The difficulty in pulling this off is not in owning the reading device (you can already buy a contactless payment terminal and cheap Android phone for much less than an entry level iPhone in every electronics store), but in opening a merchant account (this usually requires verification) and not getting it flagged for very obvious fraud before you can withdraw your "revenue".