Contactless payments have become second nature for millions due to their speed and convenience, but security specialists warn that this ease can be exploited if users are not paying attention at the point of payment. A little-known scam called 'ghost tapping' is prompting fresh warnings, with experts saying money can sometimes be taken without the cardholder noticing in the moment.
The concern centres on ghost tapping, a fraud tactic that typically plays out in busy or distracting environments such as packed shops, transport hubs or crowded streets, where a quick or unnoticed tap-to-pay transaction can slip through. While the sums involved are often small, specialists warn that multiple attempts or a single higher-value charge could still leave people out of pocket if they’re not spotted quickly.
How ghost tapping works
According to McAfee, an award-winning global online protection firm: “Ghost tapping is a form of contactless fraud where someone attempts to initiate a tap-to-pay transaction without your approval. Tap-to-pay cards and mobile wallets on phones use a technology called ‘near-field communication’ (NFC). This lets them communicate with things like a point-of-sale device for payment at a very close range. It's generally quite safe, particularly because of the ‘near’ part. You have to get very close to make the connection.”
However, experts warn that being physically close - especially when you’re distracted - can be enough for scammers to try their luck. In some cases, fraudsters may attempt to read limited details from contactless cards, while in others they may try to rush or mislead you into approving a payment you didn’t intend to make. Most incidents rely on opportunistic tactics rather than sophisticated hacking, writes Sophie Buchan from the Mirror.
Common tactics used by scammers
Criminals may use portable card readers near a bag or pocket, or tamper with payment terminals and hurry customers through transactions so they don’t notice the amount being charged. McAfee added: “We've seen reports of people getting Apple Pay scammed by impostor merchants who exploit quick taps and small screens. While mobile wallets add strong safeguards, poor visibility and social pressure can still lead to losses.
“Common myths persist. Attackers can't drain accounts from far away, clone full cards via a tap, or bypass wallet protections easily. Most successful cases hinge on proximity, distraction, and human error. Meanwhile, Apple Pay scam stories often involve rushed taps and unverified totals. Effective ghost detecting focuses on timely alerts, careful review, and immediate response.”
How to protect yourself
Consumer groups say there are simple steps people can take to reduce the risk. The Better Business Bureau recommends:
- Store your cards securely. An RFID-blocking wallet or sleeve can help stop wireless skimming.
- Always confirm payment details. Before tapping your card or phone, check the merchant’s name and amount on the terminal screen.
- Set up transaction alerts. Many banks allow real-time notifications for every charge.
- Keep an eye on your accounts. Daily checks help you spot fraud faster.
- Limit tap-to-pay use in high-risk areas. Consider swiping or inserting your card instead.
Experts at McAfee also suggest limiting contactless use in crowded or high-risk areas, and considering chip-and-pin payments where possible for extra reassurance. Meanwhile, Citizens Advice says anyone who notices a suspicious transaction should contact their bank immediately. This includes situations where there's a payment from your account you don't recognise – known as an unauthorised transaction – or you’ve used your debit card and more money was taken than expected.
What to do if you're a victim
Citizens Advice explains: “Explain what's happened and ask if you can get a refund. If you're not happy with how the bank deals with your claim, you can complain to them. Find out how to do this by checking their website. If it's been eight weeks since you complained, and you haven't got your money back, contact the Financial Ombudsman. You can also contact the ombudsman if you've had a letter from the bank saying it's not going to take any action. This is sometimes known as a final response letter.”
The Financial Ombudsman Service has the power to step in if a customer has been treated unfairly and can order firms to put things right. This advice applies to England. Separate guidance is available for Northern Ireland, Scotland, and Wales. While ghost tapping is still considered relatively rare, experts stress that awareness is key. Taking a few extra seconds to check a payment - and keeping a close eye on your bank account - could make all the difference in stopping a scam before it costs you.
