How RFID Cards Work
How Does an RFID Card Work? The Tech Inside
Quick answer
RFID cards look like ordinary plastic cards but contain a hidden antenna and microchip that communicate wirelessly with card readers.
- Where audit trails matter, no battery required — RFID cards are powered entirely by the electromagnetic field emitted by the card reader. The card's antenna captures this energy and converts it into electricity to power the chip, a process called electromagnetic induction.
- Antenna and chip: every RFID card contains two key components: a coil antenna (a loop of wire embedded in the card) and a microchip (smaller than a grain of rice) that stores data and processes commands.
- Data exchange in milliseconds. The entire communication cycle (power up, authenticate, exchange data, power down) happens in 50-200 milliseconds, which is why tapping feels instantaneous.
At a glance
Use these short answers to decide whether this page matches the project before moving into the detail.
Key takeaway
Where audit trails matter, no battery required — RFID cards are powered entirely by the electromagnetic field emitted by the card reader. The card's antenna captures this energy and converts it into electricity to power the chip, a process called electromagnetic induction.
What's inside an RFID card?
Slice a finished RFID card in half and there is nothing that looks remotely electronic — no battery, no buttons, no obvious 'computer.' Just a hairline coil of wire and...
Next step
Ready to move forward? Start your inquiry to get specific answers for this project.
Order custom RFID cardsWhat's inside an RFID card?
Slice a finished RFID card in half and there is nothing that looks remotely electronic — no battery, no buttons, no obvious 'computer.' Just a hairline coil of wire and a chip smaller than a grain of rice, sitting there doing nothing until a reader hands it power through thin air. That sleepy little chip is the whole show; here is what is actually laminated inside the plastic.
- Antenna coil: a flat loop of thin copper or aluminum wire laminated between PVC card layers. The antenna serves two functions: it captures electromagnetic energy from the reader to power the chip, and it transmits the chip's data back to the reader by modulating the reader's field.
- Microchip (IC): a silicon integrated circuit typically 1-2mm square, bonded to the antenna at a connection point. The chip contains a processor, memory (ROM, EEPROM, RAM), and a radio frequency interface. It stores the card's unique identifier and any application data.
- PVC card body: the standard CR80 card (85.6 x 54mm, 0.76mm thick) made from layers of PVC or PETG plastic. The antenna and chip inlay is laminated between inner PVC sheets, then the outer printed layers are fused on top under heat and pressure.
- No battery: the entire card is passive. It has no battery, no power button, and no active electronics. Power comes exclusively from the reader's electromagnetic field when the card is brought within range. This is why RFID cards last for years without maintenance.
- Printing layers: the card's outer surfaces can carry full-color artwork, logos, text, barcodes, photos and security features using offset, digital or thermal transfer printing. The chip and antenna underneath are indifferent to all of it — bury them under the busiest brand guidelines marketing can produce and the RFID functionality inside is unaffected.
How the card communicates with the reader
On its own, that chip is inert — no power, nothing to say, no opinions. Bring it into a reader's field and an entire handshake (power up, authenticate, exchange, power down) plays out before you have consciously decided to remove the card. Here is that conversation slowed down to human speed.
- Step 1: Reader energizes. The card reader generates an alternating electromagnetic field at the card's operating frequency (13.56 MHz for most smart cards, 125 kHz for legacy access cards). This field extends a few centimeters from the reader surface.
- Step 2: Card powers up. When the card enters the reader's field, the antenna coil captures electromagnetic energy through induction (similar to how a wireless phone charger works). The energy is rectified into DC power for the chip.
- Step 3: Reader sends commands. The reader modulates its field to transmit commands to the card. These commands might request the card's UID, authenticate the card, or read data from specific memory sectors.
- Step 4: Card responds. The chip processes the command and sends its response by modulating the load on the reader's field (called load modulation). The reader detects these tiny variations and decodes the card's data.
- Step 5: Transaction completes. The entire exchange (power, authenticate, read/write data) takes 50-200 milliseconds. When the card moves away from the reader's field, the chip powers down and retains its data in non-volatile memory until the next interaction.
Why do RFID cards beat magnetic stripe and barcode?
