Finance
Expired credit cards can still be used for contactless payments, \'zombie card\' flaw found
A vulnerability has been found that allows some expired credit cards to be used again for contactless payments. A University of Massachusetts Amherst research team presented a “zombie card” attack at USENIX Security Symposium 2026. The team said expiry information may not be consistently protected and verified across the terminal, payment network and card issuer. In tests, the attack succeeded with Visa contactless Kernel 3 in some settings.
