Ghost tapping arrest in Singapore

What happened

Singapore police said on 20 October that a 42-year-old man had been arrested in Little India for allegedly using an electronic device to obtain shoppers' bank card information. Security officers at a retail store on Syed Alwi Road stopped him on Sunday, 18 October, after they saw him moving suspiciously, standing close to customers and placing a bag that held an electronic device near the pockets where people kept their wallets, according to AsiaOne and Stomp. The case was among the stories behind "bank", a top Google search trend in Singapore on 20 October.

What police found and the charge

Officers from the Central Police Division seized an electronic device, two power banks, a mobile phone and several bank cards, the reports said. The man was due to be charged in court on 20 October with illegally obtaining personal information under Section 416A(1)(a) of the Penal Code. If convicted, he faces up to three years in jail, a fine of up to S$10,000, or both. The allegations have not been proven in court.

How ghost tapping works

Ghost tapping is a form of contactless fraud. AsiaOne describes it as using near-field communication (NFC), the short-range radio technology behind tap-to-pay, to make unauthorised transactions or misuse payment credentials. A reader is held close to a victim's pocket or bag that contains a tap-to-pay card or device. Consumer-finance site CardRatings notes that the technology only works at very close range, and that scammers tend to place small charges in the hope of avoiding fraud-detection systems. In other words, the card does not have to be stolen or even touched for a charge to be attempted.

Background: the trade-off of tap-to-pay

Tap-to-pay is built for speed: a card or phone only needs to come very close to the terminal. The same short range is also what limits this kind of fraud, which is why the alleged method in Little India depended on getting physically close to shoppers in a busy store. Police said they take such offences seriously and urged the public to stay vigilant and protect personal information, including bank card details, from unauthorised access or collection.

Why it matters for card payments

Cases like this do not mean contactless payments are unsafe by default, but they show that card security also depends on everyday habits. If you tap your card many times a day for groceries, transport or coffee, a quick look at your transactions takes seconds and can catch a problem early. Small, unexpected charges are easy to miss on a long statement, and the earlier a suspicious payment is reported, the sooner a bank or card issuer can act. For retailers, the case also shows the value of trained security staff who notice unusual behaviour on the shop floor.

Simple habits that help

CardRatings lists a few practical steps: turn on real-time transaction alerts if your bank offers them, check the amount and merchant name on the terminal before you tap, consider an RFID-blocking sleeve or wallet, carry only the cards you need, and contact your bank or card issuer quickly if you see a charge you do not recognise.

What it means for ODIX Pay users

If you use an ODIX card, the same habits apply: review your card transactions in the ODIX Pay app regularly and contact our support team from the app straight away if you see a contactless payment you do not recognise. Availability depends on your country, and fees are shown in the app. More stories are in the ODIX Pay newsroom.