If a CFexpress card has just thrown an error in the middle of a wedding, work through the numbered list in the first section now. The rest of this article explains why each step matters. You can read the reasoning tonight.
Photographers rarely lose a ceremony because a card failed. They lose it in the ten minutes after the card failed, while trying to get it working again before the first dance. Every extra minute the card spends in a powered camera, and every helpful prompt you accept, reduces what a laboratory can get back.
Do this first, before anything else
Work down this list in order. It takes less time to do than to read.
- Stop shooting to that card immediately. Not after one more frame. The card is in an unknown state, and every further write can land on top of the data you want back.
- Power the camera off. Do not leave it switched on while you think. A card that is failing electrically or thermally is being stressed for as long as it has power.
- Eject the card and leave it out. Re-seating it repeatedly to see whether it works this time is the most common way a recoverable card becomes an unrecoverable one.
- Do not format, even when the camera insists. Many bodies will refuse to continue and offer Format Card as the only way forward. Decline it, every time. The next section explains why this is not the harmless operation it used to be.
- Do not delete anything. Not the corrupt clip, not the frames you do not want. Deleting on a CFexpress card can quietly trigger a background erase of data that is still perfectly readable.
- Put a fresh card in and keep covering the event. Use a card that has not been used today, so nothing already shot is at risk.
- Label the failed card the moment you have a free hand, and keep it separate from your working cards.
Once the card is out of the camera, powered down and labelled, you have done everything that is within your control at the venue. Everything after that is a laboratory question, not a field question.
Why formatting is the one thing you must not do
Formatting a CFexpress card is not the same operation it was on a CompactFlash or SD card ten years ago, and this is the point that catches experienced photographers out.
Older media was, in effect, dumb storage. A quick format wrote a fresh, empty file table at the front of the card and left the image data sitting untouched in the blocks behind it. That is why recovering deleted or formatted files from that generation of card was often straightforward. The photographs were still physically there.
A CFexpress card is an NVMe device with its own controller and its own translation layer sitting between the addresses your camera asks for and the flash blocks the data actually occupies. When a modern body formats the card, that instruction can be passed down as a discard command meaning "none of this is needed any more". The controller marks those blocks as free, and its garbage collection then erases them in the background, on its own schedule, while the card simply sits in a reader. Nobody is shooting. Nothing is being written. The pictures are being wiped anyway.
That is the difference in one line. On old media, a format threw away the table of contents. On CFexpress, a format can shred the book. The same logic applies to deleting individual files, which is why step five above is not fussiness.
The rule carries over to the computer. If macOS says the card is unreadable and offers to initialise it, or Windows says the drive must be formatted before it can be used, choose Cancel or Ignore. Never click Erase, Initialise, Format or any button offering to fix the disk.
What a CFexpress Type B card actually is
CFexpress Type B is the card used in most Nikon Z bodies, the Canon EOS R5 and R3 class, and a good deal of cinema and external recorder kit. It borrowed the physical shell of XQD, but inside it is essentially a very small NVMe solid-state drive running over two lanes of PCIe. Type A, used by Sony, is smaller and uses a single lane. Type C is a larger four-lane format.
That architecture is why the card is fast enough for high-bitrate video, and also why it fails differently from an SD card.
- It runs hot. Sustained 4K, 6K and 8K recording pushes a Type B card hard. Some mid-shoot stoppages are the card or the body protecting itself thermally rather than the card being finished. It may well mount again once cool, but the clip that was mid-write when it stopped is usually the casualty.
- A controller fault takes the whole card down. The flash memory can be completely intact and the card still refuse to appear in any reader, because the part that translates requests has stopped answering. This is the same failure family seen in SSD data recovery, where the storage survives but the device will not present itself.
- Where a file lives is not where the camera thinks it lives. Wear levelling scatters a single clip across the flash and keeps the map inside the controller. Corrupt that map and the footage is present but unaddressable until the map is rebuilt.
- Contacts and shells matter. Type B pins are fine and recessed. Bent pins in a body or a cheap reader, or a card pushed in slightly off-axis, produce symptoms indistinguishable from a dead card.
Because of that last point, it is worth trying one different reader and one different cable before you write the card off. What you must not do is keep pushing it back into the camera to try again.
Keep shooting: dual slots and finishing the day
You are still at a wedding, and the couple do not care about flash translation layers. Fit a fresh card, reset your head, and carry on. Never solve the problem by dropping in a card that already holds this morning's coverage.
