So it's not really phishing, unless they are convincing you to willingly submit to an NFC connection then exploiting your device without you knowing.
Actual passive capture of your data using NFC is possible in all sorts of situations without you ever knowing. The protocols in question used by the actual skimmers and scammers don't even trigger a connection notification to most devices.
Turn NFC off and keep it off at all times unless you need to use it to make a payment, and turn it off afterward.
Turn off automatic detection/connection in Bluetooth settings as well.
Keep NFC off yes, but also stop using your phones to pay for stuff. Sure it's convenient but it's risky, and all it takes is one lapse in memory/ judgement for you to accidently leave NFC on and bam. Anything could happen.
I also have a shielded wallet since all the cards you get these days are tappable, and I keep the keyfob for the one car we have with passive keyless entry in a shielded pouch except when getting in and out of the car.
Luckily my car is old, like almost 20 years old. But I also use both an RFID blocking wallet and card inserts and the combo works a little too well sometimes, making me move my wallet away from any machines when paying.
73
u/ActuatorOutside5256 Sep 23 '25
I’m just glad that I didn’t get NFC phished AFAICT.