Experts at Wandera discovered that hackers can set up a bogus access point spoofing Apple Pay and fool users into providing their credit card data. An attacker can inject a fake captive portal page that imitates the legitimate Apple Pay interface by exploiting the default behavior of Apple iOS devices with Wi-Fi is enabled. The unique defect for the attack described is that the fake Apple Pay screen is displayed beneath a Log In title bar that could alarm the users.”]
Source: http://securityaffairs.co/wordpress/37579/hacking/hacking-apple-pay.html