The Hidden Security Magic Behind Mobile Payments