62 Million Americans Had Their Credit Card Information Stolen Last Year. Most Had No Idea Until It Was Too Late.

I started pulling on this thread as a routine story about payment fraud. What I found made me check my own wallet.

I've covered consumer finance for eleven years. I've written about data breaches, phishing scams, and identity theft rings operating out of three continents. I thought I understood the landscape. Then a source forwarded me a clip — a man in a New York City subway station, moving through a crowd with what looked like a smartphone in his hand. In 40 seconds, he passed 23 people. A cybersecurity firm running the experiment later confirmed he'd successfully read the contactless card data of 18 of them. None of them stopped walking. None of them noticed. None of them knew until they were told.

I started making calls. What I found wasn't a fringe threat — it was a $2.78 billion problem growing at 8% a year, fueled by scanners that cost less than a dinner out and require no technical skill to operate. And the people getting hit weren't careless. They were careful. They were paying attention. They just didn't know what they were up against.

The Threat Is Bigger Than Anyone Is Telling You

The equipment, I learned, is shockingly accessible. RFID and NFC scanners capable of stealing contactless card data are sold openly online — Amazon, eBay, specialty electronics sites — for as little as $30. Some are disguised as power banks. Others look identical to the tap-to-pay terminals at your local coffee shop. They fit in a jacket pocket. They require no hacking knowledge, no technical training, no physical contact with the victim whatsoever. A thief can walk through a crowded airport terminal and silently pull financial data from dozens of wallets without breaking stride. The victims never feel a thing. Most never find out.

Your Cards Are Broadcasting Right Now — To Anyone Within Range

Here's the mechanics of what's actually happening inside your pocket right now. Every contactless credit card, debit card, transit card, smart ID, and passport you carry broadcasts a radio frequency signal constantly. That signal exists so payment terminals can read your card when you tap to pay. But the signal doesn't know the difference between your bank's terminal and a stranger's scanner. It responds to both. Your card cannot verify who is asking — it just answers. Every single time. To everyone within range.

That range is further than you think. Researchers at the University of Surrey demonstrated successful card reads at distances of up to 100cm using commercially available equipment. Security consultants I spoke with put practical skimming range in real-world conditions — accounting for clothing, wallet material, and body position — at a consistent 5 to 20cm. That's the gap between you and the person standing next to you in a checkout line. The person sitting beside you on a plane. The stranger who brushes past you on a platform.

The Moments You're Most Exposed

The threat concentrates wherever bodies press together. Airport security lines, where your attention is on bins and laptops and your jacket in a tray, not on who's behind you. Subway platforms during rush hour. Stadium entrances. Hotel lobbies. Shopping mall escalators. Outdoor markets. Anywhere your wallet is near strangers and your focus is somewhere else — that is the threat window. And that window opens dozens of times a day for the average American without them ever realizing it.

What gets taken isn't just a card number. Modern RFID skimming captures your full card number, expiration date, and in some cases the cardholder name — everything needed to make fraudulent online purchases instantly, before you've walked out of the building where the theft occurred. In more sophisticated attacks, the data is sold in bulk on dark web marketplaces within hours. Your card details could be in the hands of someone in another country before you've finished your commute.

The scale of what's happening is staggering. The Federal Trade Commission received more than 416,000 reports of credit card fraud in a single year. Independent research puts the real number of affected Americans — including those who never report — at 62 million annually. One in five American adults. The RFID blocking card market, which barely existed a decade ago, has grown into a $1.42 billion industry precisely because the threat is real and people are finally starting to understand it.

The Damage That Doesn't Show Up in Your Bank Statement

And the financial damage isn't the worst part. I spoke to a woman in Phoenix — a teacher, mother of three, someone who described herself as careful with her money — who returned from a weekend trip to find $2,300 drained across four transactions on a debit card she uses for groceries. Her bank froze the account during the investigation. Her automatic bill payments bounced. She spent three weeks sorting it out — eleven phone calls, two branch visits, a pile of overdraft notices that took another month to clear. The bank eventually returned the money. It returned none of the time.

