Cybersecurity researchers have demonstrated what they claim to be security issues in Visa and Apple payment mechanisms to make fraudulent contactless mobile payments.
The researchers from University of Birmingham and University of Surrey used a locked iPhone to make a payment via NFC exploiting an Apple Pay feature called Express Transit that’s designed to work with Visa to help commuters pay quickly at ticket barriers.
In a video, the researchers successfully tricked an iPhone to make a Visa payment of a £1,000 payment without unlocking the phone or explicitly authorizing the payment.
