The threat of using Radio Frequency Identification (RFID) readers to steal personal and financial information from RFID chips in bank, credit, and ID cards isn’t rampant, but it does exist. RFID chips are tiny electronic devices attached to or embedded in objects. The chip stores data, and an internal antenna transmits that data when it is scanned.
If an RFID-embedded card isn’t adequately protected, thieves can use readers to illegally obtain personal and financial information. RFID-blocking is the practice of preventing data theft by blocking RFID signals.
Jump to…
What is RFID-blocking?
What is an RFID-blocking wallet?
Choosing the Right RFID-blocking products
Does RFID-blocking prevent identity theft?
How RFID-blocking fits into your overall security strategy
What is RFID-blocking?
RFID-blocking is a method of preventing unauthorized access to data stored on RFID chips. These chips, often found in credit cards, passports, and other ID cards, transmit information wirelessly when scanned by an RFID reader. While this technology is convenient, it can be exploited by thieves using RFID skimmers to steal your personal and financial information.
How does RFID-blocking work?
RFID-blocking works by creating an electromagnetic shield known as a Faraday cage (named after scientist Michael Faraday) around the RFID tag. A Faraday cage is a metal enclosure that blocks electromagnetic radiation. When an RFID tag is placed inside a Faraday cage, it cannot be read by an RFID reader or any other device.
Why is RFID-blocking important for your privacy?
RFID-blocking prevents RFID signals from being read. It does this by preventing the RFID chip from transmitting the information so the RFID reader has no signal to receive. This is important because you are unlikely to realize you’re a victim until after the fact. Most victims of data theft via RFID don’t find out until they receive a statement from their bank.
How is RFID used in everyday life?
You might be surprised at how prevalent RFID tags are in your day-to-day life. Here are some of the common uses for RFID:
- Contactless bank and credit cards: Many contactless payment cards have an RFID tag to enable contactless payment.
- Passports: Passports issued after 2007 are biometric passports (or ePassports), and contain an RFID tag with the identification information printed in your passport.
- Car key fobs: Car manufacturers embed RFID technology into car key fobs to link them to the car’s security system and allow keyless entry and start.
- Theft prevention: RFID tags are embedded into retail tags and used to trigger an alarm if someone attempts to shoplift the item.
- Automatic payment: The contactless payment system used at Amazon’s retail locations allows you to grab what you need and pay via mobile without standing in a checkout line.
- Employee badges: RFID technology allows employees to confirm their identity using personalized badges to scan in and out.
- Student cards: Many schools use RFID-tagged student ID cards to track attendance, boost security, and allow payment via meal credits at school cafeterias.
Common threats: What is RFID skimming?
RFID skimming is a form of electronic pickpocketing that occurs when a thief uses an RFID reader to randomly scan for the radio frequencies transmitted from the ID chips. While the issue raises concern for many, RFID skimming is unlikely to yield any real gain from a thief’s perspective. Here are a few reasons RFID skimming isn’t as big of a threat as you might think:
- Many cards lack RFID chip technology. Most chip-embedded cards require machine insertion to ensure proper data transfer.
- Contactless cards are encrypted. These cards only need to be held next to a reader to work but use encryption technology to protect all data transfers.
- A thief can expect minimal gains at best and may exert a lot of effort to find a target. It could take skimming 1k people in a crowd to find one RFID chip.
Standard barcode skimmers pose a greater threat than RFID readers. They scan the barcode on financial and identification cards in an attempt to steal sensitive information.
What is an RFID-blocking wallet?
If you’re concerned about protecting your credit cards, passports, or ID cards from potential RFID skimming, you might consider using an RFID-blocking wallet. These wallets are specially designed to shield your sensitive information from being accessed by unauthorized RFID readers. They add extra security by using materials that disrupt the radio waves used to communicate with RFID chips. But how do they actually work, and do you really need one? Let’s break it down.
Do RFID-blocking wallets work?
RFID-blocking wallets that use aluminum or carbon fibers to block the transmission of radio frequencies may help protect your data from being accessed by unauthorized RFID readers. These materials create a barrier that prevents radio waves from reaching the RFID chip in your credit cards, ID cards, or passports, effectively stopping the signal.
Just like anything else, however, not all RFID-blocking wallets are built the same or use materials suitable for actually blocking the transmission of data. The quality of materials and design plays a significant role in whether the wallet can genuinely block signals. Some products may claim to offer RFID protection but use inferior or incorrectly applied shielding materials that fail to create a complete block. For example, a wallet with only partial shielding or gaps in coverage may leave your cards vulnerable to skimming attempts.
