Smartphones Can Skim Credit Card Info Through Your Wallet

Advertising Disclosure: When you buy something by clicking links on our site, we may earn a small commission, but it never affects the products or services we recommend.

Image Not Available

Keep an eye on your credit card transactions.

A free app can be used to read credit card information from a nearby card even if it’s not visible, the Canadian Broadcasting Corp. says.

The news site tested the app with a Samsung Galaxy S3, and was able to pick up card numbers, expiration dates and cardholder names by holding the phone within 4 inches of a contactless card — including through purses, wallets or pockets.

A next-generation phone might be able to read data from a greater distance, it said.

The app makes use of a chip built into newer credit and debit cards to make swipe-free payments through near field communication. Instead of swiping, those cards allow you to tap them to buy things. Contactless cards are becoming more common in the U.S., Forbes says, and it’s not the first time this security vulnerability has been publicly demonstrated.

A representative of Canadian company Seccuris told the CBC such apps have been used for credit card fraud already, and could be used for “anything from a $1.50 drink from a drink machine to a $4,000 to $5,000 laptop.”

Visa said it has received no reports of such fraud, though both Visa and MasterCard said they would cover the losses if it happened. Google, which owns the platform where the app is available, said it would remove apps that violate its policies.

Get smarter with your money!

Want the best money-news and tips to help you make more and spend less? Then sign up for the free Money Talks Newsletter to receive daily updates of personal finance news and advice, delivered straight to your inbox. Sign up for our free newsletter today.