Blog

Do RFID blocking cards actually work? My Flipper Zero revealed the truth | ZDNET

'ZDNET Recommends': What exactly does it mean?

ZDNET's recommendations are based on many hours of testing, research, and comparison shopping. We gather data from the best available sources, including vendor and retailer listings as well as other relevant and independent reviews sites. And we pore over customer reviews to find out what matters to real people who already own and use the products and services we’re assessing. 13.56 Mhz Rfid Card

Do RFID blocking cards actually work? My Flipper Zero revealed the truth | ZDNET

When you click through from our site to a retailer and buy a product or service, we may earn affiliate commissions. This helps support our work, but does not affect what we cover or how, and it does not affect the price you pay. Neither ZDNET nor the author are compensated for these independent reviews. Indeed, we follow strict guidelines that ensure our editorial content is never influenced by advertisers.

ZDNET's editorial team writes on behalf of you, our reader. Our goal is to deliver the most accurate information and the most knowledgeable advice possible in order to help you make smarter buying decisions on tech gear and a wide array of products and services. Our editors thoroughly review and fact-check every article to ensure that our content meets the highest standards. If we have made an error or published misleading information, we will correct or clarify the article. If you see inaccuracies in our content, please report the mistake via this form.

The Flipper Zero reading the Apple Pay NFC signal from my Apple Watch Ultra.

RFID is everywhere, even packed into your credit and debit cards, allowing the information to be read in a "contactless" fashion.

Concerns that cards could be read covertly have generated a massive industry of security devices designed to block or somehow interfere with this contactless reading of the cards. 

Also: Flipper Zero: Geeky toy or serious security tool?

You can find wallets , purses , and card protectors designed to prevent your cards from being read stealthily. But do these security devices work?

Well, I have a Flipper Zero , and this amazing device can read NFC.

So, let's try it out.

What I'm using it to test out here are Vulkit RFID blocking cards , which are designed to protect credit cards, debit cards, and ID cards using 13.56MHz-frequency RFID from unauthorized scanning.

These credit card-sized plates are advertised to block thieves from stealing your payment information.

The blocking card looks like any other credit or debit card, and doesn't need any charging or anything. All you need to do is pop it into your wallet or purse, and it's supposed to block RFID reading.

The Vulkit RFID blocking card looks like any other credit, debit, or ID card.

First I fired up the Flipper Zero, and tested an unprotected debit card. It read the data (see the picture below).

Also: How to unlock the Flipper Zero's true power

Note that while the Flipper Zero can read NFC cards, it cannot decode the card's encrypted security code, also known as CSC, CVV, CVC, CAV, and a bunch of other three-letter abbreviations.  

The Flipper Zero can read the unencrypted data on a debit card.

OK, now let's add the blocking card to the equation.

The Vulkit RFID blocking card does indeed block the RFID signal.

Yup, it blocked the reader. The Flipper couldn't read anything from it.  

What if the blocking card is behind the target card -- meaning it isn't a physical barrier between the credit card and the reader?

The Vulkit RFID blocking card works even if it is behind the target card.

Yup, it even blocked that. So, does Vulkit's blocking card work? Yes. It's very effective.

Do you need one? It depends. 

Also: Best identity theft protection and credit monitoring services

The Vulkit RFID blocking card  certainly adds a layer of security between you and someone wanting to access your data. For example, I've seen hotel safes that can be locked and unlocked using credit or debit cards, and a Flipper Zero could be used to clone the card and unlock the safe. 

Do RFID blocking cards actually work? My Flipper Zero revealed the truth | ZDNET

Mifare 1k Classic So, while I think the chance of someone reading your card and using it for bad things is small, these cards cost about $4 each, which means they're cheap and easy-to-use insurance against such attacks.