I don't have an NFC-enabled device and I couldn't find any information about this in Google. What is it that protects me against an attacker with a portable NFC terminal charging payments by just bumping into me on the street? Do all NFC devices require user interaction to confirm payment?
I can see how a mobile phone might ask me to confirm the payment, but an NFC-enabled credit card is unlikely to have the input or output devices to prompt me for such a confirmation.
One major factor in NFC security is that near field is difficult to range-extend and so charge from a distance, but it has been demonstrated up to 115 cm. Which is not as crazy as the range extension for keyless car entry, but still significant.