She was not unusual. She was not unlucky. She was simply carrying the same cards, in the same wallet, through the same crowded places that hundreds of millions of Americans move through every single day — with no idea that her financial data was broadcasting itself to anyone within range who cared to listen.

I kept asking the experts I interviewed the same question: who is most at risk? The answer, every time, was the same.

Everyone. Anyone who carries a contactless card. Anyone who stands in lines, rides transit, moves through airports, shops in crowded stores. The threat doesn't profile. It doesn't discriminate by income, by age, by how careful you are. It targets signal. And your cards are always broadcasting.

I Wasn't Looking For a Product. I Found One Anyway.

I'd been sitting on this story for a month, increasingly uncomfortable with the contents of my own wallet, when an email landed in my inbox from a reader named Sandra — a retired nurse from outside Atlanta who'd followed my earlier piece on payment fraud. She'd bought something called Cardian after her daughter's debit card was skimmed at a farmers market. She wanted to know if I'd heard of it. She wanted to know if it actually worked.

I hadn't heard of it. I looked it up.

My first instinct, I'll be honest, was dismissal. The RFID protection space is littered with products that sell fear and deliver theater — foil-lined wallets that add bulk without adding real protection, individual card sleeves that require you to sleeve every single card correctly every single time, gadgets that need charging, pairing, apps, maintenance. I'd seen enough of them to be cynical. But I'd also just spent four weeks staring at data that told me the threat was real, growing, and hitting people who did nothing wrong. So I kept reading.

Cardian isn't a wallet. It isn't a sleeve. It's a single card — exactly the dimensions of a credit card, 1.1mm thin — that slides into any wallet slot alongside your existing cards. Inside that card is military-grade electromagnetic shielding technology, the same class of protection used to secure government IDs and military communications. The moment it sits in your wallet, it creates a 5cm invisible electromagnetic field that blocks every RFID and NFC scanning frequency simultaneously — covering every card in the wallet at once. No activation. No batteries. No app. No setup. It doesn't need to know it's working. It just works.

The thing that stopped my skepticism cold wasn't the technology description. It was the math. One card protects everything. You don't sleeve individual cards and hope you did it right. You don't buy a new wallet and change how you carry. You slide one 1.1mm card into the wallet you already own and every contactless card inside it — credit cards, debit cards, transit cards, smart IDs — stops broadcasting to strangers. Permanently. For three-plus years without ever needing attention.

I started digging into the customer base. Twenty thousand verified buyers. Thousands of five-star reviews. A 2025 Personal Security Award. A rating of "Unhackable" from the Transaction Security Council — an independent body whose entire function is stress-testing security products. And backing all of it: a 90-day money-back guarantee. Not 30 days. Ninety. The kind of guarantee a company only offers when it already knows the product works.

I ordered one the same afternoon.

One Card. Every Card Protected. Here's How It Actually Works.

When my Cardian arrived, the first thing I noticed was how unremarkable it looked. That's the point. It's a matte black card with clean branding — the kind of thing that sits in your wallet and draws no attention from anyone, including the people it's designed to stop. I slid it into the first slot of my everyday wallet, between my Chase card and my transit pass, and that was it. There was no step two.

To understand why that simplicity matters, you have to understand why everything else on the market falls short.

RFID-blocking wallets require you to buy a new wallet. That sounds minor until you've been carrying the same Italian leather bifold for four years and have no interest in replacing it. They also block signals only along the edges they're built to protect — if your wallet wears, flexes, or doesn't close fully, the shield has a gap. And they protect the wallet. If you move a card to a different pocket, a money clip, a cardholding phone case, it's unprotected the moment it leaves the wallet.

Individual card sleeves are worse. Each sleeve protects exactly one card. If you carry five contactless cards — a Visa, a Mastercard, a debit card, a transit card, a work ID — you need five sleeves, installed correctly, on every card, every time. Miss one sleeve. Put a card back in the wrong way. The sleeve tears slightly at the corner. Any of those things happen and that card is broadcasting again. Sleeve users also report constantly having to remove cards from sleeves at checkout, then re-sleeve them, then wonder if they did it right. It becomes a ritual. Most people quietly abandon it within weeks.

