www.malwarebytes.com 8/21/2026, 2:47:05 PM · external

Visa Zombie Card Bug Allows Expired Cards to Work Contactless

Visa Zombie Card Bug Allows Expired Cards to Work Contactless
Developing story vulnerability 2 articles tracked
Zombie Card flaw allows expired Visa contactless cards to work
CyberSIXT Evidence Panel
Primary Source umass.edu

THE article discusses the potential security risk of using expired Visa credit cards, termed "Zombie Cards," which can still be used for purchases due to a flaw in contactless payment systems. Researchers from the University of Massachusetts Amherst discovered that some contactless payment terminals are vulnerable to tampering, allowing the expiration date on the card to be modified to a future date.

While this exploit is not universal across all cards, it highlights significant security gaps in payment processing systems. Cardholders are advised to physically destroy expired cards and report lost cards to mitigate risks. The responsibility for ensuring the integrity of expiration data primarily lies with payment networks and issuing banks.

View Primary Source Via www.malwarebytes.com

Article by CyberSIXT

Timeline Coverage

Swipe to explore timeline