Specter App Transforms Flipper Zero into NFC Skimmer Detector
A new application for the Flipper Zero, named Specter, turns the popular hacking device into a passive tool for detecting active 13.56 MHz NFC readers, potentially identifying hidden skimming devices.
A novel application called Specter is set to enhance the capabilities of the Flipper Zero, transforming the handheld device into a passive counter-surveillance tool. Its primary function is to detect active 13.56 MHz NFC readers by identifying their emitted radio-frequency fields. This allows users to identify potentially suspicious readers that might be hidden near payment terminals, access-control panels, or other sensitive equipment.
Unlike many NFC tools designed for reading or emulating cards, Specter operates purely in a listening mode. The application is engineered not to transmit any carrier signals, query nearby devices, decode card traffic, or collect data from readers. Instead, it alerts users when it detects the characteristic radio-frequency field that a powered NFC reader continuously emits while waiting for a contactless card, key fob, or mobile device.
The Flipper Zero is already equipped with an ST25R3916 NFC chip and a 13.56 MHz antenna, hardware typically used for interacting with NFC cards. Specter leverages a feature within this chip family that includes an external-field detector. The application places this hardware into a dedicated detect-only state, continuously sampling for the presence of an external RF field.
Specter translates these samples into a live "FIELD %" reading, providing users with a "warmer-or-colder" indication rather than precise signal strength or distance measurements. The app's interface features an analog-style EMF gauge, a live waveform display, a peak-hold marker, and a "hot zone" indicator to visualize nearby NFC activity. As the detected field intensifies, the meter needle rises, and the proximity status updates from FAINT to NEAR, CLOSE, or STRONG.
When Specter identifies an active reader, it can trigger an alarm-style border and provide optional auditory or haptic feedback through clicks and vibration. The click rate accelerates as the user gets closer to the field source, enabling a physical area to be swept without constant visual monitoring. This functionality could prove useful for authorized inspections of point-of-sale systems, office hardware, access control installations, or personal belongings.
Security professionals can use Specter to establish a baseline by testing it against known legitimate contactless terminals or door readers. Any unexpected detections in other locations can then serve as an alert for further investigation. It is crucial to note that Specter detects the presence of an active HF NFC carrier but does not identify the reader, determine if it is malicious, capture transactions, or reveal processed data. Therefore, a positive detection should be treated as an investigative lead, not definitive proof of skimming.
The tool's capabilities are limited to the 13.56 MHz NFC band. It cannot detect older 125 kHz low-frequency systems, as the detection mechanism relies specifically on the Flipper's high-frequency NFC hardware. Furthermore, detection is contingent on the reader being powered and actively polling. Shielded, dormant, intermittent, or trigger-based devices may not emit a detectable field, meaning a clean sweep does not guarantee an area is entirely free of tampering.
Specter is distributed as a standalone .fap application, with a pre-built release installable via qFlipper under SD Card/apps/NFC/. Users can also compile it manually. For defensive use, it is recommended to launch Specter, open the Sweep screen, hold the Flipper flat against the target area, and move slowly while observing the meter or listening for the increasing click rate. While the listen-only design makes it suitable for authorized assessments, users must still comply with local laws and obtain necessary permissions before examining equipment they do not own.