Case study · Payments · mobile wallets
Apple Pay only works if paying with your phone feels effortless and completely safe — at the same time. I worked the Mastercard side of the Apple partnership, on the part users notice least and trust most: getting a card into the Wallet. Clearing Apple's bar meant making onboarding feel instant while the security underneath — tokenization, device-bound numbers, identity checks — stayed invisible. Get that wrong at Apple's scale and you either lose users or open a fraud door. The whole job was making sure neither happened.
By 2014, paying with your phone wasn't new — it was just bad. Earlier wallets were clunky, and people didn't trust them with their card. Apple Pay's promise was the opposite: tap, done, and never a second of worry. Hitting that promise put two demands in direct tension. It had to feel effortless — Apple's whole bar is that the technology disappears — and it had to be unimpeachably secure, because the instant a payment feels risky, the magic dies.
That's the trap: the obvious way to make something more secure is to add friction — more checks, more prompts — and the obvious way to make it seamless is to remove friction. Apple Pay had to do both at once, for hundreds of millions of people, on day one.
I worked on the experience of getting a card into the Wallet and trusting it there — the Mastercard side of the Apple partnership. Not the cryptography itself, but the moments a real person actually feels: the add-card flow, what happens when a card needs an extra check, and how the whole thing reads as safe without feeling like an interrogation.
When a card clears instantly — the green path — trust is easy. The real design problem is the yellow path: the issuer needs one more identity check before allowing the card, and that check lands on a brand-new, eager user. Done badly, it reads as "we don't believe you" and they walk. Done well, it's a brief, reassuring step that makes the wallet feel more trustworthy, not less. Getting that single moment right — secure and seamless at the same time — was the whole game.
The work helped land a card-onboarding experience that cleared Apple's bar as mobile wallets went mainstream — the kind of result you measure by what people don't feel. No exposed card number, no friction wall, no second-guessing the tap.
The best security is the kind you never notice. The whole craft was taking something genuinely hard — proving it's really you, protecting a number you never see — and making it feel like nothing at all.
A slice of a deeper toolkit — 70+ named research, product, and facilitation methods, drawn from a working library of 175+ structured activities. The right ones get pulled for the problem in the room.