OK, so three days ago was the last time. The Android has nothing to do with your iPhone or how Apple Pay works. They use different security features and operate differently. Subsequently, Android Pay and Google Pay etc. is not as secure.
You have two options, you can escalate the issue with the bank, or wait 35 to 45 days and try again. Here’s what’s happening. Pay particular attention to the text I made bold near the bottom.
Apple says it may send your card issuer, payment network, or issuer authorized service provider identifying information about your iPhone and Apple Account, along with account activity and fraud prevention information. The most extensive disclosed sharing occurs during provisioning. When you add a card to Wallet, not simply each time you tap to pay. Apple’s disclosure says “may,” so it does not establish that every recipient receives every field for every card.
Specifically what Apple may share when you add a card, Apple’s Apple Pay & Privacy notice identifies the following categories.
Apple Account identity, the name and billing address associated with your Apple Account.
Apple Account activity, general information about your account activity, for example, whether you have a long history of transactions within iTunes. iPhone information, device identifier, phone number, and the device’s name and model. Apple Watch and paired iPhone, when provisioning a Watch, identifiers, phone numbers, names, and models for both the Watch and its paired iPhone. Location, your location when you add the card, if Location Services is enabled. Card provisioning history, your account’s and/or device’s history of adding payment cards. Aggregated card related statistics, aggregated statistics relating to information from cards you have added or attempted to add to Apple Pay. Card information, your credit, debit, or prepaid card number.
Legal - Apple Pay & Privacy- Apple
Apple says the purposes are to determine card eligibility, enable Apple Pay, set up the card, and prevent fraud. Its platform security documentation explains that the issuer or its authorized service provider, usually the payment network, uses the information to decide whether to approve adding the card.
What Apple does not specify publicly about fraud prevention and your information. The list is specific in some respects, but it is not a complete field-level specification. In particular the following is not specifically mentioned. “General information” about Apple Account activity is not described as an itemized purchase history. The precise contents of the card related “aggregated stats” are not detailed. The disclosure does not explain exactly which fields go to the network versus the issuer in an individual provisioning attempt.
Consequently, it would be inaccurate to turn this disclosure into a claim that Apple routinely sends your IMEI, Apple Account login email, complete App Store purchase history, or a list of all your other card numbers. Those are not identified as such in the published provisioning list. Equally, the list is introduced with “including,” so it should not be treated as an exhaustive technical description or list.
Apple also describes evaluating device use patterns, such as, the percentage of time the device is in motion, the approximate number of calls per week, whether certain device settings are enabled.
Apple Pay security and privacy overview - Apple Support
Why do movement and call frequency matter? A plausible purpose is to help distinguish a routinely used personal phone from a device used primarily to attempt fraudulent card enrollment. Movement and call frequency can provide indicators of ordinary device use without requiring the content of calls.
However, that is my interpretation of why those signals could be useful, not a published description of Apple’s detection rules. Apple does not say that a stationary phone, a low call count, or any other single characteristic makes a device suspicious. Its notice only identifies these as examples of patterns evaluated to help identify fraud. This is Apple’s key statement.
“The information evaluated by your device is not shared with Apple in a way that can be linked to you.”
Without going into extensive detail, asking Apple to review anything won’t benefit you or others in similar situations. Apple is not in a position to review you information and change the data your bank and payment network use to evaluate fraud risk. The information is anonymous to Apple. They have no way to review the information.
You need to start using your iPhone for the next 35 days or so. Make calls, send texts, send email and most importantly carry it with you. You must not try to add a card at any time during the next 35 days. Doing so, will reset the clock and you’ll have to wait another 30+ days.
User level: Level 1 (16 points)