RFID cards replaced magnetic stripes in hotels, transit and access control because of five concrete advantages that show up in everyday operation, not just the spec sheet.
- Contactless reads: no physical contact between card and reader means no wear on either side. Magnetic stripes wear out in 200-500 swipes; an RFID card's antenna lasts 100,000+ read cycles with no mechanical degradation.
- Tolerance to dirt and weather: rain, dust and lint on a magstripe head causes immediate read failures. RFID reads through plastic wallets, leather, gloves and a few millimeters of water without dropping signal.
- Active anti-cloning: NTAG 424 DNA and DESFire EV3 sign every read with rotating cryptographic challenges that magnetic stripes simply cannot match. A magstripe is a static playback device; modern RFID is interactive cryptography.
- Multi-application capability: one DESFire card can hold separate applications for room access, employee ID and cashless payment in walled-off memory zones. Magstripe forces one application per track, three tracks max.
- Bulk read at gates: RAIN UHF cards (used at toll booths and stadium entries) read 50-200 cards per second from 3-5 m. Magstripe and barcode require single-file scanning and never approach this throughput.
Frequency families and chip selection — 125 kHz, 13.56 MHz HF, 860-960 MHz UHF
RFID is a family of technologies operating at three different frequency bands. Each band has different range, security, smartphone-compatibility and cost profile. Choosing the wrong band locks you into a multi-year deployment that can't reach the use case you actually need.
- 125 kHz LF (low frequency) — legacy proximity cards (HID Prox, EM4100, EM4200, T5577). Range 5-15 cm via card readers. Cheapest chip ($0.05-$0.15) but no encryption — every commodity NFC writer can clone the card UID. Still deployed for door-only access at low-security facilities; new deployments should avoid LF unless cost is the absolute priority.
- 13.56 MHz HF (high frequency, ISO 14443 / ISO 15693) — the dominant smart-card frequency. NFC chips like NTAG 213/215/216 ($0.05-$0.15), MIFARE Classic 1K ($0.10-$0.18), MIFARE Ultralight C ($0.07-$0.12), MIFARE DESFire EV2/EV3 ($0.65-$1.40), MIFARE Plus EV2 SL3 ($0.45-$0.85) and NTAG 424 DNA ($0.18-$0.30) all live here. Smartphone tap support is universal on iPhone (iOS 13+) and Android (5.0+).
- 860-960 MHz UHF (RAIN RFID, ISO 18000-63) — long-range cards (3-12 m) for parking, vehicle access, sports timing and large-venue badges. Chips like NXP UCODE 9 ($0.012-$0.018 wafer) and Impinj M730/M770 ($0.014-$0.020) make per-card cost extremely low. Smartphone-readable only with external UHF sled.
- Dual-frequency cards (HF + UHF combo) — combine NFC tap-to-verify with UHF gate-throughput in a single card. Premium $0.50-$1.50 per unit. Used at large stadiums and transit systems where the same card must work as a smartphone wallet AND a long-range gate badge.
- Smart-card chip security tiers — MIFARE Classic 1K is broken (Crypto-1 cipher publicly attacked since 2008); only use it where security doesn't matter. MIFARE DESFire EV3 and Plus EV2 use AES-128 with EAL5+ Common Criteria certification — the secure floor for hotel access, payment, transit and corporate badges. NTAG 424 DNA brings DESFire-grade AES-128 SUN authentication into the consumer NFC tier.
Real card families and where they're deployed in 2026
Knowing the chip family on your card tells you 80% of what you need about security, smartphone compatibility and cloning risk. The reference deployments below give procurement teams concrete benchmarks for sourcing decisions.
- Hotel key cards — globally dominated by MIFARE Classic 1K (legacy) and MIFARE DESFire EV2/EV3 (modern installs). Marriott Bonvoy, Hilton Honors, IHG and Accor all moved to DESFire EV2/EV3 since 2020 because of the 2008+ MIFARE Classic Crypto-1 break. ASSA ABLOY VingCard, dormakaba Saflok, Salto and Onity are the lock vendors.
- Transit and metro — Octopus (Hong Kong, Sony FeliCa), Suica (Tokyo, FeliCa), Oyster (London, MIFARE DESFire), MetroCard (NYC, magstripe being replaced by OMNY DESFire EV3), Compass (Vancouver, DESFire). Most new transit deployments since 2020 use DESFire EV2/EV3 for AES-128 anti-cloning.
