Jump to:
- User registration
- Login
- User session
- Card scan
- Card details
- Tap details
- Revenue inspection outcome
- Sandbox testing
User registration
How do I register an inspector to use the inspection app?
Inspectors are added through the Control Portal under Settings by a Control Portal administrator.
Instructional video: Create a new inspector user via Control Portal
What happens after an inspector is registered?
The inspector receives an email containing a password reset link. They must reset their password before logging into the app.
Login
How do I set up two-factor authentication (2FA)?
To set up two-factor authentication, follow the steps shown in this video:
Log in for the first time and set up 2FA (using Apple Password native tool)
Troubleshoot login errors
The following are some common login errors, and actions to resolve them.
Error: “Login failed: User/email not configured properly or used with multiple participants.”
The inspector account is linked to more than one participant or merchant.
Each inspector must belong to one participant only.
Error: “Failed to unlock token: [error]”
A device error occurred while initialising Apple Tap to Pay.
If you encounter this error, report it via the app Settings → Report Feedback. Please include a screenshot of the error code.
Error: “Sorry we encountered an error logging in.”
An Auth0 sign-in error occurred.
If you encounter this error, report it via the app Settings → Report Feedback.
Does Littlepay support Touch ID?
The Littlepay inspection app supports Apple biometric authentication. For example, face or touch ID if supported on the device.
Do you require the Password app to sign in to Littlepay?
Yes. We recommend storing the password in the device's password app.
Is there a password complexity requirement?
The current password is 10 characters in length, with no more than two identical characters, a special character, and both uppercase and lowercase letters.
User session
How long does a session last?
An Auth0 session lasts one hour. Afterwards, the user will need to re-authenticate using biometrics. Where biometrics are disabled, they will need to re-enter their username and password or OTP.
When will Face ID be required again?
Face ID is required every hour (session refresh).
When is Auth0 login required again?
After one week of inactivity, the user must re-authenticate with their OTP.
Do users need to log in again when switching apps?
No, users are not required to log in to the iOS Revenue Inspection app after switching between apps.
Does the app support offline login/authentication if connectivity is lost?
No, the iOS inspection app utilises Apple Tap to Pay to read cards, and it requires a phone connection at all times.
Does the app function offline? If so, what features are available without connectivity?
The iOS inspection app doesn’t support offline mode because it utilises Apple Tap to Pay to read cards. Users may be able to view already loaded trip data if the app screen is not refreshed.
Card scan
How do I inspect a card?
Tap Validate to start, then follow the instructions on the app.
For a demo, see Scan a card for a successful outcome.
How long does Apple Tap to Pay take to prepare to scan a card?
When Apple Tap to Pay is launched for the first time from the app, it may take up to 90 seconds to initialise before a card can be scanned. After the initial setup, subsequent uses are typically much faster.
A similar initialisation delay may occur if the app is reinstalled.
Troubleshoot card scan errors
Error: “Contactless Card Not Found”
The card has not been used on your transit network.
Error: “Error reading card, please try again.”
Apple Tap to Pay encountered a read error.
If you encounter this error, report it via the app Settings → Report Feedback.
Card details
Card details displayed in the app (numbered + descriptions)
| # | Field | Description |
|---|---|---|
| 1 | Last 4 Digits of Card | Identifies the scanned card while masking sensitive card data. |
| 2 | Expiry Date | The month/year the card expires. |
| 3 | Last Tap Time | The most recent tap recorded on the network. |
| 4 | Card Status | Indicates whether the card has a valid tap, is blocked, or has no tap found. |
| 5 | Deny List Status | Shows whether the card is blocked due to insufficient funds or issuer decline. |
What do the card statuses mean?
| # | Status | Meaning |
|---|---|---|
| 1 | Valid Tap | The card was tapped within the last 24 hours. |
| 2 | Blocked | The card is on the deny list; travel not permitted. |
| 3 | Tap Not Found | No taps logged on the transit network recently. |
What does the deny list status mean?
