How to create a Crypto NFC card - what options and what to consider

Overview

This guide explores the various uses and applications of NFC cards.
Understanding the specific purpose of your card is crucial. Whether you're planning to create a high-security crypto wallet card, such as those used for digital asset storage like the Tangem Card - or a simple digital business card for networking , clear planning from the start will make a significant difference.

This page is designed to help you ask the right questions and consider the key factors early on, potentially saving you time, money, and unnecessary setbacks down the line.

NFC Chip

NFC (Near Field Communication) chips are essentially memory chips, containing transferrable data when tapped next to a phone or other NFC enabled reader.
NFC chips are used in business cards to enable quick and contactless sharing of information. Here’s how they work and why they’re useful:

1. Type: Small electronic chip that uses short-range wireless communication.
2. How It Works: Activated when tapped by an NFC-enabled device (e.g., smartphone or payment terminal).
3. Data Storage: Stores dynamic data like payment credentials or authentication tokens.
4. Usage: Used in smart business cards, keyless entry and contactless payments (Apple Pay, Google Pay).
5. Pros: Faster, more secure, no camera needed.
6. Cons: More expensive than QR codes, requires an NFC-enabled device.

What is the difference between NFC & RFID chips?

The main difference between NFC (Near Field Communication) and RFID (Radio Frequency Identification) chips lies in range, communication type, frequency, and use cases. Here's a clear breakdown:

In essence:
NFC is a specialised, secure, short-range version of RFID, built for interactive consumer applications.
RFID is broader and better suited to logistics, tracking, and automation where long range and speed matter.

Questions to ask yourself

Before we can discuss design, it is critical we know the intended use and application for the cards to be created. This way we ‘trim the fat’ down to available options.
If you let us know your exact goal, we can recommend a suitable chip or solution.

1. What is the intended use(s) for the card?
   This could be:
   a. Open webpage or app
   b. Digital Business Card
   c. Access Control
   d. Transactional use ( ATM , POS, Crypto)
   d. Multiple
2. If you need to use these cards for Finacial / transactional use ...
   Do you have certification? If not, how will you obtain certification? see more detail here
3. Variable or static data:
   Does each individual card need to have variable data – or can it be static?
   Scenario 1: you want all cards to go to the same page on your website = STATIC
   Scenario 2: you want each card to go to a different page on your website = VARIABLE
4. What is the ‘data size’ requirements ?:
   You need to know the maximum amount of data that needs to be stored on the chip – or – QR code to be generated. see more detail here
5. Who will encode the cards?
   You can either supply us details in a spreadsheet, or encode the cards yourself.
   see more detail here
6. What type of cards are you after?:
   If you want an NFC chip , we offer the following options:
   PVC | Metal | Hybrid metal and plastic | carbon fibre | Wood | transparent PVC
   See standard NFC card range here. Note MIN 100 pcs order.
   
   We also offer quick turnaround black metal option here.
   This has MOQ of 1 pce. Note this is laser engraved only – no printing - NTAG 213 ONLY.

What type of chip do bank cards use?

Bank cards that support contactless payments use secure NFC chips, typically in the form of secure elements (SEs) or microcontrollers designed specifically for EMV-compliant transactions.

Bank Cards Use NFC (a type of RFID)

• Most modern contactless bank cards (Visa payWave, Mastercard PayPass, etc.) use NFC technology, which is a subset of HF RFID (13.56 MHz).
• These cards are designed to communicate securely over very short distances (less than 4 cm), which is perfect for tap-to-pay terminals.

• If you’re building a tap-to-pay solution or secure ID, NTAG-213 / 215 is not suitable.
  They lack the encryption and security protocols needed for financial transactions.
• If you’re creating an NFC business card, promotional item, or URL tap, NTAG213 is a perfect low-cost choice.

NFC Chip Types Used in Bank Cards

What are the most common EAL6+ Chips?

Brands & Examples Used in Bank Cards

These chips run EMV applets (e.g. Visa, Mastercard, AMEX), handle cryptographic handshakes, and ensure transaction-level security.

