Card-present fraud is payment fraud in which a transaction is processed as if the cardholder were physically present, such as a chip insert or contactless tap. That classification matters because card-present payments often have different authentication and liability rules than card-not-present transactions. Attackers try to exploit those rules by making a transaction look legitimate to the payment network, terminal, or issuing bank.
In cyber security, card-present fraud can involve stolen cards, cloned credentials, or mobile malware that abuses NFC features such as Host Card Emulation. A compromised phone may be used to relay or emulate card behavior while the attacker controls the device remotely. Defenders look for suspicious app installs, abnormal NFC or accessibility permissions, device-lock issues, and timing patterns that do not match normal in-person use. Strong device controls and fraud analytics help reduce the risk.