Zombie Cards: How Expired Visas Keep Pinging Your Reader

Visa is quietly activating a feature it calls "zombification" — expired cards that still have their NFC chips active, so they can keep making contactless payments even after the expiration date passes. The feature is designed to solve the problem of people forgetting to update their cards in the reader. Instead of fighting with the terminal, the expired card just works.

The catch is that the card stays active for a grace period set by the issuing bank, usually 30 to 90 days. After that the chip goes dead. Meanwhile, Apple has sent out an "unprecedented" number of spyware warnings this week, and Ukraine struck a Russian ecommerce giant with combined cyber and drone attacks. The week's security news is not kind to regular people.

For the comunidad: the zombie card feature means your old Visa in the junk drawer is still a live payment instrument. If it's sitting in a bag with your other cards, someone could tap it. Better to cut the chip or take it out — your card isn't dead just because the date passed.

Why this matters for us: expired cards in our wallets are still live payment instruments, and the last thing la gente needs is a card in the junk drawer paying for something they didn't buy.