RFID News

New RFID Implementations, Hardware and Tags

Do RFID-blocking wallets actually do anything?

RFID-blocking wallets work. The question is whether the threat they block is real.

Here is the short answer, and it will save you about twenty quid. An RFID-blocking wallet does exactly what it says on the tin: it wraps your cards in a thin layer of metal that stops radio signals getting in or out. The technology works. The problem is what it is protecting you from. Wireless card theft, the crime these wallets exist to prevent, is so rare in Britain that the banking industry does not record a single category for it, and the police have never brought a prosecution for it. You are being sold a very effective lock for a door nobody is trying to open.

That does not mean contactless cards are risk free. In 2025, criminals took £46.8 million through contactless fraud in the UK, according to UK Finance, the trade body that collects the industry’s numbers. But essentially all of that came from cards that were physically lost or stolen and then tapped in shops by the thief. Not one meaningful slice of it came from someone silently reading your card through your coat. A wallet that blocks radio waves does nothing whatsoever about a card that has been nicked from your back pocket. Understanding why is the interesting part, so let us take it apart.

What is actually in your bank card

Look closely at a contactless card and you will see a small gold or silver square: that is the chip. What you cannot see is the antenna, a loop of very fine wire or printed metal that runs around the inside edge of the plastic, sandwiched between the layers. Together they make up an RFID tag. RFID stands for radio frequency identification, and it means exactly what it sounds like: identifying something using radio waves rather than a barcode or a magnetic stripe.

The clever bit is that there is no battery in there. The chip has no power source of its own. When you hold the card near a shop terminal, the terminal is broadcasting a small electromagnetic field, and your card’s antenna soaks up a tiny amount of energy from that field, just enough to wake the chip and let it answer back. This is called a passive tag, and the same trick powers your dog’s microchip, your office door pass and the tag sewn into a new T-shirt.

Bank cards use a specific flavour of this called near field communication, or NFC, which runs at 13.56 megahertz. The clue is in the name. Near field means the card and reader have to be extremely close, because the card is not transmitting a signal in any normal sense. It is nudging the reader’s own magnetic field and letting the reader detect the wobble. That effect collapses very quickly with distance. Our explainer on how NFC relates to RFID goes into the physics properly, but the practical upshot is simple: a shop terminal reads your card at about four centimetres, and it needs the card roughly flat and square to the reader to manage even that.

What a thief would actually have to do

Picture the crowded train scenario the adverts love. To take money off your card wirelessly, a criminal standing behind you would need four things to line up at once.

First, they need a reader powerful enough to reach your card through a coat, a bag lining and a leather wallet. Researchers have built these. They are not pocket sized, they are conspicuous, and even the good ones struggle past ten or twenty centimetres in laboratory conditions with the card held perfectly still and perfectly aligned. On a moving train, with your card at a random angle among five other cards that all answer at once and jam each other, the read simply fails.

Second, they need somewhere to send the money. A card does not hand over cash. It authorises a payment to a merchant. To take your £30, the thief has to be a registered merchant with a payment terminal, a bank account and a trading history, all of which are tied to a real identity that gets frozen and arrested the moment the fraud reports come in. Stealing this way is the equivalent of robbing a bank while wearing your own name badge.

Third, they have to beat the limits. Contactless payments have long carried a per transaction cap, £100 for most of the last few years. In March 2026 the Financial Conduct Authority removed that fixed industry cap and let banks set their own, though most have kept familiar limits while they review their fraud controls. Either way, every card also carries a cumulative limit, a running total after which the terminal demands your PIN. So a thief gets, at most, a couple of small hits before the card locks itself behind a number they do not have.

Fourth, and this is the one that kills the business model, you are not liable. Under UK rules, an unauthorised payment gets refunded by your bank, which then eats the loss and goes hunting for the merchant who took the money. So the criminal has done something technically difficult, in public, using a traceable payment account, for less than a hundred pounds, that the victim gets back anyway. There are far easier crimes.

So why does the fear sell so well?

Because it is a wonderfully cinematic idea: an invisible thief, a hidden machine, money vanishing through your clothes. It also arrived at the right moment. When contactless launched in Britain in 2007 nobody trusted it, and a genuine early flaw existed: the first cards would answer a reader with the number and expiry date in the clear. Researchers demonstrated it, the press ran with it, and a product category was born.

