On a Wednesday last September, my mother's bank flagged a $2,300 charge. Two days later, a store owner in Lakewood, Ohio showed us the footage of how it had happened.

My mother called me from her kitchen on a Wednesday afternoon, three minutes after her bank's fraud alert went to both of our phones. I was at my desk in Atlanta. She was at her table in Lakewood, Ohio, the one she has eaten breakfast at since 1987.

The charge was twenty-three hundred dollars. It had cleared at 11:43 the previous morning at a parking kiosk in Solon, fourteen miles from her house.

She had never been to Solon. She is seventy-eight, widowed eleven years, and on Tuesday she had driven exactly three places: the bakery on Madison, the pharmacy on Detroit Avenue, and the cemetery.

The card had not left her purse. She told me this twice. I believed her the first time.

I booked a flight for the next morning anyway, because she sounded the way she sounded after my father died, which is a way I do not let her sound alone.

I landed at Hopkins at ten. By noon we had a yellow legal pad on her kitchen table and we were walking through the previous day in order.

The bakery at 9:15. Home by 10. Pharmacy at 11:30. Cemetery at 1. Home for the rest of the afternoon. The bank's transaction record said the charge had hit at 11:43.

The bakery had a chip reader she had used; she remembered the beep. The pharmacy, she said, she had only stood in line at. She had not paid for anything. The pharmacist owed her a refill that wasn't ready.

The charge cleared at 11:43, at a kiosk in a parking garage in Solon. We were not in Solon at 11:43. We were on Detroit Avenue.

The card was zipped in the inside pocket of a purse that was zipped inside a larger tote that was hanging from my mother's left shoulder. I asked her four different ways. The answer did not change. The card had not come out.

We circled 11:40 AM on the legal pad. We drove to the pharmacy.

The pharmacy on Detroit Avenue is owned by a man named Pete who has known my mother since the Clinton administration. He took us into a back office that smelled like coffee and cardboard and pulled up the security feed on a monitor that was older than my car. He scrubbed to 11:35. My mother appeared in frame, third in line, holding her tote with both hands the way she has held a purse her entire life. She moved forward. The line moved forward. At 11:39:51 a man stepped in behind her.

He was in a gray hooded sweatshirt. His head was down. He was holding something small and dark, the size of a deck of cards, at hip level, casually, the way you hold a phone you are not looking at. He did not bump her. He did not reach. He did not speak. He stood approximately four inches behind her tote for four seconds. Then he turned, walked toward the produce shelves at the back of the store, and left without buying anything. The bank's record said the charge had been authorized at 11:39:54.

Pete paused the frame on the device. My mother looked at the monitor. Then she looked at me.

I asked Pete to email me the clip. He did, that night, from his phone.

I am a marketing director. I do not work in security. But I know how to read a thirty-page PDF and I know how to follow a citation, and by midnight Thursday I had read the Michigan Attorney General's ghost-tapping advisory from February, the McAfee threat bulletin from March, and a Federal Trade Commission summary from May that named the exact frequency the man in the sweatshirt had been transmitting on. Thirteen point five six megahertz. The contactless frequency every tap-to-pay card in my mother's wallet broadcasts at, on demand, to anything that knows how to ask.

The device he was holding was a handheld point-of-sale terminal. They are not difficult to acquire. They have been modified in a way that the manufacturers did not intend and the networks have not closed. Held within four inches of a contactless card, they will charge that card a small enough amount that the transaction clears the network's anti-fraud thresholds. Twenty-three hundred dollars is, for the cards my mother carries, a small enough amount.

A card stops broadcasting only when something physical sits between it and the antenna asking. The microwave in my mother's kitchen has a metal mesh in its door for the same reason: the mesh blocks the wavelength. A card sleeve built to the right shielding density does the same thing to thirteen point five six megahertz. It is not software. It is not a subscription. It is a physical layer that turns the card off until you pull it out yourself.

The product I found that night is called Cardian. I read the page twice. Then I read it again at six in the morning with coffee. Then I ordered three of them.

For ten years I have been the daughter who calls my mother about the other things. The Facebook message from a cousin she does not have. The phone call from a grandson in trouble. The email about a package she did not order. We have a system for those. She does not click. She does not give numbers. She calls me first, and she has, every time, and none of them have ever cost her a dollar.

This was not any of those. There was no call. There was no link. There was no man on the phone pretending to be the IRS. There was a man in a sweatshirt standing four inches behind her in a pharmacy line for four seconds, and the system we had built together for the other scams was not built for him. It could not have been. None of the rules applied. She did nothing wrong. She did not even know it had happened until the bank told her, twenty-six hours later.

A shielded card sleeve does not solve the other problems. It will not stop a phishing text. It will not stop a romance scam. It will not stop a fake-grandson call. It does exactly one thing. It closes the four-inch window the man in the sweatshirt was using. For my mother, on her Tuesday, that was the window that was open.

It came as a set of three because that is how I needed it: one for my mother's new card, since the bank had canceled the old one within the hour; one for my own wallet, because I carry two contactless cards and live in a city with a transit system that has trained me to keep them at my hip; and one for my mother-in-law in Cincinnati, who is seventy-six and lives alone and whose daughter, my wife's sister, lives in Portland.

The set was shipped Friday afternoon and arrived Monday in a small padded mailer. I drove the third one to Cincinnati the next weekend. The price for the three was less than the parking ticket I had paid at Hopkins on the way home. There is a ninety-day return window. The company does not sell through Amazon — only through their own page — which is the only way the bundle pricing holds and the only way they can verify what is actually shipping out the door.

The bank reversed the twenty-three hundred dollars. It took fourteen days, two phone calls from my mother, one notarized affidavit, and a copy of Pete's security footage that I emailed to a fraud analyst named Denise who was professional and patient and clearly had seen the four-second clip before, in other versions, on other monitors.

The reversal is real. It is also the layer that runs after the fact. The card sleeve runs before. My mother is seventy-eight. She does not need another fourteen-day window in her life. She needs the four seconds to not happen in the first place.

My mother put the new card into the new sleeve herself, at her kitchen table, on the Tuesday after the package arrived. She slid it into her wallet, into the inside pocket of the same purse, inside the same tote, on the same shoulder. She has carried it that way for eight weeks. She told the women at her Wednesday bingo about it. Three of them have ordered their own.

She has not asked me, since, whether I think she should still go to the pharmacy on Detroit Avenue. She goes. Pete waves at her from behind the counter. She stands in line. She holds her tote with both hands. The card, now, does not answer when it is asked from four inches away. It answers only when she pulls it out herself, at the register, the way she has paid for thirty-eight years of prescriptions.

I do not want the next four seconds to belong to my mother again. I do not want them to belong to my mother-in-law in Cincinnati. I do not want them to belong to me.