What credit card skimmers are and how they work
A credit card skimmer is a device criminals attach to card readers — usually at gas pumps, ATMs, or payment terminals — to capture your card number and PIN without your knowledge. The skimmer sits on top of or inside the legitimate reader and copies the magnetic stripe or chip data as you swipe or insert your card. Some skimmers also include a hidden camera or keypad overlay to record your PIN.
Criminals then use the stolen data to make fraudulent charges or sell the information to other thieves. You may not notice anything wrong until you see unauthorized transactions on your statement, sometimes weeks later. The longer the skimmer stays in place, the more cards it can compromise.
Key Takeaways
- Skimmers are most common at gas pumps and standalone ATMs, especially those in remote locations or convenience stores.
- Physical inspection — tugging on the card reader, checking for loose parts, and looking for mismatched colors or seams — catches many skimmers before they steal your data.
- Covering the keypad with your hand while entering your PIN prevents hidden cameras from recording it.
- Checking your bank and credit card statements weekly for unauthorized charges is your fastest way to catch fraud early.
- Using chip readers instead of swiping, paying inside rather than at the pump, and using ATMs in banks reduce your skimming risk.
How to spot a skimmer before you use the card reader
The most effective defense is visual inspection. Before you insert or swipe your card, tug gently on the card reader itself — the slot where you insert your card or the area where you swipe. A legitimate reader is bolted down; a skimmer attached on top will move, wiggle, or come loose. Check the edges and seams for gaps, mismatched colors, or plastic that looks newer or different from the rest of the machine.
At gas pumps, compare the card reader to the other pumps around it. Skimmers often look slightly different in color, texture, or how they sit. Look for scratches, dents, or signs of tampering. If a reader looks obviously out of place or damaged, use a different pump or a different station.
At ATMs, check for a camera lens or small hole above the keypad — this is often how criminals record your PIN. Inspect the keypad itself; a skimmer overlay will sit on top and may feel loose, raised, or have slightly different coloring. If anything feels off, do not use that ATM.
Protecting your PIN while you enter it
Even if the card reader is legitimate, a criminal may have placed a hidden camera nearby to record your PIN. Always cover the keypad with your other hand while you type your number. This blocks any camera's view and is a habit worth forming at every ATM and payment terminal, whether you suspect a skimmer or not.
If you are at a gas pump, shield the keypad from view as you enter your PIN. At an ATM, stand close to the machine and use your body to block the view from behind and to the sides. This straightforward step stops most camera-based PIN theft.
Choosing payment methods and locations that reduce skimming risk
Chip readers are harder to skim than magnetic stripe readers because the chip generates a unique code for each transaction. If you have a choice, insert your card into the chip reader rather than swiping. Contactless payments — tapping your phone or card — do not transmit your full card number and are even safer.
At gas stations, pay inside the station rather than at the pump. The indoor payment terminal is monitored by staff and changed more often, making it a less attractive target for criminals. Standalone ATMs in remote locations or convenience stores are skimmed more often than ATMs inside banks; use an in-bank ATM when you can.
If you must use an outdoor ATM, choose one in a well-lit, busy location during daylight hours. Criminals prefer machines that are isolated or poorly monitored.
What to do if you notice unauthorized charges
Check your bank and credit card statements at least weekly, not just monthly. The sooner you spot unauthorized charges, the sooner you can report them and stop further fraud. Most banks and card issuers have a fraud reporting number on the back of your card or in your online account.
Call your bank or card issuer when ready if you see charges you did not make. Do not email or use the website chat — call the number on your statement or card. Explain what happened, and the bank will freeze your card, investigate the charges, and issue you a new card. Most banks reverse fraudulent charges within one to two billing cycles.
File a report with the Federal Trade Commission at IdentityTheft.gov if you believe your identity has been compromised beyond just the card. This creates an official record and may help you if the fraud spreads to other accounts.
Monitoring your credit after a skimming incident
If your card was skimmed, criminals may have your full card number but not necessarily your other personal information. However, it is worth monitoring your credit report to catch any signs that they have tried to open new accounts in your name.
You can view your credit report for free once per year at AnnualCreditReport.com, which is the official site run by the three major credit bureaus. Check for accounts you did not open or inquiries from creditors you did not contact. If you see suspicious activity, contact the credit bureau that reported it and ask them to place a fraud alert on your file.
A fraud alert tells creditors to verify your identity before opening new accounts in your name. It lasts one year and is free to place.
Frequently Asked Questions
Can I get my money back if a skimmer stole my card number?
Yes. Federal law limits your liability for fraudulent charges to $50 if you report them within 60 days of your statement date. Most banks waive the $50 fee entirely. Report unauthorized charges to your bank as soon as you see them, and the bank will reverse them and send you a new card.
What is the difference between a skimmer and a data breach?
A skimmer is a physical device a criminal installs on a specific card reader to steal from people who use that machine. A data breach is when a hacker breaks into a company's computer system and steals card data from thousands of customers at once. Both result in fraudulent charges, but skimmers affect only the people who used that particular machine.
Do chip cards prevent skimming?
Chip readers are much harder to skim than magnetic stripe readers because the chip generates a unique code for each transaction. However, criminals can still skim the magnetic stripe on the back of a chip card if the reader has both capabilities. Always insert your chip card into the chip slot rather than swiping when you have the option.
Should I use my debit card or credit card to reduce skimming risk?
Credit cards offer stronger fraud protection than debit cards under federal law. With a credit card, the card issuer investigates fraud and you are not liable for unauthorized charges. With a debit card, the money comes directly from your bank account, and while you can dispute charges, the process is slower and you may lose access to that money temporarily.
Is it safe to use ATMs at night?
ATMs in well-lit, busy locations are generally safer than isolated machines, regardless of time of day. However, using an ATM inside a bank during business hours is the safest option because staff monitor the machine and replace it regularly. If you must use an outdoor ATM at night, choose one in a public area with good lighting and inspect it carefully before using it.