The cards were fixed years ago. A modern contactless card generates a one time cryptogram for each tap, a scrambled code that is valid for that single transaction and useless afterwards. Even if someone did capture a read, they would be holding a receipt, not a key. But the fear outlived the flaw, as fears do, and the wallets kept selling. Our piece on the myths that cling to RFID covers a few more of these zombie stories.

There is also a quieter commercial reason. Blocking costs almost nothing to add, since any metal mesh will do it, so the feature gets bolted onto a wallet you were buying anyway and sold as protection. Very few sellers are lying to you. They are selling a real feature against an unreal threat.

When blocking genuinely is worth having

There are a handful of cases where shielding earns its keep, and they are mostly about confusion rather than crime.

If you keep several tappable cards loose in one wallet they can interfere with each other at the reader, which is why a barrier between them sometimes stops the “card not read” dance at the till. On the London Underground, carrying two contactless cards risks card clash, where the gate charges whichever card it reads first and you end up paying twice for one journey. Transport for London has always advised presenting one card on its own, and a shielded pocket is a tidy way to enforce that.

The real risk, which no wallet fixes

If you want to reduce your chance of contactless fraud, ignore the radio and look at the physical card. Of that £46.8 million lost to contactless fraud in 2025, the overwhelming share came from cards that were lost, stolen or intercepted in the post, and then tapped in shops before the owner noticed. Add the wider £109.8 million lost to lost and stolen card fraud generally, and the picture is clear. The thief is not standing behind you with a scanner. They are picking up the card you left on the pub table.

So the useful habits are dull ones. Turn on transaction alerts in your banking app, because the fastest fraud detector in the world is you seeing a notification for a shop you are not standing in. Check your statement monthly rather than annually. Report a missing card immediately rather than waiting to see if it turns up, because the moment you report it the card is dead and the liability question is settled. And if you use a phone or watch to pay, you are already ahead, because those require your face or fingerprint before they release anything at all.

Buy the metal wallet if you like the way it looks. Just do not buy it because you are frightened.

Frequently asked questions

Do RFID-blocking wallets actually block signals?

Yes. A layer of metal around a card forms a Faraday cage, which stops radio waves passing through. Test yours: put the card inside, close it and try to pay. If the terminal cannot see it, the shielding works.

Has anyone in the UK actually been robbed by wireless card skimming?

There is no confirmed pattern of it. UK Finance does not report a category for wireless skimming losses because the volume is not there, and police forces have not brought prosecutions for it. Contactless fraud in the official figures is dominated by physically stolen cards being tapped in shops.

Can someone read my card through my pocket?

In a laboratory, with a large purpose built reader, a card held still and nothing else nearby, a read at ten to twenty centimetres is possible. In a real coat pocket, at a real angle, next to other cards, it reliably fails. And a read on its own does not give a criminal anything spendable, because each tap produces a one time code.

Do I need to protect my passport as well?

The chip in a British passport will not release its contents until a reader has optically scanned the printed page inside, so it cannot be read from a distance by someone who has never had the document in their hands. A shielded cover does no harm, but the cryptography is doing the real work.

What about tin foil, does that work?

It does, which tells you something about the price of the branded version. Any continuous conductive layer will disrupt the field. Foil is just less durable and considerably less flattering at the till.

What should I actually do to stay safe?

Switch on instant payment notifications in your banking app, report a lost card the moment you notice, pay with your phone or watch where you can, and remember that unauthorised payments are refundable by your bank. Those four things cover more real risk than any wallet ever will.

RFID News explains the everyday technology nobody bothers to explain. If you would like the next one in your inbox, sign up for our newsletter. You can also browse everything we have written on RFID and security.

By Matt Houldsworth

Over 3 decades of experience in RFID, High Risk/Value Asset Management, Inspection Systems, Brand Protection Technology, Customer engagement technology, WIP management, Logistics tracking, Digital Product Passports (DPP), and Digital Twinning linked to physical products with RFID. My Veribli Tech Makes Circular Economies Work!

Newsletter

Get stories like this every Thursday

One email every Thursday: implementations, hardware and tag launches, and analysis. Free, and you can leave whenever you like.

We send one digest a week and nothing else. Unsubscribe in one click. See our privacy policy.