- Corporate and government ID — HID iCLASS Seos, MIFARE DESFire EV3, US Federal PIV (FIPS 201, Java Card OS) and German neuer Personalausweis (eID, Mifare Plus). Global Fortune 500 standardising on HID Seos + Apple Wallet / Google Wallet for hybrid plastic + mobile.
- Cashless payment — EMV contactless on Visa, Mastercard, Discover and Amex uses NXP-derived secure elements; banking-grade EAL5+ certification. Apple Pay and Google Wallet store the same EMV credentials in the phone Secure Element via tokenised PAN.
- Loyalty and brand — NTAG 213/215/216 dominate single-tap loyalty; NTAG 424 DNA for anti-counterfeit luxury (Estée Lauder, Hennessy, LVMH Aura). Chip selection drives the SUN or static-UID dichotomy that decides whether the card is clone-proof or trivially cloned at $20 of hardware.
Useful next pages
Use these linked product, guide and comparison pages to keep the next click specific and practical.
RFID card products
Custom RFID cards for every application.
Smart-card chip and standard references
Manufacturer datasheets and ISO standards for the chips inside RFID cards.
FAQ
How long do RFID cards last?
RFID cards have an extremely long lifespan because they contain no battery or moving parts. The microchip can endure over 100,000 read/write cycles. The PVC card body is the limiting factor, typically lasting 3-5 years under normal use (daily tapping, wallet storage, temperature exposure). With careful handling, RFID cards can function for 10+ years.
Can RFID cards be hacked or cloned?
It depends on the chip type. Older chips like MIFARE Classic 1K use proprietary encryption that has been publicly broken, making them vulnerable to cloning with specialized equipment. Modern chips like MIFARE DESFire EV3 use AES-128 encryption that is considered secure against cloning with current technology. For security-sensitive applications, always specify a chip with current-generation encryption.
Do RFID cards stop working near magnets or phones?
No. Unlike magnetic stripe cards, RFID cards are not affected by magnets, phone proximity, or static electricity. The chip stores data electronically in non-volatile memory, not magnetically. This is why hotels are migrating from magstripe to RFID key cards. RFID cards do not demagnetize from phone contact, which is the number one complaint about traditional hotel key cards.
Why do iPhone and Android phones read some RFID cards but not others?
Smartphones contain NFC controllers that operate at 13.56 MHz HF only — the ISO 14443 / ISO 15693 / FeliCa stack. They cannot read 125 kHz LF proximity cards or 860-960 MHz UHF cards. So an iCLASS Seos badge, a MIFARE DESFire EV3 hotel key or a NTAG 213 NFC tag all read fine on a phone; an HID Prox 125 kHz access card or a Walmart UHF apparel tag does not. iPhones since iOS 13 (2019) support full NFC tag reading; Android has supported it since 5.0 (2014). For LF or UHF cards, you need a USB sled or BLE handheld reader.
Are NTAG 215, MIFARE Ultralight C, MIFARE Classic 1K and DESFire EV3 interchangeable for the same use case?
No — they sit at very different security and memory tiers. NTAG 215 (504 bytes user memory, password protection only) is fine for tap-and-launch loyalty and product authentication where cloning isn't catastrophic. MIFARE Ultralight C (192 bytes, 3DES authentication) is a step up at low cost. MIFARE Classic 1K (1KB, broken Crypto-1 cipher) is suitable only when security doesn't matter; widely deployed historically but cloned with $20 of hardware. MIFARE DESFire EV3 (8KB+, AES-128, mutual auth) and NTAG 424 DNA (416 bytes, AES-128 SUN) are the secure floor for hotels, transit, payment and brand protection. Choose based on the data you need to store + whether cloning is a real threat in your application.
Proud Tek is a Shenzhen-based RFID & NFC manufacturer supplying hotel chains, transit operators, event venues and retail brands worldwide. Every order includes free samples, RF testing and dedicated project support.
Get a Quick Quote
Tell us about your project and we'll respond within one business day. Fields marked (asterisk) are required.