What a skimmer looks like and where to find one
A credit card skimmer is a small device — usually plastic or metal, sometimes no thicker than a credit card itself — that reads and stores the information from your card's magnetic stripe or chip. The most common ones fit over the card slot on an ATM, gas pump, or payment terminal so that your card passes through the skimmer before it reaches the real reader. You won't see wires or a screen. It's designed to look like part of the machine.
The skimmer itself does nothing but capture data. A criminal installs it, lets it sit for days or weeks collecting card numbers, then returns to retrieve it and read what it recorded. Some skimmers are paired with a hidden camera or keypad overlay to also capture your PIN. Others work wirelessly, sending stolen data to the criminal's phone in real time.
Skimmers appear most often at gas pumps (especially older ones at small stations), ATMs in low-traffic areas, and self-checkout terminals. They can also be handheld devices a cashier uses to swipe your card out of sight. The physical signs are what matter: a loose, bulky, or slightly misaligned card slot; a reader that sticks out further than it should; or a keypad that feels raised or separates from the machine.
Key Takeaways
- Skimmers are small devices placed over card slots to capture your card number and PIN; they look like they belong to the machine but may be slightly loose, bulky, or misaligned.
- Gas pumps and ATMs in remote locations are the most common targets because criminals have time to install and retrieve skimmers without interruption.
- A skimmer that feels loose, sticks out, or has a raised keypad is a sign to use a different machine or payment method.
- Paying inside the gas station instead of at the pump, using ATMs in banks or busy locations, and checking your statements weekly reduce your risk significantly.
- If you spot a skimmer or suspect one was used on your card, report it to the business and your bank, then monitor your account for unauthorized charges.
Physical signs that a card reader has been tampered with
The easiest way to spot a skimmer is to look and touch. Run your fingers around the card slot. Does the reader feel loose or does it wiggle when you push on it? A legitimate reader is bolted down and solid. A skimmer is often glued or taped on top, so it may shift slightly or feel like it's sitting on the surface rather than being part of the machine.
Look at the slot itself. Is it slightly raised or does it stick out further than the surrounding plastic? Does the color or material match the rest of the machine? Skimmers are often a slightly different shade or texture because they're added after the fact. On gas pumps, compare the card reader on one pump to another pump next to it — they should look identical. If one looks bulkier or newer, that's a red flag.
Check the keypad if there is one. Does it feel like it's part of the machine or does it seem to sit on top? A raised or separable keypad is often a sign that a criminal has added a fake one to capture your PIN as you type. The fake pad records each keystroke, then sends the data wirelessly or stores it for later retrieval.
Where skimmers are most commonly installed
Gas pumps are the single most targeted location because they're outdoors, often unmonitored, and customers expect to insert their cards without a cashier watching. Older pumps with external card readers (rather than ones built into the pump itself) are especially vulnerable. Criminals know they can install a skimmer on a Tuesday and return Friday to collect it without being noticed.
ATMs in remote locations — parking garages, laundromats, convenience stores in quiet areas — are the second most common target. Bank ATMs in busy lobbies are much safer because staff and other customers are present. Standalone ATMs in dark corners or late-night locations give criminals the privacy they need to install and retrieve devices.
Self-checkout terminals at grocery stores and retail shops are increasingly targeted because the machines are less supervised than cashier stations. A handheld skimmer can also be used by a dishonest employee or someone posing as a customer, swiping your card through a hidden reader before handing it back to you.
How to reduce your risk of card skimming
The simplest defense is to avoid card slots altogether when you can. Pay inside the gas station instead of at the pump — this forces the cashier to swipe your card in front of you, making skimming much harder. Use ATMs inside banks during business hours rather than standalone machines. Use your phone's contactless payment (Apple Pay, Google Pay, Samsung Pay) whenever the terminal accepts it, because these payments don't expose your card number to a skimmer.
