I have a flipper and I can say with certainty that the threat of using one to grab someone’s information from a card even in their pocket is extremely unlikely. Is it possible? I mean… sorta. But you are far far more likely to be the target of a skimmer or general identity theft. So go ahead and get that rfid blocking wallet… but it probably isn’t necessary.
@@backinthelabdetroit exactly. The Flipper isn't able to get the CVV nor any other encrypted info. Plus it can't pay for anything because there is certain checks that EFTPOS machines need to have (usually in the encrypted data) to be able to pay for things. Same goes for Metro cards too.
Flipper is a "base model." Near-field ability can be greatly extended by adding a supplemental long-range directional antenna to flipper. Near-field is generally "within a few inches" but, in theory, with the right equipment, you can pick up NFC data from further away.
Bummer! I only use a card that pings my phone every time I use it. I fudge bits of data, what they need only, not all they ask for. Fudged data, like misspelled name, sometimes comes back in easy to recognize spam. My grandma 100 years ago fudged name spelling on census! 😂 NFB attitude.
@@iamnotpaulavery get an account and card you transfer Pocket Money into when leaving house. When you need money on the go, transfer money to it instantly. Like in the Middle Ages, don't leave the house with a bag full of gold coins. Can't be robbed when you got nothing...
With all of the data breaches, I never store my credit card information on a website. Yeah, it takes a little bit longer to pay for an item, but that also helps prevent impulse buying.
I just use a card that has no meaning to me and transfer the money from my main card to it. lol, that's all it takes. They can only take what's there lol
Yea, if I use a cc online, when I receive the item, I delete the cc information from the website. They don't use the card until it's been shipped, but then there may be "returns".. in which case I take it into the "brick n mortar" store myself.
Theres no need to buy such fancy advertised NFC blocking card. I have made a lot of them by myself using aluminium foil you use for making meal, grilling. you cut a few layers to the correct size and foil it with laminator. Perfect.
I'm immune to the flipper. I only use cash. No credit, debit, or bank card. If I didn't live the way I do and had one, I'd be very concerned about right now. Sometimes the best defense against high tech is to be low tech.
Just a clarification: The nfc cards that were "copied" aren't actually vulnerable to attacks of this sort, nowadays EMV bank cards have cryptographic algorithms that run inside their chips to verify transactions using a sort of public-private key transaction with the bank through POS terminal. What this attack is doing is essentially stealing the ID that the card uses (aka card number) to identify itself with the bank so it can send back a challenge code. This might be helpful to cybercriminals as some credit cards send all of their information through the nfc signal (including cvv and exp date which might be used to make online transactions), but should not work for performing transactions at contactless terminals with the flipper.
About 10 years ago I saw an item on TV in France. They walked through a shopping mall with a similar device and succeeded in taking one Euro from the credit or debit cards of about 20 people in the mall. The TV program immediately refunded the money but that was scary. They could have taken up to the tap transaction limit which for most cards is about 200 euro. So like 4,000 Euro in a 10 minute walk through a mall. I have used those sleeve things ever since.
to prevent this, there are infoless cards without numbers. If you want to make online payments, you have to use a virtual card with a dynamic CVV. At least in Mexico, there are some banks that operate this way.
A word of warning(?) This probably applies to your phone as well. I use my phone (in the UK) with NFC when shopping. However, I ALWAYS turn it off after the transaction.
I tried it with various phones, but that didn't work. It could read some NFC info, but nothing "useable". I am continuing to test though. But yes, can't hurt to disable it when you are not using it.
Roger I 100% agree with you about switching off the NFC after doing a transaction. I also do the same, in fact I prefer using my phone instead of using the contactless card for that very same reason that Liron has done in this video. Thank you for the advice Liron Segev, your a legend sir.
I don’t disable it. Actually, I use nfc payments with only face recognition tech in iPhone 11th max. If face recognition is not used, it does not pay at all. Did you try that?
You're right about it being a pain slipping the card back into one of those little Faraday holders. What I do is to keep two in my wallet and easily slide the card between them.
Try inserting some folded kitchen aluminium foil sheets between the purse or/ wallet pockets, it should prevent the Card Scanner from extracting one's credit card info. Especially useful when travelling overseas.
Hi ya Liron! Ya, seen that zipper being used in my local supermarket but security was happy enough to escort the young lad outside The M5 stick, stack and Stamp have similar behaviors. Good content us always 👍
I have an aluminum wallet. My debit card is in the back slot, between my Walgreen's discount card and my WSS (shoe store) preferred customer card. I keep the wallet in my front pocket, with the back of the wallet against my leg.
Indeed, it is true that this device can perform all the functions described in the video, but there are a few limitations regarding the NFC scan and what it can actually detect. I examined all of its features a few months ago. 👌🏼
I swear, you provide the most useful, concise, comprehensible tech videos ever... thank you. I was wondering if those metallic cases which hold multiple cards and are alleged to block readers, actually work? I was given one as a gift ages ago and will start to use it if it is effective.
As far as I know that card you put in your wallet to protect the other cards does so by taking all the power of the nfc device. You can also use one of the paper based travel cards (like oyster cards in London). Based off that though, I wondered if just having multiple cards all together would stop the flipper from being able to read any single card because all cards will try to use power at once.
