Rogue RFID readers are detected by listening to communication between rogue reader and a tag, capturing an identifier associated with the tag from the communication by the reader or by the tag, and checking the captured identifier to determine whether it is a result of a command from another legitimate reader. Audible or visible alerts may be issued, flags may be set, or messages transmitted to an administrator upon determining the operation of the rogue RFID reader. Based on the alert(s) affected tags or the rogue reader may be jammed or an effect of the illegal transmission by the rogue reader may be reversed or tags replaced.