When you do have to use a card slot, inspect it first. Wiggle the reader, check for loose parts, and compare it to nearby machines. If something feels off, use a different pump or ATM. It takes 30 seconds and costs nothing. If you're at a gas pump and the reader looks suspicious, go inside and tell the attendant — they may already know about a problem or can check it themselves.
Check your bank and credit card statements weekly, not just monthly. Many people don't notice fraudulent charges for weeks because they only look at their statement once a month. Weekly checks let you catch unauthorized activity within days, which makes it much easier for your bank to reverse the charges and investigate. Set up transaction alerts on your accounts so your bank texts or emails you when ready after any purchase over a certain amount.
What to do if you think you've been skimmed
If you notice unauthorized charges on your statement, contact your bank or credit card company when ready. Tell them the date and location where you believe the skimming happened. Your bank will freeze the card, issue you a new one, and reverse the fraudulent charges — this is their legal responsibility under federal law, so you won't pay for unauthorized purchases.
If you spot a skimmer on a machine, report it to the business that owns it right away. Tell a gas station attendant, a bank manager, or a store manager. Take a photo if you can do so safely. Also report it to your local police non-emergency line — they may be able to catch the criminal when they return to retrieve the device, or warn other businesses in the area.
After reporting fraud, monitor your credit report for the next several months. You can view your report free once per year at annualcreditreport.com. Look for accounts you didn't open or inquiries you didn't authorize. If a criminal used your stolen card number to open new accounts in your name, you'll see them there. If you find unauthorized accounts, contact the creditor when ready and file a dispute with the credit reporting agency.
The difference between skimmers and other card fraud methods
Skimming is different from phishing (fake emails or texts asking for your card number), data breaches at retailers (where hackers steal card numbers from a company's database), and card-not-present fraud (where someone uses your number online without the physical card). A skimmer is a physical device that captures your card's data in real time, usually without you knowing it happened.
Skimming is also different from a compromised ATM that's been hacked internally. Some ATMs have been modified by criminals to read cards and store the data inside the machine itself, rather than using an external skimmer. These are harder to spot because there's nothing visible to inspect. This is why using ATMs in busy, well-lit locations and inside banks is your best defense — these machines are serviced more frequently and monitored more closely.
The reason skimming remains common is that it works and it's low-risk for the criminal. They don't need to hack anything or break into a system. They just glue a device to a machine, wait, and come back. Knowing what to look for and checking your statements regularly are your best tools for staying safe.
Frequently Asked Questions
Can a skimmer read a chip card, or just the magnetic stripe?
Most skimmers read only the magnetic stripe on the back of your card, not the chip. Chip readers are harder to fake because they require a more complex interaction with the card. However, some advanced skimmers can read both. Using your card's chip (by inserting it rather than swiping) is slightly safer than swiping, but it's not foolproof. Contactless payment is the safest option if the terminal accepts it.
What if I see a skimmer but I'm not sure?
If a card reader looks or feels unusual, don't use it. Use a different machine or pay a different way. There's no downside to being cautious. If you're genuinely concerned, take a photo and show it to the business owner or manager. They can tell you whether it's legitimate or not. It's better to be wrong than to have your card number stolen.
Do I need to cancel my card when ready if I think I was skimmed?
Not necessarily. Call your bank first and describe what happened and when. Your bank can monitor your account for suspicious activity and may cancel the card as a precaution. But if no fraudulent charges appear within a few days, your card may not have been compromised. Your bank can advise you on whether to cancel or keep watching.
Will my bank refund me if my card was skimmed?
Yes. Federal law requires banks and credit card companies to refund unauthorized charges. You are not responsible for fraudulent purchases made with your card number, even if the skimmer was your fault. Report the fraud to your bank, and they will reverse the charges and send you a new card.
Is a debit card safer than a credit card against skimming?
No. Skimmers work on both debit and credit cards because they both have magnetic stripes. However, credit cards offer better fraud protection by law. With a credit card, the issuer's money is at risk, so they investigate aggressively. With a debit card, your own money is taken from your account, and you have to fight to get it back. Using a credit card for in-person purchases gives you more protection if skimming happens.