V2EX Keyword Hot Topics
Discussing the technical vulnerability behind today's unauthorized charges on Apple Pay Mastercard cards
I also experienced unauthorized charges on my Bank of China Mastercard today. Although there was no notification under the Apple Pay card, WeChat showed a transaction through the Apple Pay channel. I searched Xiaohongshu and found that large numbers of Bank of China Apple Pay Mastercard cards had reportedly been charged without authorization within the past 24 hours. A small number of China Merchants Bank and Agricultural Bank of China cards may also have been affected, but this needs to be verified. Some people suspect credential stuffing or a database breach. One of the four parties—the bank, Mastercard China, Mastercard, or Apple—must have a vulnerability. Are there any industry professionals or people familiar with the technology who can discuss this? More importantly, how can this be prevented in the future? For ordinary users, Apple Pay is essentially a black box, so it is unbelievable that unauthorized charges could occur.