A lot of work badges these days contain smart cards with some form cryptography. I know mine does. I don't know whether it's PKI or something else, but I am 99.9% certain that it can't be replicated or spoofed by the phone's NFC even if they operate on the same frequency. In most of these cards, the encryption algorithm (generator) is hardwired into the chip.