How Tap to Cash Protects Account Numbers in iOS 18

Apple introduced Tap to Cash in iOS 18 to allow users to send and receive Apple Cash simply by holding two iPhones together. This peer-to-peer payment method is designed with privacy at its core, enabling direct financial transactions without requiring either party to exchange phone numbers, email addresses, or bank account numbers.

Elimination of Contact and Account Sharing

Traditional peer-to-peer payment systems typically require senders to input the recipient's phone number, email address, or unique account handle. Tap to Cash removes this requirement entirely by using Near Field Communication (NFC) to detect the other device. Because the transaction initiates through physical proximity, users do not need to reveal any identifying contact information or underlying financial account details to complete a transfer.

Utilization of Tokenization

Tap to Cash operates exclusively through Apple Cash, which employs tokenization to shield actual banking information. When you fund Apple Cash using a linked debit card or bank account, those account numbers are never transmitted to the counterparty. Instead, Apple creates unique, encrypted tokens to validate the transaction. The recipient only receives the agreed-upon funds into their own Apple Cash balance, with zero visibility into the source bank or card details.

Hardware-Level Security via the Secure Element

All cryptographic operations for Apple Cash are processed within the Secure Element, a certified chip built into the iPhone. This dedicated hardware component is isolated from the main operating system. During a Tap to Cash transaction, the Secure Element securely handles the payment credential exchange. Because financial data never leaves this isolated environment in unencrypted form, it cannot be intercepted by third-party software or unauthorized devices.

Mandatory Biometric Authorization

A Tap to Cash transfer cannot occur automatically or in the background. Every transaction requires explicit user confirmation via Face ID, Touch ID, or a passcode on both devices. The sender must actively authenticate the payment amount, and the recipient must approve the incoming transfer, preventing unauthorized access to funds or account tokens even if two devices are near each other.