To protect your credit cards from RFID scanners, you have four practical options: carry them in an RFID-blocking wallet or sleeve, wrap them in aluminum foil, move them into a mobile wallet that uses tokenized payments, or, in the rare case an issuer still offers it, request a card without a contactless antenna. Before you spend money on any of this, know that the real-world risk is low. Contactless cards use encryption and one-time codes that make intercepted data nearly useless to a thief.
What a Scanner Can Actually Steal
Contactless cards communicate on the 13.56 MHz radio band, the same band used worldwide for tap-to-pay.1IEEE Xplore. A Highly Stable and Reliable 13.56-MHz RFID Tag IC for Contactless Payment A small antenna inside the card powers up when a reader is close enough and sends payment data back. The worry is that someone with a portable scanner could trigger that same response through your pocket or bag.
What comes off the card in that exchange is limited. It does not include your name, the three-digit code on the back, or your billing zip code, all of which most online purchases require. Every tap also generates a unique cryptographic code that only works once. Even a thief who captured the data from a real transaction would be holding a code that has already expired.
Security researchers generally treat drive-by RFID skimming as impractical compared with the online scams and data breaches that criminals actually rely on. If the possibility still bothers you, the methods below add real barriers.
RFID-Blocking Wallets and Sleeves
The most common purchase is a wallet or card sleeve built as a Faraday cage: a conductive enclosure that stops electromagnetic signals from reaching your card’s antenna. These products are lined with thin layers of copper, nickel, or aluminum alloy that absorb or reflect incoming radio waves.
Most wallets and sleeves are passive shields. The metal lining either reflects the reader’s energy or absorbs it, so nothing reaches your card with enough power to wake up the chip. Active blockers are less common. They contain a small battery-powered chip that emits an interfering signal, jamming any nearby reader. Passive shields cost less and last as long as the wallet; active blockers need occasional battery replacement.
When you shop, look for a product that fully encloses each card slot with a continuous conductive layer. Gaps along the top opening are the usual weakness. Higher-end options use rigid aluminum or steel inserts, which add durability along with stronger shielding. If any opening lets the antenna “see” the outside world, effectiveness drops.
Aluminum Foil as a DIY Shield
Ordinary kitchen foil works on the same principle. Aluminum is a conductor, so wrapping a card in foil spreads incoming energy around the outside of the card instead of letting it reach the antenna inside. It isn’t elegant, but it’s a real barrier.
For foil to work reliably, it has to cover the whole card without gaps, especially at the edges. Standard kitchen foil tears easily, so fold it into two or three layers. You can also cut foil to fit the inside of an existing wallet slot and press it flat against the fabric. Replace it when it crinkles or tears, because even a small opening lets signal through.
Using a Mobile Wallet Instead
Moving your card into Apple Pay, Google Wallet, or Samsung Pay sidesteps the problem entirely by keeping the physical card in a drawer. When you add a card to a mobile wallet, the platform replaces your 16-digit card number with a substitute number called a token. The token is stored on your phone and used for every purchase, so your real card number is never shared with the merchant or transmitted through the air.2Visa. Tap to Pay – Learn About Contactless Payments
Mobile wallets also require you to unlock payment before anything transmits, with a fingerprint, a face scan, or a passcode depending on your settings. A physical card’s antenna activates automatically whenever it receives a reader signal. Your phone won’t broadcast payment data unless you deliberately authenticate first, which rules out a drive-by scan.
Disabling a Lost Phone Remotely
If the phone goes missing, you can suspend payments remotely. On an iPhone, open Find My on another Apple device or go to iCloud.com/find, pick the missing device, and turn on Lost Mode. That suspends all cards in Apple Pay. Once you recover the phone and enter your passcode, the cards reactivate.3Apple. Remove Cards and Passes in Wallet on iPhone You can also remove cards permanently through your Apple account online.
On Android, go to payments.google.com, open Payment Methods, and remove any card you want to deactivate.4Google. Edit or Remove a Payment Method – Google Pay Help Google’s Find My Device feature can also lock the phone remotely so nobody can reach the wallet without your credentials.
Asking for a Card Without Contactless
You can call the number on the back of your card and ask for a replacement that has no contactless antenna. It’s a shrinking option. American Express, Bank of America, Capital One, Citi, U.S. Bank, and Wells Fargo now issue contactless-enabled cards by default on new and replacement cards, and some issuers no longer produce a non-contactless version at all. If one is available, replacement typically arrives within three to seven business days.
You can tell whether a card is contactless by looking for the EMVCo Contactless Indicator, a symbol that looks like a sideways Wi-Fi icon, printed on the front or back.2Visa. Tap to Pay – Learn About Contactless Payments If that symbol is there, the antenna is active. Given how limited the non-contactless option has become, blocking wallets, foil, or mobile wallets are more reliable ways to control when your card talks to a reader.
If a Charge Slips Through Anyway
Federal law limits what you owe if someone does manage to use your card without permission, and the rules split by card type.
Credit Cards
Your liability for unauthorized credit card charges is capped at $50, and only for charges made before you notified the issuer. Nothing that posts after you report the problem is on you.5Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card The issuer carries the burden of proving the conditions for holding you liable have been met.6eCFR. 12 CFR 1026.12 – Special Credit Card Provisions Most major issuers layer a zero-liability policy on top of that floor, so in practice you often owe nothing.
Debit Cards
Debit card protections are weaker, and how fast you report matters:
- Report within two business days of discovering the loss and your liability is capped at $50, or the total amount of unauthorized transfers, whichever is less.
- Report after two business days but within 60 days of your statement, and liability can rise to $500.
- Report after 60 days from your statement, and you can be on the hook for the full amount of unauthorized transfers that happened after the 60-day window closed.
These tiers come from the Electronic Fund Transfer Act.7GovInfo. 15 USC 1693g – Consumer Liability Because debit card rules are stricter, shielding a debit card or moving it into a mobile wallet gives you more financial protection than doing the same with a credit card.
Disputing the Charge
When you spot a transaction you didn’t authorize, send a written dispute to your card issuer within 60 days of the date on the statement that shows the charge. The issuer has to acknowledge your dispute in writing within 30 days and resolve it within 90 days.8Consumer Advice – FTC. Using Credit Cards and Disputing Charges