A Locked iPhone Made a $10,000 Apple Pay Payment—No Face ID or Passcode

A creator demonstrated that a locked iPhone can authorize Apple Pay payments through Express Transit behavior.

Using custom NFC hardware that mimicked a transit terminal, the demo reportedly approved a $10,000 charge without Face ID or a passcode.

The example raises concerns about payment security for users who have Express Transit enabled on their devices.

Users may want to review their transit settings and Apple Pay authentication options.