Skip to main content
Popular Press
The Security Risks of Using Tap N' Go Technology like PayPass
WIN News (2015)
  • Katina Michael, University of Wollongong
  • Tanya Dendrinos
Abstract

PayPass is being touted as the most convenient solution for consumers. They benefit directly from a tap n' go feature which means they do not have to enter a PIN number. The technology to allow the contactless card to work is based on RFID / NFC. The RFID part has to do with the contactless card capability, and the NFC allows the information obtained to be communicated directly. At present transactions less than $100 can be made without the requirement for authentication, such as a PIN number. This has meant that some consumers have been defrauded by hackers and fraudsters. A cheap reader unit off ebay could render someone's credentials skimmable if the card is not protected by some kind of sentinel jacket. This can also happen with a more powerful antennae which can conduct passive surveillance, revealing card credentials of say people sipping coffee at Starbucks. In addition, credit card companies have estimated that their risk appetite can sustain the losses due to fraud. The use of a PayWave often means that consumers are seemingly trading off between convenience and security. What next?

Keywords
  • paypass,
  • tap n go,
  • contactless cards,
  • security,
  • credit card companies,
  • vulnerability,
  • risk,
  • faraday cage,
  • sentinel jacket,
  • readers,
  • scanners
Publication Date
October 15, 2015
Citation Information
Katina Michael and Tanya Dendrinos. "The Security Risks of Using Tap N' Go Technology like PayPass" WIN News (2015)
Available at: http://works.bepress.com/kmichael/556/