Do RFID blocking cards really work?

Contactless payment is comfortable, but it also has some security issues that criminals can exploit. RFID skimming is a real vulnerability that cybersecurity experts demonstrated several times. It is a very rare exploit, but the possibility of scanning a payment card remotely is a growing concern.

Various online and offline exploits are my field of expertise, so together with the Cybernews researchers, we investigated RFID blocking technology. If a criminal attempts to scan your card with an RFID reader, it will block the radio waves protecting your data and finances.

RFID blockers are usually wallets made out of a specific conductive material, like aluminum or copper metals to block radio waves. Below, I will explain how this scam works and whether you really need an RFID blocker. You will also find an RFID blocking card you can use with your regular wallet, a technology that is becoming more popular.

What is RFID blocking?

RFID stands for Radio Frequency Identification. You can easily check whether your card supports it. Look for a symbol similar to Wi-Fi waves turned on its right side. Nearly all payment cards, like VISA, Mastercard, and American Express, support RFID.

An RFID exploit is hard to perform, but it is certainly possible. So if you carry your cards with you at all times or are particularly worried about financial security, an RFID blocker is an effective solution. Keep in mind that it's also a one-time, inexpensive purchase.

These blockers add a layer of conductive material that blocks radio waves before they can reach the card. So if a criminal targets you with an RFID reader, it will have no effect. This way, you can protect credit cards, electronic passports, building access cards, and everything else that uses RFID.

Why should you be worried about RFID scams?

RFID skimming is hard to perform for several reasons. Firstly, this technology uses short waves, so the criminal must get very close to your card. Notice that you have to put your contactless payment card very close to the scanner for it to work, and the proximity must be similar for this fraud.

Another hindrance is the built-in payment card security. Encryption protects scanned information, and even if criminals successfully obtain your credentials and card number, they still lack the CVC number to start purchasing.

It's also worth mentioning that, so far, there are no statistics on RFID skimming cases. It's safe to assume they are infrequent. The opinions are also split, as some cybersecurity experts say that RFID blockers are a waste of money, so should you be worried at all?

In 2009, DefCon conference hackers surprised federal agents by using RFID skimming to scan a few of their cards. Nowadays, most smartphones are equipped with Near Field Communication (NFC) hardware that can also be used for RFID skimming.

That leaves the debate open. Although the complexity of this scan typically outweighs the possible rewards, it has been practically proven that this can be done. So if you don't mind paying once for an RFID protection wallet or card, they will ensure such scams are not possible at all.

Mechanisms of RFID blocking technology

Electromagnetic shielding is the underlying technology of RFID blocking, also called a Faraday Cage. When the RFID reader tries to scan your card, it hits a layer of conductive material, like copper, that creates an electric field to neutralize incoming waves.

The disruption happens in three ways. Firstly, the waves simply bounce off the conductive material surface, unable to reach the card. Other materials, like Mu-metal, absorb the energy. Lastly, it creates a magnetic field of its own that is the opposite of the reader's signal and neutralizes it.

The solution can be as straightforward as wrapping your wallet in aluminum foil, but that's obviously not comfortable. Also, high-quality RFID blockers aim to neutralize all incoming scans. Meanwhile, DIY or lower-quality solutions may simply make it harder to scan, reducing the read range.

Different types of RFID card materials and their effectiveness

RFID blocking technology has improved. Instead of passive blocking, like aluminum reflection, providers like Credifence offer cards with active blocking. These cards act as jammers, creating a defensive electronic field that protects all nearby cards. Here's how different types of RFID material protection work.

• Aluminum or metal-infused cards. Aluminum is a very common, affordable, and available blocking material. It acts as a high-efficiency reflector, but is also susceptible to wear and tear, possibly letting some signals through.
• Carbon fiber materials. Carbon fiber is strong, but it's also light, making it an excellent choice for RFID protection wallets. It absorbs incoming waves, but it is not as reliable as aluminum or copper.
• Copper mesh or foil layers. Most premium blockers use copper. Acting as an efficient Faraday Cage, it absorbs and reflects a wide range of wave frequencies, but is also heavy and more expensive.
• Multi-layer composite materials. Sophisticated blockers may use a combination of materials. While one layer protects against high-frequency signals, the other neutralizes low-frequency ones. It is also heavier and pricier.

RFID blocking example products

As the concern for this scam grows, increasingly more solutions appear to tackle the problem. Here's what you can currently find on the RFID blocking market.

