What are mobile payments and mobile digital wallets?

 The 21st century saw the birth of Smartphones, and with them, our phones became so much more than a device to text or make phone calls. Cameras, games, and an app for just about anything you may want or need. So, it was only natural that mobile payment also emerged in a world where we are rapidly moving away from physical money. We have already taken a look at Apple Pay in a previous article and today we’d like to expand our scope to mobile digital wallets and other options currently available.

What does mobile payment imply?

Mobile payment includes mobile digital wallets (mobile digital wallets where you add and store your card details) and money transfers. Through it, you can digitally pay for just about anything. Mobile digital wallets work with near-field communication (NFC), a form of contactless communication that allows two devices in close proximity to connect through electromagnetic radio fields. You can use mobile payment for point-of-sale and in-app purchases.

What are point-of-sale and in-app purchases?

Point-of-sale or POS purchases are quite simply those you make at a store, while in-app purchases are extra features or products you can sell through an app.

Regarding in-app purchases, there are two main types: consumables and non-consumables. The first ones are used only once and can be purchased again, such as gems in a game, while the latter, which can be extras features, are only purchased once and do not expire.

Which are the available mobile payment methods?

The most popular mobile digital wallets are Apple Pay, Google Pay, and Samsung Pay, with rapidly rising numbers over the last couple of years. However, PayPal, MasterCard, and Visa also have their own. Let’s take a look at the available options:

• Apple Pay

Apple Pay is a mobile payment solution developed by Apple to make payments at point-of-sale terminals. It works with Apple devices such as iPhone 6, iPhone 7, Apple Watch, and more recent models.

Apple Pay replaces credit and debit cards with NFC and a two-factor authentication solution. It works with any POS terminal that accepts contactless payment. No extra apps are necessary to use Apple Pay, it is all accessible from your Wallet and you can make both point-of-sale and in-app purchases. As a bonus, in the US -and on select Apple products-, you can also use it for person-to-person payment to send and receive money and pay for just about anything. Regarding security, Apple uses tokenization and a secure element, which we’ll mention in more detail below.

Furthermore, it is available in thirty countries and regions, including the United States, the UK, China, Switzerland and Brazil, and over a dozen networks support it, including Visa, MasterCard, and American Express.

You can take a look at how it works for developers in this article.

• Google Pay

Back in 2015, Google launched Android Pay, which turned into Google Pay at the beginning of 2018. You can access a list of supported devices here.

With Google Pay, you can use your card details to make purchases in stores, apps, and websites, as well as buying Google products and sending money to friends and family (though the latter is limited to India, the US, and the UK). You can sign up to use it from your computer as well as downloading the mobile app. Moreover, you can use it with your debit or credit card, or your bank account, and in some countries, you can also use it with PayPal, among others.

Google Pay uses host-based card emulation (HCE) instead of a secure element like Apple, and the countries in which Google Pay is available will depend on the type of purchase you would like to make. There are around 26 included for point-of-sale purchases and over 80 for in-app ones.

If you wish to add it to your app you will be required to simply review the developer documentation, get access to the APIs, and integrate and test it before going live.

• Samsung Pay

Samsung Pay, a mobile digital wallet, was also launched in 2015 and works with these devices. You can include credit, debit, gift and membership cards, and it works in-store, in-app and online. It functions with several technologies and a wide variety of payment providers, including BBVA, American Express, and Wells Fargo, as you can see on their website.

The app will also send you notifications on discounts and coupons near your location, and as an extra feature, you earn points with every purchase, which can be redeemed for gift cards or instant-win game entries.

Regarding safety, Samsung states that they use Samsung Knox and tokenization, in addition to each transaction being covered “by your bank’s fraud protection and authenticated by your fingerprint, pin number or iris scan”.

If you wish to add it to your app, you will need to sign up to become a member, agree to Samsung’s terms and conditions, select your country, complete the registration form, and submit your sign-up request. A Relationship Manager will then review and approve your request and you will be notified once this is done. You can get more information about the whole process here.

• MasterCard’s’ PayPass, PayPal’s One Touch, and Visa’s Checkout

Now that we’ve covered the big names in the mobile industry, we’d like to share some basic details of some lesser known, but not necessarily less popular alternatives.

PayPass works with MasterCard and Maestro cards, uses encryption, which is unique to each purchase and has a more comprehensive implementation plan for merchants. You can search where this method is accepted by using the PayPass Locator app.

Regarding One Touch, it has over 50 million users and you can activate it within the PayPal app. It has no purchase cost within the US and works on both iOS and Android phones and tablets.

Finally, launched in 2014, Checkout is available for e-commerce sites and apps, and users need only an Internet connection on their phone to be able to access it. It also has over 20 million users and is supported by 1500 issuers. In order to add it to your business, you will just need to register, verify and login to your account, and choose the APIs that are most suitable for you.

