Communique on physical security 2024-005
Precautions for RFID copiers/duplicators
On this page
The purpose of this bulletin is to advise Government of Canada (GC) employees of Radio-Frequency Identification (RFID) Copiers/Duplicators and ways to safeguard access cards.
RFID copiers are small, pocket-sized devices that can copy RFID credentials in seconds; then be used to mimic the card or fob to gain access to a controlled space. RFID copiers are available to the general public for purchase and are easily concealable, making it difficult to detect the use of these devices when copying credentials. An action as simple as bumping into someone in a crowded area can be enough time for a copier to read and copy the credentials on the card. Access card readers cannot distinguish between an access card and a RFID copier or copied credential, making it difficult or impossible to determine if a copier was used to gain access to a space. Additionally, certain RFID copiers allow for duplication of RFID credentials onto a new access card, which can further complicate efforts to identify/locate a fraudulent card.
Following are some ways you can protect your card, as well as how you can protect your space. While RFID copiers are difficult to detect and trace, these methods are recommended to help prevent or mitigate the potential impacts of RFID copiers. Security awareness and proper card management are the easiest ways to safeguard access cards and protect a facility.
Protect your card
- Do not wear access cards in public (around neck or on belt/waist), including at restaurants, while shopping, and when on public transportation;
- Limit the exposure of your access cards; only have them in your possession when travelling to and from your worksite;
- Do not leave access cards in vehicles (personal or fleet) after hours;
- Use RFID blocking badge holders or faraday bags for card storage or when not in active use;
- Be aware of your surroundings in public and in the office; watch for suspicious behaviour, unfamiliar individuals etc.; and
- If you see something, say something; report any suspicious behaviour, individuals, or events to your department/organization's security team.
Protect your space
- Ensure your facility Threat Risk Assessment (TRA) is current, you know the risks, and employ appropriate security safeguards;
- Implement two-factor authentication (2FA) for entry into Restricted Access Areas (ie. access card and PIN);
- Consider two-person integrity for Security and High Security zones;
- Locate card readers in a monitored area to observe suspicious behaviour and/or unknown individuals
- Implement procedures to assist with the mitigation of risk to your facility identified in your TRA;
- Prevent piggybacking or tailgating and challenge unfamiliar individuals;
- Ensure employees know where to report security incidents or suspicious activity; and
- If an access card is lost or suspected to be compromised, ensure it is reported, deactivated, and replaced.
Security Awareness is the best way to protect GC personnel, information, and assets and that includes access cards. Courses such as COR310 Security Awareness from Canada School of Public Service (CSPS), along with other department specific training options, are incredibly useful to ensure security awareness education to all levels of employees.
Training on access card management is also beneficial to ensure proper procedures in case of a lost or compromised card, as well as general best practices. For more information, consult GCPSG-006 Access Management Guide and GCPSG-010 Operational Physical Security Guide.
Contact us
Contact the RCMP LSA with your Physical Security inquiries at RCMP LSA Org Email: rcmp.lsa-grc.posm@rcmp-grc.gc.ca or visit the RCMP LSA web page.
- Date modified: