Tap to pay has become one of my favorite modern conveniences. I use it all the time. In fact, I rarely need to pull out a physical wallet anymore because contactless payments are accepted in so many places.

There’s a security advantage, too. Mobile wallets can use tokenization or virtual card numbers, so your actual card number does not need to pass directly to a merchant during a transaction.

That makes what’s happening with a tap-to-pay charity scam especially frustrating. Criminals are taking a technology designed to make paying easier and using a moment of distraction to turn a small donation into a potentially massive charge.

You may think you’re giving $5 or $20 to a good cause. Then you check your account and discover hundreds or even thousands of dollars are gone. Here’s how the scam works and what you can do to protect your money.

APPLE PAY TEXT SCAM THREATENS $8,250 LOSS IN 35 MINUTES

New! Free live CyberGuy class: Protect Your Money From Today’s Biggest Threats

Join us Saturday, Aug. 29, at 10 a.m. ET for a free CyberGuy LIVE class covering five simple steps to help defend yourself against AI scams, fraud, identity theft and financial hacks. Kurt “CyberGuy” Knutsson will explain how to set up bank alerts, strengthen your account logins, protect your phone number, freeze your credit and help secure your retirement savings against unauthorized transfers. No technical experience is needed. You’ll also receive our financial protection checklist, and every registrant will get a link to the class recording afterward.

Reserve your free spot today at CyberGuyLive.com.

How the tap-to-pay charity scam works

The setup can feel completely ordinary. You’re leaving a store, walking through a busy shopping area or heading through a public event. Someone approaches you and claims to be raising money for a youth group, school fundraiser or another cause. They ask for a small donation. Maybe you agree to $5. Maybe you offer $20. Then they tell you they can accept tap to pay. That’s when you need to pay very close attention.

The scammer enters a different amount

One version of the scam involves the solicitor entering a much larger amount into a smartphone or payment reader before you tap your phone or card. You think you’re approving $20. The payment screen may actually say $2,000. If you tap without carefully checking that amount, you could authorize the larger transaction. Brentwood police warned in January 2026 about a version involving people approaching shoppers outside stores for small donations. Police said victims could be charged significantly more than expected after using tap to pay, Square or Cash App.

Some victims lost thousands of dollars

The numbers can get ugly fast. The Washington state attorney general issued a warning after receiving reports involving solicitors near the Seattle waterfront. In one case, a person agreed to donate $15 and later discovered a $4,800 charge. Another person agreed to give $20 and later found a charge of nearly $5,000. Those examples show why you should never treat the final tap as a formality.

Never hand a stranger your unlocked phone

There’s another risk worth keeping in mind. If someone claims the transaction failed and asks to take your phone to help, end the transaction. A scammer does not need to take your phone for the inflated-payment scheme to work. However, handing over an unlocked phone creates a much bigger security problem. Depending on your settings, that person may be able to reach email, messages, payment apps or financial information. I would never hand an unlocked phone to a stranger during any financial transaction.

Why tap-to-pay security may not stop this scam

Tap to pay itself remains a secure way to make legitimate purchases. The weakness here involves what you approve. If a scammer puts $2,000 on the payment screen and you authenticate that transaction, the payment system sees an approved purchase.

The criminal is counting on you to skip one very important step: reading the amount before tapping. We use contactless payments so frequently that the gesture can become automatic. Pull out the phone. Authenticate. Tap. Walk away. That routine gives a scammer an opening.

CyberGuy has previously covered how quickly mobile payment scams can turn into serious financial losses through services such as Venmo, Zelle and Cash App.

How to protect yourself from a tap-to-pay charity scam

You do not need to stop using tap-to-pay. I certainly don’t plan to. Instead, change how you handle unexpected payment requests.

Keep your phone in your hands

Never give a stranger your unlocked phone to complete or troubleshoot a payment. If something supposedly went wrong with a transaction, cancel it and move on. When your financial information is involved, you should stay in control of your device from beginning to end.

Read the amount before you tap

This may be the single most important habit. Stop for a second and look at the amount displayed on the merchant’s phone or payment terminal. Do this before your phone or card goes anywhere near the reader. If you agreed to donate $10, make sure the screen says $10. The FTC also recommends reviewing your financial statements after making donations to confirm you were charged only the amount you intended.

NEW BANK SCAM LAWS COULD STOP SUSPICIOUS PAYMENTS

Tap-to-pay technology remains secure, but scammers can exploit distracted donors who approve a transaction without checking the amount first. (iStock)

Avoid high-pressure donations

A legitimate cause will still exist five minutes from now. If someone tells you that you need to donate immediately, I would walk away. Scammers often rely on pressure because they do not want you thinking too carefully about the request. The FTC specifically advises people against letting fundraisers rush them into making a donation.

Research the charity yourself

Ask for the organization’s name, then look it up independently. Do not rely on a website, QR code or social media account the solicitor hands you. Search for the charity yourself and check whether it is registered. Look for independent reviews and see how the organization says donations should be made. The FTC recommends researching unfamiliar charities before sending money.

Use the charity’s official donation channel

If the cause sounds worthwhile, you can still donate. Go directly to the organization’s official website after you have verified it. That gives you time to confirm who will receive your money without someone standing over you waiting for a tap.

