Ghost Tapping: The New Digital Pickpocket You've Never Heard Of
- Michael Routhier
- 3 days ago
- 4 min read
Picture this.
You spend a lovely Saturday morning at a farmers market. Fresh bread, some flowers, maybe a jar of that wildflower honey you've been going back for all spring. You pay for everything properly. You never take out your wallet unnecessarily. You never hand your phone to a single person.
And then that evening, you check your bank account.
There's a charge you don't recognize.
That's not a glitch. That's not your bank making a mistake. That's ghost tapping. And it's one of the sneakiest scams circulating right now, precisely because nothing about your day felt wrong.
What Is Ghost Tapping?
Most of us have a tap-to-pay card these days. Maybe you use Apple Pay or Google Pay. When you tap at a terminal, your card communicates using something called NFC, Near Field Communication. It's a tiny radio signal your card broadcasts at very short range. About four centimetres. Roughly an inch and a half.
That's not very far. Which is why this used to be considered safe.
Here's the problem.
Scammers have built small, cheap devices that can intercept that signal. They don't need to steal your card. They don't need to bump into you. They don't need to touch you at all. They just need to get close enough and in a crowded public space, close enough is not a high bar.
Farmers markets. Street festivals. Subway platforms. Outdoor concerts. Basically everywhere you're planning to be this summer.
Three Ways It Happens
This is the part worth reading carefully. Understanding how it works is what makes you harder to target.
The Proximity Skim
A scammer moves through a crowded space with a hidden NFC reader tucked in a bag or jacket. They walk close to your purse or back pocket. The reader silently captures your card data. You feel nothing. You notice nothing. Done in a fraction of a second.
The Fake Vendor Terminal
This one genuinely gets me. A scammer sets up as a vendor; lemonade, handmade goods, raffle tickets, something completely plausible for a summer market, and hands you a rogue payment terminal. You tap, thinking you're paying a few dollars for something real. The Better Business Bureau has documented cases where people were charged $537 and $1,100 this way; by someone going door to door selling chocolate for "charity." The terminal was real. The charity wasn't.
The Charity Donation Scam
Someone approaches you for a cause that sounds entirely legitimate. They hand you a tap device. You give what you believe is a small donation. It isn't. And however much you agreed to on that screen isn't necessarily what processes.
These are happening right now. The Better Business Bureau flagged ghost tapping as an accelerating fraud method heading into summer season. And as outdoor events ramp up across Canada and the US, the opportunity for scammers grows with every weekend.
The most common version of this scam isn't a stranger walking past you, it's a fake terminal or rogue charity device.
Five Steps That Actually Protect You
Good news; this is genuinely simple to defend against. No technical skill required.
Step 1 - Get an RFID-blocking wallet or cardholder.
This is your single best defence. Independent consumer testing has confirmed that properly constructed RFID-blocking wallets stop the vast majority of signal attempts when your cards are fully enclosed. They cost less than twenty dollars, they're available at Canadian Tire, Walmart, and Amazon, and once your card is inside one it literally cannot be remotely read. Quick test; try tapping your card through the closed wallet at a payment terminal. If it doesn't work, the shielding is doing its job.
Step 2 - Turn on transaction alerts with your bank.
Most banks and credit unions offer instant text or email alerts for every transaction on your account. Free, simple, and it means you know within seconds if something goes through that shouldn't, not when you check your statement three weeks later. Call your bank today if this isn't already on.
Step 3 - Always confirm the total before you tap.
Look at the screen. See the number. Agree with it. Then tap. Three extra seconds. If a vendor seems reluctant to let you see the total clearly before you tap, that is your cue to walk away.
Step 4 - Keep your bag and wallet positioned smartly in crowds.
Bag in front of you, not hanging off your back. Wallet in a front pocket rather than a back pocket. Small adjustment, real protection.
Step 5 - Review your transactions weekly.
Ghost tapping charges are often deliberately small, five dollars, eight dollars, specifically designed to fly under the radar. Make it a weekly habit to scan your transactions. The small ones are exactly the ones that get missed.
Why This One Is Worth Taking Seriously
The reason ghost tapping is so unsettling isn't the dollar amount. It's the invisibility.
No one grabbed your bag. No one approached you aggressively. Nobody asked you for anything. You did everything right.
And yet.
The protection really is simple. An RFID-blocking wallet. Transaction alerts. Confirm the total before you tap. That combination closes the gap that this scam lives in and lets you enjoy your Saturday morning at the farmers market without thinking twice.
Which is, honestly, how Saturday mornings should be.
Have you started using an RFID-blocking wallet, or is this the first time you're hearing about ghost tapping? And if you've had a charge show up after an outdoor event that you couldn't account for, even a small one, I want to hear about it. Drop it in the comments. The more we share these experiences, the harder it gets for the next scam to catch the next person off guard.
— Michael Routhier, Founder of Tech 4 Grown-Ups. I run free digital safety seminars for adults 55+ and write about tech threats as they happen. Learn more about me →
Comments