Apple Wallet token renewal for fraudulent Apple Pay charges

While you are correct that this isn’t entirely a bank issue …

… BUT your bank IS your conduit for resolution.

Apple is only “involved” during the initial provisioning of the card into your wallet.

After that, all transaction processing is made by the various entities within the payments processing network. (This is probably well beyond the understanding of of 1st line CSRs at any bank)

I DO feel your pain (been there) but this MUST be elevated — and resolved — by your bank’s credit card / ApplePay support team.

This is not an issue with the DPAN (Device Personal Account Number), it is the result of the VAU (VISA Account Updater). When the card is added to the Wallet the DPAN token is created by the bank and stored in your devices Secure Enclave. Each card will have a different number.

https://www.meawallet.com/en/news/how-apple-pay-tokenisation-works

It is the VAU that is causing the recurring charges after you change your Account number. After you have sent the merchant the token provided by your bank, Apple Pay is no longer involved. The recurring charges are occurring directly from the merchant to your bank. The VAU is a "feature" that VISA uses to notify participating merchants of the change in your account number, so there is no interruption in the recurring charge. This is purely a bank issue and only they can resolve it. More information about this service is available here.

• https://usa.visa.com/dam/VCOM/download/merchants/visa-account-updater-product-information-fact-sheet-for-merchants.pdf
• https://paymentcloudinc.com/blog/account-updater/

Have you contacted the delivery services company? It sounds like you signed up for a monthly service. Cancel the service and stop the payments.

As knowledge is power, this is exerpted from a recent (12/28) reply from Jeff Donald - a respected community expert on these matters — re: how recurring ApplePay transactions are setup.

= = = =

Technically, they’re called MPAN or Merchant Tokens. But users won’t understand that, so for a clearer understanding I call them subscription tokens.

Merchant tokens - Apple Pay - Apple Developer

That primer is one of those documents which needs to be re-read several times to catch the specifics. (at least for me)

Suggest you re-read the section titled,

When you Pay using Apple Pay with your iPhone; paying particular attention to the diagram.

You’ll see that “Apple” has no part of the payment process. (i.e. when making purchases). Your “iPhone” does everything needed at “your end.”

You can almost think of the ApplePay software conponents in your phone as a “specialized browser” which communicates with the corresponding components of the Payments network w/o any “help” from Apple.

Welcome back !!! 😉

It sounds to me that the original fraudulent transaction also involved the setup of a recurring subscription charge.

And it’s terminating the recurring — and fraudulent — charge which is the OP’s issue.

This is a good primer on how ApplePay works:

https://codeburst.io/how-does-apple-pay-actually-work-f52f7d9348b7

Thanks !!!

Are the fraudulent charges because of a subscription?

The subscription token is basically pre approved for the term of the subscription. If the subscription is not cancelled, the charges will go through because of the pre approval.

Exactly Right.

It sounds as if the bank CSRs with whom he’s communicated to date don’t understand how to cancel the recurring charges if the initiating transaction was fraudulent.

The bank’s fraud department needs to get involved. The account holder can’t just decide a transaction is fraudulent.