Scam library · Shopping · Banking & payment apps
Ghost tapping: tap-to-pay overcharge scam
Someone at a pop-up stand, a holiday market or your front door is selling cookies or chocolate to raise money for a school or charity. It's a small amount, so you tap your card or phone on their reader without really looking at the screen. Later your bank app shows a charge for hundreds or even thousands of dollars.
The Better Business Bureau calls this 'ghost tapping', and in early November 2026 it warned holiday shoppers to check every tap-to-pay amount before they pay. Tap-to-pay itself is still safe. The trick is getting you to approve a payment you can't see.
What the message looks like
From: A person with a card reader at a holiday market table
Hi! We're raising money for the middle school band trip. Just $10 a bag.
Go ahead and tap right here, it's quick. Don't worry about the screen, it's acting up today.
(The reader, turned away from you, is set to $1,000.00.)
How this scam works
Tap-to-pay cards and phone wallets use near field communication (NFC), which only works at very close range. A phone or small portable card reader can be a perfectly legitimate way for a small seller to take payments. In this scam, the seller types in a much bigger number than the price they told you, and keeps the screen out of your view or rushes you.
The BBB pointed to reports on its Scam Tracker. One shopper in Seattle agreed to pay $15 for a box of cookies sold to raise money for school supplies, tapped without being shown the total, and then got a bank alert for $1,500. Another report from Indiana described a chocolate 'student fundraiser' where one person was charged $537 and another more than $1,100.
Michigan's Attorney General says these scams tend to happen in crowded places like festivals, markets and pop-up stands, and that some readers show no total at all or ask for a small 'donation' before charging more. The BBB notes the reports it described involve overcharges when people chose to tap, not secret scanning through a pocket or purse.
Holiday season gives this scam cover: more markets, more fundraisers and more rushed payments. A fox never pounces without looking first, and a two-second look at the screen is all this takes.
Red flags
- The seller keeps the reader's screen turned away, covers it or says it's 'broken'.
- You're rushed to tap before you can read the total and the merchant name.
- No receipt, or the seller won't give you one.
- A 'fundraiser' can't tell you the exact name of the school or charity, or how the money will be used.
- A charge on your bank alert that is much bigger than the price you agreed to, or a merchant name you don't recognize.
How to tell it’s fake
- Before you tap, read the screen: the amount, any tip and the merchant name. If you can't see it, don't pay.
- Ask for a receipt and keep it. Turn on instant transaction alerts in your bank or card app so you see the real charge right away.
- For door-to-door or table fundraisers, confirm the cause with the school or charity using contact details you look up yourself. You can research charities at Give.org.
- If you'd rather not tap, pay a small amount in cash, or donate directly to the organization.
What to do if you clicked, paid or shared info
Don’t panic, and don’t blame yourself. These scams are built by professionals. Act quickly, one step at a time.
If you clicked a link or called back
- If you tapped and didn't see the amount, open your bank or card app right away and check the charge.
- If someone was close to you in a crowd and you're worried, lock your card in the app until you've checked your recent activity.
If you paid
- Call your card issuer or bank right away using the number on your card, dispute the overcharge, and ask for a new card if needed.
- Write down where it happened, the time and what the seller looked like, and report it to local police and BBB Scam Tracker.
If you shared personal info, a password or a code
- If the seller also took your name, phone or email 'for the receipt', watch for follow-up messages about a 'refund' and don't share more.
- If you shared more personal information, visit IdentityTheft.gov.
Where to report and get help (U.S.)
If a message seems legit and you’re still not sure, get a second opinion before you act. Reporting helps stop scammers, even if money can’t be recovered. If you are in danger, call 911.
- Your bank or card issuer
Call the number on the back of your card or on your statement, not one from the message. Ask them to stop or reverse the payment and to watch the account. - Federal Trade Commission (FTC) · ReportFraud.ftc.gov
Report the scam and get a step-by-step recovery plan. - FBI Internet Crime Complaint Center (IC3) · ic3.gov
Report scams that happened online, especially if money was lost. Include phone numbers, websites and payment details. - AARP Fraud Watch Network Helpline · aarp.org helpline
Free, for anyone of any age: trained volunteers help you sort out next steps. 877-908-3360, Monday to Friday, 8 a.m. to 8 p.m. Eastern. - IdentityTheft.gov · IdentityTheft.gov
If you shared your Social Security number or someone opened accounts in your name.
How Gmork Scam Guard would warn you
Ghost tapping happens in person, on a card reader, so Scam Guard can't see it: it's a Chrome and Edge extension on your computer. Where it helps is afterward. If a 'refund' email or 'dispute your charge' link shows up in Chrome or Edge, it checks the sender and the page before you type in card details. For in-person payments, your best guard is your own eyes on the screen.
Scam Guard can miss things, so the checks above still matter. See what it warns about and what it keeps private.
Questions people ask
- Is tap-to-pay unsafe?
- No. Tap-to-pay is convenient and generally safe. The problem is approving a payment without seeing the amount. Read the screen every time, even for small purchases.
- Can someone steal money by bumping my wallet in a crowd?
- Michigan's Attorney General mentions this risk in crowded places, and an RFID-blocking sleeve can help for cards you carry. But the BBB notes the recent reports it described were people overcharged when they chose to tap. A sleeve can't stop an inflated charge when you take the card out yourself.
- I was overcharged at a market. Can I get my money back?
- Call your card issuer right away and dispute the charge. Card disputes work best when you act quickly, so don't wait for your monthly statement.