How NFC Business Cards Work (No App Required)

The most common question about NFC business cards is the same one: "Does the person I'm tapping need an app?" The answer is no — and understanding why explains why the format took off.

The chip is just a URL

An NFC business card holds a tiny NFC chip — usually NTAG 424 or NTAG 215. The chip stores one piece of information: a URL pointing to your profile. That's it. No software, no Bluetooth pairing, no account on the receiving side.

When a phone gets close to the chip, the phone's built-in NFC reader powers the chip briefly, reads the URL, and shows a tap-to-open prompt. The recipient taps once and your profile opens in Safari or Chrome.

Why no app is needed

Every iPhone since the XS (2018) and virtually every Android phone has background NFC reading turned on by default. The OS handles the tap natively — the same way it handles tapping your phone to pay. The recipient doesn't install anything because the OS is already listening.

This is the single biggest reason NFC business cards work where QR codes feel awkward: there's no second step. No camera, no app switch, no aiming.

What happens after the tap

Your profile loads in the browser like any other web page. From there the recipient can:

• Save your contact as a vCard
• Tap a link to text, call, or email you
• Open your portfolio, LinkedIn, Instagram, or Calendly
• Forward your profile to a teammate

Because the destination is a normal web page, you control everything about it from your dashboard — the photo, the headline, the links, the order. Updates are live the instant you save.

What about older phones?

iPhones older than the XS can host NFC cards (they can be tapped) but can't read them in the background. In practice this affects a vanishingly small slice of the people you'll meet in 2026. Every Android phone with NFC — which is essentially all of them — works.

Security and privacy

A read-only NFC card can't push anything to a phone. It hands over a URL; the recipient decides whether to open it. The Tapwrld chip (NTAG 424) adds AES-128 authentication on top, so a cloned card can't impersonate the original.

That's the whole stack. One chip, one URL, one tap.