Card Skimming Is Quietly Draining Wallets — Here's How A 2mm Card Stops It

It happened to Marcus on a Tuesday morning. He was standing on a packed train platform, scrolling on his phone, when a stranger brushed past him. Three days later, his bank flagged €1,840 in charges he didn't recognize — none of them online, all of them tap-to-pay. His cards never left his pocket.

What Marcus experienced is called contactless card skimming — and according to consumer protection reports across Europe and North America, it's one of the fastest-growing forms of theft of the last decade. The reason is simple: nearly every credit and debit card issued today contains a small RFID chip designed to communicate wirelessly with payment terminals. The same technology that lets you tap to pay also lets a criminal with a cheap, pocket-sized reader pull your card data from several feet away.

How A Wireless Theft Actually Works

RFID — short for Radio Frequency Identification — is a short-range wireless protocol. When your card is within range of a compatible reader, the reader sends out a tiny electromagnetic pulse. The chip inside your card uses the energy from that pulse to "wake up" and broadcast back its identifying information: the card number, expiration date, and in some cases the cardholder name.

In a legitimate transaction, that exchange happens at the checkout counter, over a distance of two or three centimeters. In a fraud scenario, it happens silently in a coffee shop, on a bus, or at an airport gate — using a reader hidden in a backpack, a jacket pocket, or even a modified smartphone.

"The unsettling part isn't the technology itself. It's that the victim has no way of knowing it happened. There's no swipe, no sound, no notification — just charges that show up days later."

Independent security researchers have demonstrated working skimmers built from parts costing less than €40. In controlled tests, those devices captured usable card data from a distance of 1.5 meters in under two seconds. Newer high-gain antennas extend that range to nearly three meters.

Why The Banks Aren't Solving It For You

Card issuers point out that fraudulent contactless charges are usually refundable. That's true — but it misses the point. Refunds take days or weeks. They don't cover overdraft cascades, missed bill payments, or the hours spent on the phone with fraud departments. And they don't undo the unease of knowing a stranger walked off with your financial identity.

More importantly, the per-transaction limits that once protected consumers have steadily climbed. In most of the EU, a single contactless tap can now authorize up to €50 without a PIN. A skilled thief with your card data can often run several small transactions before any system flags them.

This is exactly the gap that a properly engineered RFID-blocking card is designed to close — at the source, before the data ever leaves your wallet.

The Science: How A Single Card Shields An Entire Wallet

The principle behind Guardality is over a century old, and it's the same one that protects sensitive electronics on aircraft and in hospitals: it's called a Faraday effect. When a conductive surface surrounds an electronic device, electromagnetic signals trying to reach that device are absorbed and redistributed across the surface — never reaching the chip inside.

Guardality applies that principle in an extremely thin, layered configuration. Inside the card is a powered e-field generator the thickness of a human hair. When activated, it produces a low-energy jamming signal across the 13.56 MHz frequency band — exactly the frequency used by every modern contactless bank card and most NFC-enabled passports.

The result: any RFID reader within range of your wallet receives only static. Your real cards stay invisible. No app to install, no battery to remember to charge for years, and nothing you have to do beyond dropping a single card into your wallet.

What Guardality Protects

• Contactless credit & debit cards — Visa payWave, Mastercard PayPass, American Express ExpressPay, and the equivalent on most national bank networks.
• Biometric passports — issued by virtually every developed country since 2007, all of which contain readable RFID chips.
• Building access cards & hotel keys — increasingly cloned by attackers targeting offices and short-stay rentals.
• Public transit cards — many of which are linked to a bank account or stored balance.

Who Is Most At Risk

Anyone who carries a contactless card is technically exposed, but the risk concentrates around dense, anonymous environments: airports, train stations, shopping centers, music festivals, tourist districts, and the daily commute. If you travel internationally — even occasionally — the exposure multiplies, both because you're an easier mark and because cross-border fraud is harder to investigate after the fact.

Older adults and frequent business travelers are disproportionately targeted, but the data tells a less comforting story: the largest group of new victims in the last two years has been people aged 25–40 who consider themselves "tech-aware." Awareness, it turns out, is not the same as protection.

What Independent Testing Showed

In a series of bench tests conducted by the Guardality engineering team and replicated by two third-party reviewers, a standard Visa contactless card was placed inside a leather bifold wallet alongside a single Guardality card. A commercial-grade RFID reader was then brought progressively closer to the wallet from a starting distance of 3 meters.

Without the Guardality card, the reader successfully captured the card number and expiration date at distances of up to 1.7 meters. With Guardality inserted, the reader received no usable signal at any distance — including direct contact with the wallet's exterior.

Equally important, when the wallet was opened and the legitimate card was deliberately removed and tapped against an authorized payment terminal, the transaction completed normally. Guardality does not interfere with intentional payments — only with unauthorized reads while your cards are in your pocket or bag.

The Honest Trade-Offs

No security product is magic, and we won't pretend otherwise. Guardality protects against RFID-based theft. It does not stop someone from physically stealing your wallet, it does not protect against phishing emails, and it does not block online card-not-present fraud. For those, your bank's monitoring and your own habits remain your first line of defense.

What it does do — quietly, continuously, and without any input from you — is close the single category of fraud that you have almost no other way to defend against: silent, contactless, in-person card cloning.

The Bottom Line

Marcus, the train commuter we mentioned at the start, eventually got his money back. It took eleven days, two affidavits, and a replaced card he had to wait nine days to receive. He now carries a Guardality card. "It's the cheapest peace of mind I've ever bought," he told us. "I just wish I'd known sooner."

If you regularly carry a contactless card — and almost everyone does — the question isn't whether RFID skimming is a real risk. The data settled that years ago. The question is whether you'd rather find out by reading an article like this one, or by checking your bank app on a Tuesday morning.