Turn on bank and card alerts

I’m a big fan of account alerts because they can tell you the moment something happens with your money. Turn on notifications for card purchases and withdrawals. Also, consider alerts for transfers or other significant account activity. If you intended to donate $20 and immediately get an alert showing $2,000, you can contact your financial institution right away.

Lock down your payment and banking apps

Check the security settings inside apps such as Venmo, Cash App, PayPal and your bank’s mobile app. Enable Face ID, fingerprint authentication or a separate PIN when the app offers those protections. That creates another barrier if someone ever gets access to your unlocked phone.

What to do if you already fell for the scam

If you spot an inflated charge or realize you approved far more than you intended, move quickly. The sooner you respond, the sooner your bank can tell you what options are available.

1) Contact your bank or card issuer immediately

Call the bank or card issuer connected to the transaction. Explain exactly what happened. Tell them how much you agreed to pay and how much was actually charged. Ask whether the transaction can be stopped, disputed or reversed. If your banking app allows it, consider locking the affected card while you investigate. Brentwood police specifically advise suspected victims of this scam to contact their bank or card issuer immediately.

2) Save evidence of what happened

Take screenshots of the transaction and save any payment confirmations. Write down where the encounter happened and approximately what time it occurred. Also record the merchant name shown with the charge. Those details can help your bank or law enforcement investigate.

3) Check every financial account on your phone

If the scammer ever handled your unlocked phone, review the financial apps installed on it. Look for unfamiliar transfers or purchases. Then check whether anyone changed your email address, phone number or other account information. Continue watching those accounts over the following days because suspicious activity may appear later.

4) Change passwords if your phone left your hands

If a stranger had access to your unlocked device, change passwords for sensitive accounts that may have been exposed. I would start with your primary email account because criminals can use email to reset passwords elsewhere. Then secure banking and payment accounts. Use a password manager to create and store strong, unique passwords for each account, and turn on multifactor authentication wherever it is available.

HOW FLORIDA RETIREE LOST $200K IN FAKE PAYPAL REFUND SCAM

A tap-to-pay donation scam can turn a $10 or $20 gift into a charge worth thousands if you fail to check the amount before tapping. (Clara Margais/picture alliance via Getty Images)

5) Strengthen your phone security

Make sure your phone requires Face ID, fingerprint authentication or a strong passcode. Also protect sensitive apps when your device offers that option. The goal is to keep someone from turning a few seconds with your unlocked phone into access to your financial life.

6) Use strong antivirus software

Antivirus software will not reverse an inflated tap-to-pay transaction. However, it becomes much more relevant if the scammer convinced you to click a link, visit a website or download something. Strong antivirus protection can help detect malicious software and warn you about dangerous links used in follow-up scams. I recommend running trusted security protection across your devices and keeping it updated. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

7) Reduce the personal information scammers can find

Fraudsters often come back for a second attempt. If they learn your name, phone number or other personal details, they can combine that information with data already available online to make the next scam more convincing. Data brokers and people-search sites can expose personal information about you. You can remove much of this information yourself. However, the process can take time and information may reappear. A data removal service can automate many of those removal requests and continue checking for your information. It cannot erase information a criminal already obtained. Still, reducing your online footprint gives scammers less material to work with. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

8) Consider identity theft protection

If someone gained access to sensitive information on your phone, you may want an additional set of eyes watching for signs of fraud. Identity theft protection services can monitor for suspicious activity and alert you when certain personal information appears in places it should not. Some services also provide recovery assistance if your identity gets misused. That can be especially useful if you believe the incident exposed more than a payment card. See my tips and best picks on Best Identity Theft Protection at CyberGuy.com.

9) Consider freezing your credit

A fraudulent tap-to-pay charge by itself does not automatically mean someone can open credit in your name. However, the situation changes if a scammer also obtained sensitive personal information that could be used for identity theft. In that case, consider placing a credit freeze with Equifax, Experian and TransUnion. A freeze can make it harder for a criminal to open a new credit account in your name.

10) Report the scam

If you lost money, report what happened. Contact local law enforcement when appropriate, especially if the amount is significant or the same solicitors appear to be targeting other people. You can also report fraud to the Federal Trade Commission at ReportFraud.ftc.gov. If the person claimed to represent a charity, consider contacting your state attorney general or charity regulator as well.

The safest way to donate with your phone

I still like mobile wallets and I still plan to use tap to pay. The technology gives us convenience along with useful payment protections.

What changes for me is how I handle a stranger asking for a quick donation. I want to know exactly who is getting my money before I approve anything.

If I decide the cause deserves support, I can look up the organization later and donate directly through its verified website. That approach removes the pressure and gives me time to make sure my money reaches the people I intended to help.

Kurt’s key takeaways

Tap to pay remains one of my favorite ways to check out. I like the speed and I like the added security mobile wallets can provide. Still, technology cannot protect you from every number you personally approve. That’s what makes this scam effective. Most of us have become so comfortable tapping that we barely think about the final transaction screen. I want that habit to change. Before you tap, look at the amount. If a stranger is asking for a donation, give yourself time to verify the organization first. And if anyone asks to take your unlocked phone during the process, my answer would be an immediate no. Your generosity should reach the cause you chose, rather than a scammer counting on a few distracted seconds.

Would you still tap your phone to donate to someone who approached you in public after seeing how easily a small gift can become a four-figure charge? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

• Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
• For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
• Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Copyright 2026 CyberGuy.com. All rights reserved.