A sophisticated scam is targeting individuals using tap-to-pay technology, leading to unintended charges that can amount to thousands of dollars. The ruse involves individuals soliciting donations for charitable causes, then manipulating the transaction process to authorize far larger sums than agreed upon.
Scammers approach potential victims in public spaces, such as outside stores or at busy events, claiming to raise money for youth groups, school fundraisers, or other causes. When a donor agrees to a small amount, such as $5 or $20, the scammer may present a payment reader or smartphone for a tap-to-pay transaction. The critical element of the scam occurs when the scammer enters a substantially higher amount into the device before the victim taps their card or phone.
Reports indicate that victims have agreed to donate $15 or $20, only to later discover charges of nearly $5,000. In one instance cited, a person agreed to a $15 donation and was subsequently charged $4,800. Another victim who intended to give $20 found a charge for almost $5,000.
Authorities have issued warnings about this type of fraud. The scammer relies on the victim's routine use of tap-to-pay, where the tap gesture can become automatic. The payment screen, if not carefully scrutinized, might display a much larger sum than the donor intended to authorize. The security features inherent in tap-to-pay, such as tokenization, protect the actual card number but do not prevent a user from approving an inflated transaction amount.
Experts advise individuals to remain vigilant and take specific steps to protect themselves. It is crucial never to hand over an unlocked phone to a stranger for assistance with a transaction, as this can create broader security risks. Instead, if a transaction appears to have failed, the advice is to cancel it and disengage.
Before authorizing any tap-to-pay transaction, always verify the amount displayed on the payment terminal or smartphone. If the intended donation was $10, ensure the screen clearly shows $10. Legitimate charities will not typically employ high-pressure tactics; therefore, individuals are encouraged to walk away from any situation that feels rushed. It is also recommended to independently research any charity, rather than relying on information provided by the solicitor, and to use the organization's official donation channels if the cause is found to be legitimate.
Turning on account alerts from banks and card issuers can provide immediate notification of transactions, allowing for swift action if an inflated charge is detected. Furthermore, securing payment and banking applications with biometric authentication or a PIN adds an extra layer of protection.
If a victim believes they have fallen for the scam, immediate action is advised. This includes contacting the bank or card issuer to report the fraudulent charge, attempting to dispute or reverse the transaction, and gathering evidence such as screenshots of the transaction details. It is also important to review all financial accounts on the phone for any unauthorized activity and to change passwords for sensitive accounts if the unlocked phone was handled by a stranger. Strengthening phone security, using antivirus software, reducing the amount of personal information shared online, considering identity theft protection, and potentially freezing credit can further mitigate risks.
Reporting the scam to local law enforcement and the Federal Trade Commission is also encouraged, especially if significant amounts of money were lost or if others appear to be targeted. The convenience of tap-to-pay remains, but users are urged to exercise caution and due diligence when making spontaneous donations.