Android’s NFC Nightmare: Payment Data Theft on the Rise
NFC relay fraud is trending, but not in a good way. Over 760 Android apps have been caught using NFC and HCE to swipe payment data like it’s going out of style. This surge in NFC relay attacks since April 2024 shows cybercriminals are tapping into “Tap-to-Pay” transactions for their own gain.

Hot Take:
Looks like your Android phone is auditioning for a new role—as a pickpocket! With over 760 apps playing fast and loose with NFC and HCE, it’s clear that cyber criminals are tapping (pun intended) into new ways to steal your hard-earned money. Better hold onto your digital wallets, folks, because your phone might be plotting against you!
Key Points:
- Over 760 Android apps have been identified misusing NFC and HCE to steal payment data.
- NFC relay fraud has surged since April 2024, targeting financial institutions globally.
- Malicious apps impersonate trusted institutions to lure victims into installing them.
- Apps operate with paired “scanner/tapper” tools or as standalone data collectors.
- Cybercriminals remotely control the apps via command-and-control servers.
Already a member? Log in here
