What a credit card skimmer is and where to find them
A credit card skimmer is a small device that reads and stores the information from your card's magnetic stripe or chip without your knowledge. Criminals install them on machines you use every day — ATMs, gas pumps, payment terminals at checkout counters — so they can steal your card number while you think you're making a normal transaction.
Skimmers are most common at gas station pumps and ATMs because these machines sit unattended and are harder for staff to monitor constantly. A criminal can install a skimmer in seconds, leave it for hours or days while it collects card data from dozens of customers, then return to retrieve it. Some skimmers also include a hidden camera pointed at the keypad to record your PIN.
The stolen information is then used to make fraudulent charges or sold to other criminals. You may not notice anything wrong until your bank alerts you to suspicious activity or you see charges you didn't make.
Key Takeaways
- Skimmers are most often found on gas pumps and ATMs, but can appear on any card reader that sits in a public place.
- A skimmer that feels loose, looks newer than the machine around it, or has visible gaps or adhesive is likely fake and should not be used.
- Covering the keypad with your hand while entering your PIN prevents hidden cameras from recording your code.
- Using ATMs inside banks, paying inside at the gas station instead of at the pump, and checking your statements weekly reduce your risk significantly.
- If you spot a suspicious device, do not touch it — report it to the business owner or police instead.
How to inspect a card reader before you use it
Before you insert your card into any machine, spend ten seconds looking at the card slot and the area around it. Tug gently on the card reader itself — the part where you insert your card. A legitimate reader is bolted or glued down firmly. If it wiggles, shifts, or comes loose in your hand, do not use that machine. A skimmer is often a separate piece placed over the real reader, so movement is a red flag.
Look for visual mismatches. Does the card slot look newer, shinier, or a different color than the rest of the machine? Does it have visible gaps between the reader and the machine frame? Are there pieces of tape, adhesive residue, or obvious seams where there shouldn't be? These signs suggest a device has been added on top of the original reader.
Check the keypad the same way. Press each button to make sure they all move smoothly and feel like they belong. Buttons that stick, feel loose, or look like they were added later are suspicious. Some skimmers include a fake keypad overlay that sits on top of the real one.
If anything feels off or looks wrong, move to a different machine or go inside to complete your transaction. There is no penalty for being cautious, and the business owner would rather you use a different ATM than have your card compromised.
Protecting your PIN from hidden cameras
Many skimmers include a small camera hidden above or near the keypad to record your PIN as you type it. Your card number alone is not enough for a criminal to drain your account — they need your PIN too. Covering the keypad blocks the camera's view.
When you enter your PIN, use your other hand or your body to shield the keypad from view. Cup your hand over the buttons as you press them, or stand at an angle that blocks a direct line of sight from above. This takes two seconds and makes it much harder for a hidden camera to record your code.
This habit is worth forming at every ATM and payment terminal, not just ones that look suspicious. It costs nothing and protects you even if you cannot see a camera.
Choosing safer places to withdraw cash and pay
ATMs inside banks are significantly safer than standalone machines on street corners or in convenience stores. Bank ATMs are monitored by security cameras, staff members walk past them regularly, and criminals know they are riskier targets. If you need cash, use an ATM in a bank lobby or credit union during business hours when possible.
At gas stations, pay inside at the counter instead of at the pump. This removes the skimmer risk entirely because you are handing your card to a staff member who can see it, and the transaction happens on a terminal behind the counter that is harder for criminals to access. Yes, it takes a few extra minutes, but it eliminates one of the most common skimming locations.
When you have a choice of payment methods, use a mobile payment app like Apple Pay or Google Pay instead of inserting your physical card. These systems do not transmit your actual card number to the merchant, so a skimmer cannot capture it. If the terminal accepts contactless payment, use it.
What to do if you find a skimmer
If you discover a device that you believe is a skimmer, do not touch it or try to remove it. Do not insert your card to test whether it works. Instead, take a photo of the machine and its location, then report it when ready to the business owner or manager. If it is an ATM, contact the bank that owns it. If it is at a gas station, tell a staff member right away.
You can also report it to local police, especially if the skimmer is still in place. Police can document it and may be able to retrieve it for evidence. If the machine is in a public place like a street corner, call the non-emergency police line and describe the location clearly.
Do not worry about being wrong. Businesses and police are accustomed to these reports and would rather investigate a suspicious device than have customers' cards compromised. Your report may prevent other people from being victimized.
Monitoring your statements for unauthorized charges
Even with precautions, skimming can happen. The best defense after the fact is catching it early. Check your bank and credit card statements at least once a week, not just once a month. Many banks and card issuers offer text or email alerts for transactions over a certain amount — set these alerts to a low threshold so you are notified of most purchases.
If you see a charge you do not recognize, contact your card issuer when ready. Most banks have fraud departments that work around the clock. Tell them the date, amount, and merchant of the suspicious charge. They will investigate and can reverse fraudulent transactions, usually within one to two business days.
If your card was compromised, the bank will cancel it and issue a replacement. You are not responsible for fraudulent charges made with your card, but you do need to report them promptly. The sooner you call, the sooner the fraud stops and a new card arrives.
Frequently Asked Questions
Can a skimmer damage my card or the machine?
No. A skimmer only reads your card data — it does not harm the card itself or the legitimate machine underneath. You will not feel or hear anything different when you use a machine with a skimmer installed. That is why visual inspection and the tug test are so important.
What if I used a machine I now think had a skimmer?
Contact your bank or card issuer right away and describe when and where you used the machine. They can monitor your account for suspicious activity and issue a new card if needed. Check your statements closely for the next 30 to 60 days. Most fraudulent charges appear within a few days, but some criminals wait weeks before using stolen data.
Do chip readers have skimmers too?
Yes, though they are less common. Chip technology is harder to clone than magnetic stripe data, so criminals focus more on stripe skimmers. However, skimmers can still be placed over chip readers to capture the data when you insert your card. The same inspection and PIN-covering techniques protect you.
Are online purchases at risk from skimmers?
No. Skimmers only work on physical card readers — the machines you insert your card into or swipe it on. Online shopping does not involve a physical reader, so skimmers are not a concern. Other online fraud risks exist, but skimming is not one of them.
Should I stop using ATMs and gas pumps?
No. Skimming is real but not common enough to avoid these services entirely. Using the precautions described here — inspecting the machine, covering your PIN, choosing safer locations, and monitoring your statements — reduces your risk to a very low level. Millions of transactions happen safely every day at ATMs and gas pumps.