You people are hilarious. You can use aluminum foil. All you need to do is create a layer of materiel the signal can’t go through. Like having your phone in a tunnel. Basically a Ferreday cage. It’s like boomers don’t know what rfid blocking wallets are.
Not sure how this is new info, been using RFID sleeves for years now, even most decent wallets have RFID protection. Also, some Passports can be read, and your ID cloned, So if you are an international traveller, definitely get protected
skimmers that can be tucked in sleeves were used for years to clone magnetic strips. to get an portable RDIF/ NFC scanner, you needed a laptop/ raspberry pi. I haven't seen something this "user friendly" without any learning curve in a long time...
@@LironSegev I honestly thought it was common knowledge. love the channel Liron, especially going through the older vids for Windows tips & tricks. Just to add, might also be worth you looking at Faraday bags for anyone super cautious about their phones, whilst in unfamiliar places.
one of the workarounds that my bank has for this, is if above a certain amount of money is spent on an online purchase, the bank app on my phone will send an alert, asking me to confirm it by inserting my phone PIN not the card CVV, so tough nuts to the scammers
He says 6cm. Google says: "UHF RFID readers: The biggest advantage of UHF RFID card readers is their long reading and writing distance, which is generally 3-5m and can reach up to 15m. Passive low-frequency (LF) and high-frequency (HF) tags can be read from a distance of up to 3 feet (0.9 meter)"
You can line your wallet with tin foil, also you can face your cards with the top of strips back to back facing each other and it works, you don't have to buy RFID card.
Great video. This Flipper device is like a cannon in a knife battle. It copy all kind of signals. I seen devices that would steal credit card data without getting all so close. A bag with electronic reader in a bus. Crazy world we live in huh? Whenever someone make something to keep us "safe" the real reason behind it is dark and shady. There is no such thing as "safe" nowdays.
what makes the Flipper interesting is how little you need to know in order to cause issues. No need for hardware hacks, learning some Kali, being strategic. Its just push a button and watch it happen.
@Liron Segev I can see some interesting scams with this simple device, aside from just walking around and trying to read the wallet buldge in people's pants, but you definitely need some distraction or noise to keep people from hearing that beep. I think using this by street magicians would work (even without the magician being in on it) since the crowd is distracted and focused on the event, and it's definitely easier than trying to pickpocket a person. As said, none of this is new it's just now on a very user-friendly device with other fun tools attached.
So, what happens if you have two, three, four NFC-enabled credit cards in the same wallet? Can the flipper focus in on just one, or do the multiple signals confuse it? Is that, perhaps, how the card for your wallet works? Does it just add another NFC signal to confuse the flipper?
I looked on Amazon at the card for your wallet. I see this comment there in the description and don't understand what or why you would need to do this. When you go to pay, place this card on top (or bottom) of your payment card and place on the contactless reader.
The FZ's OS has hard wired limits whenever it detects it has read a bank card of any kind it will NOT let the user Emulate the card, It can still read and replay normal NFC anf RFIDs though.
Good video, Liron! Nicely informative and concise! Been working with chip cards since 1991. The ways that they can be hacked (even before RFID) was scary then. When I got my first card with RFID, I got one of the RFID shielding sleeved because I already knew how vulnerable the cards were. I mean, come on, folks! If a terminal in a store can read it, how hard do you think it is to get something like Flipper and read someone's card info? Thanks again!
I always carry my wallet in my front pocket. If anyone would try to use the flipper on me, they would have to get in front of me and if they would try to swipe the flipper they'd have to get close to my front (privates) and that would be very suspicious and I'd push them away or give them a knuckle sandwich! Shure it's not 100 percent fool proof, but it's been pretty safe for me so far.
fun story: I was pickpocketed in Rome and my wallet was in my front pocket. The lady who did it was such a pro and got it just as I put my leg up to get onto the train...I felt nothing. She was a pro
The Italian pickpockets are pros. Decades ago my mom had her arm sitting along the entire top zipper of her purse. The bus ride was short and not crowded. They somehow, got under her entire forearm, unzipped it enough to find her wallet and remove it. She never moved her arm or felt anything. And her zipper appeared to remain closed
Another great video. You mentioned that the Flipper can give the thief your credit card information and the expiry date, and then you are showing us that when adding a new credit card, with Amazon (for example), they only asks you for your Credit Card number, the Name on the card, and the Expiry Date. So does Flipper also capture a person's Full Name as well?
Been using RFID blocking wallets for years. Decent ones will tell U, in description, what it will and won’t block… the frequencies &/what uses what. Not expensive. Just paid $17 for a new leather one.
Using NFC on a credit/debit card requires a two way handshake that is cryptographic, which the flipper cannot do. It can read the card number for most cards but in most cases the info is useless barring maybe using the number to pay an electric bill over the phone, but in most cases that requires a CVV number which the flipper cannot retrieve.
@@LironSegev Same, Ive got the 100milliwatt flux capacitor with a high gain antenna on it, as well as wifi and nrf boards. I spend most of my time though, writing python code to parse raw files to find packet timing, and convert the message to binary/hex and then convert that over to c16 files for use on the hackrf-portapack. Love my flipper. Hate that people dont undrstand it though.
You don't have to get expensive tech to protect against expensive tech . I simply put a sheet of heavy duty ALUMINIUM FOIL on the lenght of the dollar bill compartment - this creates a FARADAY CAGE when the wallet is folded.
