Chicago scam highlights risk of “ghost tapping” near card readers at retailers like Target

A Chicago woman reported losing $5,000 after she stopped briefly to listen to a stranger outside a Target store, according to a Yahoo Finance report. The story, framed as a warning about so-called “ghost tapping,” describes how scammers can exploit contactless payment technology by keeping a victim’s tap-to-pay card or phone within range of an unauthorized transaction device while attention is diverted elsewhere.

In contactless payments, the card or phone uses short-range wireless technology to communicate with a reader when you tap. Ghost tapping attempts to take advantage of the same proximity principle, using a device that can repeatedly prompt or enable taps without the victim realizing what is happening. The core idea is distraction plus distance, using close contact to create confusion about what, if anything, is being authorized at the moment a victim is talking to someone nearby.

The Yahoo Finance account links the alleged theft to a distraction tactic outside a retailer entrance. While the report centers on the victim’s experience, it does not suggest that Target’s systems were compromised, or that Target itself is accused of wrongdoing. Rather, it points to a broader consumer-security issue around payment methods that rely on “tap” interactions and quick authorizations.

The incident also illustrates a pattern that consumer-facing payment guidance often emphasizes: fraud is not always tied to large-scale cyberattacks against a merchant. In many contactless fraud scenarios, the attack depends on social engineering (the conversation or interruption) and physical proximity (the scammer’s ability to get close enough to the victim’s card or device).

Because the Yahoo Finance piece is positioned as a practical warning, it does not provide additional details that would typically help establish a clearer timeline for law enforcement or forensics, such as the exact locations of the alleged transactions, the number and timing of authorizations, or whether the woman’s bank confirmed the charges as legitimate taps versus other fraud vectors. The report’s key value, in this case, is drawing attention to how quickly contactless payments can become a risk when the victim is not watching the interaction.

For Target, the business relevance is indirect but real. Target is one of the best-known U.S. retailers for in-store shopping, and it is also a common setting for the kinds of everyday encounters where distractions can occur. Even when a retailer is not the target, high-traffic entrances and busy curbside or sidewalk foot traffic increase the visibility of consumer scams and make the “what to do” guidance for shoppers more consequential.

For consumers, the episode underscores that tap-to-pay convenience can be vulnerable when paired with inattention. A cardholder’s best defenses depend on the bank and device settings they use, including whether the phone or card prompts for additional authentication, the steps their payment app takes to confirm purchases, and whether they keep the payment device secured when they are talking to strangers.

What remains uncertain from the Yahoo Finance report is how the charges were technically triggered and whether there were additional contributing factors beyond proximity, such as prior card configuration, specific merchant reader behavior, or banking notification delays. The company’s involvement in the incident is not established beyond the fact that the encounter happened outside a Target store, so the episode should be treated as a consumer-safety alert rather than evidence of a Target payment-system breach.

Next, shoppers may look for bank communications tied to the event, including whether transactions were marked as contactless and whether disputes were filed successfully. Retailers, meanwhile, are likely to continue relying on consumer guidance, store-level awareness, and law-enforcement collaboration rather than disclosing operational changes in response to individual incidents unless a broader scheme is detected.