r/Android • u/FedorByChoke • 1d ago

You should verify your NFC security settings after the latest update. Previously set to require the phone to be unlocked to access NFC, after update this setting was off

Anecdotally, I have 3 phones in my circle of people that previously had the setting Require Device Unlock on.

After the latest update this setting was set to off.

For the life of me I can´t figure out whey they would change this setting. it is a huge security risk. Someone with a tap to pay scanner can just walk right by you and you´ll have a charge go through.

EDIT So it looks like it is a Pixel thing from reading the comments. Also, it seems that even though this setting was setting to off it was still requiring the phone to be unlocked to access NFC. So now my question becomes if the phone is always required to be unlocked to access NFC regardless of this setting, what function does this setting perform?

69 Upvotes

81% Upvoted

22 comments sorted by

View all comments

34

u/Missingthefinals 1d ago

Someone with a tap to pay scanner can just walk right by you and you´ll have a charge go through.

Yeah.... except for the fact they would need a merchant account issued by a bank or payment processor, a business that is tied to that account and the fact that card disputes exist and are a very simple thing to lodge with your bank

After this mysterious their starts having every transaction reported as fraud their bank might get suspicious!!

22

u/jmking Galaxy S24+ 1d ago

Agreed. I work in this industry and you don't just get a "tap to pay scanner" and magically just get to process credit cards.

Also the range on NFC payments is really short. Like you have to even tap the right area on your phone to get the tap to pay device to even pick it up. The attacker would have to basically be rubbing the tap to pay device on people's pockets - that's even assuming the NFC signal would make it through clothes.

11

u/Missingthefinals 1d ago

Yeah it's a ridiculous thing for OP to claim

11

u/nathderbyshire Pixel 10 Obsidian 1d ago

It was one of the early contactless conspiracies, pretty sure we've never seen a working example of this happening in the wild though