October 21, 2026

Apple VAS and ECP explained

When a customer holds their iPhone to a checkout reader and their Apple Wallet NFC loyalty card or membership pass comes up on screen by itself, that's Apple VAS at work: Apple describes customers who "simply hold their iPhone to the NFC reader, waking the device and instantly pulling up the relevant pass". Apple Pay Value Added Services (VAS) is the protocol behind it, implemented on contactless terminals and using NFC to talk to Apple devices. Enhanced Contactless Polling (ECP) is the name NFC chip and reader vendors give the Apple reader feature their hardware supports: NXP lists "Apple® Enhanced Contactless Polling" on its NFC controller page, and PassNinja's reader certification services use the labels ECP1 (Apple VAS) and ECP2 (Apple Access).

If you are building a loyalty program, a membership check-in or an event ticket, knowing where VAS and ECP fit helps you pick reader hardware and set up your passes without getting lost in acronyms. For the full checklist from the NFC entitlement step to the reader, see How to read an Apple Wallet NFC pass.

What is Apple VAS (Value Added Services)?

Apple Pay Value Added Services (Apple VAS for short) is the protocol Apple names for contactless passes: it "can be implemented on contactless terminals and uses NFC to communicate with supported Apple devices". Apple contrasts the tap with older ways of checking in: "phone numbers, physical cards, or other items that users need to manually provide".

Apple describes a few ways businesses use it:

Loyalty check-in at the register: the customer taps to check in instead of reading out a phone number.
Check-in on its own: customers can "check in separately from the final transaction by tapping at a certified terminal".
Membership passes: with auto-presentment, customers "tap on a contactless reader to automatically pull up their membership pass and check in".
Loyalty and payment together: "the payment and loyalty check-in to be done with a single tap when customers pay with Apple Pay".

What is ECP (Enhanced Contactless Polling)?

A customer's Wallet holds a lot: credit and debit cards, a driver's license, transit cards, event tickets, and loyalty and membership passes. Yet when they hold their iPhone to a VAS reader, the right pass comes up without them opening Wallet: "waking the device and instantly pulling up the relevant pass", and for membership passes with auto-presentment, customers "simply tap on a contactless reader to automatically pull up their membership pass and check in".

Reader hardware advertises the Apple feature behind that experience as Enhanced Contactless Polling. NXP lists "Apple® Enhanced Contactless Polling" among the features of an NFC controller chip, and PassNinja's reader certification services name ECP1 (Apple VAS) and ECP2 (Apple Access) as separate certifications. Apple's own developer pages describe the customer experience rather than the mechanism, and so do we: for a business, ECP support is a box to tick when choosing a reader.

How an Apple VAS tap works, start to finish

You issue signed NFC passes. Adding NFC to an Apple Wallet pass requires a special entitlement issued by Apple, and Apple is selective about who gets one. PassNinja is the easy route: its software and APIs create, issue, update, and revoke passes for Apple Wallet and Google Wallet, and for Apple Wallet NFC passes PassNinja signs them under its own Apple entitlement, eliminating Apple's lengthy approval process. The other route is applying directly to Apple at developer.apple.com/contact/passkit (which typically runs several weeks, paced by Apple) and signing passes with your own Apple Value Added Services (Apple VAS) certificate.
Each pass carries a short message and a public key. The pass's NFC dictionary holds a message, the payload the device sends to the terminal, of no more than 64 bytes, and the encryptionPublicKey that the VAS protocol uses.
The customer taps. They hold their iPhone to the reader, and the relevant pass comes up. If requiresAuthentication is set to true, they authenticate first; by default (false), they don't need to.
The reader gets the message. The device passes the pass's NFC payload to the terminal. In a self-managed setup, you store the matching private key in your NFC / VAS reader yourself; or, when you order a Socket Mobile S550 from PassNinja and have existing pass templates created in your account, PassNinja pre-configures that reader with the credentials that allow the reader to work out of the box with your passes.

See Apple VAS in your browser

To watch the flow live, open the nfcpasses.com demo. Add a demo pass to Apple Wallet, connect an ID TECH VP3300 (a reader ID TECH says supports Apple VAS and Google SmartTap 2.1), and tap. The page talks to the reader from desktop Chrome or Edge using WebHID. For how Android's equivalent compares, read Google Smart Tap vs Apple VAS; for the browser side, see VP3300 WebHID setup.

Frequently asked questions

Does an Apple VAS tap charge the customer's card?

No. A VAS tap checks the customer in with a pass. Apple describes it either on its own, separate from the final transaction, or in the same tap as an Apple Pay payment.

What is the difference between ECP1 and ECP2?

They're separate reader certifications: ECP1 for Apple VAS, ECP2 for Apple Access. PassNinja offers reader certification services for both, as well as for Google's SmartTap.

Do I need my own Apple VAS certificate?

No. PassNinja issues and signs Apple Wallet NFC passes under its own Apple entitlement—PassNinja signs the passes itself and never gives you a certificate to sign with—so you skip Apple's lengthy approval process. If you prefer to hold your own certificate, you can apply to Apple at developer.apple.com/contact/passkit.