Why do the issuers of credit cards allow vendors to not require the CVV code? Only someone who does not own the card would not be able to provide the number.
@@TheGamerRedline No, because I always memorize the code and scratch it out from the card. I had charges come up on Spotify which I had never subscribed to. I suspect it was done by a waitress I handed my card to. So Spotify did not require the code.
When I go out, I take my debit card and usually one credit card. I put them in my shirt pocket. This makes it inconvenient for anyone to steal the information.
This isn't anything new. I can go get a cheap $10 NFC card reader and it will do the same thing. It doesn't give the CVV which you would need to by things online. Apparently the chip doesn't even store the CVV so it's not like the Flipper is purposely limiting that. It's just not there on the chip. Plus the matching zip code. Also some cards it doesn't read and give you the number at all and some it won't show the experation just the number.
Actually, if you bothered to watch a little bit of the video you would have seen how you can buy stuff online without the cvv number. Also remeber that there are dozens of people who live in other counties where zip matching isn't required. K bye 👋
A card I used to have (sadly they are no more - FIDOR), you could block all countries but the one you were visiting (or buying from if on the internet). My current main credit card can be disabled by my phone app, or even having the card blocked but simultaneously having the same card active in my Google Wallet.
I'm a Police officer and I'm tired of taking these reports where people are scammed anywhere from 100 to seriously $50,000. It's quite unfortunate, VAULT GUARD EXPERT seriously thank you for flagging down these swindlers and doing refund. You make me want to spend my next 10 years learning how to do this.
I have a flipper, and yes, it can scan a card #, but not the security code, zip code, or holder name. A phone is more useful than a flipper in this case.
Liron... Google (Chromium), Brave (Chromium), and very possibly Firefox (Mozilla) are discontinuing updates for their web browsers for Windows 7 and 8.1. Besides updating their OS, what can Windows 7 and 8.1. users do as far as having the most secure, privacy centered, internet compatible web browser and which one would it be with Brave (for example) off of the table?
The flipper does NOT copy the CCV code. Without that or at least the zip code of the card holder, the card number and it’s expiration is useless. This feature is dumb.
I have one important thing to test. My Ledger Nano X crypto wallet just arrived. It connect via BlueTooth to the computer and via USB. Next month Im buying this Flipper Zero device or Flipper One if it comes out by that time and I want to test it on my Ledger wallet. Can it pick up the signal, and Im sure it can, and can this signal be used to connect to my wallet without knowing the seed words?? THIS IS IMPORTANT! If You have a Ledger Nano X, please test it. If it can be used to log on to a wallet that means there is a BIG security breach. Im gonna test it for sure. I am willing to spend the cash on flipper just to be on the sure side. Thank you for this video. I love this channel . I am a recent subscriber and Im going no where.. This feels like home. STAY AWESOME!
I try not to let people get that close to me anyway, but if they do, I have those RFID blocker cards inside my RFID wallet, so I'm not sure what else I could do.
Interesting to look at the materials used in RFID wallets and cards. Some make no mention of carbon, aluminium etc, just plastic. so I'd suggest those Chinese producers on Amazon are scammers. Make your own, at least you know what it's actually made of should work.
@@shenlun does your card physically have the wifi sign on it? If it does you have nfc if it doesn’t you don’t. As far as I know when you receive your card you have to activate it to even use it. If you haven’t activated your card why would you be carrying it?
@@TopGAli Yes my card has the NFC/wifi logo, yes my card is active for general use, but in Australia we have the option NOT to activate the touch and go feature. My question here is that even though I haven't activated it will flipper, for example, still be able to grab my details, and a demonstration would be appreciated.
Great video, thank you. Do you know if the Flipper can read data when you have more than one card in the Flipper´s range? I mean, one card "sticked" to another?
I talked to a stranger who probably innocently enough was amicable and was a cash hustler but I as a worry wart thought I was concerned He was trying to hang close to Me to skim Me for any fiscal info. Thankfully You can't just have the Main number to make purchases so the CVV code is required to engage even if He has such a device but more likely they're costly but I am going to keep a check on things to be sure.
but if you use that card and if someone complaint that card was using, they will find where was shipped if you purchased something, so doesnt make a sense,
my card is in a metal case received from the bank, but I still don't pay anything contactless with my pin code, don't have it for those digital things, there's a lot more behind it and we have to be careful every second of the day.
Modern bank cards have encrypted data which makes these devices useless. At least European, i.e. Dutch banks etc. Those blockers are quite redundant these days.
@@LironSegev yes. If you try this on a bankcard from a Dutch bank it's unlikely to to work. The rfid vulnerability has been dealt with a long time ago. All data is encrypted which you cannot decrypt on the fly with a small device. May i ask what card you tested this on?
@@LironSegev hmm, looks like usa is approx 10 years behind on the cards tech. Curious to see what would happen here. Will ask around. No comment towards you btw:) i was just very surprised
@@LironSegev Also, those blockers work well when its needed. I have a wallet that has it built in. I don't need it so its basically a bonus. But its more practical than those sleeves:)
So the flipper can read cc info but then you have to have a way to make a duplicate card, right? You cannot go online and buy stuff because you won''t have the zip code
A very cheap solution to the RFID credit card, old gift card and aluminum flashing tape which if you're a home owner should have on hand since it's super useful.
