How iOS 18 Tap to Cash Prevents Accidental Transfers

Apple’s Tap to Cash feature in iOS 18 allows users to send and receive Apple Cash simply by bringing two iPhones together, raising natural concerns about accidental payments in crowded spaces or casual encounters. However, Apple has integrated strict hardware and software safeguards—including mandatory device unlocking, biometric authentication, intentional initiation steps, and proximity thresholds—to ensure that money is never transferred without explicit user consent.

Mandatory Device Unlocking and Initiation

Tap to Cash does not operate passively in the background. For a transaction to begin, the sender must actively unlock their iPhone, open the Wallet app, select their Apple Cash card, and choose the Tap to Cash option. You must also manually enter the specific amount of money you wish to send before bringing the devices together. If two locked iPhones touch, or if neither user has actively prepared a transfer, no transaction will trigger.

Biometric Authentication

Even after the amount is keyed in and the transfer is prepared, the money cannot move automatically upon physical contact. The sender must authenticate using Face ID, Touch ID, or their device passcode to approve the transaction. This mirrors the standard security model of Apple Pay, ensuring that physical proximity alone cannot bypass authorization.

Precise Proximity and Alignment

Tap to Cash relies on the Near Field Communication (NFC) chips located at the top of the iPhone, utilizing the same proximity framework as NameDrop. The two devices must be held extremely close—typically within a few centimeters—with the top edges facing each other. A casual bump in a pocket, bag, or across a table is insufficient to trigger the interface, as the connection requires precise alignment and a sustained position.

Visual and Haptic Feedback

When the two devices detect each other in the correct state, iOS 18 provides distinct, full-screen visual effects and haptic feedback. This visual alert immediately informs both parties that a connection is being attempted. The sender must confirm the action, and the recipient must accept the incoming funds, providing a final check that prevents unauthorized or unintended transfers.