My (Timex Pay) one seems to function using a virtual card (remotely lockable) provided by the bank, which uses some sort of tokenization-based security chip on the band itself. I imagine there's probably some security flaws because they provide the NFC encoders to the user. It's backed by https://tappytech.com