A payment-enabled mobile device such as a “smart phone” incorporates risk management features that are applicable to its use in contactless payment transactions. Some features may govern when verification of the cardholder's identity is required for consummation of the current transaction. The features may be configurable by the payment card account issuer and/or the user of the mobile device.