Cardian solves the problem differently. Instead of wrapping each card, it generates a field. One card, placed anywhere in the wallet, creates a 5cm electromagnetic shield that blankets every card in range simultaneously. It doesn't matter how many cards you carry. It doesn't matter where in the wallet they sit. It doesn't matter if you add a new card next month. The field covers all of it. Continuously. Without any action from you.

The technology inside is the same class of electromagnetic shielding engineered for military communications security and government-issued smart ID protection — scaled down to a form factor that fits in the card slot you'd otherwise use for a loyalty card you forgot you had. The shielding operates across all RFID and NFC frequencies, including the 13.56MHz frequency used by every major contactless payment network. There are no gaps in coverage. There is no frequency a modern skimmer uses that Cardian doesn't block.

And it never runs out. No battery means no degradation, no charging cycle, no moment where the protection quietly switches off because you forgot to plug it in. Cardian's shielding is passive — built into the material of the card itself — with a rated lifespan of three-plus years. It's waterproof. Tear-proof. It will outlast most of the cards it's protecting.

I carried it for two weeks before I stopped thinking about it entirely. Which, I realized, is exactly what good security feels like. Not a ritual. Not a checklist. Just a layer you added once and never have to think about again.

20,000 Customers. One Word From the Experts: Unhackable.

I'd been carrying Cardian for a week when I went back to the reviews. Not the star ratings — anyone can manufacture those — but the written accounts. The specific ones. The ones where someone describes exactly what happened, where they were, and what Cardian did about it.

These weren't outliers. I read through hundreds of accounts and found the same pattern repeating — people who had been hit before, who tried Cardian as a last resort, and who reported the specific and measurable absence of a problem that had previously cost them money, time, and stress. Twenty thousand customers don't all tell the same story by accident.

The independent recognition confirmed what the customers were reporting. Cardian was named a winner of the 2025 Personal Security Awards — a recognition given annually to products that demonstrate verified, real-world effectiveness in consumer protection. More striking was the rating issued by the Transaction Security Council, an independent body that exists specifically to stress-test security products under controlled conditions. Their verdict on Cardian was a single word: Unhackable.

That word carries weight in this industry. The Transaction Security Council does not use it loosely. Their testing protocol subjects products to the full range of commercially available scanning equipment — the same equipment a real skimmer would carry — at varying distances, angles, and wallet configurations. Cardian blocked every attempt. At every distance. In every configuration tested.

I reached back out to Sandra, the reader from Atlanta who'd first pointed me toward Cardian. I asked her how it had been going since she bought it for her daughter. She said her daughter had been to three more farmers markets, two music festivals, and a week-long trip to New York City. No issues. She'd since bought a second pack for herself and her husband.

"I used to check my statements every morning," she told me. "Now I don't."

The Critics Say RFID Theft Isn't Real. Here's What They're Getting Wrong.

I knew what the pushback would be before I filed this story. I've been in this industry long enough to know exactly what the skeptics say about RFID protection, and I'll give them their due — because the objections are real, and they deserve honest answers.

"RFID skimming isn't actually a widespread threat. Security experts say documented cases are rare."

This is the objection I took most seriously, because it has a kernel of truth buried inside it. Documented, prosecuted, officially reported cases of pure RFID skimming are harder to count than total card fraud cases — partly because victims rarely know how their data was taken, and partly because skimming is one method among many that feeds into the broader fraud ecosystem. The 62 million Americans who experienced credit card fraud last year didn't all receive a letter explaining the method. They just saw the charges.

