The New York State Sheriffs' Association is warning Android users about a new scam that could lead to your credit or debit card information being stolen.

The association says a form of malware called NGate, which targets Android devices, can steal card details and PINs using a short-range wireless technology (Near Field Communication), allowing criminals to tap into your phone. The information can be used to make ATM withdrawals without ever having your physical card, investigators say.

According to authorities, if your phone is infected and you’re tricked into using a fake tap-to-pay or card verification screen, and you enter your PIN, the malware captures that live payment data and sends it to criminals waiting at an ATM to cash out.

How to protect yourself: • Only install banking a

See Full Page