Case Study: Stopping Fuel Voucher Fraud with NFC UID Verification

Fuel vouchers are a favorite promotional tool for gas station chains — prepaid discounts, fleet perks, partnership coupons. They are also a favorite target for fraud, because the classic paper or QR voucher is just an image: it can be photocopied, screenshotted, and redeemed by whoever holds a picture of it. This case study walks through a real deployment we supplied tags for — a fuel retailer that replaced image-based vouchers with NFC tags verified by their read-only chip UID. The client's name and commercial details stay anonymized; the technology decisions, the hardware, and the workflow are all reproducible.

The Problem: Vouchers That Could Be Copied Faster Than They Could Be Redeemed

The retailer's vouchers were distributed as printed QR coupons and digital images through partner channels. Fraud followed the predictable paths: screenshots shared in group chats and redeemed multiple times before the legitimate customer arrived; photocopies presented at different stations on the same day; and front-line disputes, because a cashier looking at a QR code cannot tell an original from a copy. Every "this voucher was already used" argument landed on the staff. The chain wanted a credential that was physically unique, verifiable in one second at the counter, and worthless when copied.

The Core Idea: Make the Chip Itself the Credential

The solution was to stop treating the voucher as data and start treating it as hardware. Every NFC tag chip carries a UID — a unique identification number, typically 7 bytes on NFC Forum Type 2 chips like the NTAG-compatible family, that is written once during chip manufacture and is permanently read-only. You cannot edit it, and copying a tag's writable memory does not copy it. If the UID is the thing that gets validated at redemption, then a screenshot or photocopy of the voucher carries zero value — the picture has no chip in it.

We supplied vouchers built on cost-optimized NTAG-compatible HF NFC chips (Fudan FM11NT-class silicon, covered in depth in our FM11NT compatibility guide). For a promotional voucher — a low-denomination, high-volume item — paying the premium for a flagship security chip on every unit was not justified; UID-based uniqueness was the right tier of protection for the fraud being stopped. Each voucher tag also carried a printed face and an NDEF record, so the same physical item doubled as a marketing touchpoint (tap with a phone to open the promotion page) while the anti-fraud function lived in the UID.

How Verification Works at the Counter

The redemption workflow is deliberately boring, which is why it worked operationally:

• Tag issuance. Vouchers were produced as NFC cards and stickers. At production, every tag's UID was captured during our 100% functional testing and delivered with each batch as a whitelist file — a plain list of the UIDs that exist in that voucher run.
• Reader hardware. Each station's cashier computer got a standard USB NFC reader. Readers following the PC/SC interface standard work with ordinary desktop software libraries; no networking change or specialized equipment was needed.
• The tap. The customer hands over the voucher; the cashier taps it on the reader. The verification app reads the UID and checks it against the redemption database: valid and unused → approve and mark redeemed; already redeemed → decline with the redemption time and location; not in any whitelist → decline as counterfeit.

The whole check takes about a second. Because the answer comes from the database — not from the cashier's judgment about whether a piece of paper looks original — the front-line dispute disappears: the system either recognizes the chip or it does not.

Why UID Verification Beats a QR Code on a Voucher

An Honest Word About Limits

UID verification stops the fraud that dominates voucher programs — copying — but it is not unbreakable. Programmable "magic" cards exist that can emulate a chosen UID, so a determined attacker targeting a high-value program could go further. The tiered answer: for low-denomination, high-volume vouchers, UID checks eliminate the economical fraud; for premium-value programs, step up to chips with cryptographic authentication — NXP's NTAG 424 DNA with its AES-based dynamic message on every tap, or ST's ST25TV02KC with its TruST25 origin signature, which lets a reader verify the chip is genuine ST silicon. The same tap-to-verify workflow carries over; only the chip and the check behind it change. Our tamper-evident NFC guide covers the broader anti-counterfeiting toolbox if your program also needs physical seal evidence.

What We Supplied — and What to Ask Any Supplier For

On the tag side, this program is well inside standard OEM/ODM territory, which is why it could run at voucher volumes:

• Chip selection: NTAG-compatible Type 2 silicon at voucher-tier economics, with the option to specify a chip family whose UID format your verification system expects — see our NFC tag range for the standard options.
• Form factor: cards, stickers, and keyfob formats; the voucher's printed face carries the design, terms, and instructions, and the chip carries the identity.
• UID capture and delivery: a per-batch UID whitelist file, generated during 100% functional testing, in whatever format the customer's redemption system ingests. This is the single most important deliverable to specify in your RFQ — a supplier who cannot deliver clean UID lists cannot support a UID program.
• Optional encoding: NDEF URLs for the consumer-facing side, custom print, and specialty constructions (weatherproof, on-metal, or unusual shapes) through our specialty tag and OEM/ODM services.

Results, in the Words the Client Cared About

We will not dress this up with invented percentages. What the deployment delivered, directionally and by design: copy-based fraud became structurally impossible (an image of the voucher has no UID to read); duplicate-redemption attempts surfaced instantly at the tap instead of becoming counter disputes; and the chain could keep distributing vouchers through the same channels, because the voucher's value now lived in the chip rather than in its picture. For a promotion-driven business, that is the whole game.

FAQ

Can an NFC tag's UID be copied or faked?

Not by copying the data — the UID is read-only and set at the chip factory, and cloning a tag's memory does not clone its UID. A programmable emulator can broadcast a chosen UID, so high-value programs add cryptographic verification such as NTAG 424 DNA's AES-based dynamic messages or the ST25TV02KC's TruST25 signature.

What hardware does a gas station need to verify NFC vouchers?

A standard USB NFC reader on the cashier's computer, following the PC/SC interface standard, plus a small verification app that reads the UID on tap and checks it against the redemption database. No special networking or POS replacement is required.

Why not just use QR code vouchers?

A QR code is an image; a screenshot redeems identically to the original and can be shared and resold. An NFC voucher's credential is the physical chip's read-only UID, so a copy of the voucher — photo, screenshot, or print — has no redemption value.

How much more do NFC vouchers cost than printed vouchers?

NFC tags carry a premium over paper, reduced considerably by cost-optimized NTAG-compatible chips. The right comparison for a voucher program is tag premium versus fraud loss per voucher; consult your supplier for current pricing at your volume, since chip tier drives most of the difference.