What is Ghost Tapping?
12/03/2025
What is Ghost Tapping?
Contactless payment is especially convenient around the holidays, as it offers flexibility and speed. But scammers now exploit this feature to steal money or personal information without even having physical access to your card or device.
Ghost tapping is another term for tap-to-pay scams. These scams involve bad actors using unauthorized or hidden Near Field Communication (NFC) readers to steal information from your card or device. To perpetrate these scams, criminals will often choose crowded areas like shopping markets or concerts and use a discreet device to read your card or device information. The victim does not even have to authorize any sort of transaction. Some scammers, though, will impersonate a business and change transaction amounts without the victim being aware.
Scammers may also use social engineering to install malware or compromised apps onto your phone. This malware will then mimic tap-to-pay functionality or transmit payment credentials to the scammer. Phishing emails, text, or phone calls will usually claim that your account has suspicious activity and ask you to verify your card via clicking on a link. This link then installs the malware.
Luckily, there are several ways you can recognize these scams. Red flags for this scam include:
- Unexpected notifications about transactions you don’t recognize
- Prompts to download unknown apps or links to verify payment
- Suspicious activity on your bank statements
If you notice any of these signs, immediately call your bank at a verified number to freeze your card and follow their instructions for securing your accounts from further fraud.
Preventing these scams can feel daunting, since criminals just have to brush past you to initiate this scam. However, simple habits can help you avoid ghost-tapping scams.
- Use strong passwords, biometric or two-factor authentication, and update your apps and software regularly.
- Keep your phone close to you in crowded spaces and keep your device out of your pockets.
- Monitor your accounts and statements frequently. You may also choose to have your card alert you to any transactions.
- Using virtual wallets can add an extra layer of security.
- Turn off contactless payment functionality when you are not using it.
While tap-to-pay is generally safe (and sometimes safer than traditional forms of payment), scammers are always evolving. Staying aware, maintaining strong digital security, and monitoring your accounts are key to avoiding fraud.
In short: convenience does not have to come at the cost of safety. Protect your tap-to-pay cards and devices like you would cash. This means keeping them secure, monitoring them closely, and avoiding phishing attempts.
Sources:
https://www.mcafee.com/blogs/tips-tricks/ghost-tapping-what-it-is-how-it-works-and-how-to-stay-safe/