What a credit card skimmer is and where you'll find one
A credit card skimmer is a small device or hidden camera that captures your card number, PIN, or both when you swipe or insert your card. Thieves install them on machines you use every day: ATMs, gas pumps, checkout terminals at stores, and parking meters. The device reads your card data as it passes through, and the thief retrieves it later or sends it wirelessly to a phone nearby.
Skimmers work because they sit between your card and the real reader inside the machine. You don't see them working. You don't get a warning. By the time you notice fraudulent charges on your statement, the thief already has your information and may have sold it to someone else.
The most common places to find skimmers are ATMs in low-traffic areas (parking garages, convenience stores, laundromats), gas station pumps, and self-checkout terminals. Thieves target these because they're less monitored and you're often alone when you use them.
Key Takeaways
- Skimmers are physical devices or hidden cameras installed on card readers; they capture your card number and PIN without your knowledge.
- ATMs in remote locations, gas pumps, and self-checkout machines are the most common targets because they have less supervision.
- Wiggle the card slot, look for loose or misaligned parts, and check for small cameras or holes near the keypad before you insert your card.
- If you find a suspicious device, do not touch it; report it to the business owner or bank when ready and use a different machine.
- Monitor your bank and credit card statements weekly for charges you don't recognize, and set up transaction alerts through your bank's app or website.
How to inspect an ATM or card reader for a skimmer
Before you insert your card, spend 10 seconds looking at the machine. Start with the card slot itself. Run your finger along the edges where the slot meets the machine body. A skimmer is usually a thin overlay that sits on top of the real slot, so it may feel loose, raised, or misaligned compared to the rest of the machine. If it wiggles or feels like it could come off, do not use that machine.
Look at the keypad next. Legitimate keypads are usually flush with the machine and feel solid when you press them. A skimmer keypad may be slightly raised, a different color or material, or feel hollow underneath. Some thieves add a thin plastic overlay over the real keypad to capture your PIN as you type.
Check for small holes or cameras near the keypad or above the card slot. Thieves sometimes hide a pinhole camera to record you entering your PIN. Tilt your head and look from different angles. If you see anything that looks like a lens or a hole that wasn't there before, move to a different machine.
At gas pumps, also check the pump door and the card reader housing. Skimmers on pumps are often installed inside the pump itself, but some are external overlays. If the card reader looks newer than the pump, or if the housing is loose or cracked open, use a different pump or pay inside with cash.
Red flags that signal a skimmer might be present
A machine that looks damaged, worn, or poorly maintained is more likely to have a skimmer. Thieves often target machines that are already in disrepair because the damage hides their device and the business owner may not notice it as quickly.
If the card slot is sticky, stiff, or resists your card, stop. A skimmer can jam the slot or make it harder to insert your card smoothly. Do not force your card in; use a different machine instead.
At ATMs, check the surrounding area. If you see a small device, wires, or anything that looks out of place near the machine, report it and do not use that ATM. Thieves sometimes attach wireless transmitters to send your data to a phone in a nearby car, so look for anything that seems added on rather than built in.
If your bank or card issuer calls you about suspicious activity on your account, and you remember using an ATM or pump that felt odd, tell them which machine it was. Banks track skimmer reports and can warn other customers.
What to do if you think you've found a skimmer
Do not touch it or try to remove it yourself. Skimmers can be evidence in a theft investigation, and touching it may destroy fingerprints or damage the device in a way that makes it harder for police to trace.
Tell the business owner or manager when ready. If it's an ATM in a bank lobby, find a teller or call the bank's customer service line and describe the location and what you saw. If it's a gas pump, tell the attendant inside. If it's a store checkout, alert a manager. Be specific: describe the machine's location, what looked wrong, and when you noticed it.
If the business is closed or you cannot reach anyone, call the bank that owns the ATM (the name is usually on the machine) or call your local police non-emergency line to report it. Many police departments have fraud units that investigate skimmer reports.
After you report it, use a different machine to withdraw cash or make your purchase. Do not use the machine you suspected, even if the device is no longer visible — the thief may have removed it but the real reader could still be compromised.
Monitor your statements and set up alerts
Check your bank and credit card statements at least once a week, not just once a month. The sooner you spot a fraudulent charge, the sooner you can report it and limit the damage. Many banks allow you to read statements weekly or view transactions in real time through their app.
Set up transaction alerts through your bank's website or mobile app. You can usually choose to be notified by text or email whenever a charge over a certain amount is made, or whenever any charge is made at all. This way, if a thief uses your card number, you'll know within minutes instead of days.
If you see a charge you don't recognize, contact your bank or card issuer when ready. Tell them the date, amount, and merchant name. They will investigate and can reverse the charge while they look into it. Most banks have a fraud department that works 24/7.
If you used a specific ATM or pump and then saw fraudulent charges, tell your bank which machine you used and when. This information helps banks and law enforcement track down skimmers and catch the people operating them.
Safer ways to withdraw cash and make payments
Use ATMs inside bank branches during business hours whenever possible. These machines are monitored by security cameras and staff, so thieves are less likely to install skimmers on them. If you must use an ATM outside a branch, choose one in a well-lit, busy location like a grocery store or shopping mall rather than a parking garage or isolated convenience store.
At gas pumps, pay inside with cash or use a credit card (not a debit card) at the pump. Credit cards offer more fraud protection than debit cards, and you can dispute charges more easily. If you use a debit card at a pump, monitor your account closely for the next few weeks.
For online shopping and phone orders, use a virtual card number if your bank offers one. Virtual card numbers are temporary numbers linked to your real account that expire after one use or after a set time. If a thief steals the virtual number, they cannot use it again.
At checkout terminals in stores, watch the cashier or attendant process your card. If they take your card out of your sight, ask them to run it in front of you. Some retailers now offer contactless payment (tap or mobile wallet), which does not require you to insert your card and is harder to skim.
Frequently Asked Questions
Can a skimmer steal my information if I use chip technology instead of swiping?
Chip readers are harder to skim than magnetic stripe readers, but not impossible. A skimmer can still capture your card number from a chip card if it's sophisticated enough. The best protection is to use a chip reader that requires you to insert your card and keep it in the machine while the transaction processes, rather than swiping or tapping.
What's the difference between a skimmer and a card reader that's just broken?
A broken card reader usually does not work at all — your card will not be read, and the machine will reject it or show an error. A skimmer works fine; your transaction goes through normally while the device secretly copies your information. If a machine reads your card smoothly but looks damaged or feels odd, it may have a skimmer.
If I used a card at a machine with a skimmer, what should I do?
Call your bank or card issuer and tell them you may have used a compromised machine. Give them the date, location, and time if you remember. They can monitor your account for fraud and may issue you a new card with a different number. Do not wait to see if fraudulent charges appear; report it right away.
Do skimmers work on contactless payments like Apple Pay or Google Pay?
No. Contactless payments and mobile wallets do not transmit your actual card number to the reader. The payment is encrypted and tied to your phone, so a skimmer cannot capture your card data. Using your phone to pay is one of the safest ways to avoid skimmers.
How often do banks replace ATMs that have had skimmers?
Banks replace or service ATMs on different schedules depending on the machine's age and location. There is no set timeline. If you report a skimmer, the bank will investigate and remove the machine from service while they inspect it. This is why reporting suspected skimmers matters — it gets the machine checked and protects other customers.