Android loophole exposes credit card details via NFC
Android loophole exposes credit card details via NFC
A loophole in Android allows a niche scenario to leak credit card details via an NFC reader even when the phone is locked.
You're viewing a single thread.
Turn off NFC unless you are using it at that moment.
Woah, first I learned of this. https://www.lifewire.com/turn-off-nfc-to-secure-your-android-smartphone-2532822
Kinda sucks that there's no quick button for that. I can turn off Bluetooth, wireless, auto-rotate, etc in a single setting but not NFC?
I'm so envious of you. I don't have that.
I don't have NFC at all. Ultimate safety.
Sad
Which system do you have, with the NFC quick toggle?
Pixel 4a w. GrapheneOS, but I'm pretty sure I had that too on the stock ROM
Edit: OK, WTF. Apparently I misremember it or I actually had a version with that toggle. Some say it has been removed and some say it never was there in the first place. I know that you can't really rely on memory, but I could swear it was there on Android 10 or 11
I have a pixel 7 with android 13 and the NFC toggle is not on the quick buttons
Apparently they removed it or it never was there in the first place on AOSP
I can confirm it's there on Galaxy S7 with Android 8
P7P with Android 13, I don't have it. Wonder why it was removed...
I have it on Android 13 on my Motorola.
Many Samsung devices have a quick button for NFC toggling in their drop down menu, not sure about other phones though.
I have a Samsung Galaxy Watch, it has a button for that too. But also the Wallet app on the watch has to be manually opened to use it anyways, it's not passive background app. I think I might just disable NFC on my phone and stick to using my watch for payments.
You can diasble all sensors and make a quick button for it in dev settings, dont remember how exactly it is called tho
You can try using Tasker to create a task that turns on NFC and launches Google Wallet / Pay afterwards.
After that, create another profile to turn off NFC when the screen is locked.