Can we build our own Google wallet by nfc relay?

v9yrun4qy

Is it possible to build some app to relay NFC messages? So that I can leave my credit card at home, and relay NFC messages to the card at home while I am outside?

Saw this repo https://github.com/NFCsecurity/NFCrelaying, but it's 13 years old and I don't know if there is any new security measures added recently to prevent this.

phonenotworking

There are alternatives, curve pay, local apps, germin pay and in the future they will probably be more.

For now, cash is king

v9yrun4qy

phonenotworking none of these works in Canada 😂

v9yrun4qy

https://youtu.be/PPJ6NJkmDAo

Also saw this video, so it's possible? Is there any open source software?

erikfritzek

v9yrun4qy Is it possible to build some app

phonenotworking

v9yrun4qy Its only for iphone and specific setting and specific bank, in general paying with the phone is very secure.

Are you sure none of them pay? Germin pay should just work everywhere. And cash of course. I would also check if any Canadian local banks work, check in lists - https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/

v9yrun4qy

phonenotworking I just checked. None of the major banks supports Garmin pay

Graphene1

I had a phase of wanting this feature to, I quickly got over it by sticking a bank card in a Pixel Snap wallet.

Be careful searching for a solution, I've read a couple of articles about NFC Malware.

Example:

https://www.bleepingcomputer.com/news/security/massive-surge-of-nfc-relay-malware-steals-europeans-credit-cards/

v9yrun4qy

Graphene1 I just want to leave my credit card at home and tap to pay using my phone. An "malware" that relays NFC messages is exactly what I want.

Handlebar6933

v9yrun4qy I think the issue would be POS terminals and banks trusting the GOS wallet enough for it to be useful to pay in most places.

Handlebar6933

phonenotworking Curve pay has opaque KYC issues with some people including me

v9yrun4qy

Handlebar6933 I want to emulate the credit card. If done perfectly, it would be the same as tapping a physical card. So the POS can't tell the difference between the relay app and a physical card.

gone-

https://walt.is/ this might become a good replacement for GPay.

phonenotworking

Graphene1 Its still quite safe, it is more secure than just using credit card which is not a very secure device, especially those with tap to pay which at this point is virtually all of them. cash is of course better.

Carrousel7956

gone- interesting. They shouldn't claim privacy though it's misleading. It's like a YouTuber saying go watch my videos on YouTube, it's private because I'm not tracking you.

Arcanis

You need a way of provisioning tokens from Mastercard and Visa. This is not a Google restriction. Google allows the use of NFC. However, it is Mastercard and Visa that gstekeep the tokens. Once you make an app that can securly provision the tokens, then you have to go through Visa and Mastercard's approval process to allow them to be accepted. This is why here in the US it's not something that is done while it is done in Europe with Curve. A token has to be created in order for the card to be accepted. Usually it is Google pay that Provisions to token. Not the card reader.

v9yrun4qy

Arcanis I don't want to build Google wallet. What I want is this malware https://www.bleepingcomputer.com/news/security/supercard-x-android-malware-use-stolen-cards-in-nfc-relay-attacks/ so I can emulate the physical credit card