If you're looking to build or simulate a payment card,
you’d need access to EMV-certified chips and software
These are not publicly available for security reasons...

---

so what can you use?

while EMV-certified chips and official payment software are restricted due to security and regulatory reasons, there are some publicly available alternatives that offer high security NFC features.
These are ideal for secure access, authentication, identity management, or encrypted data storage, though not for real financial payments.

Publicly Available NFC Chips

These are the most common publicly available NFC chips That do not require Accreditation to purchase / encode :

If you're looking for high-security NFC chips that are publicly available and programmable using a smartphone, there are a few solid options — but it's important to note that most highly secure chips (like MIFARE DESFire or JavaCard) still require specialised hardware (like a desktop NFC reader/writer) for full programming.

NFC Data Allowance

The amount of data a NFC Chip can be encoded with dramatically varies depending on the chip.
NTAG-213 is the most common that we sell (due to its cheaper price).
It has a memory capacity of 144 bytes of usable storage for data.
NTAG-215 is the next step up. It has a memory capacity of 504 bytes of usable storage for data.
NTAG-424 DNA is the next step up. It has a memory capacity of 868 bytes of usable storage for data + superior security.

What this means?

• Text Storage: It can hold around 136 characters of plain text.
• URL Storage: If encoding a URL, it can store a shortened web link (e.g., Bit.ly links).
• vCard (Contact Information): Limited to basic details (name, phone, email, etc.)
  See more info here
• Other Uses: Can store small commands, authentication data, or be used for basic NFC applications.

This has 144 bytes of available memory.
Keep in mind:
* a basic vCard with NO logo and basic details will be above 3,000 bytes.
* a basic vCard WITH logo and basic details will be above 8,000 bytes.

This is the reason why we encode URL / LINKS to the cards.

WARNING Size of links

To check the data size of your link, use this data caculator

In this example, we have a Google Reviews link: See more details here

https://www.google.com/search?hl=en-AU&gl=au&q=Fluid+The+Color+Salon,+3/8+Martha+St,+Camp+Hill+QLD+4152&ludocid= 1745254678834947767&lsig=AB86z5WhAxRg6Cdkd8pOQYk0saj2#ip= 1&lrd=0x6b915bb680e0f35f:0x183863e2368ba6b7,1,,,,

This equates to 220 bytes - over the allowable 144.
In this instance you would either need to:

1. Upgrade to a bigger data sized chip, such as the NTAG-215 (which has an allowable 504 bytes)
2. Use a URL shortening service such as Bit.ly

Encoding NFC cards

There are various methods of encoding NFC cards, it comes down to the Chip type and required application of the card. Here is an overview

Encoding Standard NFC cards

The most common chips used in NFC applications (particularly in cards, tags, and labels) come from the NTAG series by NXP. They are widely adopted due to their compatibility with NFC Forum Type 2 & 4 standards, reliability, and broad support across smartphones and NFC readers.
NTAG-213 & NTAG-215 are the most common. See the datasheet

Encoding standard NFC cards (NTAG 213 / NTAG 215) is most easisly done by using your phone and the free app NFC Tools (by wakdev):

The most common method of using NFC for business cards is Encoding a URL to a Digital Business Card:
Basically you are only encoding a URL. When the NFC card is tapped to a phone, it is sending the URL to the phone to open a webpage.
This webpage usually contains the business's logo (or photo), a bit of info text and the following buttons:
• Link to website & social media
• Download vCard (save contact to person's phone) See more details here

We can encode the NFC cards for you, alternatively, you may wish to encode them yourself.
This is common when you have a quantity of cards, but don’t want to commit to having the same data encoded on them at the time of purchase.

Luckily, encoding the NFC chip is a simple process. All you need is your phone and a free app!

