Confirmed—this is how the “ghost tapping” scam works, which can empty your account with a single tap

November 2, 2025
Confirmed—this is how the “ghost tapping” scam works, which can empty your account with a single tap

Nowadays, the most common way to pay is by card. Almost everyone, especially in large cities, pays by card when they need to buy practically anything. At a supermarket, a gas station, or a beauty salon. The fact is that with the development of technology, it’s no longer even necessary to insert the card into a payment terminal or enter the PIN; simply tap the card and the purchase can be completed using tap-to-pay. Scammers use wireless devices to secretly charge the victim’s card, without even touching it, using NFC technology.

A new cybersecurity threat has grown in popularity in recent weeks

This is a problem that is increasingly affecting more citizens. The Better Business Bureau states that this scam is gaining popularity in the United States, as criminals take advantage of crowded spaces and distracted shoppers. Behind the convenience of making purchases this “easy,” a new cybersecurity threat has grown in popularity in recent weeks. It’s called “phantom touch,” a digital scam capable of emptying your online banking in a matter of seconds without you even realizing it. Scammers work quickly and take advantage of people who are in a hurry, distracted, or unaware of what happens when they touch their card.

The scam may seem very simple, but it can really hurt the pocket

The “attack” is so simple that in some cases, scammers bump into someone in public and charge their card instantly. Other criminals also pretend to collect donations for charity, but instead of a small contribution, they steal hundreds of dollars. Others pose as vendors at crowded events like festivals or flea markets, tricking people into using a fake payment terminal. The scam may seem very simple, and many will boast that they would never fall for the trick, but the fact is that there are more victims than we might think.

“The best way to avoid losing money is to regularly review your financial accounts”

According to recent research, criminals are increasingly developing ways to defraud victims. In this sense, fraud can operate in two ways: in-person, which requires criminals to be physically close to the victim, and remote, which relies on social engineering tactics. “The best way to avoid losing money is to regularly review your financial accounts and contact your bank as soon as you notice any suspicious activity,” said Michelle L. Corey, president and CEO of BBB St. Louis. In addition, you should try to use more secure payment methods.

Among the methods that can be used is the limit feature found in some banking apps. This limit can be modified and restricts online purchases, for example, up to a certain amount. We can also try to pay more in cash or carry credit cards in more secure places in our purse or pockets. It’s difficult to know when a criminal will strike, but it’s essential to be aware of new practices to avoid falling into them.

Authorities also warn that scammers sometimes make smaller withdrawals to avoid being detected by anti-fraud systems

In any case, experts say that Near Field Communication (NFC), the technology behind tap-to-pay, is generally secure, but criminals can still exploit it in crowded or chaotic situations. “This scam demonstrates how criminals are well aware of the system’s weaknesses to exploit them to their advantage and create fraud without needing to hack other devices,” explained Anderson Leite, security researcher at Kaspersky. Authorities also warn that scammers sometimes make smaller withdrawals to avoid being detected by anti-fraud systems, as reported by NBC affiliate KUSA. So, using better protection methods isn’t a bad idea; periodically checking your bank account or using NFC-blocking wallets or cases may be another option.