If your body has two slots, this is the moment the setting you chose months ago decides your evening. Overflow mode means the second card only begins recording once the first is full, which gives you nothing at all when the first card dies at sixty per cent. Backup mode, sometimes called simultaneous recording, writes every frame to both cards as you shoot, so a card failure costs you a card rather than a ceremony. For stills there is very little reason not to run backup mode at a paid event. Some high-bitrate video modes cannot mirror across both slots, so check your body's limits before the day rather than during it.
One more thing worth saying plainly. Do not announce to the couple mid-event that photographs have been lost. Nothing is lost until someone has actually looked at the card properly, and that is not a judgement you can make at a venue. Finish the job, cover what can still be covered, and deal with the card afterwards.
Label the card, bag it, and bring it in
Put a strip of painter's tape on the card or drop it into a write-on bag, and note the date, the body it came from, the slot, and roughly what is on it. Keep it out of your normal card wallet so it cannot be picked up in a hurry and reused. A card that has failed once should never go back into rotation.
Then leave it alone. In particular, resist the urge to run consumer recovery software against it over and over. Some of that software writes its output back to the source card by default, some of it attempts to correct the file system it finds, and all of it keeps a marginal card powered and warm for long stretches. Each pass costs you options.
When you are ready, bring the card in. If the failure happened in-camera, bring the body as well, and the reader you were using, because either can be the actual fault. Our laboratory is at 6 Harper Road, Leong Huat Building #05-02, Singapore 369674, beside Tai Seng MRT. Weekday hours are 9.30am to 6.30pm, and weekends and public holidays are by appointment, so if the wedding was a Saturday, message ahead on WhatsApp at +65 8127 7508 or use the contact form rather than turning up. You can also call +65 6588 0261 during office hours.
What a laboratory can and cannot do
The first step is always the same: get a read-only image of the card, and do the actual work on that copy rather than on your original. Nothing about the recovery process should involve writing to the media that holds your ceremony.
From there the route depends on the failure. A card that still responds may be readable at controller level with the right hardware, slowly and with thermal control so it is not pushed into another shutdown. A card whose power circuitry has given up may need board-level work purely to make it readable long enough to be imaged. Where the controller itself has stopped answering, the flash can sometimes be addressed more directly and the translation map rebuilt so the scattered pieces of each clip can be reassembled. Once an image exists, damaged file systems are rebuilt and camera file formats are carved out and verified frame by frame. All of this happens in our own Singapore laboratory, and nothing is sent overseas.
Two honest limits. First, if the card was formatted and the controller has already discarded and erased those blocks, that data may genuinely be gone, and no laboratory can undo it. That is the whole reason for the rule above. Second, if your footage or card is protected by camera-level or software encryption, recovery needs your own password or key. We cannot bypass encryption and neither can anyone else, which is the same position we take on BitLocker-protected media.
On process and cost: diagnosis is free, you get a fixed written quote before any work starts, and you see the list of recovered files and confirm it before you pay. Standard cases run on a no recovery, no fee basis. If you want to understand the general shape of pricing first, our data recovery cost guide sets out how quotes are put together. Everything is handled in line with Singapore's PDPA, and NDAs are available on request, which matters more than people expect when the images are of someone's wedding. CBL has been recovering data in Singapore for more than twenty years, across more than 140,000 recoveries, and is rated 4.9 stars from 909 Google reviews. The same team handles SD and memory card recovery when the second slot is the one that fails.
One expectation to set clearly: you receive your recovered files, not a working card back. A card that has failed at a wedding has ended its career.
Before the next booking
Most of the pain here is preventable, and none of the prevention is expensive.
- Set slot two to backup, not overflow, for every paid job where the body allows it.
- Carry several smaller cards rather than one enormous one. A 1TB card that fails takes the whole day with it. Swapping cards between segments limits the blast radius.
- Format at the start of a job, in the camera that will use the card, and only once you have verified that the previous job is safely offloaded. Never format at the end of a shoot to save time later.
- Offload to two separate places before any card is wiped, and verify by actually opening files, not by trusting a progress bar. If one of those copies lives on a portable drive, remember it is a single point of failure too, and external drives fail as readily as cards.
- Retire cards on age and use, not on symptoms. The first symptom often arrives mid-ceremony.
- Keep a spare reader and a known-good cable in the bag, and let cards cool after long video takes rather than pulling them straight out and straight into another body.
Do that, and the next card failure becomes an inconvenience with a spare in your pocket rather than a phone call you never want to make.