New Phone Scam Uses NFC and Fake Alerts to Steal Banking Information

A new wave of sophisticated phone scams targeting both iPhone and Android users in the U.S. and Europe has been identified, largely operated by organized cybercrime groups using Chinese-designed platforms. These attacks begin with a text or WhatsApp message claiming there is suspicious banking activity, prompting the victim to call a number. Once on the phone, the attackers pretend to be bank or tech support agents, persuading victims to install a fake app that hides malware called SuperCard X. This malware exploits NFC (Near-Field Communication) technology to read bank card data. Victims are often tricked into holding their physical bank card close to their phone, allowing the attackers to remotely capture the card’s information and use it for unauthorized contactless payments or ATM withdrawals. This scam is particularly dangerous because it requires no physical proximity and relies heavily on social engineering tactics during the phone call. The FBI and cybersecurity experts strongly advise users to avoid making or answering such calls. Any suspicious message should be verified through official communication channels of the alleged sender. The core message is simple: never trust unsolicited calls or texts about security alerts, and never install apps from links provided in those messages.