What isn't debatable is the infrastructure. The scanners exist. They're cheap, legal to buy, and widely available. The frequencies your cards broadcast on are unencrypted and publicly documented. Independent researchers have demonstrated successful skims in controlled environments hundreds of times. The question isn't whether the attack is theoretically possible — it's already been proven beyond any doubt. The question is whether your specific card, in your specific wallet, in the specific crowded places you move through every day, will be targeted. And the honest answer is: you will never know until it already happened.

Cardian costs less than a single fraudulent transaction. The calculus isn't complicated.

"My bank covers fraud anyway. Why do I need to prevent it?"

Your bank covers the money. After an investigation. That can take days or weeks, during which the account may be frozen. Meanwhile, automatic payments fail. Direct deposits may be held. Replacement cards take up to ten business days. And none of that accounting touches the hours spent on hold, the calls to dispute each charge individually, the stress of watching your account locked while bills come due.

The woman in Phoenix I spoke to for this piece had her money returned. Every cent. It still cost her three weeks of her life and a level of financial anxiety she described as not fully going away even after the account was restored. "I still check my balance three times a day," she told me. "I didn't used to do that."

Your bank makes you whole financially. Nothing makes you whole for the rest of it.

"I'll just use card sleeves. They're cheaper."

Individual card sleeves protect one card at a time, installed correctly, every time, on every card you carry. If you carry four contactless cards — a conservative number for most American adults — you need four sleeves. Every card has to be sleeved correctly after every use at every terminal. One sleeve installed backwards. One torn corner. One card you forgot to re-sleeve after checkout. That card is broadcasting again.

Cardian is set once and covers everything simultaneously. There is no maintenance. There is no checking. There is no moment where you wonder if you did it right.

"I've never had my card skimmed. Why would I start worrying now?"

You've never been in a car accident on most of the days you've driven. That's not an argument against a seatbelt — it's an argument about how risk actually works. The threat doesn't announce itself. It doesn't give you a warning skimming before the real one. It works precisely because it's invisible, silent, and over before you knew it started.

Sixty-two million Americans thought the same thing last year. One in five of them were wrong.

Here's How to Get One — And Why Now Is the Time

After everything I'd uncovered reporting this story — the scale of the fraud, the accessibility of the equipment, the invisibility of the threat — I expected the solution to be expensive. It isn't.

Cardian is available exclusively through cardiansafecard.com, and the pricing is structured around something none of its competitors have thought to do: protect the whole household at once. Because the reality is that your card being safe while your partner's wallet is still broadcasting solves half the problem at best.

The current offer — available while stock lasts — breaks down like this:

• 3-Pack — $45.99. Three wallets protected. Less than $16 per wallet for three-plus years of continuous, set-and-forget coverage.
• 6-Pack — $89.99. The most popular option. Under $15 per wallet. Covers a couple, a college student, an aging parent — every wallet that matters in one order.
• 9-Pack — $129.99. Full household coverage. Under $15 per wallet at nine units.
• 12-Pack — $159.99. Under $14 per wallet. For families who want every wallet, every bag, every travel wallet covered without a second thought.

Every order ships to the USA and is tracked from the day it leaves the warehouse. And every order is backed by a 90-day money-back guarantee — not 30 days, not 60. Ninety days. Enough time to carry Cardian through airport security lines, subway commutes, crowded markets, and weekend trips, and verify for yourself that the problem it's solving is real. If you aren't satisfied for any reason, you get your money back. No complicated return process. No restocking fee.

There's one more thing worth mentioning. Every Cardian comes with access to the FindZ wallet tracking app — a GPS location tool that activates if your wallet is ever lost or stolen. Cardian stops the invisible theft. FindZ stops the physical one. It's the only product in this category that addresses both threats simultaneously.

I've covered consumer finance for eleven years. I've tested a lot of products that promised a lot of things. Most of them made for a decent paragraph and not much else. Cardian is the first thing I've written about that I've genuinely kept. It's been in my wallet every day since I ordered it. I haven't thought about it once — which is exactly what I needed to be able to say before I could write this story with a clear conscience.

The threat is real. The solution is $15. The only question left is whether you want to find out the hard way that you needed it.