Taiwan cracks down on cross-border credit card fraud using NFC relay attacks

Taiwanese authorities have indicted a Hong Kong national suspected of stealing credit cards on the Taipei Metro and facilitating international fraud. The suspect, identified as Chow Wai, allegedly pilfered cards during crowded rush hours, exploiting the physical proximity of commuters to commit the thefts.

This case marks the first time such a sophisticated method has been uncovered in Taiwan. A cross-border criminal ring allegedly used a "TX-NFC" relay attack system to transmit the stolen chip information overseas. This allowed accomplices to remotely mimic the original card details and conduct fraudulent transactions, simulating purchases as if the cardholder were abroad.

The group's speed in executing the fraud, immediately after obtaining the card data and making overseas purchases, significantly complicated the banks' ability to detect the crime in real-time. The total amount of fraudulent transactions reached over NT$2.15 million (approximately $65,000 USD).

Banks are now reviewing and enhancing their credit card chip and transaction verification mechanisms to counter this type of relay and simulation attack. They advise the public to take precautions, such as keeping wallets in secure front pockets on public transport and enabling real-time transaction notifications, especially for overseas and contactless payments. Promptly reporting lost cards or unauthorized overseas charges is crucial to prevent further losses.