Near Field Communication (NFC) is a short-range wireless technology that lets devices exchange data when they are a few centimetres apart, used for contactless payments, access cards and device pairing.
How NFC works
NFC operates at 13.56 MHz and builds on RFID technology; core standards include ISO/IEC 18092 and ISO/IEC 14443 for contactless cards. One device creates a magnetic field that powers or talks to another, so passive tags and bank cards need no battery. The working range is typically under 4 cm, which is often presented as a security feature. Common uses include:
- contactless bank cards and mobile wallets such as Apple Pay and Google Pay;
- building access badges, transport tickets and electronic passports;
- pairing headphones and sharing links or contacts between phones.
Why NFC matters for security
Short range does not prevent abuse. In relay attacks, two attacker devices forward the radio exchange between a victim’s card and a distant payment terminal or car, so the transaction happens far from the card. A well-documented case is NGate, Android malware reported by ESET in 2024: victims were tricked through phishing into installing a fake banking app and tapping their card on the phone, and the trojan relayed the card’s NFC data to criminals who withdrew cash at ATMs. Other risks include unauthorised reading of cards in crowds, cloning of weak access badges and malicious tags that open phishing links. NFC fraud complements traditional card skimming, and payment protocols use one-time cryptograms to stop simple replay attacks.
How to use NFC safely
- Install banking apps only from official stores and never tap a bank card against your phone at someone’s request.
- Turn NFC off when it is not needed and require unlocking for mobile payments.
- Use RFID-blocking sleeves for access cards and passports if skimming is a concern.
- Replace outdated access card systems such as MIFARE Classic.
