What is a mobile-device wallet?¶

A mobile-device wallet is an application or device function that stores payment credentials, payment tokens, account access or value for use on a phone, watch or similar device.

Avoid the dangerous assumption¶

The dangerous assumption is that the wallet is simply a digital copy of the physical card and therefore identifies the cardholder.

A mobile wallet may contain tokenised cards, stored-value accounts, loyalty credentials, tickets or links to online payment accounts.

The payment system may use a device-specific token instead of the card number printed on the physical card.

Relevant records may include the wallet account, device identifier, token, provisioning date, linked card or funding source, authentication method, transaction history and security changes.

The same underlying card may be added to several devices, each with a different token.

The wallet can also remain active after the physical card is elsewhere or after the user changes devices.

A successful wallet payment shows that the relevant token or account was used through the device-payment process. It does not automatically identify the person holding the device.

The device may be shared, stolen, unlocked, remotely controlled or used by someone with authorised access.

Preserve wallet screenshots only as a starting point. Obtain provider, issuer and device records where attribution matters.

Ask when the card or account was provisioned, which verification steps occurred and whether the wallet was suspended, restored or moved.

When reporting, distinguish the mobile device, wallet account, token, underlying card and actual user.

Operational takeaway¶

Treat a mobile wallet as a separate payment environment and link its device, token, account and funding records before attributing any transaction to a person.