Britain's competition watchdog has proposed its most significant intervention yet against Apple's grip on mobile contactless payments, consulting on conduct requirements that would compel the company to open the iPhone's Near Field Communication (NFC) chip to rival digital wallets in the United Kingdom — a change that could bring Revolut, Monzo and PayPal to the tap-to-pay layer on British iPhones for the first time. The Competition and Markets Authority published its proposals on October 20, 2026, citing a stark competitive gap, in a CMA October 2026 consultation: while five rival iPhone payment wallets have launched across Europe since July 2024, not a single competitor has emerged in the UK.

The consultation runs until November 17, 2026. No final order has yet been issued. Apple has said it intends to contest the proposals and, according to reports, has been preparing for a potential legal challenge before the UK's Competition Appeal Tribunal should the CMA proceed to a binding requirement.

Britain's regulator arrived at this point having already granted Apple an Apple SMS designation October 2025 under the Digital Markets, Competition and Consumers Act 2024 — a finding that Apple had substantial and entrenched market power over its mobile platform. That designation unlocked the CMA's most powerful suite of intervention tools, including the conduct requirements now under consultation.

What the CMA Is Consulting On: SE and HCE, Both Required

Under the CMA's draft conduct requirements, Apple would need to offer third-party digital wallet providers access to the iPhone's NFC hardware through both of the two widely used international contactless standards: the Secure Element (SE) — a dedicated tamper-resistant chip that stores encrypted payment credentials on the device — and Host Card Emulation (HCE), a software architecture that routes NFC to the main operating system and stores payment credentials off-device in the cloud.

The distinction is commercially and technically decisive. In the UK, Apple currently offers third-party developers Secure Element access only — and only for a fee, having introduced the NFC and Secure Element Platform in October 2024. HCE is generally simpler and cheaper to build on, and it is the method Apple already provides free of charge to developers operating under the European Union's Digital Markets Act commitments. The CMA has laid out CMA proposed EU-equivalent access terms: both routes, with fees set substantially below Apple's current UK charges rather than at a specific mandated price.

What Is Host Card Emulation — and Why Apple's Current Terms Block It

Host Card Emulation is an architecture in which the iPhone's NFC radio communicates directly with the main operating system rather than with a dedicated hardware chip. When a user taps their iPhone at a payment terminal, an HCE-based wallet app running on the main OS handles the transaction — pulling credentials from the issuing bank or fintech company's cloud servers, not from a chip Apple controls.

The technology was coined in 2012 by Doug Yeager and Ted Fifelski at SimplyTapp; Google added platform-level HCE support to Android 4.4 (KitKat) in 2013, and Visa and Mastercard announced formal support in March 2014. Royal Bank of Canada made the first major commercial HCE deployment in North America in December 2014.

The practical implication of HCE access — the element the draft obscures — is not merely a question of cost or access tier. It is a question of who controls the payment credential stack on UK iPhones. Under SE-only access, every UK fintech wallet depends on Apple's proprietary hardware platform: Apple can set the price, update the terms, and restrict the framework at will. Under HCE access, a fintech company like Revolut stores payment tokens on its own cloud infrastructure. Apple provides the NFC radio signal and nothing more. The CMA's dual mandate — requiring both SE and HCE — is therefore a structural question about data sovereignty in mobile payments, not simply a price-parity measure.

BBVA Pay's launch in Spain, one of the five EU rivals, illustrates how the model works in production: it integrates Visa's Token Service directly, handling payment credentials entirely within Visa's and BBVA's infrastructure without Apple hardware involvement.

Why the UK Has Had Zero Rival iPhone Wallets While Europe Has Five

The CMA's argument is blunt and backed by CMA investigation findings: Apple's financial and technical terms have prevented a competitive market for mobile wallets from developing in Britain.

The contactless payments market these terms govern is substantial. Figures from UK Finance show contactless 39% of UK payments in 2025, up from just 3% a decade earlier, and 65% of UK adults now use a digital wallet, with Apple Wallet being the most popular choice. Yet despite that dominance in a market generating nearly £214 billion (approximately $287 billion) in UK fintech annual turnover and employing more than 360,000 people, the CMA consultation found zero UK rival wallets found to compete with Apple Pay. The CMA attributes this market failure directly to Apple's restrictive access terms.

Lenders and fintech businesses have specifically challenged Apple's 0.15% credit card fee on transactions carried out via Apple Pay. Executives and analysts have pointed to the gap between Apple's UK and EU terms as the structural reason why new services cannot economically launch in Britain. A firm building a tap-to-pay product must consider whether the engineering and fee costs under UK Apple Pay terms make the product viable — and for most, the answer so far has been no.

Apple's Defense: Security Over Competition

Apple has contested the CMA's characterization at every stage of the investigation. The company argues that it has already opened NFC access to UK developers through the NFC and Secure Element Platform it introduced in October 2024, and that the CMA's demand to also adopt HCE would weaken the security and privacy standards iPhone users currently rely on.

