Apparently those "Paywave" cards can also be "scanned" by people with the right device passing close to your pocket or purse.