Thank Liron for this INFORMATIVE video. One question, please. I was told wrapping my card in an aluminum foil envelope also protects it from reading devices like Flipper. Is that true? If possible, could you please make a video about it? That would benefit all of your subscribers. Thanks again.
My dad always put double layer of Tin Foil ( Aluminium foil ) in his wallet. And warped his cards in it. He use to get some strange looks but his bank manager said he was smart for doing it. I don’t know if it works as I’ve never tested it he just replace the foil when it got old.
Can the Flipper read cell phone wallet info? ruclips.net/video/S9d43IjwjFQ/видео.html
No way really ?
@@luisfarias6395 it can, but it cannot use it, so... what's the point?
I have a flipper and I can say with certainty that the threat of using one to grab someone’s information from a card even in their pocket is extremely unlikely. Is it possible? I mean… sorta. But you are far far more likely to be the target of a skimmer or general identity theft. So go ahead and get that rfid blocking wallet… but it probably isn’t necessary.
@@backinthelabdetroit it isn’t easier. Try reading a card on a willing subject in their pocket. It’s not simple.
@@backinthelabdetroit exactly. The Flipper isn't able to get the CVV nor any other encrypted info. Plus it can't pay for anything because there is certain checks that EFTPOS machines need to have (usually in the encrypted data) to be able to pay for things. Same goes for Metro cards too.
@@backinthelabdetroit iv no way of testing it just hope it offers some protection
Flipper is a "base model." Near-field ability can be greatly extended by adding a supplemental long-range directional antenna to flipper. Near-field is generally "within a few inches" but, in theory, with the right equipment, you can pick up NFC data from further away.
@@willspy4u theory is one thing. Scaring people by suggesting a base flipper can steal credit card info that can then be used is completely another.
Incredible timing. I'm in the middle of disputing a ton of fraudulent charges on TWO of my cards. Took a break and here's this video.
Try, at least, to carry your wallet in your front pocket.
craziness Dee! Hope they resolve it for you...
Bummer! I only use a card that pings my phone every time I use it. I fudge bits of data, what they need only, not all they ask for. Fudged data, like misspelled name, sometimes comes back in easy to recognize spam. My grandma 100 years ago fudged name spelling on census! 😂 NFB attitude.
@@LironSegev well i m stillwaiting for the million dollor despodit and hhis mom soiled underwear so i d say it isn't progression very much
@@iamnotpaulavery get an account and card you transfer Pocket Money into when leaving house. When you need money on the go, transfer money to it instantly. Like in the Middle Ages, don't leave the house with a bag full of gold coins. Can't be robbed when you got nothing...
With all of the data breaches, I never store my credit card information on a website. Yeah, it takes a little bit longer to pay for an item, but that also helps prevent impulse buying.
My thoughts exactly.
I just use a card that has no meaning to me and transfer the money from my main card to it. lol, that's all it takes. They can only take what's there lol
U know the banks are the ones that be having the data breaches right. So regardless how u use it it’s not hard to get ur info taken.
Yea, if I use a cc online, when I receive the item, I delete the cc information from the website. They don't use the card until it's been shipped, but then there may be "returns".. in which case I take it into the "brick n mortar" store myself.
Theres no need to buy such fancy advertised NFC blocking card. I have made a lot of them by myself using aluminium foil you use for making meal, grilling. you cut a few layers to the correct size and foil it with laminator. Perfect.
Do you even need to laminate to work
@@havad3938 no
I'm immune to the flipper. I only use cash. No credit, debit, or bank card.
If I didn't live the way I do and had one, I'd be very concerned about right now.
Sometimes the best defense against high tech is to be low tech.
Everthing will be cashless soon. A cashless, society globally. At least you will be aware of what products are available, for keeping your info safe.
@@backinthelabdetroit it doesn't even really get the card info tho lol, you can't use it after
@@thomaslongwell3566Liar. But stay in fantasy 🌈 land😂😂😂
I mean, most cards are encrypted now a days so this is useless against them, and it never shows the security code so
Unfortunately, there are more and more places which do not accept cash.
Just a clarification: The nfc cards that were "copied" aren't actually vulnerable to attacks of this sort, nowadays EMV bank cards have cryptographic algorithms that run inside their chips to verify transactions using a sort of public-private key transaction with the bank through POS terminal. What this attack is doing is essentially stealing the ID that the card uses (aka card number) to identify itself with the bank so it can send back a challenge code. This might be helpful to cybercriminals as some credit cards send all of their information through the nfc signal (including cvv and exp date which might be used to make online transactions), but should not work for performing transactions at contactless terminals with the flipper.
If it send cvv who need more hehehe
@@JafarEmhotepit doesn't send the CVV and even for Amazon where you don't need it, you just get a refund. It's Amazon's loss, not yours.
@@sirjanhaugen732 I mean all u need is all that info and u could put it on a new card not use the flipper.
About 10 years ago I saw an item on TV in France. They walked through a shopping mall with a similar device and succeeded in taking one Euro from the credit or debit cards of about 20 people in the mall. The TV program immediately refunded the money but that was scary. They could have taken up to the tap transaction limit which for most cards is about 200 euro. So like 4,000 Euro in a 10 minute walk through a mall. I have used those sleeve things ever since.
to prevent this, there are infoless cards without numbers. If you want to make online payments, you have to use a virtual card with a dynamic CVV. At least in Mexico, there are some banks that operate this way.
would that include the Apple credit card which is completely blank
A word of warning(?)
