Here's a story from earlier this year http://www.pcworld.com/article/249138/rfid_credit_cards_are_... And as other commenters have noted, you only need to "succeed" with a few people to put together this video, so even if only a small portion of the population has a vulnerable card it can be enough. But even a vulnerable CC might not have enough info, so we can consider an even more classic magician's/pickpocketer's trick of swiping the person's wallet off them without them noticing and getting a password reset on their online transaction history page using the physical card and info gathered from social networks to pull off the simple social engineering. Not very likely, but if we're trying to come up with ways to get at a person's transaction history...