A method, performed by at least one processor (8180, 8158, 8138, 8132(a)) of a near-field communication, "NFC", capable mobile communication device (110, 120) executing a mobile payment application resident on the NFC-capable mobile communication device (110, 120), comprising: accessing, via a controller in secure memory of the mobile communication device (110, 120), data representing at least one transaction restriction associated with an authorized user of the mobile communication device (110, 120), wherein the at least one transaction restriction was created or modified by receiving modifying signals comprising or embedded in a message from another device associated with at least one administrative user of the NFC-capable mobile communication device (110, 120), via at least one of NFC, Wi-Fi, cellular communications, BluetoothTM, RFID, or wired communications before the accessing the data representing the at least one transaction restriction, and wherein the transaction restriction in the secure memory is not accessible to the authorized user, the at least one transaction restriction including a non-wireless condition to restrict a transaction to a maximum purchase amount when a wireless connection for the mobile communication device (110, 120) is not available so that an authorization request signal or transaction notification cannot be immediately sent to the another device associated with the at least one administrative user; using the at least one accessed transaction restriction, determining whether a transaction data set representing terms of a proposed transaction is authorized, wherein a transaction is authorized when all or some of the transaction restrictions including the non-wireless condition are met; and if the transaction is authorized, transmitting to a networked payment processing resource data representing terms associated with the transaction data set and a payment request. accessing, via a controller in secure memory of the mobile communication device (110, 120), data representing at least one transaction restriction associated with an authorized user of the mobile communication device (110, 120), wherein the at least one transaction restriction was created or modified by receiving modifying signals comprising or embedded in a message from another device associated with at least one administrative user of the NFC-capable mobile communication device (110, 120), via at least one of NFC, Wi-Fi, cellular communications, BluetoothTM, RFID, or wired communications before the accessing the data representing the at least one transaction restriction, and wherein the transaction restriction in the secure memory is not accessible to the authorized user, the at least one transaction restriction including a non-wireless condition to restrict a transaction to a maximum purchase amount when a wireless connection for the mobile communication device (110, 120) is not available so that an authorization request signal or transaction notification cannot be immediately sent to the another device associated with the at least one administrative user; using the at least one accessed transaction restriction, determining whether a transaction data set representing terms of a proposed transaction is authorized, wherein a transaction is authorized when all or some of the transaction restrictions including the non-wireless condition are met; and if the transaction is authorized, transmitting to a networked payment processing resource data representing terms associated with the transaction data set and a payment request.