This probably applies to your phone as well.
I use my phone (in the UK) with NFC when shopping.
However, I ALWAYS turn it off after the transaction.
I tried it with various phones, but that didn't work. It could read some NFC info, but nothing "useable". I am continuing to test though. But yes, can't hurt to disable it when you are not using it.
Roger I 100% agree with you about switching off the NFC after doing a transaction. I also do the same, in fact I prefer using my phone instead of using the contactless card for that very same reason that Liron has done in this video. Thank you for the advice Liron Segev, your a legend sir.
@@LironSegev whats NFC ?
@@dbest4755 Watch and listen at 1:11
I don’t disable it. Actually, I use nfc payments with only face recognition tech in iPhone 11th max. If face recognition is not used, it does not pay at all. Did you try that?
We have been using the blocking sleeves for years, especially when we cruise in Europe.
Great! I may or may not have an upcoming video on a cruise... 🤔 😉
Most valuable info and much appreciation for you. Thank you!
no problem - thanks for being here!
You're right about it being a pain slipping the card back into one of those little Faraday holders. What I do is to keep two in my wallet and easily slide the card between them.
Try inserting some folded kitchen aluminium foil sheets between the purse or/ wallet pockets, it should prevent the Card Scanner from extracting one's credit card info. Especially useful when travelling overseas.
The dude does it yet again! Short, to the point and VERY useful.
Keeping it as on point as I can...we all got stuff to do and no one wants to know that I had coffee. Just show me the info haha
@@LironSegev there are a lot of videos on the flipper and yours is, by far, the best one I've seen about the nfc feature. Thank you.
Appreciate you 🔥
Hi ya Liron!
Ya, seen that zipper being used in my local supermarket but security was happy enough to escort the young lad outside
The M5 stick, stack and Stamp have similar behaviors.
Good content us always 👍
I have an RFID shielded wallet. Yes, I got fed up with those card/foil pouches, used them for years. The wallet is great.
agreed - its just simpler
Some wallets are better than others though. I've tested them at my local supermarket checkout.
you gotta take it out to pay and that's when they strike
I have an aluminum wallet. My debit card is in the back slot, between my Walgreen's discount card and my WSS (shoe store) preferred customer card. I keep the wallet in my front pocket, with the back of the wallet against my leg.
Line whatever wallet or whatever you keep your card in with aluminum foil. It's cheap and easy, and it blocks rfid readers.
Indeed, it is true that this device can perform all the functions described in the video, but there are a few limitations regarding the NFC scan and what it can actually detect. I examined all of its features a few months ago. 👌🏼
it doesnt read the encrypted security code right
it doesnt
@@4foreigns
I swear, you provide the most useful, concise, comprehensible tech videos ever... thank you.
I was wondering if those metallic cases which hold multiple cards and are alleged to block readers, actually work?
I was given one as a gift ages ago and will start to use it if it is effective.
I havent tested it myself, but it sounds like it can. I tried it aluminum foil and that blocked it
@@LironSegev
How about Apple Pay?
Love your video. Can you try some of the new wallets that claim to block your credit card information from scammers.
As far as I know that card you put in your wallet to protect the other cards does so by taking all the power of the nfc device. You can also use one of the paper based travel cards (like oyster cards in London).
Based off that though, I wondered if just having multiple cards all together would stop the flipper from being able to read any single card because all cards will try to use power at once.
You people are hilarious. You can use aluminum foil. All you need to do is create a layer of materiel the signal can’t go through.
Like having your phone in a tunnel. Basically a Ferreday cage. It’s like boomers don’t know what rfid blocking wallets are.
@@chrispewkreme *Faraday
it's not. EMV chips (what you're scanning) aren't vulnerable to replay attacks, same overall concept as rolling codes.
yup this guy knows
That’s why RFID blocking sleeves are important to store your cards in. I have a Flipper and the sleeves do prevent it from scanning the cards.
Yup. Like I showed.
@@LironSegev
So anybody can buy a "Flipper"? Where's the justification in that? Surely no law-abiding citizen has any valid use for one?
Not sure how this is new info, been using RFID sleeves for years now, even most decent wallets have RFID protection.
Also, some Passports can be read, and your ID cloned, So if you are an international traveller, definitely get protected
New to me!!! Much appreciated info in Costa Rica.
skimmers that can be tucked in sleeves were used for years to clone magnetic strips. to get an portable RDIF/ NFC scanner, you needed a laptop/ raspberry pi. I haven't seen something this "user friendly" without any learning curve in a long time...
@@LironSegev I honestly thought it was common knowledge. love the channel Liron, especially going through the older vids for Windows tips & tricks.
Just to add, might also be worth you looking at Faraday bags for anyone super cautious about their phones, whilst in unfamiliar places.
one of the workarounds that my bank has for this, is if above a certain amount of money is spent on an online purchase, the bank app on my phone will send an alert, asking me to confirm it by inserting my phone PIN not the card CVV, so tough nuts to the scammers
nice - any sort of 2FA is superb!
He says 6cm. Google says:
"UHF RFID readers: The biggest advantage of UHF RFID card readers is their long reading and writing distance, which is generally 3-5m and can reach up to 15m.
