Tap to Pay Fraud: Are Customer Payments Reaching Your Business?

Your till balances at the end of the day. Your customers have paid. But has every payment reached your business?

For bars, restaurants, cafés and retailers, smartphone payment technology creates a potential gap in traditional cash and stock controls.

Tap to Pay allows a compatible smartphone to accept contactless card and digital wallet payments through a supported payment app. It is a convenient, legitimate way to take payments. However, a personal device connected to an unauthorised payment account could also be used to divert customer payments away from your business.

How Could Unauthorised Tap to Pay Be Used?

Consider this illustrative scenario: a customer orders drinks at a bar. A staff member presents a personal smartphone and asks the customer to tap their card or phone to pay.

The payment succeeds, and the customer receives their drinks. Everything appears normal.

However, if the smartphone is connected to a payment account controlled by the employee, the proceeds go to that account rather than the bar’s authorised account.

The business supplies the stock but receives no payment.

This is a possible misuse of payment technology, rather than evidence that any particular employee or venue is involved.

Why a Balanced Till May Not Reveal the Loss

Many businesses use the end-of-day till balance as an important check against theft or mistakes.

But that check depends on transactions being recorded correctly in the first place.

If a sale is never entered into the till and the payment is collected elsewhere, there may be no cash shortage to discover.

Instead, the business may see:

• Unexplained stock losses.

• Lower sales than expected for the level of trade.

• Differences between stock consumption and recorded sales.

• Unusual patterns associated with particular shifts.

These signs can have several explanations. They should prompt a review of records and processes, rather than an immediate accusation.

Five Ways to Reduce the Risk of Payment Diversion

1. Use Only Approved Payment Devices and Accounts

Maintain a clear list of the terminals, smartphones and payment accounts authorised to accept money for your business.

If your business uses Tap to Pay, make sure managers can identify the approved devices and verify which merchant account each device uses.

2. Set a Clear Staff Payment Policy

Staff should understand how customer payments must be processed, whether personal phones are permitted at service points, and what to do if an approved terminal stops working.

A consistent process reduces ambiguity for employees and managers.

3. Reconcile Till Sales With Payment Records

Compare card sales recorded in your till system against transactions recorded by your authorised payment provider.

Allow for settlement timing, fees, refunds and other legitimate differences when comparing payments with bank deposits.

Remember that reconciliation alone may not identify a sale omitted from both the till and your authorised payment system. Stock checks remain important.

4. Investigate Stock and Transaction Exceptions

Review unexplained stock variances alongside voids, refunds, discounts and other exceptions.

Look for recurring patterns across comparable shifts, while accounting for factors such as waste, breakages, promotions and recording errors.

5. Review CCTV Coverage Around Payment Areas

Check whether your cameras provide a useful view of customer service and payment activity.

A camera may show the general bar or shop floor clearly while providing insufficient detail to understand an interaction at the till.

How CCTV Can Support a Payment Investigation

CCTV can help establish the sequence of events around a suspected payment issue.

Depending on camera position and image quality, footage may help show:

• When a customer was served.

• Which staff member handled the interaction.

• Whether a phone or an approved terminal was presented.

• Whether goods were supplied.

• Whether the staff member interacted with the till.

Where supported by the installed system, video search tools may help locate relevant activity, such as a person using a phone, for closer review.

Systems with suitable point-of-sale integration may also make it easier to review recorded transactions alongside video.

CCTV cannot establish which account received a payment. That requires relevant transaction records. Phone use alone is not proof of theft.

Any review should follow your workplace CCTV policy and applicable data protection requirements.

Protecting Bars, Restaurants and Retail Businesses

The most useful protection combines clear payment procedures, financial reconciliation, stock controls and suitable camera coverage.

Each provides a different part of the picture. Together, they can help a business identify discrepancies and investigate them fairly.

For hospitality and retail businesses, the practical question is simple:

Can you account for the goods supplied, the sale recorded and the payment received?

Review Your Payment Area CCTV With Usee.ie

At Usee.ie, we help businesses make sense of their video.

We can review camera coverage around tills, bars and customer service areas, assess whether footage provides useful detail, and explain the search or point-of-sale integration options available for your system.

Contact Usee.ie to arrange a review of your CCTV coverage around payment areas.

Usee.ie — Security. Intelligence. Privacy.

Frequently Asked Questions

Can a smartphone accept contactless card payments?

Yes. A compatible smartphone using a supported payment app can accept contactless cards and digital wallets through Tap to Pay.

Could a staff member receive a customer payment into their own account?

Potentially, yes. If a customer pays through a device connected to an employee-controlled merchant account, the proceeds could be directed there instead of to the business.

Would the till necessarily show a shortage?

No. If the sale was never recorded on the till, the cash drawer could still balance. Stock checks and other controls may help identify the discrepancy.

Can CCTV prove that a payment was diverted?

CCTV can provide context about the interaction, but it cannot confirm the destination account. Relevant payment records are needed to establish where the money went.