1 From curiosity to default
Contactless has rocketed from novelty to norm in less than a decade. In the UK, 94.6 % of all eligible in-store card transactions were tap-to-pay in 2024—an all-time high driven by every age bracket, including over-65s. paymentscardsandmobile.com
Yet many shoppers still wonder how that wave of the phone actually moves money, and whether it’s as safe as the chip-and-PIN ritual it replaces. Let’s unpack the tech, bust the myths, and show how Curve Pay layers on both extra security and 0 % FX fees this summer.
2 What exactly is NFC?
Near Field Communication (NFC) is a short-range radio protocol (13.56 MHz) that lets two devices swap tiny packets of data when they’re less than 4 cm apart. Your phone (or card) acts as the “emulator”; the shop’s reader is the “poller.” The signal is so weak that the radio field collapses beyond a few centimetres—one reason eavesdropping is extremely hard.
Inside that micro-transmission is an EMV® contactless cryptogram: a one-time, bank-grade signature that proves the card is genuine and the transaction details haven’t been tampered with. Each tap burns the cryptogram forever. pure.royalholloway.ac.uk
3 Tokenisation: hiding the real card number
Modern wallets (Google Pay, Apple Pay, Curve Pay) never show the merchant your actual PAN. Instead they hold a network token—a surrogate number mapped to your card but useless on its own. Even if hackers breached the merchant, they’d get a dataset the card networks can instantly kill. Visa and Mastercard report tokenised fraud rates 60-90 % lower than magnetic-stripe transactions. corporate.visa.com
4 Relay fraud & other scares—how real is the risk?
Security researchers love dramatic demos: one phone relaying NFC data over Bluetooth to skim money from an unsuspecting pocket. While technically feasible, issuing banks (and now Curve Pay) impose velocity, geolocation and CVM¹ rules that cause the authorisation to fail – or trigger an instant liability shift to the merchant. Even Visa’s 2025 threat report calls relay fraud “rare and increasingly mitigated” thanks to dynamic risk scores. corporate.visa.com
¹ Cardholder Verification Method: device passcode, Face ID, etc.
5 Why Curve Pay makes NFC better still
| Curve Pay twist | Why it matters |
|---|---|
| One wallet, infinite cards | Switch payment source after you tap—perfect when you spot a new promo. |
| 0 % FX fees all summer | From 1 July – 30 Sept 2025 every Curve Pay tap abroad is fee-free, even weekends. Revolut’s free plan adds 1 % at weekends; banks charge 2-3 %. |
| Token-within-token security | Your bank card is tokenised, then hidden behind Curve’s own network token. Two layers, one tap. |
| Instant push-notifs | See merchant name, logo, currency and converted value before you pocket the phone. |
| Go Back in Time® | Accidentally used the wrong card? Move the transaction up to 30 days later, no merchant call required. |
6 Three NFC myths—busted
| Myth | Reality |
|---|---|
| “A thief can brush past and empty my wallet.” | They’d have to get the phone unlocked, defeat biometric CVM, and guess the terminal currency and amount exactly—otherwise the cryptogram is invalid. |
| “Contactless limits are low.” | The UK’s £100 cap applies only to physical cards. Mobile-wallet taps on Curve Pay inherit your phone’s biometric check, so most retailers lift the cap entirely. |
| “Chip & PIN is safer.” | Both use the same EMV cryptography; contactless simply shifts the PIN check to Face ID or fingerprint. Barclays stats show no increase in fraud per £ as contactless share hit 94 %. home.barclays |
7 Getting started
-
Download Curve (App Store or Google Play).
-
Add your cards—credit, debit, even Amex.
-
Tap “Add to Curve Pay” and follow the on-screen NFC provisioning.
-
Wave & save: look for the contactless symbol at 90 m+ terminals worldwide.
8 FAQs
Does Curve Pay work on every Android phone?
Anything running Android 8.0+ with NFC switched on.
When is iOS coming?
We’re working with regulators on new Digital Markets rules—join the wait-list inside the app.
What happens after September?
Keep £1 000/month flowing through Curve and the 0 % FX benefit stays unlocked.
Is there a per-tap limit?
No on-device limit; merchants may keep the UK card cap until the FCA consults on raising it later this year. thesun.co.uk
9 Further reading
-
Benefit page: Contactless NFC Payments
-
Feature deep-dive: Go Back in Time®
-
Security white paper: Tokenisation & Dynamic Cryptograms PDF
TL;DR: NFC taps aren’t just faster—they’re safer, thanks to per-tap cryptograms and tokenisation. Curve Pay doubles down on that security and, this summer, wipes out FX fees too. So next time you hear the beep, remember: one tap, every card, zero extra cost.
