Apple Card compromised and card number changed

If you manually entered the Virtual Card number on a website for a subscription, you will need to update the number used for that website. If you chose "Apple Pay" as the payment option for the subscription on a website, then nothing needs to be changed.

In my case, they were not necessarily a subscription, but my Insurance company and Power company had an option for AutoPay where I had to enter the information from my Virtual Card including account number, expiration data, and CVV. When I reviewed those sites, they alerted me that my CVV has changed and I needed to update them.

I did incorrectly use subscription as an example in my previous post as those that I had were actually a recurring payment by those companies. Thank you for the information you have provided and you are always spot on helping us fellow users.

Specifically for the OP question, I think it is clear that for Apple Pay, there is nothing that needs to be done. If you manually entered the card information including the CVV number, I would recommend reviewing those to see if further action is needed.

Jim — I’m not sure of this anymore. All the PNO’s use/offer Automatic Billing Updater (Mastercards name for it) to automatically update the merchant of account number updates etc.

This is a good explanation of ABU.

https://www.bannerbank.com/financial-resources/automatic-billing-updater

If you do a transaction online by entering a cards details, it processes as >card not present< and the merchant can store all the information you’ve provided. If the number is changed, the merchant is not updated, with exceptions. These type transactions require a CVV or other security code.

If the transaction is a subscription, it’s a >card on file< transaction and will be updated by an Automatic Billing Updater. These transactions do not require an updated CVV security code.

A

Apple Card has 3 different account numbers. One is the physical titanium card number embedded in the chip and magnetic stripe. The second is the virtual card number that is shown in the Apple Wallet app. Lastly, you have you Apple Pay DPAN number, used exclusively when you Tap-To-Pay using your iPhone or select Apple Pay on a merchant’s website and authorize using your iPhone.

Which number was compromised?

Just based on my experience when my Virtual Card Number had the Security Code changed, the websites where I had manually entered the number required me to change the Security Code. I assume when you request a new card number, the Security Code will also change.

Somehow the websites knew my Security Code changed and prompted me immediately even before I attempted to make a purchase. This only happened on websites where they did not accept Apple Pay, like my Health Insurance and my local Power company.

I did read the link you provided and it says that the feature is only available with participating merchants, so that may be the case for me and may change in the future as more merchants come on board.