"We do not believe the CMA should require Apple to adopt an approach with lower privacy and security protections," Apple said in a statement.

The security argument is one Apple has deployed in every jurisdiction where regulators have challenged its payment model — from Australia in the late 2010s, where the Australian Competition and Consumer Commission examined the major banks' collective request for NFC access, to Brussels in 2022, where the European Commission opened formal proceedings. In each case, Apple has maintained that routing NFC to a dedicated Secure Element provides hardware-level isolation that HCE, which depends on software and cloud security, cannot match. Independent security researchers and payment networks including Visa and Mastercard have endorsed HCE as a production-grade architecture — but Apple's position has given it room to contest every regulatory demand on technical-integrity grounds, buying time and litigation leverage regardless of ultimate outcome.

How Europe's Playbook Produced Five Rivals in Six Months

In July 2024, the European Commission rendered EU NFC commitments made binding, giving rival wallets free access to the iPhone's NFC chip in HCE mode for ten years. The CMA's consultation cites what followed as direct evidence for its UK proposals.

Vipps MobilePay became the first company in the world to offer an alternative to Apple Pay on iPhone, launching in Norway in December 2024. "We have fought for years to be able to compete on equal footing with Apple, and it feels almost surreal to finally be able to launch our very own solution," said Rune Garborg, CEO of Vipps MobilePay, in a statement published alongside the launch.

The floodgates then opened. BBVA Pay launched in Spain, integrating Visa Token Service directly. Klarna enabled its wallet across 14 European markets, consolidating its card offerings and tap-to-pay capabilities within its iOS app alongside Android. PayPal and Curve followed.

"Just six months after Apple agreed to provide NFC access for payments in the EU, Vipps launched the first alternative payment app, followed by PayPal, Klarna, Curve, and BBVA. In the UK, zero rival wallets have launched," the CMA stated in its consultation.

The implication the regulator drew explicitly: the access terms, not consumer indifference or technical barriers, explain why EU users have choice and UK users do not.

Revolut, Monzo and Who Stands to Gain

The most immediate beneficiaries of an open NFC regime in the UK would be the country's homegrown fintech companies. Revolut, headquartered in London and one of Europe's most valuable private fintech companies, has wasted no time in signaling its intent.

"Revolut strongly welcomes the CMA's decision to open NFC access via HCE functionality," said David Tirado, Chief Commercial Officer at Revolut, in a Revolut statement on CMA proposals. Revolut has offered contactless payments on Android for years but has been unable to replicate that experience natively on iPhone in the UK — a gap that has forced millions of Revolut customers to choose between their preferred banking app and the iPhone's tap-to-pay capability.

Monzo, another London-based digital bank with millions of UK customers, is similarly positioned to benefit. Both companies have built their brands on frictionless mobile banking experiences — experiences currently constrained on iOS by their inability to control the tap-to-pay layer.

Beyond individual companies, the CMA says its proposals aim to improve interoperability across Apple's digital wallets, watches, and other devices, which would allow third-party apps to support tap-to-pay transactions and competing digital wallets to operate on the iPhone alongside Apple Pay — not as a replacement for Apple Wallet, but as a genuine alternative.

How Britain's Own Digital Markets Law Makes This Possible

The CMA's power to propose these conduct requirements rests on a domestic legal mechanism with no EU equivalent: Strategic Market Status, created by the Digital Markets, Competition and Consumers Act (DMCCA) of 2024. In October 2025 the CMA Apple SMS designation found that Apple had substantial and entrenched market power over its mobile platform — unlocking the regulator's most powerful suite of intervention tools.

This is legally distinct from the EU Digital Markets Act framework that produced the five European rivals. The EU DMA applies to "gatekeeper" companies exceeding specific revenue and user-count thresholds and is horizontally applicable across the single market. The DMCCA's SMS regime allows the CMA to intervene based on documented market power in a specific service in the UK, without requiring a finding that Apple broke any existing competition law. It is, in effect, a regulatory permission based on structural dominance rather than proven misconduct.

"These proposals open the door to more innovation, more choice and economic growth, including in the UK's important fintech sector," said Sarah Cardell, the CMA's Chief Executive, who has overseen the digital markets enforcement agenda since the DMCCA's passage.

The approach is being studied by regulators in Australia, Canada, and Singapore, all of which have examined Apple's NFC exclusivity. By applying domestic legislation rather than a DMA-style framework, the UK has produced a second major template for how non-EU jurisdictions can mandate Apple platform access — and a decision that those other regulators can now point to as international precedent when building their own cases.

Apple's EU ten-year binding commitment does not extend to the UK, which the CMA noted could deter entry from digital wallet providers who must build and maintain separate technical integrations for each jurisdiction where Apple imposes different access terms.

