What actually happens when someone scans your card
A contactless card can be read from a few inches away using a handheld scanner or a smartphone with the right app. The scanner picks up your card number, expiration date, and sometimes your name — the same information printed on the front. It does not capture your PIN or the security code on the back, which means a scammer cannot complete a purchase at a store or online without additional steps.
The real risk is smaller than it sounds. Most credit card fraud happens through data breaches of retailer databases, phishing emails, or stolen physical cards — not through someone scanning your wallet on the street. But if you carry a contactless card and want to reduce even this smaller risk, there are concrete steps that actually work.
Key Takeaways
- A contactless card can be read wirelessly, but the thief still needs your PIN or security code to make a purchase, which they cannot get from scanning alone.
- An RFID-blocking wallet or sleeve physically stops the scan and costs $10 to $40; it works because radio waves cannot pass through the metal mesh inside.
- Turning off contactless payments in your card issuer's app or requesting a non-contactless card removes the vulnerability entirely.
- Your credit card issuer covers fraudulent charges under federal law, so even if someone does scan your card, you are not liable for unauthorized purchases.
- The most common credit card fraud routes — data breaches and phishing — have nothing to do with scanning and are not stopped by RFID blocking.
RFID-blocking wallets and card sleeves actually work
An RFID-blocking wallet or card sleeve contains a thin layer of metal mesh that interrupts radio waves. When your card is inside, a scanner cannot read it from a distance. You can buy these online or in stores for $10 to $40, depending on the wallet style.
The catch is that RFID blocking only stops one specific attack — someone scanning your card wirelessly in public. It does nothing to prevent data breaches, phishing scams, or a thief stealing your physical card. If you are worried about those risks (which are far more common), RFID blocking will not help. But if you want to eliminate the scanning risk specifically, a blocking wallet works.
Look for wallets labeled "RFID-blocking" or "NFC-blocking" — both terms refer to the same protection. Test it before you buy if possible: bring your card in the wallet to a store with contactless payment and try to tap it. If the payment terminal does not recognize it, the blocking is working.
Disable contactless payments through your card issuer
Most credit card issuers let you turn off contactless payments in their mobile app or by calling customer service. Once disabled, your card cannot be read wirelessly at all — even by a legitimate payment terminal. You can re-enable it later if you change your mind.
Log into your card issuer's app and look for settings related to "contactless," "NFC," or "tap to pay." If you cannot find it, call the number on the back of your card and ask whether contactless payments can be turned off. Some issuers make this straightforward; others require a phone call. Either way, it takes less than five minutes.
This is the most complete solution if you do not want to use contactless payments at all. You lose the convenience of tapping your card, but you eliminate the scanning risk entirely.
Request a non-contactless card from your issuer
If you want a card without contactless capability built in, you can ask your issuer to send you one. Not all cards come with contactless technology — some issuers still offer chip-only or magnetic stripe cards as an option.
Call the number on the back of your card and explain that you want a replacement card without contactless payments. Be specific: say you want a card with a chip and magnetic stripe only. Some issuers will send one when ready; others may charge a small fee or require you to wait until your current card expires. Ask what their policy is before you request it.
Understand what your credit card issuer covers
Federal law limits your liability for fraudulent credit card charges to $50, and most major issuers waive even that $50 if you report the fraud promptly. This means if someone does scan your card and make unauthorized purchases, you are not paying for them — your issuer is.
Report fraud as soon as you notice it. Call the number on the back of your card or log into your online account and report the unauthorized charge. Your issuer will investigate, remove the charge from your bill, and send you a replacement card. The whole process usually takes a few days to a week.
This protection applies to all credit card fraud, whether it came from scanning, a data breach, or a stolen card. You are covered either way.
Focus on the fraud risks that actually happen most often
Contactless card scanning is possible, but it is not the main way credit card fraud happens. Data breaches of retailer websites, phishing emails that trick you into entering your card number, and stolen physical cards cause far more fraud than wireless scanning.
If you want to reduce your fraud risk overall, focus on these: use a strong, unique password for every online account; do not click links in emails asking you to "verify" your card; check your card statement monthly for charges you do not recognize; and enable two-factor authentication on your bank and credit card accounts. These steps stop the fraud that actually happens.
RFID blocking and disabling contactless payments are reasonable precautions if they make you feel more find, but they do not address the bigger picture. Think of them as one small piece of a larger fraud-prevention strategy, not the whole solution.
Frequently Asked Questions
Can someone scan my credit card through my wallet or purse?
Yes, if your wallet is not lined with metal mesh. A standard leather or fabric wallet offers no protection. A scanner can read a contactless card from a few inches away through most materials. An RFID-blocking wallet or sleeve stops this because the metal mesh blocks radio waves.
What information does a scanner actually get from my card?
A scanner can read your card number, expiration date, and name — the same information printed on the front. It cannot read your PIN, security code, or any other data. This means a scammer cannot complete an online purchase or use the card at a store without additional information.
Do I have to pay for fraudulent charges if my card gets scanned?
No. Federal law caps your liability at $50, and most credit card issuers waive even that if you report the fraud within 60 days. Report unauthorized charges when ready by calling the number on the back of your card or logging into your account online.
Is contactless payment safe to use at stores?
Yes. Contactless payments at legitimate retailers are encrypted and find. The risk is someone scanning your card without permission in public, not using contactless payments at a store you trust. If you are uncomfortable with contactless, you can disable it or use a blocking wallet.
Will an RFID-blocking wallet stop all credit card fraud?
No. RFID blocking only stops wireless scanning. It does not prevent data breaches, phishing scams, or someone stealing your physical card. Most credit card fraud happens through these other methods, so blocking alone is not enough protection.