[et_pb_section fb_built=”1″ _builder_version=”4.27.4″ _module_preset=”default” custom_padding=”||8px|||” global_colors_info=”{}”][et_pb_row _builder_version=”4.27.4″ _module_preset=”default” locked=”off” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/nationalcybersecuritysociety.org\/wp-content\/uploads\/2025\/09\/NCSS-3397-Bulletin-Header-Footer-Header-Graphic-1600×350-Compressed.png” title_text=”NCSS-3397-Bulletin-Header-Footer-Header Graphic 1600×350-Compressed” _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”]<\/p>\n
Published: July 18, 2025<\/em><\/p>\n [\/et_pb_text][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”]<\/p>\n Our new bulletin Cyber Threat Watch<\/em><\/strong> has been created to help small businesses stay up to date on the latest threats, news, and events affecting their business. The content has been curated to make cybersecurity easy and accessible for both technical and nontechnical readers.<\/span><\/p>\n [\/et_pb_text][et_pb_heading title=”Featured Cyber Threat \u2014 Near Field Communication (NFC) Relay Attack” _builder_version=”4.27.4″ _module_preset=”default” title_level=”h2″ title_font=”|600|||||||” title_text_color=”#00688E” global_colors_info=”{}”][\/et_pb_heading][et_pb_image src=”https:\/\/nationalcybersecuritysociety.org\/wp-content\/uploads\/2025\/10\/AdobeStock_745672097-scaled.jpeg” title_text=”Female hands phone pay wireless technology nfc via pos terminal” _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” header_3_text_color=”#00688E” global_colors_info=”{}”]<\/p>\n Cybercriminals are now exploiting the convenience of contactless payments through a scheme known as a near field communication (NFC) relay attack. These attacks allow them to make unauthorized purchases or withdrawals by secretly capturing and relaying card or mobile wallet<\/a><\/span> information without stealing the physical card or phone. Recent findings from Visa<\/a><\/span> and cybersecurity firms show that this type of threat is rising, and both businesses and customers that use contactless payments are increasingly affected.<\/p>\n An NFC relay attack is a type of digital pickpocketing where two attacker devices work together. Typically, one device is secretly placed near a person\u2014such as in a bag or pocket\u2014to capture the tap signal from a payment card or phone. At the same time, a second device is placed near a legitimate payment terminal, often in a retail setting. These two devices communicate wirelessly in real time, tricking the terminal into believing the payment card is physically present.<\/p>\n This allows the attacker to complete a fraudulent transaction by using the person\u2019s payment information. Malware-as-a-Service (MaaS)<\/a><\/span> platforms like SuperCard X, TX-NFC, and TapPay have made it easier for criminals to carry out these attacks by using only phones and apps. In some cases, people are tricked into installing malicious apps that silently turn their phones into relay tools.<\/p>\n [\/et_pb_text][et_pb_image src=”https:\/\/nationalcybersecuritysociety.org\/wp-content\/uploads\/2025\/10\/AdobeStock_1380713546-scaled.jpeg” title_text=”Virtual banking card. Isometric mobile phone, internet banking app, card. Online payment security transaction via credit card. Shopping wireless pay smartphone. Internet digital bank technology.” _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” header_3_text_color=”#00688E” custom_css_free_form=”ol {|| list-style: none !important; || counter-reset: item; ||}||||ol li {|| counter-increment: item; || position: relative; || padding-left: 2em; \/* Adjust as needed for spacing *\/||}||||ol li::before {|| content: counter(item) %22.%22; || font-weight: bold; || position: absolute;|| left: 0; || width: 1.5em; || text-align: right;||}” global_colors_info=”{}”]<\/p>\n Several deceptive methods have been reported. Therefore, small business owners and their staff should be aware of these tactics.<\/span><\/p>\n \u00a0<\/span>NFC relay attacks can have serious consequences for small businesses. Even when using legitimate systems, your business may still accept fraudulent transactions\u2014leading to chargebacks, reputational harm, or scrutiny from your payment provider. Customers also face risks such as unauthorized charges or misuse of their phone or card data.<\/span><\/p>\n By taking the following proactive steps, you can help prevent your business from being used in a fraudulent transaction.<\/span><\/p>\n NFC relay turns convenience into risk. Small businesses that accept contactless payments should understand how these attacks work and what steps to take to reduce their exposure. By staying informed, training staff, and partnering with trusted payment providers, your business can stay one step ahead of this emerging threat before it reaches the checkout counter.<\/p>\n The NCSS encourages businesses to adopt comprehensive security practices and stay informed about evolving technology threats. We recommend you consider becoming an NCSS member to access a wide range of our services. For more information, visit our Small Business page<\/a><\/span>.<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.27.4″ _module_preset=”default” custom_margin=”|auto|-44px|auto||” locked=”off” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][et_pb_divider _builder_version=”4.27.4″ _module_preset=”default” custom_margin=”||-2px|||” locked=”off” global_colors_info=”{}”][\/et_pb_divider][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” header_2_font=”|600|||||||” header_2_text_color=”#00688E” global_colors_info=”{}” custom_margin=”||20px|||”]<\/p>\n https:\/\/corporate.visa.com\/en\/sites\/visa-perspectives\/security-trust\/relaying-the-message-on-relay-fraud.html<\/a><\/p>\n https:\/\/corporate.visa.com\/content\/dam\/VCOM\/corporate\/solutions\/documents\/visa-perc-biannual-report-spring-2025.pdf<\/a><\/p>\n https:\/\/www.startupdefense.io\/cyberattacks\/nfc-relay-attack<\/a><\/p>\n https:\/\/www.cleafy.com\/cleafy-labs\/supercardx-exposing-chinese-speaker-maas-for-nfc-relay-fraud-operation<\/a><\/p>\n https:\/\/www.verimatrix.com\/cybersecurity\/cybersecurity-insights\/new-malware-alert-for-nfc-relay-fraud\/<\/a><\/p>\n https:\/\/therecord.media\/supercard-nfc-banking-malware-russia<\/a><\/p>\n https:\/\/thehackernews.com\/2025\/06\/new-android-malware-surge-hits-devices.html<\/a><\/p>\nWhat Is an NFC Relay Attack?<\/h3>\n
Common Tactics<\/h3>\n
\n
Protect Your Business and Customers<\/h3>\n
\n
Conclusion<\/h3>\n
<\/ol>\n
<\/ol>\n
References<\/h2>\n