RFID-blocking wallets vs. regular wallets
Regular wallets are designed to store your cards and cash securely but don’t contain specialized materials like aluminum, carbon, or other metal fibers to help prevent potential data loss due to RFID and barcode readers. This means they can’t protect your cards from potential data theft by RFID or barcode readers.
RFID-blocking wallets, on the other hand, are lined with materials like aluminum or carbon fiber that disrupt radio waves, preventing unauthorized access to the information on RFID-enabled cards. They offer extra protection, particularly for contactless cards and RFID-enabled passports, making them a better choice for those concerned about electronic data theft.
Myths and facts about RFID-blocking wallets
There’s a lot of talk about RFID-blocking wallets—what they can do, what they can’t, and whether you even need one. Let’s set the record straight with some common myths and the facts behind them:
| Myth | Fact |
| RFID-blocking wallets aren’t necessary because RFID skimming doesn’t really happen. | RFID skimming isn’t common, but it can happen. Thieves with the right tools might try to steal data from contactless cards. |
| All RFID-blocking wallets do the same thing. | Not true. The materials and design make a big difference. Some wallets don’t block signals properly at all. |
| RFID-blocking wallets stop all types of data theft. | They only block RFID skimming. Other risks, like phishing or hacking, still need different kinds of protection. |
| RFID-blocking wallets are clunky and unattractive. | Maybe once, but now they come in sleek, stylish designs—even minimalist options that are great for travel. |
| Any metal wallet will protect my cards. | Not always. If the design isn’t done right, gaps in the shielding can let signals sneak through. |
| Using an RFID-blocking wallet means I’m safe from identity theft. | It’s a good start for blocking skimming, but you’ll still need tools like a VPN and strong passwords to stay fully protected. |
Choosing the right RFID-blocking products
With so many RFID-blocking products on the market, it can be hard to know which ones actually work and which are just marketing fluff. Whether you’re looking for a wallet, a card sleeve, or something more versatile, choosing the right product comes down to understanding what materials work and how they’re used. Let’s dive into what to look for and the options available.
Types of RFID-blocking products
There are a variety of RFID-blocking products available but not all of them can adequately block RFID transmission. These products include:
- Wallets
- Card sleeves
- Backpacks
- Purses
- Stickers
- Cards
Look for products that use aluminum, carbon, or other metal fibers. Steer clear of any RFID-blocking products that contain magnetic fibers, however, as they can demagnetize barcode strips with prolonged usage.
RFID-blocking products come in a variety of designs from chic wallets and handbags, to simple credit card holders. Slim RFID-blocking technologies tend to be more travel-friendly than larger options because they easily fit into your pocket or bag. Make sure the blocker you choose has an exterior made of durable material like vinyl, leather, or aluminum.
Once you choose an RFID-blocking product, you can test it with any contactless credit, bank, or ID card by placing it inside the wallet and running it over the payment terminal. If the card doesn’t register, you’ve chosen a good blocker. If it does, just try again until you find one that adequately blocks the signal between your card and RFID readers.
When and where you need RFID-blocking
Using RFID-blocking products for any cards or IDs you have that use the technology is never bad, especially if you use one of the wallets listed above. An added benefit to RFID-blocking products is they also block the readers used to skim barcodes. That means they are useful virtually anytime and anywhere, as an added layer of data security.
Who needs RFID-blocking and when is it necessary?
RFID-blocking products are useful for people in specific situations. If you frequently carry RFID-enabled credit cards, passports, or key fobs and spend time in crowded places like public transport, airports, or tourist hotspots, they could provide peace of mind. Car owners with keyless entry systems might also want RFID-blocking cases to prevent relay attacks, which are more common than payment card skimming.
That said, for most people, RFID-blocking isn’t necessary. Here’s why:
- Contactless payment cards don’t share sensitive details: Contactless payment cards generally don’t transmit information containing your credit card details, your name, or any other private data.
- RFID skimming is inefficient: It is a highly ineffective way for someone to attempt to collect that information. However, it is far more efficient than running a phishing scam or purchasing lists of credit cards on the dark web.
- Passports have built-in protections: According to the U.S. Department of Homeland Security, all ePassports issued in the U.S. and Visa Waiver Program countries are designed to prevent unauthorized reading. Reports of passport skimming are virtually nonexistent.
