We are a small community bank in Northern Cal. We implemented Apple Pay in early December and I would recommend not jumping into it just yet. I was an implementation manager and the entire Apple Pay process needs a lot of transparency. IMO, none of the parties were and are ready for it just yet. We dealt with our processor (First Data) and Visa mostly during the implementation and there were and still are a lot of questions that remain unanswered. We did not have any contact with Apple Pay and some of the questions were not answered by our processor, as “they could not comment or answer on Apple’s behalf”.
One of the issues is business cards. In Apple Pay contract it clearly states that only personal accounts are allowed to be added into Apple Pay. When we raised the concern to FD and Visa, none of them were able to confirm or deny the statement, however when we withheld our business BIN from Apple Pay we were told that we have to add those, as we are required to let 95% or more of our card portfolio into the program. Documentation from our processor indicated that small business BINs are not excluded from participate. The concern is that if anything to go wrong, bank is the one who signed the contract with Apple and we will be held liable for any wrong doings.
Reporting of token provisioning is very basic and requires a lot of manual research in order to comply with Apple's client notification requirement. Visa requires quarterly report of all debit card sales involving token and our processor does not offer a single report on tokenization.
Apple does not have clear criteria on when tokens get activated and when additional authentication is required by Issuer before activation, and Issuer does not have a say in it.
Barely any merchants are accepting Apple Pay and even the ones that are accepting not properly educated on how to accept it, therefore leading to denial of the transaction.
And the bottom line in customer mind will always be that their bank is the one who does not have a grip on the situation.
My recommendation will be is to wait until the details are worked out between all of the parties; and parties are actually ready to offer tokenization, support it properly and provide with reporting.