The UK is asking Apple to open its iPhone payment technology to other companies, so more wallet, digital key and ticketing apps may appear. Before you use one, check who made it, what it can access and how it protects your money.
What you need before starting
The BBC reports that a UK regulator has asked Apple to give other companies wider access to the technology behind its iPhone payments. The regulator says these proposed changes could lead to new digital wallets, digital keys and ticketing apps. The report describes proposals, not a final decision. It is not known when or whether any changes will take effect, which companies would build on them, or exactly how Apple will respond.
This guide is for anyone who may later be offered one of these apps by a bank, a retailer, a landlord, a car maker, a gym or an events venue. You will need:
- An iPhone running a current version of its operating system, with automatic security updates switched on.
- A device passcode, plus Face ID or Touch ID if your phone supports them.
- Access to your bank or card provider’s official app or website, so you can confirm any partnership a wallet claims to have.
- A few minutes to read the permissions and terms before you add a card, key or ticket.
On a phone, the technology behind contactless payments, keys and tickets is mostly short-range wireless communication, together with secure storage for sensitive credentials. If more apps can use it, you get more choice. You also have more apps to judge, and each one is a separate place where something could go wrong.
Confirm the app and its publisher are genuine
Only install wallet, key or ticketing apps from the official App Store. Then check that the publisher name matches the organisation you expect. Criminals often copy the look of a well-known brand. When a new category of app appears, there is usually a rush of copycats, and people are more likely to believe a lookalike is the real thing.
Find the app through the provider’s own website or official app rather than a link in a text message, email or social media advert. If your bank says it supports a new wallet, check that on the bank’s own website. Do not rely on the wallet’s word for it. Be wary of new apps with few reviews, publishers you cannot match to a real company, or listings that rush you to sign up.
Review the permissions it asks for
A payment or key app needs access to the phone’s contactless features. It rarely needs much else. Look at what it requests when you install it and afterwards in Settings. If a ticketing app wants your contacts, or a wallet wants constant location tracking, ask why. If the reason is unclear, say no.
Also check notification and background activity settings. Some apps say they need location to show offers or to find nearby venues. That may be true, but you can usually refuse it and still pay or get through a gate. Check whether the app works with the most limited permissions before you allow more.
Check how payments and unlocks are approved
Find out what the app needs before it pays, unlocks a door or shows a ticket. Ideally it should ask for Face ID, Touch ID or your device passcode before each payment. Some key and transport features are designed to work without unlocking the phone, for convenience. Make sure you know which features work that way and whether you can turn that off.
Read the provider’s explanation of where your card or key data is stored. A trustworthy provider will say whether it uses the phone’s protected hardware storage or keeps credentials on its own servers. If the documentation does not cover this at all, treat that as a warning sign.
Understand who is responsible if something goes wrong
With a new wallet, you may have a relationship with your bank, the wallet company and sometimes a third business such as a ticket seller. Before you add a card, find out who handles disputes, who refunds fraudulent payments and who to contact if your phone is stolen. The terms should say this clearly. If they do not, contact the company before you rely on the app.
Do the same for digital keys. Find out who can cancel a lost key, how quickly it can be done and whether you would still have a physical key or card as a backup.
Choose your default contactless app deliberately
If Apple allows more than one app to make contactless payments, you may be asked which one to use by default. Pick one on purpose rather than accepting whatever an app suggests during setup. Afterwards, check the setting again. That way you know which card is charged when you tap your phone at a till or ticket barrier.
Plan for a lost or replaced phone
Before you rely on an app for keys or tickets, find out how it handles a lost, stolen or replaced phone. Make sure you can sign in to the provider’s website from another device. Check that you can remotely suspend cards and keys, and know how to move tickets to a new handset. Write down the provider’s emergency contact details somewhere other than your phone.
Mistakes people actually make
- Installing from a link. Many fake wallet and ticketing apps are spread through messages that copy real promotions.
- Accepting every permission during setup. Permission requests come one after another, and people approve them without reading.
- Using an app nobody has heard of just to get an offer. A discount or early ticket access is a common lure for fraud.
- Forgetting old apps. Cards and keys stay in wallets you no longer use. Remove them and delete the app.
- Assuming every wallet works the same way. Protections against fraud may differ between providers, and between an app and the card behind it.
- Losing access to a door or ticket. Some people rely on a digital key without keeping a physical backup, and get stuck when a phone breaks or its battery runs out.
When this approach is the wrong choice
Checking apps yourself is sensible for everyday use. It does not replace formal advice. If you run a business that is thinking of accepting or issuing digital wallets, keys or tickets, you will need specialist guidance on payments and security, not a consumer checklist.
You may also not need a new app at all. If the wallet already on your phone and your physical cards meet your needs, adding another app means one more account and one more company holding your data, with more things to check. For people who find permission screens confusing, or who share a phone with others, a physical card or key may be safer. Finally, the UK proposals have not been finalised. Do not trust an app that claims to be “newly approved” under them until reputable reporting or the provider’s official channels confirm it.
Frequently asked questions
Can I use a different payment app instead of Apple Pay in the UK?
The BBC reports that a UK regulator has asked Apple to widen access to its payment technology, which could lead to new digital wallets. These are proposals, and it is not yet known when or whether other apps will be able to make contactless payments in the same way. Check announcements from your bank and the app’s provider before assuming a particular wallet works on your iPhone.
Are third-party digital wallets on iPhone safe?
How safe a wallet is depends on the provider. Look for an app from a recognisable company, installed from the official App Store, that asks for Face ID, Touch ID or your passcode before each payment and explains clearly where your card data is stored. Check that your bank supports it, and know who handles disputes and fraud claims before you add any card.
What permissions should a contactless wallet or ticketing app need?
It mainly needs the phone’s contactless features and, during setup, secure sign-in. Requests for contacts, photos, microphone access or constant location tracking usually have nothing to do with paying or showing a ticket. Refuse access that is not needed, then check that the app still works. If it will not work without broad access, think about whether you want to use it.
What happens to my digital car or home key if I lose my iPhone?
That depends on the company that issued the key. Before relying on it, check whether you can suspend the key remotely from another device and how quickly it can be cancelled. Find out how to transfer it to a replacement phone, and whether a physical key or card is available as a backup. Keep the issuer’s emergency contact details somewhere other than your phone.
Sources and further reading
- BBC News technology coverage reporting the UK regulator’s proposals on access to Apple’s payment technology.
- Publications from the UK competition regulator on mobile platforms and digital markets.
- Apple’s developer and user documentation on contactless payments, Wallet and device security.
- UK consumer protection and fraud prevention guidance from national cyber security and consumer bodies.
Surfaced from the rss:bbc_tech signal “UK smartphone payment access”. AI-assisted draft, editorially reviewed.
