the DPAN was different when adding the same card, I want to understand what should I do next?

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Apple Pay didn't generate a new Device Account Number for my card

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.