diff --git a/armsrc/mifarecmd.c b/armsrc/mifarecmd.c
index 6c27646b1..1dc6bc9ed 100644
--- a/armsrc/mifarecmd.c
+++ b/armsrc/mifarecmd.c
@@ -2875,7 +2875,7 @@ void MifareHasStaticEncryptedNonce(uint8_t block_no, uint8_t key_type, uint8_t *
 
         nt = 0;
         ntenc = 0;
-        if (mifare_classic_authex_cmd(pcs, cuid, incblk2 ? block_no_nested + i : block_no_nested, key_auth_cmd_nested, ui64key_nested, AUTH_NESTED, &nt, &ntenc, &ntencpar, NULL, false, false)) {
+        if (mifare_classic_authex_cmd(pcs, cuid, incblk2 ? block_no_nested + (i * 4) : block_no_nested, key_auth_cmd_nested, ui64key_nested, AUTH_NESTED, &nt, &ntenc, &ntencpar, NULL, false, false)) {
             if (g_dbglevel >= DBG_ERROR) Dbprintf("Nested auth error");
             need_first_auth = true;
         } else if (g_dbglevel >= DBG_EXTENDED) {
diff --git a/client/src/cmdhfmf.c b/client/src/cmdhfmf.c
index cf65b6bcb..71c8000ce 100644
--- a/client/src/cmdhfmf.c
+++ b/client/src/cmdhfmf.c
@@ -9648,7 +9648,7 @@ static int CmdHF14AMfISEN(const char *Cmd) {
         arg_lit0(NULL, "reset", "reset between attempts, even if auth was successful"),
         arg_lit0(NULL, "addread", "auth(blk)-read(blk)-auth(blk2)"),
         arg_lit0(NULL, "addauth", "auth(blk)-auth(blk)-auth(blk2)"),
-        arg_lit0(NULL, "incblk2", "auth(blk)-auth(blk2)-auth(blk2+1)-..."),
+        arg_lit0(NULL, "incblk2", "auth(blk)-auth(blk2)-auth(blk2+4)-..."),
         arg_lit0(NULL, "corruptnrar", "corrupt {nR}{aR}, but with correct parity"),
         arg_lit0(NULL, "corruptnrarparity", "correct {nR}{aR}, but with corrupted parity"),
         arg_param_end