NFC fraud threatens Phl digital payments security

CYBERCRIME ON THE RISE

- 

As contactless payments and digital wallets grow quickly in the Philippines, cyber-criminals are now targeting the country by abusing Near Field Communication (NFC) technologies.

Resecurity®, a global leader in cyber threat intelligence, issued a stark warning, urging Philippine regulators and financial institutions to heighten their defenses amid an alarming increase in NFC-enabled fraud, particularly from sophisticated Chinese cybercriminal networks.

NFC is a short-range wireless technology that allows devices to communicate when they are very close—typically within 4 cm (1.5 inches) of each other.

Common Uses of NFC, includes; contactless payments (e.g. Apple Pay, Google Pay, GCash, Maya); Tap cards for public transport or building access; data sharing between phones (like sending photos or contacts; pairing devices (e.g. bluetooth speakers or headphones).

The firm's latest threat intelligence reveals that the Philippines has become one of the most targeted regions in Asia, driven by surging usage of NFC-powered services like GCash, Maya, and other e-wallet platforms.

Resecurity's analysis shows that Chinese threat actors have dramatically expanded their digital footprint in the region, with Dark Web activity originating from China and aimed at Philippine systems increasing by nearly 230 percent in the second quarter of 2025—double the volume seen a year earlier.

As consumers embrace tap-and-go convenience, attackers are exploiting vulnerabilities in contactless payment infrastructure using tools that simulate legitimate transactions through stolen card data.

Host Card Emulation (HCE) techniques and underground tools like Z-NFC and Track2NFC enable cybercriminals to clone payment credentials and bypass traditional authentication methods, often avoiding detection entirely.