How do I prevent unauthorized Apple Pay charges on my iPhone?

Apple Pay is more synonymous with Tap-To-Pay. You double click the side button on your iPhone and Apple Pay initiates its biometric verification and authentication process and prepares the default payment method.

Apple Cash basically requires the same. A dollar amount is entered in Apple Messages (iMessage) app and transfer of funds to a friend or family member is initiated after biometric verification.

Apple Account, which is used for purchase of apps, subscriptions, iTunes and other Apple goods and services does not require biometric authentication. But it’s also not Apple Pay or Apple Cash.

A parking service may have had you set up an independent payment service outside of your Apple Account. Apple Pay can be used for mobile payments at vending stations but require biometric authentication. If done in app, the app will require authentication or the payment token is not transferred from your device to the merchant.

Who told you it was an “ApplePay” transaction ???

Was it more accurately just an “AppleCard” transaction?

We ask because when a physical AppleCard is pulled out and “dipped” or “swiped” — which BTW is not ApplePay — it is not much more secure than any other credit card. (Other than the fact that there is no human-readable info on the card)

The REAL — and substantial — security of an AppleCard comes from NOT using the physical card and instead using ApplePay to complete a Tap-to-Pay transaction from your phone.

Using ApplePay virtually eliminates the “good ‘ol fashioned” card fraud methods which ALL physical cards are unfortunately still vulnerable.

Apple Pay does not have a flaw. You perhaps have a misunderstanding of how it works.

Apple does not actively participate in Apple Pay payments/transactions. When you initiate an Apple Pay payment, your iPhone creates and securely sends an encrypted token to the merchant’s POS system using NFC. The token is encrypted and the merchant does not have a key. This prevents the merchant from fraudulent use of your information, selling your personal information or losing your financial information in a data breach. Each token can only be used one time (with exception for subscriptions, or recurring charges).

The merchant transfers the token to their credit card processor and they send the token to the Payment Network Operator (Visa, MasterCard, American Express etc.) who decrypts the token verifies essential details and checks for potential fraud. If payment/token is approved, token is re-encrypted and sent to the bank for final approval. The bank decrypts the token, checks the details and also reviews potential fraud and finally approves or declines the transaction. The approval or decline goes the reverse path and the decision is displayed via the merchant’s POS system.

Tokens are specific to each device. Goldman Sachs can confirm via the token if your device generated the token or not.

I thought if your going to dispute the charges, you should have some knowledge and background with what Goldman will know about the transactions.

It was definitely Apple Pay and I did not tap anything. After the second time getting erroneous Apple Pay charges from LAZ parking I cancelled my Apple Card account with Goldman Sacs so it can’t happen again.

You do not tap with an in-app Apple Pay payment. Uber uses the same method in their app. When payment is required, you select Apple Pay in the app. When the price is shown at checkout you complete the payment by double clicking the side button (power button) and the transaction authenticates using Face ID. The encrypted token is created and acquired by the merchant. The process completes using the steps I outlined above.

People have reported here they’ve had a dispute going with GS for over a year and a half. I’m sure they drag it out as long as it takes until JP Morgan Chase takes over the accounts. Good luck.

We fully understand the all too-common frustrations faced dealing with unauthorized card charges …

It’s unfortunate that you cancelled your card outright … which will most likely have a “negative impact” on your personal credit score … AND inhibit finding the underlying cause.

Having personally dealt with Laz Parking in the past … 🙄 …

I suspect that Laz setup a “recurring charge” … something which only requires your personal authentication the “1st Time.”

Finding “the right” individual within Laz who can sort-out this mis-configuration can indeed be inexplicably challenging and frustrating.

LAZ has a subscription based service as well as an exit service that can utilize Apple Pay. I suspect a subscription was accidentally started and a subscription token was issued, thus resulting in “unauthorized” charges.

i am just going to fight the charge with Goldman Sacs and disable Apple Pay. I didn’t sign up for any subscription with LAZ. I have no relationship with them and wouldn’t know who to call. As a result of this experience I no longer trust Apple Pay. This hassle is not worth the poor experience.

That’s certainly one way to resolve things. If none of our possible explanations make any sense to you, the only other option is your Apple Card information was skimmed when you physically swiped or inserted the chip. The scammer then used the data for parking fees.

I don’t think so. I never use the physical card. I think Apple Pay has a flaw and they should investigate LAZ Parking. Both instances of unauthorized charges involved Laz parking. Nuff said. I am not using the Apple Pay service. It is just an unnecessary convenience that is not worth the risk.

All I know is that I did not tap, nor did I authorize the transaction on my phone. It was definately an Apple Pay transaction. As I mentioned this has happened twice with LAZ parking. Someone should investigate them. I have been thru two passes on the dispute with Goldman Sacs. If they want to continue researching for a $15 dispute they can go for it.

I don’t believe that is true. Two times in the past year I have experience Apple Pay charges for parking that I did not authorized. Both were charged by LAZ Parking at two different locations.

Concur.

I have experience as a “subscription parking” customer of Laz in the Washington DC area.

Are you sure it’s Apple Pay and not your Apple Account? Who’s the unauthorized charge from? Is it Apple or another merchant? It make a big difference in regard to stopping the charges and assisting with a refund? Whose the merchant?

If you didn’t initiate these charges, who did?

Your biometric or passcode is required to initiate any recurring Apple Pay charges.