Cards on phones can be secured by the phone lock, but I saw one instance where the tourist was observed unlocking the phone by PIN before it was nicked.
There was a lot of money lost there. They had linked debit and credit cards.
Face unlock would have worked way better.