Expired Visa Cards Exposed By Contactless Payment Flaw Arabian Post

(MENAFN- The Arabian Post) clearfix"> Security researchers have demonstrated a method for making some expired Visa contactless cards appear valid to payment terminals, exposing a weakness in how card expiry information is checked across the payment chain.

The technique, dubbed the“Zombie Card” attack, allows an attacker positioned between an expired card and a point-of-sale terminal to alter the expiry date transmitted through near-field communication. The manipulation can enable a payment without defeating the cryptographic protections normally used to authenticate the card.

Researchers Raja Hasnain Anwar, Gerard DeCunha and Muhammad Taqi Raza of the University of Massachusetts Amherst demonstrated the attack after testing contactless payment configurations involving cards from five major US banks. Their findings were presented at the USENIX Security Symposium 2026.

MENAFN21082026000152002308ID1111571608