If you’re in a high-risk situation or just prefer an extra layer of security, RFID-blocking products can be helpful. However, for everyday use, the risks are minimal, and most people can feel secure without them.
Does RFID-blocking prevent identity theft?
Identity theft is a big concern for many people, and RFID skimming is often portrayed as a major threat. But how much of a risk does it really pose? Let’s explore whether RFID-blocking products can actually protect you from identity theft and when they might come in handy.
How does RFID-blocking protect personal data?
RFID-blocking products use metals like aluminum, stainless steel, or carbon mesh to effectively block radio frequency transmissions. This prevents thieves using RFID readers from obtaining data from objects containing RFID chips.
RFID readers can pick up signals from distances of up to a few feet for passive (resting) RFID chips and 328 feet for active (in-use) chips. Using an RFID blocker to steal data from contactless credit, bank, and ID cards is less common than manipulating car key fobs.
Many security experts argue RFID-blocking technologies aren’t necessary, but when made from the right materials, they’re effective in preventing RFID readers from stealing your RFID chip data.
Common scenarios where identity theft occurs
Contactless transactions using RFID are a modern way for a business to make paying for products and services convenient and fast. However, if you don’t take precautions, they can also compromise your digital security and increase the risk of identity theft. RFID readers are most commonly installed as apps on mobile devices, including Android and iOS, though physical readers exist.
If a thief using one of these readers is within range of the radio signal, they could gather information from RFID chips. Common RFID theft scenarios include walking past a card lying on a table and scanning it, passing by people in crowded areas in an attempt to hijack information via an RFID reader, and hovering over people’s shoulders at payment stations.
The sought-after information in RFID crimes is the cardholder’s name, card number, and expiry date. However, it’s important to note that a thief can’t steal your CVV code (the three-digit code on the back of your card used to complete purchases). Unfortunately, not all credit or debit cards require you to enter the code when you make online purchases, so you could still be susceptible to identity theft and financial fraud.
RFID crime isn’t as prevalent as theft from scanning barcodes or cybercrime. If you want to increase your overall data privacy, consider downloading a VPN to devices used to transfer or access sensitive personal and financial information in addition to using RFID protection.
RFID-blocking vs other identity protection measures
RFID-blocking techniques are great for protecting your cards when you’re on the go, but what about payment apps and general digital security? It’s important to monitor how and where your personal and financial information is used and use best practices for protecting your data. Some ways to do this include:
- Monitor bank and credit card statements: Keep an eye on bank and credit card statements, so you will know if any unauthorized purchases have been made.
- Check your credit rating: Any unexplained decline in your credit could be the result of financial fraud or identity theft. Credit checking services are generally free if you’re just checking and providing information about all your lines of credit.
- Don’t leave your cards lying out: Never leave ID, bank, or credit cards lying out longer than necessary. The longer they are exposed, the greater the chance of someone stealing your data. Always put cards away immediately after use.
What are relay attacks on car key fobs?
Car thieves have been known to access vehicles using RFID via a technique called a relay attack (not to be confused with a replay attack).
Imagine your car is parked in your driveway, and your keys are in your house—too far away to open or start your car. By placing a handheld radio device near the car, the signal from the car can be amplified, possibly enough to reach the key fob inside your house. To avoid this, some people store their key fobs in a metal box.
What to do if RFID protection fails
If your RFID protection fails, you can take a few basic steps to resolve any issues and prevent further data breaches.
Place a hold on the card
Most newer cards allow you to place a temporary hold on any further purchases using the card if it’s lost or otherwise compromised. Doing so will prevent the thief from causing further damage and give you time to contact the card issuer.
Contact the card issuer
Occasionally, credit cards and banks can reverse or put a hold on charges, at the very least, you can request a new card. If the compromised card is used for identification, like a work or school badge, you can still request the old card be deactivated and get a new one.
While you wait for the new card to arrive, you can choose an RFID blocker that fits your needs. For example, a simple card sleeve for badges and a wallet for bank or credit cards.
Use a data removal service
Some criminals using tools like barcode scanners and RFID readers aren’t looking to use the information to commit financial fraud. The truth is the data is more profitable for thieves if they sell it to advertisers, data brokers, and people search sites.
IDs and financial cards with RFID chips may contain additional information about you, including your physical address, phone number, birth date, email, and in some instances, credit information. Once companies have this data, they can charge other people to access it, target you with personalized ads, bombard your email with spam, or all three. Once your information is online, it can be hard and time-consuming to remove it.
