Is NFC safe? Business card security myths and facts

By Online Business Cards Editorial Team | Published 2026-10-31 | Updated 2026-11-01 | Leads, privacy and security

Worried that an NFC business card could leak your data or hack a phone? Here are the common myths, what the facts are, and the simple steps that matter whether you use NFC, a QR code or a link.

NFC sounds like the kind of wireless technology that ought to be risky: a hidden chip, a radio signal, a phone that reacts on its own. In practice, an NFC business card is one of the lower-risk ways to share your details. The real risks are mostly the same as for any link, and they are easy to manage.

A note on what we sell. We sell digital-only business cards, shared by link and QR code. We do not sell NFC cards. This guide covers NFC because people ask about it, and most of the advice applies to every kind of digital card.

How an NFC business card works, briefly

The card holds a tiny chip with an aerial and no battery. When a phone is held very close, its radio field powers the chip, which hands over what is stored on it, usually a single web link. The phone asks whether to open it. Our plain-English guide to NFC explains this in more detail.

Myth 1: "Someone can steal my information by scanning my card from a distance"

Fact: the range is tiny and there is little to steal. The NFC Forum certifies devices to connect within half a centimetre, extended to 2 cm in its 2025 specification. Someone would have to hold a reader almost against the card. And the chip normally stores only the link you want people to have. Anyone you hand the card to can open it anyway.

What matters is what is on the page behind the link. Our guide to digital business card privacy covers what to share and what to leave off.

Myth 2: "Reading an NFC tag can hack my phone"

Fact: on current iPhones and Android phones, reading a tag with a web link shows a notification or prompt, and nothing opens until the person chooses to. Reading a tag does not install anything. The risk is the same as for any link: where it leads. If a link looks wrong, do not open it.

Keep your phone's software up to date. That is the single best protection against flaws in any wireless feature, NFC included.

Myth 3: "Anyone can rewrite my card to point somewhere else"

Fact: this one is partly true. Many NFC chips can be rewritten unless they are locked. A chip can be locked so that its contents become permanent; NXP's data sheet for its common NTAG chips describes this lock as irreversible. If you have an NFC card, ask whoever made it whether it is locked. If it is not, you can lock it yourself with a tag-writing app once the link is right.

Myth 4: "An NFC card in my wallet can skim my bank card"

Fact: a business card chip is a passive tag. It has no power and no reader of its own, so it cannot read anything, including other cards beside it. Concerns about skimming relate to readers, not to passive tags.

Myth 5: "QR codes are safer than NFC", or the other way round

Fact: both usually hand over a link, so the main risk is the same: being sent somewhere you did not expect. The difference is how easily that can be tampered with.

A printed QR code on a public sign can have a fake sticker put over it. This is the basis of most QR code scams.
An NFC tag could in theory be swapped or covered with another tag, but it is harder to do unnoticed, and the card you hand someone stays in your control.
A link sent by text or email is the easiest to check, because the full address is visible.

Our guide to QR code scams explains how fake codes work and how to make yours easy to trust.

Facts that actually help

Put only work details on your card. A work mobile and business email are usually enough.
Check the address before opening. Phones show the link before opening it, whether it came from a chip or a code.
Never use a business card to take payments. A card should open your profile, not a payment page.
Lock any NFC chip once it points at the right link.
Keep the link stable. If your link never changes, people learn to trust it.

Myth or fact?

Claim | Myth or fact | Why

Someone can read my card from across the room | Myth | NFC works at a few centimetres

Tapping a card can hack my phone | Myth | The chip only offers a link

A card could point to the wrong page | Fact, if it is not locked | Lock the chip and control the link

What I publish can be seen by anyone with the link | Fact | Only publish what you are happy to share

Which plan you need

Both of our plans include a profile with its own link and QR code, plus password protection to keep your profile private while you get it ready, and Visibility & Order to hide sections you do not want to show. Brand Presence costs £45, one-off. The Business Plan (£90, one-off) adds bookings, enquiries, forms, contact leads, a CRM and export. Compare them on our plans.

Frequently asked questions

Is NFC safe to use on a business card?

Yes, for most people. The range is a centimetre or two, the chip usually stores only a public link, and phones ask before opening it. The main things to check are what is on the page behind the link and whether the chip is locked.

Can an NFC business card be hacked?

An unlocked chip can be rewritten by someone with physical access to it, so it is worth locking the chip once the link is right. A locked chip cannot be changed. Reading a card does not install anything on a phone.

Can someone read my NFC card from my pocket?

Only from a centimetre or two away, and the card normally holds only the link you meant to share. It is not a practical way to steal information.

Is a QR code safer than NFC?

Both usually share a link, so the risk is similar. Printed QR codes in public places are easier to cover with a fake, which is why checking the link before you open it matters for both.

Is a QR code safer than an NFC card?

Neither is risky in itself; both open a web link. The safest choice is the one where you control the page it opens and can see the address before you trust it.