NFC-LIMIT-BYPASSImpact

Contactless Limit Bypass

Set Terminal Transaction Qualifiers (TTQ) to claim CVM was performed — push transactions above the no-CVM limit.

§ Where this technique fits

NFC-LIMIT-BYPASS is catalogued under the Impact tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 5 on average.

§ Dossiers chaining this technique

Apple Pay Express Transit relay → high-value contactless fraud
Specific configuration (Express Transit + Visa) allowed contactless transactions over £1k without unlock or per-tx auth. Two devices relayed the wallet from victim's pocket to a real terminal.
step 5 / 6

§ What commonly comes next

01
Exfiltration Over C2 Channel
T1041 · Exfiltration
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

Apple Pay Express Transit relay → high-value contactless fraud

§ What commonly comes next