Fraud Protection
for Issuers

Issuers will always be in control of approving or rejecting card provisioning requests and transactions made with provisioned cards. Apple supports that responsibility throughout the Apple Pay lifecycle by providing real‑time risk signals and ecosystem insights. This data helps issuers confidently decide whether to approve, decline, or require extra verification (like SMS or In‑App Verification) when a card provision is submitted by a cardholder.

Apple also leverages feedback from issuers about fraudulent provisions to flag risky devices and continuously improve fraud detection, all while maintaining strict cardholder privacy.

Issuers also benefit from Apple Pay’s Fraud Protection for Merchants, which helps combat fraud at multiple stages of the transaction process.

Apple recommends that issuers ingest all the available Apple risk signals provided via the payment network operators (PNOs). This allows issuers to have all available data elements, including subtle indicators, that can be used to help detect and prevent fraud. Due to the complex nature of global payment processing, and the many different parties or service providers along the way, we suggest you verify you are receiving all data provided by Apple.

Liability for fraud is determined by the policy of the payment network operator (PNO).

Apple processes cardholder data to connect customers with their issuer. Apple does not retain personal financial data linked to the cardholder.

Issuers should review the Issuer Functional Requirements (IFR) for best practices.

Issuers that have enabled Apple Pay will receive recommendations from Apple based on a variety of risk data for consideration, including overall recommendations, data elements, and reason codes. Issuers should confirm with their payment network operator or service provider which data elements, values, and formats to expect.

In making provisioning request decisions, issuers must:

• Consider the provisioning data sent by Apple,
• Compare it against their data in the cardholder profile,
• Complete their own risk assessment of the provisioning request, then
• Respond with an appropriate fraud mitigation decision.

Apple Pay combines issuer‑controlled verification methods, industry‑standard tokenization, and cardholder authentication through biometrics or passcode. This is designed to help prevent unauthorized users from making transactions with a cardholder’s card using Apple Pay.