Apple Pay is a mobile payment service that allows users to make payments in iOS apps, watchOS apps, and websites on Safari. It replaces physical cards and cash with an easier, more secure, and private payment method.

When a customer adds a bank card to their Wallet with Apple Pay, the actual card number is not stored on the device nor on the Apple server. Instead, a unique Device Account Number is assigned, encrypted and securely stored in the Secure Element on the iPhone or Apple Watch of the customer. Instead of using the security code from the back of the card, Apple Pay creates a dynamic security code to securely validate each transaction.

Apple Pay is provided by Apple and use of Apple Pay on the Web is subject to the Apple Pay Platform Web Merchant Terms and Conditions. By leveraging the Apple Pay Platform, you must monitor for potentially fraudulent patterns of behavior on an ongoing basis. These patterns of behavior might include but are not limited to average chargeback rates (excluding adjustments and merchandise returns) exceeding two percent (2%) over a thirty (30) day moving period. You must report such potentially fraudulent activity to Zuora. Continuous and/or excessive chargeback rates might be grounds for removal from the Apple Pay program.

Apple only allows users to make web-based Apple Pay payments on Safari. Therefore, you should explicitly inform your customers to visit your website using Safari. See Getting Started with Apple Pay for more information.

Zuora supports setting up Apple Pay on the following payment gateway integrations through either the JavaScript SDK or the API approach. The following sections describe how to set up Apple Pay by using either the JavaScript SDK or the API approach. For information on setting up Apple Pay through Payment Form, see Payment Form.

Apple Pay token types in Zuora

Apple Pay uses tokenization to protect card credentials. There are two types of Apple Pay tokens:

• DPAN (Device PAN): A token tied to the customer's specific Apple device. If the customer switches to a new device, the DPAN may change or become invalid, which can cause recurring payment failures.
• MPAN (Merchant PAN): A token tied to your merchant identity rather than the customer's device. MPANs remain valid even when customers upgrade their devices, providing more reliable recurring payment processing.

Zuora automatically detects whether an Apple Pay payment method uses an MPAN or DPAN during the Apple Pay token decryption process. This information is stored with the payment method and exposed through the UI, API, and reporting — allowing you to understand your token coverage and manage your Apple Pay payment methods more effectively.

Creation of Apple Pay payment methods is not supported through the Zuora UI or Payments Page 2.0.