Contrary to the original application, the malicious version does not cut NFC card data, but rather a clone of the attacker’s card on the victim’s device. When the victim uses this fraudulent clone to register with a ATM, the entire amount is sent to a scammer card.
This form of attack is similar to a fraud with a “safe score ,, but the victim is not recommended to enter a verification code for SMS. Instead, the “new” PIN code, allegedly linked to the user’s own card, is reported.
In the first quarter of 2025, the total damage to Russian banks, one of the malicious versions of NFCGATE, was 432 million rubles to the customers of Russian banks, and an average of 40 successful attacks per day brought average damage to 120,000 rubles.
Source: Ferra

I am a professional journalist and content creator with extensive experience writing for news websites. I currently work as an author at Gadget Onus, where I specialize in covering hot news topics. My written pieces have been published on some of the biggest media outlets around the world, including The Guardian and BBC News.