1. Select ‘write’ from the top menu
2. Select ‘ add a record’
3. select “URL/URI”
4. enter / paste the URL
5. click write
6. tap card to write

Test your card by esiting app, then tapping the card to the back of your phone

Encoding Secure NTAG-424 DNA NFC cards

The NTAG 424 DNA is a next-generation NFC tag developed by NXP, featuring advanced AES-128 encryption for high-level data security.
A standout capability of this chip is its ability to produce a unique, dynamic NFC response with every scan—making it extremely difficult to duplicate or tamper with.
This built-in authentication makes it ideal for confirming the legitimacy of physical products.
Both businesses and end users can trust the tag's embedded data for instant verification, without needing a dedicated app.
For brands and manufacturers, encoding products with NTAG 424 DNA technology offers a powerful solution to combat counterfeiting and preserve brand reputation.

Encoding an NTAG 424 DNA chip with encryption involves a series of steps to configure secure access and cryptographic settings (such as AES-128 keys).
See the datasheet

What You Need

1. NTAG 424 DNA tags
2. USB NFC encoder/reader
   e.g., ACR122U, Identiv uTrust, or ACS NFC Reader ACR1252U
   We are currently trialling this one off Amazon
3. Encoding software that supports secure NDEF & AES encryption
   eg:
   
   • TagXplorer (NXP) – official dev tool
   • GoToTags Windows App – for NDEF writing
     NDEF is a standardized message format used by NFC devices to exchange data, ensuring compatibility between different devices and tags. Essentially, it's a way of organizing and structuring information on an NFC tag so that devices can reliably read and understand the data.
   • Identiv App, NXP TagWriter (for mobile only)
   • Custom tools using NXP TapLinx SDK

Understanding the Process

NTAG 424 DNA supports AES-128 crypto authentication and Sun Message functionality, allowing secure, dynamic data exchange per scan.
You’ll need to:

• Set up file and key access rights
• Generate & write AES keys
• Enable Secure Dynamic Messaging (SDM)

Step-by-Step: Encoding NTAG 424 DNA (Encrypted)

1. Connect Your USB NFC Encoder
   Plug your NFC encoder into your computer via USB and ensure drivers are installed.
2. Launch Compatible Encoding Software
3. Detect the NTAG 424 DNA Tag
   Place the NFC tag on the reader and ensure it’s detected in the software.
4. Set Up AES Key
   
   • Define an AES-128 encryption key (typically 16-byte hex format)
   • Write the AES key to the tag’s Key Store (Key0, Key1, etc.)
   • Assign access rights (e.g., file read = encrypted)
   Tip: Save keys securely; lost keys cannot be recovered.
5. Configure NDEF File
   
   • Create a new NDEF file or edit the default
   • Insert a dynamic URL using SDM placeholders (e.g., ${UID}, ${COUNTER})
   • Choose SDMENC = TRUE for encrypted payload
6. Enable Secure Dynamic Messaging (SDM)
   
   • Link the NDEF file with the AES key
   • Set file access conditions to “Encrypted Read Access”
   • Enable SDM MAC & encryption
7. Write and Lock)
   
   • Write the configuration to the tag
   • Optionally lock or protect configuration to prevent changes

Testing & Validation

• Scan with a compatible mobile reader (e.g., NXP TagInfo)
• Verify that the message dynamically updates with encrypted content per scan
• Use decryption logic (server-side or in-app) to validate the tag

Notes on Security

• Keep AES keys confidential and distribute securely
• You may need to build or use an authentication backend to validate the dynamic encrypted messages

🧩 Bonus: Development Tools

If you're building your own application:

• Use NXP TapLinx SDK (Java/Android)
• Supports authentication and SDM validation

What Can Be Done with a Phone?

An alternative to consider is MIFARE Ultralight C .

Encoding EAL6+ NFC cards

If you are wanting to create something like the Tangem Card , you will require certification to be able to encode the EAL6+ chip.
Encoding or programming EAL6+ secure element (SE) chips is not straightforward, but here's a practical guide broken down for developers or technical users who want to work with these high-security chips.

What Does “Encoding” an EAL6+ Chip Mean?

