{"id":223858,"date":"2025-11-19T13:40:13","date_gmt":"2025-11-19T21:40:13","guid":{"rendered":"https:\/\/www.mcafee.com\/blogs\/?p=223858"},"modified":"2025-11-21T12:41:11","modified_gmt":"2025-11-21T20:41:11","slug":"ghost-tapping-what-it-is-how-it-works-and-how-to-stay-safe","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/tips-tricks\/ghost-tapping-what-it-is-how-it-works-and-how-to-stay-safe\/","title":{"rendered":"Ghost Tapping: What It Is, How It Works, and How to Stay Safe"},"content":{"rendered":"

Contactless payments make everyday purchases fast and easy. Yet with that convenience comes a risk: ghost tapping.<\/p>\n

In crowded spaces or rushed moments, a scammer could trigger a small tap-to-pay charge or push through a higher amount without your clear consent. Understanding what ghost tapping is, how it happens, and what to do next helps you keep your money and identity secure.<\/p>\n

What Is Ghost Tapping?<\/h2>\n

Ghost tapping is a form of contactless fraud where someone attempts to initiate a tap-to-pay transaction without your approval.<\/strong><\/p>\n

Tap-to-pay cards and mobile wallets on phones use a technology called \u201cnear-field communication,\u201d or NFC<\/strong>. That lets them communicate with things like a point-of-sale device for payment at a very close range. It\u2019s generally quite safe, particularly because of the \u201cnear\u201d part. You have to get very close to make the connection.<\/p>\n

Even so, proximity and distraction can be exploited. Attackers may try to skim limited details from RFID (Radio Frequency Identification technology) cards or NFC cards, or nudge you into approving a payment you didn\u2019t intend. If you\u2019ve ever wondered what ghost tapping is, think of it as an opportunistic, in-person scam that abuses the tap-to-pay moment rather than a remote hack.<\/p>\n

How Ghost Tapping Happens<\/h2>\n

Most schemes rely on getting close and catching you off guard. A criminal might carry a portable reader, press into a pocket or bag, and attempt a low-value charge. Others set up tampered terminals, rushing you so you don\u2019t check the amount.<\/p>\n

Consider These Two Scenarios:<\/h3>\n

You\u2019re at a busy farmer\u2019s market.<\/strong> A scammer with a phone equipped with a point-of-sale app stumbles into you and gets close enough to your card to trigger a transaction. It\u2019s almost like a modern-day pickpocket move<\/strong>, where the bump distracts the victim from the theft as it happens.<\/p>\n

In another case, you might come across a phony vendor.<\/strong> Maybe someone\u2019s selling cheap hats outside a football game or someone\u2019s going around your neighborhood selling candy, supposedly to support a charity. In scenarios like these, you tap to pay with your phone just as you\u2019d expect… but with one exception: the \u201cvendor\u201d jacks up the purchase price.<\/strong> They hurry you through the transaction, so quickly that you don\u2019t review the screen before you confirm payment.<\/p>\n

We\u2019ve also seen reports of people getting Apple Pay scammed by impostor merchants who exploit quick taps and small screens. While mobile wallets add strong safeguards, poor visibility and social pressure can still lead to losses.<\/p>\n

The Better Business Bureau on Ghost Tapping:<\/h3>\n

A report posted on the Scam Tracker at the Better Business Bureau (BBB)<\/strong><\/a> shows how the phony vendor version of this scam allegedly played out:<\/p>\n

\u201cAn individual is going door to door in [location redacted] claiming to be selling chocolate on behalf of [redacted] to support special needs students. He says that he can only accept tap-to-pay to get people to pay with a card. He then charges large amounts to the card without the cardholder being able to see the amount. He got my mother for $537… Another victim\u00a0for\u00a0$1100… He changes neighborhoods frequently to avoid getting caught.\u201d<\/p><\/blockquote>\n

Signs of Ghost Tapping and Common Myths<\/h2>\n

Early ghost detecting starts with vigilance. Watch for unfamiliar small charges<\/strong>, especially after crowded events, and alerts tied to contactless transactions<\/strong>. If you see odd activity tied to RFID cards or NFC cards, act quickly.<\/p>\n

Common myths persist. Attackers can\u2019t drain accounts from far away, clone full cards via a tap, or bypass wallet protections easily. Most successful cases hinge on proximity, distraction, and human error. <\/strong>Meanwhile,<\/strong>\u00a0Apple Pay scam stories often involve rushed taps and unverified totals.<\/p>\n

Effective ghost detecting focuses on timely alerts, careful review, and immediate response.<\/p>\n

How to Protect Yourself from Ghost Tapping Scams<\/strong><\/h2>\n

The BBB, which recently broke the story of these scams, offers several pieces of advice. We have some advice we can add as well.<\/p>\n

From the BBB…<\/p>\n