Yes. You buy all the play sets and characters, and scan them all.
The last person who tried reverse engineering NFC security was threatened by Activision with a lawsuit, and nobody has made an attempt to mess with Disney Infinity's save data yet, so unfortunately, your only option at this point in time is to buy everything.