Contactless payments you make just tapping your card or phone are fast, convenient, and increasingly common. But there’s a sneaky scam circulating that specifically targets that convenience. The Better Business Bureau (BBB) has issued a warning about a new type of fraud called “ghost tapping”.
What is ghost tapping?
Ghost tapping is a type of scam that exploits tap-to-pay / contactless payment technology (sometimes called NFC, for Near-Field Communication). When you tap your card or phone to pay, data is transferred wirelessly. Scammers find ways to misuse that wireless transfer, either by getting you to tap when you didn’t realize what you were doing, or by charging you more than you expected. In some cases, the card or wallet is charged without you noticing right away.
Here are some examples of how this often plays out:
-
A person posing as a vendor asks you to tap your card/phone, but you don’t clearly see the amount or merchant name. Later you find unexpected charges.
-
Someone bumps into you in a crowded area and uses a hidden reader to initiate a charge on your tap-card/phone.
-
A small “test” charge is made first so it doesn’t trigger fraud alerts; then bigger charges follow.
Because tap-to-pay is marketed as effortless, people tend to bypass the verification step (“How much did I tap? Who am I paying?”). That makes it easier for scammers.
How and why the ghost tapping scam works
Why are scammers increasingly using ghost tapping? A few reasons:
-
Convenience and trust. Many people simply expect tapping to be safe and quick; they may skip verifying the terminal screen.
-
Crowded/public settings. Big crowds = more opportunities. At festivals, markets, transit hubs, etc., you’re more distracted. Scammers exploit that.
-
Wireless vulnerability. Because contactless payments transmit wirelessly, the “tap” becomes a point of attack. Scammers can exploit proximity and distraction.
-
Small-amount testing. By making a small undiscovered charge first, scammers avoid triggering alerts. Then larger charges are made.
In short, it works because you’re doing something you trust, tapping, in a setting where you may not look carefully, and the scam relies on you not noticing right away.
Warning signs: How to spot ghost tapping
Here are the clues that something might be off, particularly for everyday users who aren’t super tech savvy.
Before or during the “tap”
-
You’re asked to tap your card or phone without being shown the amount or the name of the merchant.
-
You’re in a busy, crowded place (market, festival, transit area) and someone is pushing “just tap” quickly.
-
The payment terminal looks unfamiliar, or someone doesn’t give you a receipt or let you review the charge.
-
There’s pressure or hurry: “just tap now,” “only tap accepted,” “tap only, no cash.”
After the event
-
Your bank or card account shows a small unusual charge you don’t remember. That could be a test.
-
A charge appears from a vendor/business name you don’t recognize.
-
You see multiple small or odd transactions, or one large transaction you didn’t authorize, especially after being in a crowded/chaotic spot.
-
You got tapped (or bumped) in a crowded place and didn’t fully check what you were doing.
What you can do to protect yourself
These are some practical steps that you or your family can follow to avoid becoming a victim of the ghost tap scam.
Before you pay/tap
-
Verify the merchant name and exact amount on the screen. Wait until you see both clearly.
-
If something feels off—vendor not giving a receipt, no amount shown, only “tap” accepted—use an alternate payment option.
-
In crowded areas, keep your card/phone in your hand (or a secure slot) rather than passively in a pocket or being handled for you.
-
Consider using an RFID-blocking wallet or sleeve for your tap-enabled cards. That adds a layer of defense.
-
If you have tap payments enabled on your phone, check your settings. You may choose to turn off NFC or require verification for each tap when you’re in crowded/public venues.
After you pay (or periodically)
-
Enable transaction alerts from your bank/card issuer so you get real-time notifications of any charges—even small ones.
-
Review your bank/card statement regularly—ideally daily or every few days when you’re out and about.
-
If you spot a charge you don’t recognize, contact your bank or card issuer immediately: freeze or cancel the card if needed.
-
Use alternate payment methods (chip/insert or cash) in high-risk situations if you’re unsure.
Ghost tapping means convenience comes with risk
Ghost tapping is a reminder that even the most convenient payment technologies carry risk. Just because you’re “tapping” and the system says it’s seamless doesn’t mean you should skip the basic verification steps.
-
Tap to pay? Fine. Just pause, check the amount and vendor name, and watch your account.
-
Use a physical blocker or turn off NFC where appropriate.
-
Monitor your account for unexpected activity, no matter how small.
By sharing this information with your family and friends and bringing a little extra awareness to this silent scam, you can significantly reduce both your own and their risk of being a victim.