• Loading or configuring data and cryptographic keys into a secure element
• Installing applets (e.g. JavaCard applets if JCOP-based
• Setting access control (APDUs, PINs, authentication keys)
• Personalising the chip for a specific use: crypto wallet, authentication token, or secure ID

What You Need

1. A Supported EAL6+ Chip or Card
Common options:

• JCOP 4 JavaCard (NXP SmartMX2)
• STPay Secure Element
• Infineon SLE78, SLC52

2. A Smartcard Reader (Contact or NFC)
For desktop development:

• ACS ACR122U (basic NFC reader)
• ACR1252U (NFC + Secure element handling)
• Proxmark3 (advanced, but more for research)

Android phones can be used for APDU communication over NFC but have limitations.

3. Software Tools

• GlobalPlatformPro (open source)
  For loading applets and managing keys
• JavaCard Development Kit (Oracle)
  Needed if using JavaCard-based secure elements
• OpenSC or PyAPDUTools
  (for command-level control)
• IDE: Eclipse, JCIDE, or any Java IDE for applet development

How to get Secure Element (SE) Certification

Information provided is general in nature.
To obtain certification to purchase and encode Secure Element (SE) cards in Australia, you'll need to navigate both international and local frameworks.
Here's a step-by-step guide:

1. Understand GlobalPlatform Certification
GlobalPlatform is the primary international body that defines specifications and certification processes for Secure Elements. Their certification ensures that SE products meet security and interoperability standards.

• Security Certification: Evaluates products against Common Criteria-recognised protection profiles, ensuring they meet required security levels.
• Functional Certification: Verifies that products adhere to GlobalPlatform's specifications and configurations.

To begin, familiarise yourself with GlobalPlatform's certification schemes and consider enrolling in their training programs to gain a deeper understanding of SE specifications.

2. Engage with Accredited Evaluation Laboratories
For certification, products must be evaluated by GlobalPlatform-accredited laboratories. These labs conduct security evaluations and functional testing to ensure compliance with standards.
While GlobalPlatform provides a list of accredited labs, ensure you select one that aligns with your product type and certification needs.

3. Comply with Australian Regulatory Requirements
In Australia, the Australian Information Security Evaluation Program (AISEP) oversees the evaluation and certification of IT products, including Secure Elements, against the Common Criteria.

• Certification Process: Products are evaluated by licensed Australian labs, and certifications are issued by the Australian Certification Authority (ACA).
• Certified Products List: AISEP maintains a list of certified products, which can be referenced to ensure compliance and recognition within Australia.

Engaging with AISEP ensures that your SE products meet national security standards and are recognised for use within Australia.

4. Acquire and Encode Secure Element Cards
Once certified, you can procure SE cards from reputable vendors. In Australia, companies like Unicard offer a range of access cards, including HID iClass and MIFARE DESFire, and provide encoding services.
For Encoding:

• Software Tools: Utilise tools compatible with your SE cards, such as NXP's TagWriter or other specialised software, to encode data securely.
• Security Considerations: Ensure that encoding processes adhere to the security standards established during certification to maintain data integrity and protection..

RFID Options

“What is the difference between NFC and RFID chips? The main difference lies in the range of communication.
While RFID can be used to receive and transmit radio waves over distances of 100 metres or more (for active tags, equipped with their own battery),
NFC is limited to no more than 20 cm in the best cases. In reality, NFC's range is more like 0 to 5 cm.”

---

Why Choose Us for Business Cards Printing

At Print Promotion, we offer the best in business cards according to your unique brand. From premium material to cutting-edge printing techniques, we ensure the cards leave the right impression on the recipients' minds. Services are offered across Newstead, QLD, and all surrounding regions to provide our customers with quality and personalisation.

Building your brand identity requires a strategy, including selecting the best business cards. From selecting materials to perfecting the design, emphasis is placed on every detail. Choose a reliable printing service for your business cards and enjoy a professional look that reflects the very heart of your brand.

Get started today!

Call us on 1300 669 211,or shop online at www.printpromotion.com.au. Although online shopping is available, we recommend a complimentary consultation (via phone or video call) based on your artwork to ensure the best results. Let us help you print business cards that will leave a lasting impression!