Reading Data Stored on Contactless Payment Cards

Do you know how to easily read your credit card details? Probably, you do, because for a few years now, a simple phone with an NFC reader has been enough to do this. On the market we can choose from many applications for different platforms that offer such a possibility.

Today we will compare which of them work best.

It is worth to add that you should be careful when using applications of this type (even more so, if you install them from an untrusted source) and test only invalid payment cards, e.g., on the Android emulator (in a controlled environment).

1. Banking Card Reader (free)

Available items:

  • Card number
  • Card expiry date
  • Card AID
  • Application name
  • Card type
  • Remaining PIN attempts
  • List of transactions
  • Log and logbook (free version shows data in coded form)

To download:

https://play.google.com/store/apps/details?id=com.github.devnied.emvnfccard

Source code: https://github.com/devnied/EMV-NFC-Paycard-Enrollment

2. Banking Card Reader Pro (paid)

Available items:

  • Card number
  • Card expiry date
  • Card AID
  • Application name
  • Number of applications
  • Card issuer
  • Available services
  • Card type
  • Number of transactions
  • Remaining PIN attempts
  • List of transactions
  • Log and logbook

To download:

https://play.google.com/store/apps/details?id=com.github.devnied.emvnfccard.pro

3. Card Test (Free)

Available items:

  • Card number
  • Card expiry date
  • Application name
  • Card type
  • Exhibitor’s country code
  • Cardholder’s name and surname
  • Public key of the issuer (certificate)
  • ICC public key (certificate)
  • Main account number
  • And many others

To download:

https://play.google.com/store/apps/details?id=com.samj.CardTest

4. CreditCard NFC Reader (free)

Available items:

  • Card number
  • Card expiry date

To download: https://play.google.com/store/apps/details?id=com.pro100svitlo.nfccardread

5. NFC Smart Card Info (free)

Available items:

  • Tag identifier
  • List of available applications
  • History data
  • And some other interesting information

To download: https://play.google.com/store/apps/details?id=com.inoapp.cardinfo

6. Smart Card Toolkit (free)

Available items:

  • Card AID
  • Application name
  • Cardholder’s name and surname
  • Exhibitor’s country code
  • Interesting log with explanations
  • And many others.

To download: https://play.google.com/store/apps/details?id=sasc.android.smartcard

7. Banomat Card Infos 2 (free)

Available items:

  • Card number
  • Card expiry date
  • Card type
  • Remaining PIN attempts
  • List of transactions
  • Transaction counter
  • Tag identifier
  • CPLC (Card Production Life Cycle) data:
    • IC Fabricator
    • IC Type
    • Operating System
    • Operating System Release Date
    • Operating System Release Level
    • IC Fabricator Date
    • IC Serial Number
    • IC Batch Identifier
    • IC ModuleFabricator
    • IC ModulePacking Date
    • ICC Manufacturer
    • IC Embedding Date
    • Prepersonalizer Identifier
    • Prepersonalization Date
    • Prepersonalization Equipment
    • Personalizer Identifier
    • Personalization Date
    • Personalization Equipment
  • Unique card identifier
  • And many others

To download: https://play.google.com/store/apps/details?id=at.zweng.bankomatinfos2

Source code: https://github.com/johnzweng/bankomatinfos

8. EMV Card Reader (free)

Available items:

  • Card number
  • Card expiry date
  • Card AID
  • List of functions supported by the card
  • Log APDU (Application Protocol Data Unit)

To download: https://play.google.com/store/apps/details?id=com.charm.android.nfc_emv_card_info

Summary

The analysis of activities performed by various applications allows you to discover many interesting facts. From the logs of their operation we can learn that to check the card manufacturer, an AID (Application Identifier) is sent. If the application on the phone gets a correct answer, it assigns the manufacturer on this basis. The AID card list can be found here, for example: https://www.eftlab.co.uk/index.php/site-map/knowledge-base/211-emv-aid-rid-pix.

The EMVTags application may also be helpful in the tests above, which will explain the meaning of a given tag and other elements, such as its format or length.

As you may have noticed, some applications are not directly intended for payment cards, but they are also worth trying. Please note that depending on the bank and the type of card, the results may vary greatly.

As a curiosity, does your payment card show a list of transactions history.

Additional links