Is this right about Apple Pay?

[Namedchangedtohide]

So, i have two cards set up on my Apple Pay on phone - if the phone is stolen, and the passcode bypassed etc - the cards can be used limitlessly? There's no cap on spend?

Can I put a daily cap on spend?

It just suddenly unnerved me - but I love Apple Pay for the ease!

Mine works on face recognition so I'm happier about that than contactless. But, yes, Apple Pay is limitless

You could ask your bank what protections you have on your cards.

Mine also works on Face recognition, but I have it that it also reverts to passcode if that doesn't work. Is that a mistake?

Yes, good idea

I am under the impression that my bank triggers the "text message code" at random even when using Apple Pay. Obviously the issue there is, if they're using Apple Pay they already have your phone, so they'll get the text message code, too, which is no deterrent. Or with my other card you could verify in the app... on your phone. 🤦‍♀️

Now you've brought it up, it's a bit of an oversight really, isn't it?

I guess at the moment the only answer is to not use the payment service, or to set up a really impenetrable access code for your phone (as if you fail face ID it will default to the access code so Face ID is also a lot less secure than it sounds on the surface).