Ghost Tapping: A Fast Growing Scam Targeting Tap to Pay Shoppers

As tap to pay becomes the default way Americans shop, cybersecurity experts warn that criminals are finding new ways to exploit the convenience.

A rapidly growing scam known as “ghost tapping” is using near field communication technology built into credit cards and mobile wallets to trigger unauthorized charges without a card or phone ever leaving your possession. According to fraud analysts, claims tied to ghost tapping have surged more than 150 percent over the past year. Incidents are most often reported in crowded public places such as airports, shopping malls, concerts, and public transit hubs, where suspicious behavior can easily go unnoticed.

Joining NBC Palm Springs Mary Strong to explain how the scam works is Paul Keener, a cybersecurity strategist with GuidePoint Security. The firm advises roughly one third of Fortune 500 companies and more than half of United States government cabinet level agencies.

How Ghost Tapping Works:

Cybercriminals use concealed NFC readers, sometimes hidden in backpacks, jackets, or handheld devices, to scan nearby cards or phones that have tap to pay enabled.

Because NFC works over very short distances, victims often do not realize they have been targeted until they later review their bank statements.

“These scams thrive on proximity and distraction,” Keener said. “Crowded environments make it easier to capture payment data without raising suspicion.”

Why It Is Hard to Detect:

Unlike traditional card theft, ghost tapping does not involve stolen wallets, compromised ATMs, or visible tampering.

Victims may only notice small charges at first, sometimes under fifty dollars, which can delay detection and make fraud harder to dispute if not caught quickly.

“People assume tap to pay is inherently safer, and in many ways it is,” Keener explained. “But no technology is immune from abuse.”

How to Protect Yourself:

Cybersecurity experts recommend several steps to reduce your risk. Use RFID blocking wallets or card sleeves. Disable tap to pay on cards you do not use regularly. Turn off NFC on your phone when it is not needed. Set up transaction alerts through your bank or credit card app. Regularly review statements for unfamiliar charges.

Keener also advises being extra cautious in crowded spaces and keeping wallets and phones secure, especially when traveling.

What to Do If You Are a Victim:

If you spot unauthorized charges, report them to your bank or credit card issuer immediately. Federal law typically limits consumer liability, but quick reporting is key.

As digital payments continue to grow, experts say awareness is the strongest defense.

“Convenience should not come at the cost of security,” Keener said. “A few small precautions can go a long way.”