The call is the attack. Researchers found malware that spends your card while you hold it.
Group-IB documented a scheme where a caller posing as your bank talks you into installing an app, then relays your contactless card to a terminal somewhere else in real time. The defence is a sentence, not a setting.
Disclosure: No paid placement. Top Apps HQ has no commercial relationship with Group-IB, Google or the publishers cited.

