Have you ever wondered what happens after you put your credit card information into one of those Toll Road Scam phishing sites?
Well, Gary Warner from Intelligence for Good just showed how the scammers are use those card details to drain your bank account without ever touching your wallet.
The scam works through an app called NFUP that turns two phones into a remote credit card skimming operation. One phone reads the card. The other phone, which can be anywhere in the world, makes the purchase.
They Can Use Your Card Anywhere In The World From Their Phones
Gary demonstrated the scam by setting up two phones with the same login credentials. The first phone acted as a card reader. The second became a fake checkout terminal.
When he touched a credit card to the reader phone, it instantly appeared as available on the second phone. The app even has a feature to hide the real card number, showing a fake image instead.
“The card reader is sitting far away,” Gary explained in his video. “In reality, many of these criminals are operating from places like Bangkok, Thailand.”
The scammer in Thailand touches your card to their phone. Their partner shopping in America can then tap to pay at any store.
He Even Did The Ghost Tap On His Own Credit Card In Target To Buy Gift Cards
Gary left the card reader phone in his car. He walked into Target with just the second phone to buy a gift card at self checkout.
The tap worked perfectly at the self service kiosk. He bought a $25 Amazon gift card without the actual credit card ever leaving the vehicle.
He then went to Walgreens to try another. The cashier processed the transaction normally, even mentioning the security strip on gift cards that prevents number theft!
The irony was not lost on Gary, who was using a completely different method to make fraudulent purchase (all legal of course since he used his own card)
