YOU MAY SHARE THIS PUBLIC DOCUMENT
Tap-and-go fraud happens when a contactless payment card is used without the cardholder’s authorisation. With no need for a PIN, tap-and-go cards are vulnerable if stolen,
as thieves can easily make purchases until the card is reported lost.
Additionally, fraudsters can use RFID (radio-frequency identification) skimmers or
unauthorised readers to intercept card information by simply being close to
someone’s wallet or bag, potentially making small transactions
without the cardholder’s knowledge.
This type of crime increases during the festive season as people
often have a relaxed holiday mindset, tapping their cards
frequently and with less caution. Criminals exploit this reduced vigilance,
taking advantage of these situations to carry out fraudulent activities more easily.
OBSSA WARNING:
The Ombudsman for Banking Services (OBSSA) warns that these particular scams take advantage of near-field communication (NFC) technology and tap-and-go payment systems.
In these NFC-based scams, fraudsters use stolen bank card details, such as the card number, expiration date, and CVV code, to make unauthorised purchases via digital wallets.
According to the OBSSA, criminals link their smart devices—like smartphones and smartwatches—to payment platforms such as Samsung Pay, Apple Pay, Garmin Pay, and Google Pay using these stolen credentials.
This type of fraud appeals to scammers because NFC and digital wallet transactions often bypass one-time passwords (OTPs), similar to standard tap-to-pay transactions, which typically do not require OTPs for smaller amounts.
The Ombudsman has reported a surge in NFC fraud cases, with hundreds of complaints filed and investigated in recent months.
Losses from these scams have reached millions of Rands as fraudsters make tap-and-go purchases in foreign countries while the cardholders themselves are in South Africa.
TO PROTECT YOURSELF FROM THIS TYPE OF FRAUD, CONSIDER THE FOLLOWING:
Activate notifications and enable transaction alerts to monitor spending in real-time.
Use RFID-blocking wallets to prevent unauthorised scanning.
Keep your card secure and out of sight.
Many banks allow daily limits, reducing potential losses.
Only use the tap-and-go functionality if you enter your PIN.
Do not give your PIN to anyone, especially if they are eager to assist you by tapping your card repeatedly.
Ensure that the person behind you is a safe distance away and no one is leaning over or between you and the merchant when you are paying.
Report lost cards immediately.
Modern ATMs offer contactless cash withdrawals, allowing users to place their cards on the machine's RFID scanner.
However, avoiding this method and inserting the card directly into the machine is safer, as RFID readers can be easier targets for unauthorised monitoring devices.
Always avoid making payments in a crowded space and instead opt into payment solutions that require some form of authentication.
Preventive steps can help secure your finances and reduce the
risk of card fraud during the holiday season.
A COMBINATION OF VARIOUS SAFETY MEASURES IS CRITICAL, AS RELYING ON ONLY 1 SAFETY MEASURE IS RISKY:
For example:
RFID-blocking wallets are designed to protect against unauthorised access to personal information stored on RFID (Radio-Frequency Identification) chips.
Many modern credit cards, debit cards, passports, and ID cards come equipped with RFID chips that enable contactless payment or data transfer.
However, because these chips can be read by RFID readers, they can be vulnerable to "skimming," where hackers use scanning devices to access the information from a distance.
RFID-blocking wallets use a special material (typically a metallic or carbon fibre layer) that interferes with the radio signals, preventing unauthorised RFID readers from communicating with the chips inside the wallet.
This shielding helps ensure that your data remains safe from potential thieves attempting to capture information while your cards are still in your pocket or bag.
AVOIDING TAP-AND-GO COMPLETELY:
Consider disabling the contactless function on your card and storing it securely as a backup.
Only use it when you need to insert it into a machine and enter your PIN.
For everyday payments, using your mobile device with a virtual card or a digital wallet service like Google Pay or Apple Wallet is a safer option.
Your phone generally has more robust security features, and each tap transaction requires authorisation, ensuring the amount only transfers once.
This process also blocks additional unauthorised taps, reducing the risk of fraud.
Most mobile wallets have a time-limited feature that shortens the opportunity for someone else to attempt unauthorised transactions.
Set a lower transaction limit on your phone for added security.
Remember to store your banking apps in a private, locked folder on your phone.
"CRIME BEGETS CRIME"
CASE EXAMPLE:
Be cautious of phishing scams following the use of tap-and-go facilities.
In a recent incident, a client was contacted by scammers posing as their bank, claiming the tap-and-go machine they had used was fraudulent.
Pretending to help, the scammers requested personal details to “secure” the account.
Believing the story, the client unknowingly provided sensitive information, leading to significant financial losses.
This case underscores the importance of verifying contacts to avoid sharing account details over the phone or email, especially after recent transactions.
Specialised Security Services invites the public to the Mike Bolhuis Daily Projects WhatsApp Group.
This group is important in delivering insights into the latest crime trends, awareness, warnings and the exposure of criminals.
HOW TO JOIN THE MIKE BOLHUIS DAILY PROJECTS WHATSAPP GROUP:
Follow the link to our WhatsApp group:
"JOIN" to ensure you never miss our daily updates.
You will receive automatic notifications as soon as a new project is posted.
CONTACT MR MIKE BOLHUIS FOR SAFETY AND SECURITY MEASURES, PROTECTION, OR AN INVESTIGATION IF NEEDED.
ALL INFORMATION RECEIVED WILL BE TREATED IN THE STRICTEST CONFIDENTIALITY AND EVERY IDENTITY WILL BE PROTECTED.
Regards,
Mike Bolhuis
Specialist Investigators into
Serious Violent, Serious Economic Crimes & Serious Cybercrimes
PSIRA Reg. 1590364/421949
Mobile: +27 82 447 6116
E-mail: mike@mikebolhuis.co.za
Fax: 086 585 4924
Follow us on Facebook to view our projects -
EXTREMELY IMPORTANT: All potential clients need to be aware that owing to the nature of our work as specialist investigators there are people who have been caught on the wrong side of the law - who are trying to discredit me - Mike Bolhuis and my organisation Specialised Security Services - to get themselves off the hook. This retaliation happens on social media and creates doubt about our integrity and ability. Doubt created on social media platforms is both unwarranted and untrue. We strongly recommend that you make up your minds concerning me and our organisation only after considering all the factual information - to the exclusion of hearsay and assumptions. Furthermore, you are welcome to address your concerns directly with me should you still be unsatisfied with your conclusions. While the internet provides a lot of valuable information, it is also a platform that distributes a lot of false information. The distribution of false information, fake news, slander and hate speech constitutes a crime that can be prosecuted by law. Your own research discretion and discernment are imperative when choosing what and what not to believe.
STANDARD RULES APPLY: Upon appointment, we require a formal mandate with detailed instructions. Please take note that should you not make use of our services – you may not under any circumstance use my name or the name of my organisation as a means to achieve whatever end.
POPI ACT 4 of 2013 South Africa: Mike Bolhuis' "Specialised Security Services" falls under Section 6 of the act. Read more here: https://mikebh.link/fntdpv
SSS TASK TEAM:
Copyright © 2015- PRESENT | Mike Bolhuis Specialised Security Services | All rights reserved.
Our mailing address is:
Mike Bolhuis Specialised Security Services
PO Box 15075 Lynn East
Pretoria, Gauteng 0039
South Africa
Add us to your address book
THIS PUBLIC DOCUMENT WAS INTENDED TO BE SHARED, PLEASE DO SO.
Comments