Passive low-frequency (LF) and high-frequency (HF) tags can be read from a distance of up to 3 feet (0.9 meter)"
RFID blocking card wallets are the best option. They hold around 5 cards and look super cool.
bro doesn't matter if the person behind you in line is waiting for you to take your card out to pay WHICH is exactly what they did to me!
You can line your wallet with tin foil, also you can face your cards with the top of strips back to back facing each other and it works, you don't have to buy RFID card.
Great video. This Flipper device is like a cannon in a knife battle. It copy all kind of signals. I seen devices that would steal credit card data without getting all so close. A bag with electronic reader in a bus. Crazy world we live in huh? Whenever someone make something to keep us "safe" the real reason behind it is dark and shady. There is no such thing as "safe" nowdays.
what makes the Flipper interesting is how little you need to know in order to cause issues. No need for hardware hacks, learning some Kali, being strategic. Its just push a button and watch it happen.
@Liron Segev I can see some interesting scams with this simple device, aside from just walking around and trying to read the wallet buldge in people's pants, but you definitely need some distraction or noise to keep people from hearing that beep.
I think using this by street magicians would work (even without the magician being in on it) since the crowd is distracted and focused on the event, and it's definitely easier than trying to pickpocket a person.
As said, none of this is new it's just now on a very user-friendly device with other fun tools attached.
@Tally tail , you can disable the beep. It's just a tiny speaker.
@@Tally2727 Ever seen how to unsolder the speaker? Solder stronger antenna to optimize range? Well if not just buy a pocket radio from china.
@@Tally2727 or you can open it and take out the speaker
The information is so useful because people are so relaxing when it comes to their ccards.
100% - too relaxed!
Cheers for the heads up! Much appreciated!
Thanks for being here and hanging out!
I've been using those little wallet things for years. Good to let people know though.
nice!
Love these videos and keep them coming. I bought a wallet that is supposed to be RDFI blocking leather. I certainly hope it works.
Better safe than sorry!
me too!
They call him Flipper, Flipper, faster than lightning...
gahd I'm old...
😂you are NOT alone!
haha I was going to add that visual, but I thought - "who would even remember that?!"
Why did you test if the Walmart registers would read the flipper NFC when Walmart registers do not have NFC capability enabled?
So, what happens if you have two, three, four NFC-enabled credit cards in the same wallet? Can the flipper focus in on just one, or do the multiple signals confuse it? Is that, perhaps, how the card for your wallet works? Does it just add another NFC signal to confuse the flipper?
I've also wondered that. I hope someone answers.
Yes absolutly you can filter what you arr looking for! ;)
@@mikewgagne do you mean it reads all cards stacked together at once?
If the banks are issuing these cards then they should also supply the radio frequency wallets to stop the signals.
Wouldn't that be nice...
The banks don't care. They just charge the merchant for the stolen goods
There are wallets and purses that have rfid blocking built in, I have one and it works flawlessly.
100% - I have some links in the description
I looked on Amazon at the card for your wallet.
I see this comment there in the description and don't understand what or why you would need to do this.
When you go to pay, place this card on top (or bottom) of your payment card and place on the contactless reader.
The FZ's OS has hard wired limits whenever it detects it has read a bank card of any kind it will NOT let the user Emulate the card, It can still read and replay normal NFC anf RFIDs though.
Good video, Liron! Nicely informative and concise!
Been working with chip cards since 1991. The ways that they can be hacked (even before RFID) was scary then. When I got my first card with RFID, I got one of the RFID shielding sleeved because I already knew how vulnerable the cards were. I mean, come on, folks! If a terminal in a store can read it, how hard do you think it is to get something like Flipper and read someone's card info?
Thanks again!
Exactly
Most credit cards now a days have encrypted chips tho, so even if you read it, you won't get any real data out of it.
@softbread1728 maybe watch the video 👀
I always carry my wallet in my front pocket. If anyone would try to use the flipper on me, they would have to get in front of me and if they would try to swipe the flipper they'd have to get close to my front (privates) and that would be very suspicious and I'd push them away or give them a knuckle sandwich! Shure it's not 100 percent fool proof, but it's been pretty safe for me so far.
fun story: I was pickpocketed in Rome and my wallet was in my front pocket. The lady who did it was such a pro and got it just as I put my leg up to get onto the train...I felt nothing. She was a pro
@@LironSegev Really?? Wow!!
The Italian pickpockets are pros. Decades ago my mom had her arm sitting along the entire top zipper of her purse. The bus ride was short and not crowded. They somehow, got under her entire forearm, unzipped it enough to find her wallet and remove it. She never moved her arm or felt anything. And her zipper appeared to remain closed
Pros is right 🤦
@@LironSegev lol, about 8 months later, her wallet came in the mail with our baby pictures, ids, etc... everything except the money.
Another great video. You mentioned that the Flipper can give the thief your credit card information and the expiry date, and then you are showing us that when adding a new credit card, with Amazon (for example), they only asks you for your Credit Card number, the Name on the card, and the Expiry Date. So does Flipper also capture a person's Full Name as well?
Doesn't matter, card processing does not CHECK names
Been using RFID blocking wallets for years. Decent ones will tell U, in description, what it will and won’t block… the frequencies &/what uses what. Not expensive. Just paid $17 for a new leather one.
interesting. That's why I like to actually test these for myself. I don't believe what some blub says on the website (I have trust issues haha)
@@LironSegev me too...I know some really don't work. Do having several cards together confuse the scanner?
