In a cash-free economy, contactless scanning is the key to fast, streamlined transactions. For many, however, the increasing prevalence of non-physical payment methods raises new security concerns. Could criminals use their own card readers to steal your identity and empty your bank account?

RFID blocking products promise a solution to these problems, with wallets and passport covers that limit RFID scanning, but it’s worth taking a closer look at how effective the technology really is. What is RFID blocking, and do you need it to stay safe?

RFID代表“无线射频识别”。Credit cards and passports use RFID technology to allow machines to scan them from a short distance. It’s this system that facilitates contactless payment and that some worry could be vulnerable to criminal manipulation.

Some users worry that a bad actor standing nearby could surreptitiously access their card’s RFID function. In so-called “skimming” attacks, a thief can theoretically withdraw money from the victim’s account as they walk by in the street or wait in a store line.

Another risk is that of identity theft, a crime that can haunt victims for years after their details are initially stolen. Could a silent attacker scan your passport or credit card for sensitive information and then impersonate you online? Companies selling RFID products claim to have the solution.

Does RFID blocking really work?

RFID blocking materials can effectively prevent the scanning function on a card or passport, and the range of products that boast this feature is steadily growing.

Everything from wallets to waterproof fanny packs now support RFID blocking capabilities. A layer of carbon fiber or aluminum can protect you from contactless attacks, and that’s a key selling point for some items.

You don’t have to invest in a designer handbag with integrated aluminum sheeting, of course. Studies suggest that a thick layer of tinfoil from your kitchen will be effective too.

You might have seen reports claiming that “contactless crime” can result in huge financial losses, and that’s absolutely true. The problem is, the studies used to support these claims don’t make a compelling case for RFID blocking specifically.

If a victim loses money in a “contactless-related” event, it’s almost always because their card was physically stolen from them. Even if that happens, the damage rarely escalates because purchases made with contactless cards are capped at a relatively low sum.

Data from both Action Fraud and UK Finance suggests that the threat currently posed by skimming attacks is minimal. In a 2018 report, UK Finance found no record of any contactless theft occurring that year while a card was still in the possession of its owner.

The technology and techniques used by criminals are always evolving, but for now there’s little evidence that skimming is an imminent threat.