Data brokers and people search sites expose this information, increasing your risk of identity theft, phishing, robocalls, and more. That’s where ExpressVPN’s data removal service comes in handy. If you live in the U.S., you can use the tool to scour data brokers and people-search sites. Once your personal information is found, ExpressVPN will handle all necessary removal request submissions.
If you already have ExpressVPN’s 2-year subscription or plan to get it, you can use the service free of charge. Current and new subscribers to the 1-year and 1-month plans pay a small additional monthly fee.
Monitor Your Bank and Credit Accounts
Should you decide not to use a data removal service or send data removal requests to sites yourself, ensure that you continue to monitor any lines of credit as well as bank accounts. Check back regularly to see if sites have removed your data after you send any requests. You can also use a credit checking service to continue to monitor for anyone who may be using your data to take out new lines of credit.
How RFID-blocking fits into your overall security strategy
RFID-blocking adds a layer of physical protection but works best when combined with tools like VPNs and password managers. Together, they offer stronger, more comprehensive security.
How RFID-blocking compliments VPN protection
A VPN uses strong encryption to secure your personal and financial information online. This includes protection against digital skimming, a type of attack that happens when cybercriminals plant malware on e-commerce websites to steal your data at checkout.
In the same way VPN encryption scrambles your data, RFID blockers use specialized mesh or solid paneling made of materials like aluminum and carbon to scramble RFID signals. This signal interruption makes it virtually impossible for skimmers to steal your card information with a barcode scanner or RFID reader.
When you use a VPN and RFID-blocking technology, you take steps to protect personal and financial information in the physical and digital world.
Combining RFID-blocking with password managers for maximum security
A password manager is like a safe that encrypts and stores all of your login credentials and passwords. They can also be used to store sensitive personal and financial data like medical IDs and credit card numbers.
RFID blockers protect physical cards, VPNs increase digital privacy and security, and password managers specific sensitive data anywhere you go. In combination with an RFID blocker and VPN, a password manager can increase security for any sensitive information you need regular access to. More protection is always better than less.
FAQ: About RFID-blocking
Does RFID-blocking work?
Yes, RFID-blocking works if the product uses quality materials. Not all products that claim to block RFID signals work. It’s important to test any RFID-blocking technology before leaving the store. You can perform a test by placing any card with an RFID tag into the blocker and running it over a contactless payment terminal.
Should I use an RFID-blocking wallet or bag?
It’s your preference, as long as you test the wallet or bag before committing. RFID-blocking technology is also available in specialized passport sleeves, cases, luggage, and other items.
Do RFID-blocking cards work?
Yes. RFID-blocking cards work but not as effectively as a case, wallet, or sleeve. A card that blocks RFID signals doesn’t encase the entire bank, ID, or credit card the way an enclosed blocking product would.
Does my credit card have RFID?
Most cards with an RFID chip embedded have a wifi looking symbol somewhere on the card. The wifi icon may be located on the front or back, and indicate that the card can be used for contactless payment.
How important is RFID-blocking when traveling?
Using added security like an RFID blocker is always a good idea, but it may not be necessary. The chances of a thief stealing your information with an RFID reader are minimal. Scanning crowds of people for RFID signals with a reader is time-consuming and returns minimal profit as most contactless cards encrypt user data before sending it.
Additional security like password managers and VPNs on mobile devices is more important when traveling than using an RFID blocker. These tools provide data protection when using public wifi networks. When you subscribe to ExpressVPN, the two-year plan includes a built-in password manager and data removal. Triple threat protection while you’re traveling in one service, for one fee.
Can RFID chips be used to track my location?
Yes, RFID tags can be used to track your location. In most cases, this is known to the person being tracked, such as an employee in a large warehouse. But someone (the government or a shopping mall, for instance) could in theory stalk you via such a tag without you knowing.
Is RFID theft a real thing?
Yes, but it isn’t as common as you might think. Getting any usable data from RFID skimming is rare. Other methods like digital skimming produce more information in less time.
An RFID blocker can’t protect you from digital skimming, but using a VPN can. ExpressVPN masks your IP address and scrambles your data with high-level encryption, to make it harder to track your online activity and virtually impossible to steal any useful data.
How big is an RFID tag?
RFID tags can vary in size from as small as a grain of pepper to the size of a brick. The smaller the tag, the smaller the antenna, meaning that the RFID reader will need to be in very close proximity to the tag to read it.
Protect your online privacy and security
30-day money-back guarantee
