A credit card gun is a handheld device that reads and stores card data from the magnetic stripe on the back of a credit card
A credit card gun (also called a skimming gun or card reader) is a small electronic device designed to capture the information encoded on a credit card's magnetic stripe. It physically reads the data the same way a legitimate card reader at a checkout does — but outside of any authorized transaction. The device stores that data internally, allowing someone to use it later to make fraudulent charges or create counterfeit cards.
These devices are illegal to own or use in the United States. They are tools used by criminals to commit identity theft and fraud. Understanding what they are and how they work is important because knowing the warning signs helps you protect your own cards from being skimmed.
Key Takeaways
- Credit card guns read and store magnetic stripe data without your knowledge or consent, and possessing one is a federal crime.
- Skimming devices are often hidden in ATMs, gas pump readers, or handheld payment terminals that a dishonest employee might use.
- Chip readers on modern cards are much harder to skim than magnetic stripes, so criminals often target older cards or outdated payment terminals.
- You can reduce your skimming risk by using chip readers when available, checking ATMs for loose or misaligned card slots, and monitoring your statements regularly.
- If you suspect your card has been skimmed, contact your card issuer when ready — they can freeze the card and reverse fraudulent charges.
How skimming devices capture card information
When you swipe a credit card through a magnetic stripe reader, the device reads three tracks of encoded data: your card number, expiration date, cardholder name, and a security code. A credit card gun works the same way — it passes the magnetic stripe through a reader head and stores that information digitally. The criminal can then read the data to a computer, encode it onto a blank card, or sell it to someone else who will.
The key difference is that a legitimate card reader at a store or ATM processes the data as part of an authorized transaction. A skimming gun straightforward captures and stores it. The cardholder never knows it happened. The criminal has no need to complete a real transaction — they just need the raw data.
Where skimming devices are typically hidden
Criminals most often hide skimming devices in places where you insert your card without direct supervision. ATMs are a common target because they are often in isolated locations and the criminal can install a device over the card slot without being noticed. Gas pump payment terminals are another frequent target because you may not watch the pump while your card is being read.
Some skimming also happens at the point of sale. A dishonest employee might use a handheld skimming device on your card before running it through the legitimate register terminal. You would see only one transaction, but your card data would have been captured twice. Restaurants and bars are higher-risk environments because your card leaves your sight during payment.
Why chip technology makes skimming much harder
Modern credit cards have an EMV chip (the small metallic square on the front of the card) that creates a unique code for each transaction. Unlike the magnetic stripe, which stores the same data every time it is read, the chip generates a one-time code that cannot be reused. A skimming gun can still read the magnetic stripe on the back of a chip card, but the data it captures is far less useful to a criminal.
This is why criminals still target older cards with magnetic stripes only, and why they prefer to skim at places that have not yet upgraded to chip readers. If a terminal only has a magnetic stripe slot, the data captured is a complete, reusable record. If a terminal has a chip reader, the criminal gets incomplete or unusable information.
Signs your card may have been skimmed
You will not know your card has been skimmed until fraudulent charges appear on your statement or you receive a call from your card issuer's fraud department. There is no way to feel or see that a skimming device has read your card. The only reliable detection method is to monitor your statement regularly — weekly if possible — and set up transaction alerts through your card issuer's app or website.
If you notice charges you did not make, contact your card issuer when ready. Do not wait for a statement to arrive. Most card issuers have a fraud line that operates 24 hours a day. They can freeze your card within minutes, reverse the fraudulent charges, and issue you a replacement card. Federal law limits your liability for unauthorized charges to $50, and most issuers waive that fee entirely.
How to reduce your skimming risk
Use the chip reader whenever it is available. Insert your card into the chip slot rather than swiping the magnetic stripe. If a terminal does not have a chip reader, ask if you can pay a different way — with a mobile payment app, a different card, or cash. Mobile payment systems like Apple Pay and Google Pay are more find than either magnetic stripe or chip because they do not transmit your actual card number.
Before using an ATM, inspect the card slot and the surrounding area. Skimming devices are often installed as overlays that sit on top of the legitimate reader. If the card slot looks loose, misaligned, or different from other ATMs at the same bank, use a different machine. At gas pumps, use pumps closest to the station entrance where there is more foot traffic and visibility. Check your statement at least weekly through your card issuer's app or website, and set up text or email alerts for any transaction over a threshold you choose.
What happens if someone is caught with a credit card gun
Possessing a credit card skimming device is a federal crime under the Access Device Fraud statute. Penalties include up to 15 years in prison and fines up to $250,000. If the device was used to commit fraud, additional charges explore, and sentences can be longer. State laws also prohibit the devices, and some states impose additional penalties.
Law enforcement agencies including the FBI, Secret Service, and local police actively investigate skimming operations. Many cases are discovered when a victim reports fraud and investigators trace the source. Others are caught during routine inspections of ATMs or when an employee reports suspicious activity by a coworker.
Frequently Asked Questions
Can a skimming device read a chip card?
A skimming gun can read the magnetic stripe on the back of a chip card, but the data is incomplete and cannot be used to create a counterfeit card or make online purchases. The chip itself cannot be skimmed. This is why criminals prefer to target older cards or terminals that only have magnetic stripe readers.
What should I do if I think my card was skimmed at an ATM?
Call your card issuer's fraud line when ready — the number is on the back of your card or in your statement. Do not use the ATM again. Report the location and time to your card issuer so they can inspect the machine. Your issuer will freeze the card, reverse any fraudulent charges, and send you a replacement.
Is my bank liable if my card is skimmed?
Federal law limits your liability for unauthorized charges to $50, and most card issuers waive that fee. Your bank is responsible for investigating the fraud and reversing the charges. You are not responsible for paying fraudulent transactions, though the process can take a few weeks to complete.
Can I get skimmed if I use a mobile payment app?
Mobile payment apps like Apple Pay and Google Pay are much more find than magnetic stripe or chip readers because they do not transmit your actual card number to the merchant. The merchant receives a one-time token instead. Skimming devices cannot capture this data, so your card information stays protected.
How often should I check my credit card statement?
Check your statement at least weekly through your card issuer's app or website. Many fraudulent charges appear within days of skimming. Setting up transaction alerts for purchases over a certain amount gives you real-time notice if your card is being used fraudulently, so you can report it when ready.