Accounts being emptied without PIN or OTP: A new scam spreads worldwide

A new and dangerous digital fraud has emerged worldwide, known as the Ghost Tapping scam. This scam is specifically targeting people who visit tourist destinations.

In today's world, travel and digital payments are inextricably linked. When we travel, we tend to use credit cards, debit cards, or mobile wallets instead of carrying cash. Just tap your phone or card, and the payment is done – no lines, no hassle. But this convenience is now becoming a major threat to people.

A new and dangerous digital fraud has emerged worldwide, known as the Ghost Tapping scam. This scam is specifically targeting people who visit tourist destinations and frequently use tap-to-pay (contactless payment). The most frightening aspect is that this scam doesn't require a PIN or OTP; yet, money is withdrawn from the account.

What is the Ghost Tapping scam?

Ghost Tapping is a type of digital fraud where a scammer gets very close to you and secretly makes a payment using your card or smartphone. They misuse NFC (Near Field Communication) technology for this. If your card or mobile phone has the tap-to-pay feature enabled, the scammer can deduct money from your account using their special device or modified smartphone, and you won't even realize it. The card isn't swiped or inserted into a machine, and no OTP is received.

How does this scam work?

Nowadays, Apple Pay, Google Pay, Samsung Wallet, and contactless cards use NFC technology. Scammers take advantage of this. Scammers carry portable NFC readers or modified smartphones. They roam around crowded places like airports, railway stations, festivals, fairs, markets, and tourist spots. Sometimes, they pose as fake shopkeepers and ask for tap-to-pay for small payments. In some cases, they can trigger a transaction simply by standing near you. This contact, lasting just a few seconds, is enough, and money is deducted from your account. Often, either an excessive amount is deducted, or the user only realizes later that a transaction has occurred.

Which countries and places are at higher risk?

Governments have not yet released any official figures, but cybersecurity experts say this scam is spreading rapidly. Cases are particularly prevalent in the US during large events and festivals, in the UK and parts of Western Europe, and in popular tourist destinations like France, Spain, Italy, Thailand, and Indonesia, as well as at international airports and transit hubs. Crowded places provide easy opportunities for scammers.

Is Tap-to-Pay completely unsafe?

Experts believe that tap-to-pay technology is still safer than swiping or inserting a card, as the transactions are encrypted and data theft is not easy. However, it can be misused in unfamiliar places and crowded areas. Therefore, there's no need to fear the technology, but rather to be cautious. A little vigilance can save you from significant losses.