A digital wallet is an app on your phone or watch that stores your card details so you can pay by tapping the device instead of swiping a plastic card. Apple Pay, Google Wallet and Samsung Wallet are the best-known examples. The wallet does not hold your money; it holds a secured stand-in for your card number, and that design is what makes a tap safer than handing over the card itself.

What is actually stored on your phone

Not funds, and not your real card number. What sits on the device is a token, a substitute value that stands in for the card. The industry standards body EMVCo describes payment tokenization as working "by removing the most valuable data to a fraudster, the primary account number, and replacing it with a unique alternative value, the EMV Payment Token." The token, EMVCo says, "is constrained in how it can be used. For example, to a specific merchant, device or payment scenario." So a token captured from one phone or one store is of limited use anywhere else, which is the heart of the security case.

How a tap works

When you add a card, the wallet asks a token service provider, working with your bank, to issue a token tied to that device. At checkout, the phone uses near-field communication, or NFC, to send the token a few centimeters to the terminal, which is why you hold the device right against the reader. You approve the payment on the device itself, usually with a face scan, a fingerprint or a passcode. From your side, little changes: as EMVCo notes, "for cardholders, the payment process is not impacted, and existing behaviour does not need to change."

Why it is generally safer than a card

Three things stack up. The terminal and the merchant see a token, not your card number, so a breach at the store exposes a value that is already limited in where it can be used. The token is tied to your specific device, so a copy lifted elsewhere does not work on another phone. And the payment needs on-device authentication, so a lost phone is not a found card. None of this makes fraud impossible, but it removes the single most useful thing a thief wants, the real card number.

What a digital wallet is not: a bank account

Here is the part that matters for your money. Paying from a card linked to a wallet is one thing; parking a cash balance inside a payment app is another. The Consumer Financial Protection Bureau warns that "FDIC insurance generally does not apply to money that sits in your payment app, unless you have signed up for additional services from the app," and that "generally, peer-to-peer payment apps are provided by companies that do not carry FDIC or NCUA insurance." If such a company fails, the CFPB says, "you might not be entitled to get your money back, or at least not in the same guaranteed way you can get your money back after a bank or credit union failure." A card in your wallet is still backed by your bank; a balance in an app may not be. For the plumbing behind these payments, see what a payment processor is and, for a bank-run transfer network, what Zelle is and how it works.

Setting one up, and what you need

Adding a card takes a minute. You open the wallet app, enter or scan the card, and the bank confirms it, after which the real number is replaced by a device token and the plastic can stay at home. You need a phone or watch that supports the wallet, a card from a bank that participates, and, to pay in a store, a terminal that accepts contactless payments, which most now do. Online and in apps, many sites offer the same wallets as a one-tap checkout that skips the card-number form. If you lose the device, you can freeze or remove the cards remotely through your account or your bank, and because the token is not the card itself, the plastic in your drawer keeps working. None of that requires moving money into the app; the wallet is paying from your existing bank card.

Apple Pay, Google Wallet and Samsung Wallet

The main wallets are tied to their platforms. iPhones use Apple Pay, Android phones typically use Google Wallet, and Samsung devices use Samsung Wallet. All three work the same way at the register: they pay with a tokenized version of a card you have added, not with stored cash. Which one you use is mostly decided by the phone in your pocket rather than by any difference in how the payment itself is protected.

The catch

A digital wallet needs a terminal that accepts contactless payments, though those are now widespread. It depends on your device being charged and with you, and a lost phone means re-adding or freezing cards. The real caveat is the insurance gap: treat a payment-app balance as spending money in transit, not as savings, because deposit insurance may not reach it, and move anything you cannot afford to lose back to an insured bank or credit union account. Used as a tap-to-pay front end for a real bank card, though, a wallet is a genuine security upgrade on the plastic it replaces, because the card number a thief most wants never leaves your bank.