Tokenization, Secure Element and HCE

Each of these apps has its own security guidelines and protocols, although the technology used does not vary that much among them. Up next, we’ll give you an idea of what each of these security features means.

• Tokenization: this is the process through which a sensitive data element is replaced with a non-sensitive one, which is called “token”, and has no exploitable meaning or value. It is merely a reference that maps back to the sensitive data through a tokenization system. Here, your PAN (Primary Account Number) is replaced with a token through this method and, instead of using the original card number in the transactions, this token is used. Tokens by themselves are of no use and it is impossible for criminals to reverse engineer the PAN from them.
• Secure Element: this is a hardware component (a microprocessor chip), which holds sensitive data and is able to run secure apps. As Apple explains on their support website, “After your card is approved, your bank, your bank’s authorized service provider, or your card issuer creates a device-specific Device Account Number, encrypts it, and sends it along with other data […] to Apple. The Device Account Number can’t be decrypted by Apple but is stored in the Secure Element […] on your device.” Furthermore, “The Device Account Number in the Secure Element is isolated from iOS, watchOS, and macOS, is never stored on Apple servers, and is never backed up to iCloud.” As per carrier demands, the SE is usually embedded on your device’s SIM card.
• Host card emulations (HCE): this is a technology that allows you to emulate a card on an NFC-enabled device, without the need to rely on a secure element. In the latter case, the data is routed from the reader to the secure element. Here, however, it is led directly to the host CPU on which the Android app is running.

Conclusion

All these methods (mobile digital wallets) cover a variety of features and devices. Their functionality is quite similar, with some of them having some extra features (like Samsung’s reward program), and the main difference is, of course, the specific devices or operating systems they are available for. Therefore, the best fit will mostly depend on your target audience.

Integrate Apple Pay on your Mobile App

How to integrate Apple Pay: As we’ve covered in a previous article, Apple Pay is a contactless payment method to make payments at point-of-sales (POS) terminals or for use in in-app purchases. It is secure and simple to use and can be beneficial both for customers and businesses. We’ve discussed how it works for customers, talked about its safety elements, and made a general review of how to add it to your mobile app. Today, we’d like to answer a few more specific questions you may have as a developer interested in adding Apple Pay to your mobile app.

What do I actually need to start using and integrate Apple Pay?

Apple’s website explains everything you need in detail, but you will basically need to do the following in order to integrate Apple Pay to your mobile app:

• Comply with Apple’s guidelines (both for the App Store and acceptable use of Apple Pay).
• Make sure you are working with a payment provider that supports this method. You can get a full list here.
• Get a merchant ID to register with Apple. You can take a look at exactly how to do it here.
• Obtain a Payment Processing certificate in order to secure transaction data.
• Enable Apple Pay in Xcode.

You can also configure Apple Pay for the web and, of course, you can check out the requirements for merchants as well if you also happen to have a physical store. Finally, you’d be happy to know Apple does not charge for payments.

How do I market Apple Pay?

Apple provides you with an array of ways to use this payment method in your marketing, as well as the Apple Pay mark for you to add. Keep in mind that they are very clear on the dos and don’ts when it comes to advertising Apple Pay, so we advise you to read carefully through the information they provide.

What are the tools Apple offers to set up and test it?

• Sandbox testing: Apple offers sandbox testing in order to test and integrate Apple Pay’s implementation offline. At present, it only supports testing for a handful of countries but these include the United States, Spain, China, and Japan, among others. In order to run it, you will need an iPhone 6 or later model, or an iPad mini 3 or later model (among some other devices), a tester account, and supported credentials. You can find more information here.
• TestFlight and App Store Connect: though more general, these tools play a role in the implementation and marketing of Apple Pay. TestFlight allows you to invite people to beta test your mobile app and collect feedback to help you test the full user experience, while App Store Connect will allow you to upload and manage your apps on the web or iOS. In addition to being able to create a product page and add in-app purchases, you can also invite users to test your mobile app with TestFlight through App Store Connect.

Are there any other similar options for Android?

Back in 2015, Samsung launched Samsung Pay and Google launched Android Pay, which turned into Google Pay at the beginning of 2018. All three payment methods run on the same idea and have similar implementation. Moreover, each of them only runs in their respective line of products (Apple Pay on these iOS devices, Google Pay in these Android devices and Samsung on select Samsung devices). However, the main difference is that Google Pay uses host-based card emulation (HCE) instead of a Secure Element.

As you can see, Apple has been very thorough regarding information and tools for the use and implementation of Apple Pay. If you have any further questions, they also offer a variety of resources, from videos to guidelines and guides to integrate Apple Pay. Meanwhile, on the other end of the spectrum, you have similar options if you wish to provide contactless payment for your users on their Android devices as well.