The grey section shows messages such as:
“Card added to the deny list on [Date/Time]”
This means the card was blocked due to insufficient funds or issuer decline.
Travel is restricted until the balance is cleared.
Tap details
Tap details displayed in the app (numbered + descriptions)
| # | Field | Description |
|---|---|---|
| 1 | Tap Date/Time (Local) | The exact timestamp of each tap (latest first). |
| 2 | Travel Mode | Indicates transport mode: bus, rail, parking, etc. |
| 3 | Tap Status | Shows if the device technically accepted or rejected the tap. |
| 4 | Transaction Type (TAP / TAP ON / TAP OFF) | Identifies if the user entered, exited, or simply tapped. |
| 5 | Station ID | Internal identifier of the station. |
| 6 | Station Title | Public-facing name of the station. |
| 7 | Device ID | Identifier of the device that recorded the tap. |
| 8 | Tap Outcome | Shows whether the gate or device allowed or denied travel. |
How far back can taps be viewed in the app?
The app displays card taps that occurred within the last 24 hours from the current date and time.
Report inspection outcome
What does “Report an Outcome” do?
Report an Outcome sends inspection results to the Back Office for compliance and operational reporting.
Fields included when reporting an outcome (numbered + descriptions)
| # | Field | Description |
|---|---|---|
| 1 | Card Details | Last four digits of the scanned card. |
| 2 | Inspection Time | Timestamp when the outcome is submitted. |
| 3 | Vehicle ID | The vehicle associated with the last tap (if available). |
| 4 | Outcome | Valid, invalid, or inconclusive classification of the inspection. |
| 4.1 | Outcome: Valid | The card has valid travel rights or a valid tap. |
| 4.2 | Outcome: Invalid | The card has no valid tap, is blocked, or has no travel rights. |
| 4.3 | Outcome: Inconclusive | The card could not be read or verified (device issues, unreadable card, etc.). |
| 5 | Action | Indicates whether a Fine was issued or None. |
| 6 | Notes | Additional comments added by the inspector. |
Where can I see previously reported outcomes?
You can see previously reported outcomes under the History tab.
Why can’t I find a previous outcome?
The inspection outcome history is not retained under the following scenarios:
- The app was reinstalled.
- A different inspector logged in.
Troubleshoot outcome reporting
Error: “The outcome couldn’t be sent, please try again.”
There was an issue submitting the report.
If you encounter this error, report it via the app Settings → Report Feedback.
Are all kinds of app updates mandatory or optional?
To keep the app functioning, you are required to install any updates that address major issues, security updates or anything related to bug fixes or updates related to Apple tap to pay features released by Apple.
What is the expected update frequency and support lifecycle?
- Planned Updates:
LP will release app updates addressing any issues reported (with low-med severity) as part of BAU development and the app will be made available with release notes on the ABM account. Customers can plan to roll out these releases on the devices as per their cadence.
- Security Updates or Breaking Changes: App releases addressing any major issues or security updates, these updates may require to be updated as soon as possible.
Note : With every app release there will be an apple review/approval process which usually has a turnaround time of ~ couple of days to a week.
How much advance notice will be provided prior to the update's release
- Planned Updates: App releases addressing issues and features will be made available on ABM to distribute.
- Security Updates or Breaking Changes (unplanned): Releases for major issues (impacting majority of devices) or critical security updates may require the app to be updated with only a few days' notice, with best efforts made to notify in advance.
Does the app store any data locally on the device? If so, how is that data secured?
The app only stores the transaction outcomes cached during a lifetime of the user session.
Verify Revenue Inspection app using Apple Tap to Pay in Apple Sandbox environment
How do I install the Revenue Inspection app via TestFlight?
You need an invitation to download and install the Littlepay Revenue Inspection app.
Before you begin
Check that the following are set up:
- Your device(s) are updated with the latest available iOS version wherever possible. iOS versions more than one year behind the latest security update for their major iOS version may be deprecated and become ineligible for Tap to Pay functionality. Updating ensures the Littlepay App meets TTPOi and MPOC security requirements.
