Yes, but only under specific conditions that are rare in everyday life

A contactless credit card can be read from a distance using RFID (radio frequency identification) or NFC (near-field communication) technology. The person doing the reading needs a compatible scanner, and they have to be within a few inches of your card — typically 2 to 4 inches for most cards, though some older or poorly shielded cards might be readable from slightly farther away. This is technically possible, but the practical risk is much lower than the concern suggests.

The real limitation is that most modern cards have built-in protections. Your card number alone is not enough to make a purchase online or over the phone — the merchant also needs the CVV (the three-digit code on the back), your billing address, and sometimes your ZIP code. A scanner that reads your card wirelessly cannot capture the CVV, which is printed only on the physical card and not transmitted by the chip. Without it, a thief cannot complete most transactions.

That said, the risk is not zero. Some cards are less protected than others, and technology changes. Understanding what can actually happen and what you can do about it is more useful than assuming either that it is impossible or that it happens constantly.

Key Takeaways

  • Contactless cards can be scanned wirelessly from a few inches away, but the scanner cannot read the CVV code printed on the back, which most merchants require.
  • RFID-blocking wallets and sleeves exist and do block the signal, but they are not necessary for most people because the practical risk is low and card companies cover fraudulent charges.
  • A thief would need specialized equipment and would have to get very close to your wallet without you noticing — far easier to steal the card itself or use skimming devices on ATMs and gas pumps.
  • If you see fraudulent charges on your statement, report them to your card issuer immediately; you are not responsible for unauthorized charges under federal law.
  • Monitoring your account regularly and setting up transaction alerts is more effective protection than worrying about wireless scanning.

What information a wireless scanner can actually capture

When someone scans your contactless card from a distance, they can read the data that the chip broadcasts: your card number, expiration date, and cardholder name. That is the same information printed on the front of your card — information you hand to a cashier or type into a website every time you make a purchase.

What they cannot read is the CVV, the three-digit security code on the back. This code is stored only on the magnetic stripe and the physical card itself; it is not transmitted wirelessly. Most online merchants require the CVV before processing a charge. Many in-person merchants now require it too, especially for high-value transactions. Without it, a thief cannot complete most purchases.

There is one exception: some older or international merchants may process a transaction using only the card number and expiration date, without asking for the CVV. This is less common in the United States now, but it is possible. The risk is real but narrow.

Why RFID-blocking products exist and whether you need one

RFID-blocking wallets, sleeves, and card holders are designed to wrap your card in material that blocks radio signals. They work — a properly made RFID blocker will prevent a scanner from reading your card from any distance. You can buy them for $10 to $40, and they come in many styles.

Whether you need one depends on your actual risk tolerance and how much the peace of mind is worth to you. The practical risk of someone scanning your card in your wallet is low: they need specialized equipment, they have to get within a few inches of you without being noticed, and they still cannot complete most transactions without the CVV. Card companies also cover fraudulent charges, so you are not out money if it happens.

If you travel frequently, carry high-limit cards, or simply prefer to eliminate the possibility, an RFID-blocking sleeve is inexpensive and harmless. If you check your statement regularly and are not worried about the scenario, you do not need one. Neither choice is wrong.

Where the real skimming risk actually comes from

Wireless card scanning in your wallet is theoretically possible but practically rare. The more common skimming threats are devices installed on ATMs, gas pump readers, and payment terminals — places where a thief can install hardware that captures your card data when you insert or swipe it. These devices are physical and visible if you know what to look for, but they are far more common than someone walking around with a wireless scanner.

Card-not-present fraud (online purchases using a stolen card number) is also more common than wireless scanning. A thief can buy card numbers from data breaches or from other criminals, then use them to make purchases. This is why merchants ask for the CVV and billing address — to verify that the person making the purchase actually has the card.

Theft of the physical card itself is another risk. If someone steals your wallet, they have your card and can use it in person without needing to scan it wirelessly. This is why monitoring your account and reporting lost cards quickly matters more than worrying about invisible scanning.

How to check if your card is contactless

Not all credit cards have contactless capability. If your card has a small curved wave symbol (usually in the bottom right corner), it is contactless and can be read wirelessly. If it does not have that symbol, it cannot be scanned remotely — it can only be read when inserted into a chip reader or swiped through a magnetic stripe reader.

You can also test it: if a store's payment terminal accepts tap-to-pay and your card works by tapping it against the terminal, your card is contactless. If you have to insert it or swipe it, it is not.

Older cards and some business cards are not contactless. If you have a mix of cards in your wallet, only the ones with the wave symbol can be scanned wirelessly.

What to do if you see unauthorized charges

If you notice a charge on your statement that you did not make, report it to your card issuer immediately. Call the number on the back of your card or log into your online account and report the transaction through the fraud section. Do not wait or try to investigate on your own.

Under the Fair Credit Billing Act, you are not responsible for unauthorized charges if you report them promptly. Your card issuer will investigate and reverse the charge. You may be asked to sign an affidavit stating that you did not authorize the transaction, but you will not be charged for it.

Once you report fraud, your card issuer will usually cancel your card and send you a new one. They may also place a temporary hold on your account while they investigate. This is normal and protects you.

Practical steps to reduce your risk

Monitor your account regularly — weekly or even more often if you prefer. Most card issuers offer a mobile app where you can see charges in real time. The sooner you spot fraud, the sooner you can report it.

Set up transaction alerts if your card issuer offers them. You can usually set alerts for any charge over a certain amount, or for charges in specific categories or locations. This way you will know immediately if someone uses your card.

Keep your card in your wallet and do not leave it unattended. This protects against both wireless scanning and physical theft. Do not give your card to someone else to hold, and do not leave it on a table or counter.

If you use your card at an ATM or gas pump, inspect the card reader first. Look for anything that appears loose, cracked, or out of place. Skimming devices are sometimes obvious if you know what to look for.

Frequently Asked Questions

Can someone scan my credit card through my purse or backpack?

Theoretically yes, but practically unlikely. The scanner would need to be within a few inches of your card, and your purse or backpack would block or weaken the signal depending on what it is made of. A thief would also need specialized equipment and would have to get very close to you without being noticed.

Do I need an RFID-blocking wallet?

No, but you can use one if it makes you feel more secure. The practical risk is low, and card companies cover fraudulent charges. An RFID-blocking sleeve is inexpensive if you want the extra protection, but it is not necessary for most people.

What if my card does not have the contactless symbol?

Your card cannot be scanned wirelessly. Only cards with the curved wave symbol can be read remotely. Older cards and some business cards do not have this feature, so they are not vulnerable to wireless scanning.

Can someone use my card number if they scan it without the CVV?

Most merchants require the CVV to process a charge, so a scanned card number alone is usually not enough. Some older or international merchants may not ask for it, but this is less common in the United States. Even if someone makes a fraudulent charge, you are not responsible for it under federal law.

How often does wireless credit card scanning actually happen?

There are no reliable statistics on how common it is, but security researchers and law enforcement say it is rare compared to other forms of fraud like data breaches, phishing, and ATM skimming. The barrier to entry is high — you need specialized equipment — and the payoff is uncertain because most transactions require the CVV.