Another Great Video. Thank you, Liron. 😎
appreciate it!
Using NFC on a credit/debit card requires a two way handshake that is cryptographic, which the flipper cannot do. It can read the card number for most cards but in most cases the info is useless barring maybe using the number to pay an electric bill over the phone, but in most cases that requires a CVV number which the flipper cannot retrieve.
Eh...did you watch the video?
Yessir, just giving a little TLDR; for the folks that wont watch the whole thing. Great video and very informative. :)
Haha those people aren't the right people anyways. I love my flipper and with custom mods it's a powerhouse!
@@LironSegev Same, Ive got the 100milliwatt flux capacitor with a high gain antenna on it, as well as wifi and nrf boards. I spend most of my time though, writing python code to parse raw files to find packet timing, and convert the message to binary/hex and then convert that over to c16 files for use on the hackrf-portapack. Love my flipper. Hate that people dont undrstand it though.
You don't have to get expensive tech to protect against expensive tech . I simply put a sheet of heavy duty ALUMINIUM FOIL on the lenght of the dollar bill compartment - this creates a FARADAY CAGE when the wallet is folded.
finally someone that tried to emulate de "stolen" information to buy something. nice video
Glad you liked it!
Now there are cases where it is reading people's cards from their purse or their wallet and this is legitimate terminals in stores.
Yup
they shouldn't be allowed to sell at home, and amazon don't take cvv that's shocking, thanks for this dude I'm getting that blocker asap
Why do the issuers of credit cards allow vendors to not require the CVV code? Only someone who does not own the card would not be able to provide the number.
False
@@weluvacid Why would someone who owns the card not be able to provide the code?
Do you reckon the flipper read the CVV/CVC?
@@TheGamerRedline No, because I always memorize the code and scratch it out from the card. I had charges come up on Spotify which I had never subscribed to. I suspect it was done by a waitress I handed my card to. So Spotify did not require the code.
@@rogerg4916 But the CVV is encoded on the chip?
When I go out, I take my debit card and usually one credit card. I put them in my shirt pocket. This makes it inconvenient for anyone to steal the information.
This isn't anything new. I can go get a cheap $10 NFC card reader and it will do the same thing. It doesn't give the CVV which you would need to by things online. Apparently the chip doesn't even store the CVV so it's not like the Flipper is purposely limiting that. It's just not there on the chip. Plus the matching zip code. Also some cards it doesn't read and give you the number at all and some it won't show the experation just the number.
Actually, if you bothered to watch a little bit of the video you would have seen how you can buy stuff online without the cvv number. Also remeber that there are dozens of people who live in other counties where zip matching isn't required. K bye 👋
Another thing that will help is to keep your cards locked until right before you use them.
A card I used to have (sadly they are no more - FIDOR), you could block all countries but the one you were visiting (or buying from if on the internet).
My current main credit card can be disabled by my phone app, or even having the card blocked but simultaneously having the same card active in my Google Wallet.
I'm a Police officer and I'm tired of taking these reports where people are scammed anywhere from 100 to seriously $50,000. It's quite unfortunate, VAULT GUARD EXPERT seriously thank you for flagging down these swindlers and doing refund. You make me want to spend my next 10 years learning how to do this.
I just added the sleeves to my Amazon cart. Thank you for the tip.
Cheap solution to really help. Sad that we need it, but here we are...
I have a flipper, and yes, it can scan a card #, but not the security code, zip code, or holder name. A phone is more useful than a flipper in this case.
Yup
But can still use the number and expirty date without the cvv code. Like I showed
Besides the CC # & expiration date don't you also need the 3 digit # & zip code in order to use the card to make purchases?🤔
Hint: watch the video
Liron... Google (Chromium), Brave (Chromium), and very possibly Firefox (Mozilla) are discontinuing updates for their web browsers for Windows 7 and 8.1. Besides updating their OS, what can Windows 7 and 8.1. users do as far as having the most secure, privacy centered, internet compatible web browser and which one would it be with Brave (for example) off of the table?
The flipper does NOT copy the CCV code. Without that or at least the zip code of the card holder, the card number and it’s expiration is useless. This feature is dumb.
I love thes Jaapes from South Africa. Not just their accents but thir delivery. Excellent stuff. So wwell explained.
I would love to see more about the flipper device on what other things it can do and how to protect yourself.
It can unlock electronic locks on cars and houses
Good people are hard to find... God bless you and your family!
thanks for watching!
Hey neighbor. You knocked it out of the park yet again! So many nefarious people in the world. Damn shame we have to be so careful these days.
we really do...
Thank you!
Thank you so much for your great channel and helpful information! Awesome videos!
Appreciate you being here 🔥
I have one important thing to test. My Ledger Nano X crypto wallet just arrived. It connect via BlueTooth to the computer and via USB. Next month Im buying this Flipper Zero device or Flipper One if it comes out by that time and I want to test it on my Ledger wallet. Can it pick up the signal, and Im sure it can, and can this signal be used to connect to my wallet without knowing the seed words?? THIS IS IMPORTANT! If You have a Ledger Nano X, please test it. If it can be used to log on to a wallet that means there is a BIG security breach. Im gonna test it for sure. I am willing to spend the cash on flipper just to be on the sure side. Thank you for this video. I love this channel . I am a recent subscriber and Im going no where.. This feels like home. STAY AWESOME!