- Your device has TestFlight installed. You can download TestFlight from the App Store.
Once an invitation is sent, you will receive an email as follows:
- On your device, open the email invitation and tap View in TestFlight.
-
This action launches the Littlepay Revenue Inspection Dev app on TestFlight:
-
- On Revenue Inspection Dev app, tap Accept, then Install.
-
This action takes you through the Revenue Inspection Dev app onboarding:
-
Installation complete
You can now test the Revenue Inspection app on your device.
How do I test scanning a card via Apple Tap to Pay using the Apple Sandbox environment?
You need to have an Apple Sandbox test account.
To get a Sandbox test account, do the following:
- Request for the Littlepay Apple Tap to Pay developer team to add or create your email address as a Sandbox test account. You cannot use an existing Apple Account for sandbox testing.
- On your iOS device, sign in using the sandbox test account set up by Littlepay.
- This step may take a few minutes while the device is configured for the sandbox environment.
- Once signed in with the sandbox Apple ID, launch the app and log in using your Auth0 app credentials created by LP under the QA participant via Control Portal. See this Create a new inspector user via Control Portal.
How do I scan a test card and view test tap results in the sandbox environment?
You need an EMV test card for the device to scan, and for an associated tap to already exist on the Littlepay Control Portal QA environment. If you do not have access to the Littlepay Control Portal QA environment, contact Littlepay support.
An EMV test card can be one that is provided by Apple, or any EMV-supported test card; that is, test cards used for EMV Level 3 certification.
Set up a tap in the Control Portal QA environment
In order for the Revenue Inspection app to return a tap history from an EMV test card, a tap must exist on the Control Portal.
To set up a tap, do the following:
-
On the Control Portal QA, click Tap Simulator on the left pane:
The Tap Simulator displays a form whose fields reflect the Device Create a Transaction request payload.
- Fill the required fields, as well as optional fields if you wish to, to simulate a tap.
- Make sure that the card PAN and Card Expiry match those on the EMV test card that you wish to test against the Revenue Inspection app. Otherwise, a tap history will not appear on the app.
-
Click either of the following to submit the tap details:
- Tap to simulate a single-fare tap
- Tap On and then Tap Off to simulate a variable-fare journey
The resulting tap history will reflect as a transaction payload response under Results.
Scan the EMV test card
Using the Revenue Inspection Dev app on your iOS device, scan the EMV test card.
The app will return the tap history for the card. Note the app only returns the tap history for the last 24 hours.
Verify the Revenue Inspection app using Apple Tap to Pay in the production environment
How do I install the Revenue Inspection app in production?
Before you begin, check the following:
- The Apple mobile device is running iOS 17.6 or later.
- You have access to your organisation’s Apple Business Manager (ABM) account.
- For new projects, the LP team will publish the app and obtain Apple’s approval by providing the customer’s Apple Business Manager details (i.e., the organisation ID and name at the time of publishing the app).
- Once the app is approved, the customer’s Apple Business Manager admins should see the option to release/distribute the app to inspector devices as per their own plan.
- For existing customers, the app should already be available in their Apple Business Manager (ABM). Regular app updates and bug fixes will be released to ABM as explained in the App Updates section.
How do I verify scanning a card via Apple Tap to Pay in the production environment?
- If your organisation manage the device through Apple Business Manager (ABM) and does not require signing in.
- If your device is not ABM managed, then sign in with the Apple ID (email and password) assigned by your organisation.
- Launch the app and log in using your Auth0 app credentials created by LP under the production participant via Control Portal. See Create a new inspector user via Control Portal.
How do I scan a card and view tap results in the production environment?
-
Prerequisite:
An EMV test card is required. This can be:- A Visa/MC/Amex/Discover EMV card issued by a bank
- Tap the card on a production device set up with LP. You can view the transaction for the EMV card in the Control Portal under the production participant.
- Scan the test card using the app.
The tap details should now be visible in the app.
Note: The app displays taps performed within the last 24 hours from the current time.