b2b-daily
Home | IT | Cyber Security

Hackers Exploit NFC in New Android Payment Fraud Scheme

Avatar photo
by Bairon McAdams
April 23, 2025
Image Credit: Freepik / Freepik
Hackers Exploit NFC in New Android Payment Fraud Scheme
Article Highlights
Off On

Hackers are exploiting near-field communication (NFC) technology to commit instant payment fraud through the Chinese-speaking Android malware-as-a-service platform, SuperCard X. This malware enables real-time theft by using NFC to capture payment card data and make fraudulent transactions at point of sale (PoS) terminals and ATMs.

Unlike older methods such as overlay attacks or SMS interception, SuperCard X uses contactless functionalities in modern payment cards. Infected Android devices become NFC relay stations, simplifying the fraud process. Users of SuperCard X access “Reader” and “Tapper” applications via Telegram channels, making NFC relay fraud easily accessible without complex tool development.

The attack starts with spoofed messages from banks urging victims to call a number. Scammers then pose as bank agents, instructing victims to install the SuperCard X Reader app disguised as security software. This app requires minimal NFC permissions and standard system permissions, avoiding detection by security software.

When victims tap their card against the infected device, the Reader app captures NFC-transmitted card data. This data, including Answer To Reset (ATR) messages, is sent in real-time to the attackers. The Tapper app on another device uses the relayed ATRs to emulate the victim’s card, allowing for transactions at contactless PoS terminals and ATMs. Fraudulent withdrawals increase after convincing victims to lift spending limits. SuperCard X is distinct from other Android banking Trojans, focusing on NFC relay with minimal permissions, evading most antivirus engines. An analysis by Cleafy found extensive code reuse from open-source projects, indicating quick development and easy onboarding for affiliates.

In an Italian campaign, Cleafy noted customizations like tailored APK repackaging and pre-generated login credentials, streamlining the attack. SuperCard X highlights advanced social engineering and strategic minimalism in permissions, challenging current cybersecurity defenses with its covert and effective methods.

Android

Explore more

Trend Analysis: Alternative Assets in Wealth Management
May 21, 2026

The traditional dominance of the sixty-forty portfolio is rapidly dissolving as high-net-worth investors pivot toward the sophisticated stability of private market ecosystems. This transition responds to modern volatility and geopolitical instability. This analysis evaluates market data, real-world applications, and the strategic foresight required to navigate this new financial paradigm. The Structural Shift Toward Private Markets Market Dynamics and Adoption Statistics

Trend Analysis: Strategic Employee Gifting Programs
May 21, 2026

The contemporary workplace has reached a tipping point where a generic five-dollar digital coffee voucher no longer suffices to bridge the growing disconnect between an organization and its distributed workforce. As professionals navigate the complexities of a digital-first existence, the psychological weight of a physical, curated gesture has surpassed the utility of a simple cash bonus. Companies are realizing that

Why Is Middle Management the Key to Employee Engagement?
May 21, 2026

Efficiency in the modern corporation is often measured by high-level output and bottom-line figures, yet the true vitality of any enterprise depends on the subtle, daily interactions occurring deep within its ranks. Currently, a staggering 80% of the global workforce functions in a state of mental detachment, arriving at their desks physically but remaining emotionally absent. This pervasive disengagement is

Addressing the High Cost of Underperforming Employees
May 21, 2026

The Silent Productivity Killer Hiding in Plain Sight The true cost of leadership is often measured not by the complexity of strategic decisions, but by the weight of the difficult conversations that managers choose to avoid day after day. Every leader understands the emotional burden of addressing a struggling staff member, yet many fail to recognize that the most damaging

How Your Digital Footprint Influences Modern Hiring
May 21, 2026

While most job seekers meticulously polish their traditional resumes for hours, a far more powerful and pervasive evaluation of their character is occurring silently across the vast expanse of the internet before a single word is spoken in person. In this current professional environment, the evaluation process begins long before a human resources manager picks up the phone or sends