Disable PayPass or PayWave RFID with a light globe, a pen and a drill bit

I got a new credit card in the mail, and I noticed the PayPass logo in the top right corner.  I’m no fan of RFID, especially with so many documented weaknesses. Also troubling is the loss of two-factor authentification that we’ve had for decades in Australia; both Visa and Mastercard require only the presence of the card for EMV transactions under $100. I like my credit card, I don’t like that other people can spend my money with it.  I thought about trying to convince my bank to give me one that wasn’t PayPass enabled, but Mastercard won’t issue cards without PayPass, so it seems I need to make my new credit card compliant with my privacy and security policies.

Admittedly, all the exploits for RFID enabled cards seem to affect cards in the USA, whose banking system (as best I can tell) is run by a bunch of morons. I assume that the cards in Australia leak no information other than an identifying card number… but even that. RFID can allow unintended transactions, so I’d prefer my transactions to be intentional. I considered killing the whole chip in the microwave, but there’s a risk that would affect the mag-stripe.  You don’t need a radiographer to lend you an xray machine to locate the RFID antenna.  Turns out that a light globe is plenty bright enough to spot the antenna tracks, or the sun (if you can spot it at this time of year).

I lay my card on a horizontal compact fluorescent light globe, and look what I could see:

Disable drill-point marked on a credit card
Just drill out the point where the tracks narrow down, and the antenna is toast

I dutifully marked the point where the antenna traces all converged on the one location, then drilled that point out with a hole made with a 3mm drill bit.  I took it off to my local Kmart, and it worked.  However, it failed at the Coles, and every subsequent retailer (dozens) I’ve tried using it.  Apart from that one Kmart (others haven’t worked) the PayPass functionality is now turned off.

I’ll update here if I make additional modifications that are successful.

If you enjoyed this post, please consider leaving a comment or subscribing to the RSS feed to have future articles delivered to your feed reader.

11 thoughts on “Disable PayPass or PayWave RFID with a light globe, a pen and a drill bit

  1. John Fox

    Just to confirm …. the paypass functionality is disabled but the contact chip is still working? And therefore the operation was a success?

  2. josh Post author

    Yep, the chip works great, and I can’t buy anything with PayPass – and I try at all sorts of places. The Kmart where this wasn’t true has upgraded its checkouts, and now it doesn’t even work there.

  3. Basil

    Different cards from different banks use different antenna track layouts. My 3 year old ASB card was easy to see tracks and cut, the new one has opaque printing all over. Tracks can just be seen using a very bright small LED flashlight. I used a hobby knife to cut a groove from the top of the first digit of the card no below the contact points to the edge of the card. I tested by loading app CardTest onto my Samsung Galaxy S3 phone and scanning it.

  4. Bank Manager

    stoic i am a Bank Manager – please don’t shoot the messenger! I’m just as frustrated as everyone else about Paypass/Paywave etc.

    If you need to point the gun at anyone, make it the CEO’s of Visa & MasterCard.

  5. Pam

    Excellent info, thanks. Recently had my wallet stolen so of course, Paywave very handy for criminals. I can’t believe banks give us no choice. I realise it’s Mastercard and Visa but they need to revisit this seriously annoying issue. I am not that strapped for time that I can’t spend a few seconds to press 4 digits of a PIN into a reader! It certainly isn’t for the customer’s convenience. From what I have been reading online, it’s only a minority that seem to like this irritating new card development.

  6. Jeanette

    I can’t see any antenna on my nab card so I presume it must have a separate chip. But can’t find that either. Any suggestions?

  7. Sirdidymus

    Hi, I am with the CommBank here in AU and I have tried this using a bright LED light but cannot see the things you are referring to ?

    Any suggestions as we have just experienced having a card stolen and used via paypass and the bank have told us we have to dispute these charges (***************************)

  8. Dan

    Yeah I had my 2 old cards doctored which was easy enough and so subtle that, no one noticed it. Just had to replace one, and checked out the new card, and I fear it isn’t going to be so simple

  9. Vee

    My ING Visa card has the reverse totally blacked out and it is impossible to see anything through it even with the brightest light I have. I am not happy.

Leave a Reply

Your email address will not be published.