Is it possible for someone to scan someone else's card with Apple Pay?

Hi All,

Can't find a concrete answer on this, but maybe someone here knows.

Is it possible for someone to scan someone else's card into Apple Pay?

My fear is now that apple pay is out there, picture this:

Someone goes and buys an "Unlocked iPhone" with cash from a apple store. So now its not locked or setup to anyone or any carrier.

That same person works in a restaurant. Takes your card at checkout and walks off to ring up the bill. Instead, they scan your card and enter it into Apple Pay on this new unlocked device.

They now have your card, verified the security code on the card, entered your name, and then (on wi fi) it authenticates and sets itself up.

They then give you back your card, you leave.

After their shift, they go and pay $1000 on your card , then delete it, and next day, they come back and do it all over again.

Not saying this is feasible, but what is stopping someone from doing that? Today, they need your billing info if they do, which they wouldn't have, but this seems to be very quick to authenticate and allow that device access to spend.

Just wondering if Apple would be asking for authentication via apple ID, or something else to prevent fraudulent scanning of cards.

Any thoughts?