The safest way to pay by phone is using a mobile digital wallet—Apple Pay, Google Pay, or Samsung Wallet—via NFC (contactless) technology. These methods are highly secure because they use tokenization to generate unique, one-time codes for each transaction, meaning your actual credit card number is never shared with the merchant.
"Ironically, electronic payments are now considered the safer option," says Lisa Lang, a senior manager with Schwab's Financial Crimes Awareness team—especially given that check fraud, in particular, has nearly quadrupled since the pandemic.
Here are some of the most secure payment methods available online:
Yes, tapping your card is generally considered safer than inserting it because it uses tokenization and encrypted one-time codes, preventing your actual card details from being exposed to the terminal and reducing the risk of skimming, keeping your card in your possession at all times, and often requiring biometric authentication with mobile wallets, though both methods are secure due to EMV technology. While both tap and insert (chip) use strong EMV security, tapping avoids physical contact with potentially compromised readers and keeps your data encrypted for each transaction, making it a superior choice for security and hygiene.
Debit card payments offer less protection, but you might be able to make a claim for a refund under a voluntary scheme called 'chargeback'. If you use payment services such as PayPal, Apple Pay or Google Pay, check their 'terms & conditions' to see what cover they provide. Never pay by direct bank transfer.
The risk of fraud occurring during a tap-and-pay transaction is minimal. Some people purchase RFID-blocking wallets to protect their cards, but the Identity Theft Resource Center states that this is an unnecessary — and often expensive — precaution.
Debit cards are linked directly to your bank account, which means that if someone gains access to your card information, they can potentially drain its entire balance. Additionally, online retailers have varying degrees of security, potentially leaving your information vulnerable to hackers.
It's usually cheaper to make payments via the EFTPOS network. You can do this by swiping or inserting your card and selecting the 'Savings' payment option. Options like 'tap and go' or paying with your digital wallet are likely to attract higher fees, as they default to the Visa or Mastercard network.
Popular PayPal alternatives for personal and business use include Stripe, Apple Pay, Google Pay, Venmo, Skrill, Payoneer, Square, and Wise, each offering strengths like ease of use for friends (Venmo), robust e-commerce integration (Stripe, Shopify Payments), global features (Payoneer, Wise, Skrill), or mobile convenience (Apple Pay, Google Pay). For businesses, options like Tipalti, Revolut, and Braintree cater to specific needs like mass payouts or platform payments.
Pay through your bank
You're paying from the bank account itself, so you don't need to provide personal information to a third-party site. Additionally, you're not inputting information into multiple sites, which reduces the chance of a security breach.
Never show your card details in public. Avoid providing your CVV number when asked on the phone or when processing a card payment in person. If it's required for the payment over the phone, ensure that you trust the business 100%.
Be familiar with signs of a compromise.
Check your account for any unauthorized transactions, including withdrawals and scheduled or recent transfers. You should also be on the lookout for address changes, failed login attempts, or password resets.
If you have the option to choose between using a credit or debit card for online purchases, most experts recommend using a credit card. While the risk of fraud is always present, credit cards have additional protections that debit cards do not.
Although scanning a card with a mobile skimmer while the card is in your wallet is theoretically possible, it is not common. Skimmers have to be very close to your card to work, so using an RFID wallet can't take the place of being careful and practicing safe habits when you're out and about making purchases.
Common Methods of Credit Card and Debit Card Fraud
Card skimming: Devices capture card information at ATMs or point-of-sale terminals, such as at gas pumps. Mail fraud: A scheme by a fraudster to intercept a credit or debit card from the mail before the intended account holder receives it.
Yes, tap-to-pay can theoretically be skimmed, but it's much harder and less common than traditional magnetic stripe skimming because contactless payments use Near Field Communication (NFC) with encryption, "tokenization" (unique transaction codes), and short-range signals, making it difficult for fraudsters to capture enough usable data for fraud without being detected, though "ghost tapping" with illicit NFC readers is an emerging threat.
Credit cards. Credit cards are the next most popular online payment method, with the average American having four credit cards. Credit cards offer features like encryption and fraud protection to help keep your personal information secure.
Both Zelle and Venmo prioritize security but there are some differences in their approaches: Encryption: Both services use data encryption to protect user information. Bank Integration: Zelle's direct integration with bank security systems may provide an additional layer of protection.
Cash in Advance: The safest option for sellers. Payment is received before shipment, eliminating the risk of non-payment and improving cash flow. Letters of Credit: A secure alternative with bank guarantees, offering balanced security for both parties.