diff --git a/apps/backend/src/routes/nfc.ts b/apps/backend/src/routes/nfc.ts
index 03393ba9..97635d91 100644
--- a/apps/backend/src/routes/nfc.ts
+++ b/apps/backend/src/routes/nfc.ts
@@ -84,10 +84,10 @@ export async function nfcRoutes(app: FastifyInstance) {
         }
       }
 
-      const payloadUrl = `https://dev-card.vercel.app/${username}${
-        cardId ? `?card=${cardId}` : ''
-      }`;
-
+const safeUsername = encodeURIComponent(username);
+const payloadUrl = `https://dev-card.vercel.app/${safeUsername}${
+  cardId ? `?card=${encodeURIComponent(cardId)}` : ''
+}`;
       const response: NfcPayloadResponse = {
         type: 'URI',
         payload: payloadUrl,