What is ghost tapping and how does it work?

Ghost tapping is a type of contactless payment fraud where someone secretly charges your card or phone. Scammers may use specialized tools and quick taps to steal small amounts in crowded spaces, or use distractions and urgency tactics for larger payouts at checkout.

In this guide, we’ll explore what ghost tapping is and how it actually works. We’ll point out common signs to watch for and offer practical tips on how to keep it from happening to you. We’ll also address some other concerns about ghost tapping that come up online.

What is ghost tapping?

Ghost tapping happens when someone triggers a contactless payment on your card or phone without your knowledge. The charge goes through instantly, so you may not notice until a notification or bank statement shows it.

These charges tend to be small and random, with many people dismissing them as one of the 17 different subscriptions for the month. Of course, they can quickly add up—especially if you frequently pass through crowded areas or don’t pay attention to the transaction details.

How does ghost tapping work?

Ghost tapping works through near-field communication, or NFC, built into cards and phones. Basically, a card reader or multi-tool (like the Flipper Zero) can send a signal that initiates a payment when your device is close enough.

The tap happens fast, so the user usually doesn’t see it coming. Whether you’re doing some last-minute holiday shopping or looking for souvenirs in a packed venue, that moment of distraction is enough for a quick tap from a sneaky attacker.

Then again, some ghost tapping scams lean more into social engineering than stealth. A scammer might frame it like you’re holding up the line and rush you to tap, or push the terminal toward you before you can check the amount. That sense of urgency lets them slip in a higher total or a second charge before you notice.

Common signs of ghost tapping

Ghost tapping charges can really sneak up on you if you’re not careful. Here are a few telltale signs to watch out for:

• Contactless transaction notifications: Alerts notify you immediately when a charge goes through, giving you a chance to react and catch unauthorized payments.
• Small charges you don’t recognize: Tiny, unexpected payments could be a sign of someone testing their ghost tapping setup. Keep an eye out and act quickly if these pop up to avoid losing more money.
• Strangers bumping into you: Brushing shoulders with people in crowded areas is completely normal. But if people keep getting uncomfortably close, it’s worth checking your transaction history in a local coffee shop or other safe area.
• Merchants rushing you through purchases: If a cashier or salesperson seems particularly distracting, or tries to push you to finish quickly “to keep the line going,” double-check you’re paying the right amount.
• Vendors don’t offer a receipt: Aside from hiding the total on the terminal, fraudsters may quickly dispose of a receipt with flimsy excuses, such as “assuming you’d throw it away anyway.”

Many Apple Pay scams rely on the same tactics, whether it’s unchecked charges or rushed taps. Naturally, you can’t be on guard constantly, but a few precautions can reduce the risk of ghost tapping.

Related: Is Apple Pay Safe? Important things to know

How to prevent ghost tapping

Here are a few simple tips and habits to keep ghost tapping scams at bay:

• Use an RFID-blocking wallet or phone case: A blocking wallet or case stops nearby readers from pinging your card or device, making it harder for someone to trigger a ghost tap if they pass close to you in a crowd.
• Only tap to pay with trusted shops: Stick to established stores when tapping to reduce the chance of accidental or scam charges. Random food or trinket stalls in crowded or high-risk areas could use distractions to charge you more than expected.
• Verify the total amount: Don’t tap your phone or card until you confirm the total. Also, make sure you’re paying the right place, not someone trying a quick ghost tap scam.
• Enable transaction alerts: Check bank alerts right away and report anything unusual if you see a charge you didn’t authorize.
• Check your bank statements regularly: This helps you spot unusual transactions quickly and dispute them. Even a quick peek after a shopping trip or stroll through crowded streets can potentially save you some money.
• Stick to cash where possible: While they’re becoming more of a rarity, cash payments are immune to cyberpunk-style robbery. Keep a few bills on you for small purchases or the occasional malfunctioning card reader.
• Use credit cards instead of debit cards: Credit cards usually have extra safeguards that debit cards lack. For instance, US laws cap your losses at $50 if you report fraudulent charges within 60 days.

Tips to avoid ghost tapping on iPhone and Android

Ghost tapping phones is much harder for a simple reason. Namely, that each transaction requires biometrics (like Face ID or Touch ID) or a PIN to go through. So if you’re worried about ghost tapping and haven’t set a proper screen lock yet, now’s the time to do so.

Another good idea is to disable the double-tap/raise to wake feature during commutes. Some phones light up or ready the wallet screen too easily, which makes accidental taps more likely when you’re squeezed between people.

Meanwhile, Android phones have a full-on NFC toggle. Simply swipe down from the top of the screen to find the setting. You can tap to turn it off and stop unwanted charges if a scammer uses a reader near your phone. That way, you don’t have to be on constant alert when you’re out and about.

Otherwise, that RFID-blocking phone case we’ve mentioned should do the trick. Though keep in mind, these cases will also affect regular card readers. Don’t be surprised if Google Pay refuses to work during checkout.

What is ghost tapping? FAQs