Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Tap to Pay Scam - How to Protect Yourself
Tap to Pay Scam - How to Protect Yourself

The "Tap to Pay" scam, widely known as ghost tapping, is a growing form of contactless payment fraud where scammers exploit Near Field Communication (NFC) technology to steal money from your credit cards or digital mobile wallets.

While tap-to-pay is generally one of the most secure ways to complete transactions, fraudsters leverage close physical proximity and human distraction to bypass standard security measures.

How the Scams Work

  • The Phony Vendor: Fraudsters set up fake booths at crowded flea markets, festivals, or even go door-to-door under the guise of a fake charity. They claim to only accept tap-to-pay and use rushed checkout tactics, hiding the terminal screen to charge you hundreds or thousands of dollars instead of a minor fee.
  • The Crowd Bump: Operating like modern-day digital pickpockets, criminals carry hidden, portable point-of-sale terminals or modified smartphones. In crowded spaces like transit hubs or concerts, they brush against your pocket or purse closely enough (usually within 2 inches) to trigger an unauthorized microtransaction.
  • Compromised Terminals: In some variations, scammers physically compromise legitimate merchant point-of-sale systems to split or siphon off automated portions of transactions without the vendor or customer noticing immediately.

How to Protect Yourself

  • Verify before tapping: Never rush through a transaction. Always force the merchant to show you the terminal screen so you can confirm the exact charge amount and business name before bringing your card or phone near the terminal.
  • Use an RFID-blocking wallet: Keep your physical credit and debit cards inside specialized RFID-blocking sleeves or wallets to completely block incoming radio frequencies when you are out in public.
  • Lock your digital wallet: Ensure your smartphone's digital wallet (like Apple Pay or Google Wallet) requires biometric verification, such as Face ID or fingerprint scanning, before it can authorize any transaction.
  • Turn off NFC features: If you are attending a massive public event and do not plan to use tap-to-pay, temporarily disable the NFC functionality in your phone's settings.
  • Set up instant bank alerts: Enable push notifications through your banking apps for all transactions. This immediately alerts you to any unrecognized microtransactions so you can lock your card instantly.

What to Do If You're Targeted

If you notice unrecognized charges on your account, contact your financial institution immediately to report the fraud and freeze your card. Most major card issuers provide zero-liability protection for fraud reported promptly, capping your maximum legal liability at $50 under federal rules. You can also log the incident with the FTC.

waiting