• RFID-blocking wallets. These protective wallets have a layer typically made of carbon fiber or conductive metal. All cards placed inside are protected from external RFID signals.
• RFID sleeves for cards. Imagine this as an envelope for a single card. You can keep your traditional wallet and place only selected cards in sleeves that will be protected from RFID scans.
• RFID passport holders. These holders are sized to store passports and other travelling documents. They work the same as RFID blocking wallets.
• RFID backpacks or bags. Some companies offer protective bags and backpacks. Anything you place inside its protective pocket will remain safe in your Faraday Cage-like backpack.
• Active RFID blocking cards. This is an innovative solution that's becoming more popular. It's a specialized card the size of a traditional bank card. Once you place it in your wallet, it will generate an electromagnetic field that neutralizes RFID scans.

Pros and cons of different RFID blocking products

Each discussed blocker has its pros and cons, so here's my side-by-side comparison table to help you choose.

Product type	Main benefit	Drawbacks	Best for
RFID-blocking wallet	Protects all cards inside, resembles traditional wallets	Requires wallet replacement, can be pricey	For daily payment card protection
RFID sleeve	Most affordable solution you can use with your wallet	Protects only selected cards	Inexpensive protection for a few cards
RFID passport holder	Designed to protect passports and other travel documents	Uncomfortable for casual daily use	Travelers passport protection
RFID backpack	Protects items placed inside protective pocket	May not be as comfortable as wallets or blocking cards	One-bag travellers
Active RFID blocking card	Does not require a wallet and protects all nearby card	Effective range limited to ~2 inches	For daily card protection

As all types work very similarly, situational comfort usually determines what you need. If you're a traveller, obviously, choose an RFID passport holder. The sleeves are very affordable, and RFID blocking cards do not require you to change your wallet or have a wallet in the first place.

Technical limitations and challenges of RFID blocking

As mentioned previously, more critical voices consider RFID blockers unnecessary, and not without valid arguments. Contemporary payment cards have robust built-in security benefits.

For example, they use tokenization to send a one-time token instead of your card number. Even if a criminal succeeds in stealing it, this token is useless for any other purchases. Also, if you have multiple RFID-supported cards together, the reader cannot discern useful information.

RFID blockers are absolutely unnecessary if you use digital wallets on your smartphone. It signals only when you trigger it with a passcode or FaceID and offers advanced encryption, so RFID scanners cannot actively trigger it.

Because criminals need to get very close to the card to get its RFID response, it is a very risky method. Nevertheless, the reality is that criminals exploit all opportunities they have. If I were to visit often-busy airports that also attract criminals, I would safeguard my essential cards with RFID protection just to remain on the safe side.

Common misconceptions of RFID blocking

Due to the complexity and rarity of such scams, I don't recommend RFID blockers as a must-have. Also, some misconceptions overestimate the dangers, so let's dispel a few myths.

Some proponents claim that RFID theft happens everywhere. In reality, it is very uncommon. I recommend being cautious in crowded places, public transportation, popular tourist hubs, and also waiting queues where people stand close to each other.

Another myth is that blocking cards makes you 100% safe. Your card positioning may leave gaps for signals to get through. Also, if the criminal somehow manages to get the scanner extremely close to your cards (half an inch or even less), it may overcome jamming signals and steal information.

Lastly, don't believe that 'anyone can steal card data just by walking past you'. I've mentioned several RFID scam complexities, so it is improbable that someone would carry it out simply by walking by. It is more of a theoretical opportunity.

Additional ways to protect your personal data

Although practically proven, the RFID scams are, at least up until now, more of a niche crime. I would still recommend getting a blocking card, such as from Credifence, but it cannot replace the following financial security practices.

• Identity theft monitoring. This is a very popular cybercrime method that often results in financial damages. I recommend subscribing to the best identity theft protection services that also offer insurance in case you experience losses.
• Credit alerts. Keep an eye on your credit report from one or all three major credit bureaus. If you notice anything suspicious, you can issue a credit freeze to prevent criminals from emptying your bank account.
• Data breach notifications. Cybercriminals get personal information for their scams from various sources, data breaches being one of them. You can use free data breach checkers like haveibeenpwnd.com to see which data leaks your email has been involved in.
• Good payment hygiene. Consider using secure digital wallets (Apple Pay, Google Pay, etc.). When using a physical card on ATMs and gas pumps, try to notice anything suspicious, like a loose card slot, which indicates card skimmers.

Final verdict: Are RFID blocking cards worth it?

The RFID scams aren't frequent, but there's no guarantee they won't become prevalent. There's no need to panic, but in some cases, getting RFID blocking card protection is beneficial.

Also consider that it's a one-time payment. You can get 2 Credifence RFID blocking cards for $19.99 each, so that doesn't cost a lot.

I recommend opting for this solution if you frequent crowded places. Tourists can benefit from it in public airports that criminals often target. Public transportation is also a perfect spot for this scam, because there people can get close to each other without raising suspicion.

On the other hand, there's no need for it if you use secure digital wallets. Also, if you have a modern EMV card, it has robust built-in security benefits and does not require additional third-party protection.

---

Other reviews from Cybernews:

---

FAQ