The establishment taking payment needs to communicate with their merchant provider (otherwise they’d never get their money), but I’m not sure that the phone does. It’s similar to contactless cards, but uses a different floor limit so you don’t need to enter a PIN, as it’s assumed that if you’ve unlocked the phone then you’re authorised to make payments.