@DoneAdulting
I used to work for a bank and I've reported many, many cards lost.
I've never, not once, had an instance of contactless fraud.
From Which
Industry figures suggest contactless card fraud remains low, amounting to 2.7p in every £100 spent using the technology in 2018 - the same level recorded in 2016 and 2017 - representing just 3% of overall card fraud.
The £30-per-transaction limit is one safeguard, and card issuers also restrict the number of contactless transactions that can be made before the Pin is requested.
Our previous research found that some banks failed to protect their customers properly.
In 2016, we asked volunteers to use their tap-and-pay cards on the high street, spending between £20 and £30 each time, and to keep shopping until they were asked for a Pin, to see how much a thief could spend unchecked.
While most banks asked for a Pin, or blocked the card, after three to five transactions, three debit card providers - Barclays, the Co-operative Bank and TSB - allowed our 'thieves' to spend more than £200 through 10 consecutive transactions in just three hours. A real thief might well have continued.
Since 14 September 2019, new 'strong customer authentication' rules under the EU’s second Payment Services Directive (PSD2) have required banks to ask for a Pin if your cumulative contactless payments exceed €150 (roughly £130) or five consecutive contactless payments have been made.
PSD2 also states that a Pin should be requested where the contactless transaction exceeds €50 (around £43) though there are no current plans to change the existing £30 contactless limit in the UK.
------------------------
However, we've left the EU now.