Thank you very much 😊
4:11 Walmart only accepts the walmart app for a form of NFC. You didn't try it anywhere else but 3 walmart registers.
I try not to let people get that close to me anyway, but if they do, I have those RFID blocker cards inside my RFID wallet, so I'm not sure what else I could do.
there are RFID blocking wallets which you can just get... so as long you keep your card inside the wallet you are safe...
This is why I always buy Pacsafe bags and wallets because they have the rfid blocking features.
Thank you for this excellent video. Great work and to the point explanation with clear examples. Subscribed.
Awesome, thank you!
The range is determined by the reader. Some stores have reader that “tap” your card from 5’ away.
Interesting to look at the materials used in RFID wallets and cards. Some make no mention of carbon, aluminium etc, just plastic. so I'd suggest those Chinese producers on Amazon are scammers. Make your own, at least you know what it's actually made of should work.
After watching this video I bought an RFID case to protect my cards. Thank you!!
It has to be very near almost over the credit card to steal the information. There are other devices that can steal almost at 20cm the info
What happens if your card is NOT registered for tap and go, like mine is. A quick follow-up video showing the result would appreciated. Thanks.
Common sense says nothing will happen then. Your card is not NFC compatible.
@@TopGAli But my card is compatible with nfc I just haven't enabled the function via my bank
@@shenlun does your card physically have the wifi sign on it? If it does you have nfc if it doesn’t you don’t. As far as I know when you receive your card you have to activate it to even use it. If you haven’t activated your card why would you be carrying it?
@@TopGAli Yes my card has the NFC/wifi logo, yes my card is active for general use, but in Australia we have the option NOT to activate the touch and go feature. My question here is that even though I haven't activated it will flipper, for example, still be able to grab my details, and a demonstration would be appreciated.
@@shenlun ok yeah that’s different than here in the US. So, I don’t know.
Great video, thank you. Do you know if the Flipper can read data when you have more than one card in the Flipper´s range? I mean, one card "sticked" to another?
It cannot, the codes generated by multiple cards confuse the reader showing errors when trying to read the cards.
I talked to a stranger who probably innocently enough was amicable and was a cash hustler but I as a worry wart thought I was concerned He was trying to hang close to Me to skim Me for any fiscal info. Thankfully You can't just have the Main number to make purchases so the CVV code is required to engage even if He has such a device but more likely they're costly but I am going to keep a check on things to be sure.
No one keeps one card in their wallet. Which means you are scanning all of their cards?
That's an Actual scammer face at 4:22! 😁😂🤣😭
Great content; Let's Go!!!💪🏾
no comment 🤪
but if you use that card and if someone complaint that card was using, they will find where was shipped if you purchased something, so doesnt make a sense,
Please do another video about the efficacy of these blocking wallets. Thanks!
my card is in a metal case received from the bank, but I still don't pay anything contactless with my pin code, don't have it for those digital things, there's a lot more behind it and we have to be careful every second of the day.
Very useful, thank you!
Modern bank cards have encrypted data which makes these devices useless. At least European, i.e. Dutch banks etc. Those blockers are quite redundant these days.
Did you watch the rest of the video? 👀
@@LironSegev yes. If you try this on a bankcard from a Dutch bank it's unlikely to to work. The rfid vulnerability has been dealt with a long time ago. All data is encrypted which you cannot decrypt on the fly with a small device.
May i ask what card you tested this on?
38 cards from 17 banks in the US. 32 of them worked. You can't get the cvv number from any of them
@@LironSegev hmm, looks like usa is approx 10 years behind on the cards tech. Curious to see what would happen here. Will ask around.
No comment towards you btw:) i was just very surprised
@@LironSegev Also, those blockers work well when its needed. I have a wallet that has it built in. I don't need it so its basically a bonus. But its more practical than those sleeves:)
So the flipper can read cc info but then you have to have a way to make a duplicate card, right? You cannot go online and buy stuff because you won''t have the zip code
A very cheap solution to the RFID credit card, old gift card and aluminum flashing tape which if you're a home owner should have on hand since it's super useful.
Waouh! this guy is a Hero! Props to you
Thank Liron for this INFORMATIVE video. One question, please. I was told wrapping my card in an aluminum foil envelope also protects it from reading devices like Flipper. Is that true? If possible, could you please make a video about it? That would benefit all of your subscribers. Thanks again.
Awesome as always!
thanks for being here!
Thank You for this INFORMATION!!
you are welcome and thank you for watching!
Ive always carried RFID Protection wallets. My newest edition is the Bellroy Apex RFID Wallet.
bought it earlier but didnt liked it...want to sell
I have heard that they can read your card from several feet away, not just a couple of inches.
No they can't. The maximum distance of NFC is only 4 inches. Doesn't matter how powerful of a device you have.
Aside from Near Field Communicaration theres's RFID Radio frequency Identification too
My dad always put double layer of Tin Foil ( Aluminium foil ) in his wallet. And warped his cards in it. He use to get some strange looks but his bank manager said he was smart for doing it. I don’t know if it works as I’ve never tested it he just replace the foil when it got old.