Digital wallets in payments: what a wallet in Germany actually does

The useful way to read a wallet is as a container for a credential plus a way to prove the holder is present. The credential can be a tokenized card number, a mandate to debit a bank account, or a key over a stablecoin balance. Authentication is the phone's own biometry or PIN, which in a card payment satisfies the strong customer authentication that European payment rules require.

Money then travels on whichever rail the credential belongs to. A card credential runs through the card network and the acquirer, so the fees are card fees, described on card payments in Germany. A bank-account credential runs as a transfer, usually an instant one, covered on instant payments in Europe. A stablecoin credential settles on a blockchain, which stablecoin payments sets out. The wallet brand on the screen tells you nothing about which of the three you are on.

A pass-through wallet passes the shopper's payment credential to the merchant, who clears it with their own acquirer; the wallet operator never holds the funds. Apple Pay and Google Pay work this way over Visa and Mastercard tokens. A staged wallet splits one purchase into two card transactions, a funding stage where the customer loads a balance and a payment stage where the wallet pays the merchant, and in both of them the charge comes from the wallet operator and not from the store, as the payment-provider documentation on staged digital wallet operators describes it.

For a German operator the consequence is practical. Holding customer money before a purchase is the business of an e-money or payment institution and needs a BaFin license, which payments regulation in Germany covers. The card networks also treat the two forms differently: a staged operator has to register a wallet identifier with each network, because without it the network cannot see the individual purchase behind the loaded balance. A pass-through design avoids both of those, at the price of giving up control over the funding step.

When a card goes into a phone wallet, the wallet does not store the printed card number. It stores a token that is restricted to that device, and the device adds a one-time cryptogram per payment. A stolen token is therefore worth little outside the phone it was issued to. The mechanics, and how a payment token differs from an encrypted card number, are on what tokenization in payments is.

Tokenization is also what lets a bank keep the customer relationship in someone else's wallet. The issuing bank authorizes the token, can suspend it, and sees the transaction. That is the difference from a staged wallet, where the bank sees a load to the wallet operator and not the shop the customer went to.

Germany still pays largely by card and by invoice, and the wallet layer sits on top of that instead of replacing it. Apple Pay and Google Pay are front ends over tokenized Visa and Mastercard credentials. PayPal came from the e-commerce checkout and has moved to the physical store: its German wallet pilot lets customers tap to pay wherever Mastercard contactless is accepted, which means it needed no new terminals, as PaymentsJournal reports. Wero is the account-to-account wallet of the European banks, described on Wero payments in Germany.

How much of German spending actually leaves a phone is smaller than the attention suggests. A German trade overview puts mobile payments from phones and watches at about 5.7 percent of all payments in 2024, roughly twice the share of five years earlier, as Ecommerce Germany collects it. The European Payments Initiative's own consumer barometer counts habit instead of volume: a third of people in Germany use a mobile payment app at least weekly, and 19 percent reach for a wallet on a phone or watch in a physical shop, per EPI's barometer. Both readings point the same way: the wallet is normal for a minority of payments and a second option for most.

Every wallet a merchant adds is its own integration, with its own rules and its own terms. With a handful of wallets that is a project; with a wallet per bank group and per country it stops being affordable, and the smallest merchants simply do not do it. Interoperability is the attempt to make the merchant integrate a protocol instead of a brand, so that any conforming wallet can present at that checkout.

This is where the European identity wallet touches payments. Its architecture fixes the formats and protocols between the party issuing a credential, the wallet holding it and the party checking it, so a verifier builds once for every conforming wallet in the Union. The same shape is what a payment checkout wants, and the EUDI Wallet explains the framework and its deadlines.

No. A crypto wallet holds the private keys that control coins on a blockchain, and losing the keys loses the coins. A payment wallet holds a credential that points at money held somewhere else, at a bank or an issuer, and a lost phone is replaced without losing the money. What a private key does is explained on what a crypto wallet is, the device question on hardware wallets, the backup question on private key versus seed phrase, and the German market on bitcoin wallets in Germany.

The two meet in one place. A wallet app that offers both a card credential and a stablecoin balance is a payment wallet and a crypto wallet at once, and each half brings its own license: payment services for the card and the e-money token, crypto-asset services for the custody. Crypto custody in Germany covers the second half.

No. No rule requires a person in Germany to pay from a wallet, and cash and cards stay available. The obligations in European law run the other way: they apply to member states and to large service providers, not to shoppers. The identity wallet the German state is building is explicitly voluntary to use, as its own project site at eudi-wallet.gov.de states.

A wallet depends on a charged device and, for most products, on a network connection at the till. It also adds a party between the customer and the bank, and in a staged wallet that party holds the money for a while, so the customer carries the operator's risk and not only the bank's. The third drawback is data: whoever runs a wallet sees the pattern of purchases, which is the reason the European identity wallet was designed to keep credentials on the device with no central collection.

A German merchant usually accepts the phone wallets through its existing card acceptance, because Apple Pay and Google Pay arrive as contactless Visa and Mastercard transactions on the terminal it already has. PayPal and Wero are separate contracts, PayPal as a checkout and in-store wallet, Wero as an account-to-account product of the banks. Payments in Germany sets out who runs which rail.