Is CMA Actually Ordering Apple? What This Consultation Means

The draft article described the CMA's action as "formally ordering" Apple and as a "ruling." Neither is accurate as of publication. What the CMA published on October 20, 2026, is a consultation paper — a set of proposed conduct requirements open to public and corporate input through November 17, 2026. After receiving submissions, the CMA will issue a final decision. Apple retains the right to challenge that final decision at the UK's Competition Appeal Tribunal.

The distinction matters. The timeline to any enforceable change in Apple's UK NFC terms runs through the consultation close, the CMA's final decision, and any legal challenge Apple pursues — a process that could extend well into 2027.

The consultation is nevertheless significant precisely because it represents the CMA using its strongest available regulatory tool. Under the DMCCA's SMS framework, the CMA does not need to prove Apple broke the law to impose conduct requirements — only that Apple's market position creates the conditions for harm. The proposals are legally grounded and, if the EU precedent holds, commercially transformative.

What Happens After November 17

The consultation closes November 17, 2026. After receiving submissions from Apple, fintech companies, banks, and consumer groups, the CMA will issue its final conduct requirement. Apple may seek to appeal that final order at the Competition Appeal Tribunal.

If and when the order takes effect, the European precedent suggests the UK market could see its first non-Apple iPhone payment wallets within months. Vipps launched in Norway within six months of the EU's binding commitment in July 2024. Revolut, Monzo, and PayPal — which already have the brand recognition, user bases, and technical infrastructure deployed on Android — could move at least as quickly.

For millions of UK iPhone users accustomed to the double-click-and-pay simplicity of Apple Wallet, the practical change may feel incremental at first: a new option in Settings, an additional wallet to configure. For Britain's fintech sector, and for the competitive architecture of mobile payments in a post-Brexit regulatory environment, October 20, 2026 marks the moment Britain formally used its own digital markets law to do what Europe did in 2024 — and set the clock running on whether UK consumers will finally have the payment choice that EU counterparts gained more than two years ago.

Currency conversions from British pounds to US dollars are approximate and based on exchange rates at the time of publication.

Frequently Asked Questions

Why can't I use Revolut or Monzo for tap-to-pay on my iPhone in the UK right now?

Apple has restricted iPhone NFC access in the UK to its own Secure Element hardware platform, which it introduced for third-party developers in October 2024 — but only for a fee that most fintech companies have deemed unworkable. The Host Card Emulation (HCE) route, which lets fintechs store payment credentials on their own cloud infrastructure without depending on Apple hardware, is offered free to EU developers under the Digital Markets Act but was not available in the UK until the CMA proposed requiring it. Until a final conduct requirement takes effect, Revolut and Monzo cannot offer tap-to-pay on iPhones in the UK.

What is HCE, and why does it matter who controls the payment credential stack?

Host Card Emulation routes an iPhone's NFC radio directly to the operating system rather than to a dedicated hardware chip. When you tap to pay using an HCE-based wallet, your payment credentials — the tokens that identify your card to the payment terminal — are stored on the wallet provider's cloud servers, not on an Apple chip. This means Revolut or Monzo, not Apple, controls the credential lifecycle: they can update, revoke, and manage your payment tokens independently. Under Secure Element-only access, those credentials live on hardware Apple controls, giving Apple ongoing technical and commercial leverage over every wallet on the platform. The CMA dual SE and HCE proposal is therefore a structural question about data control in mobile payments, not just a pricing dispute.

When will competing payment wallets actually be available on iPhone in the UK?

Not immediately. The CMA's October 20 publication opens a consultation period that runs through November 17, 2026. After that, the regulator will issue a final conduct requirement — which Apple can appeal at the UK's Competition Appeal Tribunal. A realistic estimate for the first UK rival iPhone wallet, assuming no successful legal challenge, would be sometime in 2027, depending on how quickly the CMA finalizes its requirements and how rapidly fintech companies can adapt their existing Android infrastructure. The EU precedent (Vipps launched within six months of a binding EU commitment) is the optimistic case; Apple's legal challenge preparations suggest the UK timeline may be longer.

What is Strategic Market Status, and what power does it give the CMA over Apple?

Strategic Market Status (SMS) is a designation created by the UK's Digital Markets, Competition and Consumers Act 2024. When the CMA designates a company with SMS in a specific market — as it did with Apple in October 2025 — it gains the power to impose conduct requirements on that company without first having to prove the company broke any competition law. This is a departure from traditional competition enforcement, which requires evidence of illegal conduct before regulators can act. Under SMS, the CMA only needs to find that a company has "substantial and entrenched" market power in a strategic digital service. That finding alone unlocks the ability to require access, prohibit restrictive terms, and mandate interoperability — the powers behind the NFC consultation. For more on UK SMS conduct requirements, see the framework overview published by RPC Legal.