The new contactless phone payment scam uses tap-to-pay cards and mobile wallets to obtain users' data and money.