What a credit card skimmer is and where you'll find one

A credit card skimmer is a small device that reads and stores the information from your card's magnetic stripe or chip. Criminals install them on machines you use every day — ATMs, gas pumps, and payment terminals at stores — so they can copy your card number without you knowing. The skimmer sits between your card and the legitimate reader, capturing your data as you swipe or insert.

Skimmers are most common at gas pumps and ATMs because these machines sit outside, are used by many people, and are checked less often than indoor payment terminals. A criminal can install a skimmer in seconds and return days later to retrieve it and the stolen data. Some skimmers also include a hidden camera pointed at the keypad to record your PIN.

The goal is not to drain your account when ready. Instead, criminals sell the stolen card numbers to other criminals, who use them to make purchases online or create counterfeit cards. This delay between theft and fraud is why you might not notice the problem for weeks.

Key Takeaways

  • Skimmers are installed over the real card reader on ATMs and gas pumps, so wiggle the card slot and look for loose, bulky, or mismatched parts before you insert your card.
  • Gas pump skimmers often sit inside the pump door or on the card reader itself, and the pump may look newer or shinier than others nearby.
  • Cover the keypad with your hand when you enter your PIN, because some skimmers include cameras that record it.
  • Check your bank and credit card statements weekly for charges you don't recognize, because catching fraud early limits your liability.
  • If you find a skimmer, do not remove it — report it to the business or police so they can collect it as evidence.

How to inspect an ATM or gas pump before using it

Start by looking at the card slot. Run your fingers around the edges where the reader meets the machine. A skimmer is usually a separate piece glued or taped over the real slot, so it may feel loose, bulky, or like it doesn't quite fit. If the card slot feels like it could wiggle or come off, do not use that machine.

Look at the overall appearance. Does the card reader look newer or shinier than the rest of the machine? Does it stick out further than it should? Compare it to other ATMs or pumps nearby — skimmers often look slightly out of place because they are added on top of the original equipment.

At a gas pump, check the pump door. Open it and look at the card reader inside. Skimmers are sometimes installed inside the door frame or directly over the reader slot. The door itself should close smoothly and fit snugly — if it feels loose or won't close all the way, the pump may have been tampered with.

If anything looks wrong or feels off, use a different machine. There is no penalty for being cautious, and your instinct is often correct.

Protecting your PIN while you enter it

Some skimmers include a tiny camera or keypad overlay that records your PIN as you type it. Your card number alone is not enough for a criminal to make purchases — they need the PIN to withdraw cash or use the card in person. Protecting your PIN is as important as protecting your card number.

Cover the keypad with your other hand or your body as you enter your PIN. This blocks any camera that might be pointed at the keys. Do this at every ATM and every payment terminal, even ones that look completely normal. It takes two seconds and costs nothing.

If you notice a keypad that looks loose, raised, or different from the machine itself, do not use it. A keypad overlay is a physical device placed over the real keys, so it will feel different to the touch.

What to do if you think you've found a skimmer

Do not remove the skimmer yourself. If you pull it off, you may destroy evidence that police need to investigate and catch the criminal. You also risk damaging the legitimate machine underneath.

Instead, take a photo of the device and the machine's location if you can do so safely. Then report it when ready to the business that owns the machine — the bank if it's an ATM, or the gas station or store manager if it's a payment terminal. Tell them exactly where the suspicious device is and describe what you saw.

If the business is closed or you feel unsafe reporting in person, call the police non-emergency line and give them the location and description. Many police departments have seen enough skimmers to recognize one from your description.

Monitoring your accounts after a potential exposure

Even if you think you spotted a skimmer before using the machine, or if you used a machine and later found out it had a skimmer, monitor your bank and credit card statements closely. Check them at least once a week for the next two months, looking for charges you do not recognize.

Fraudulent charges often start small — a test charge of a few dollars to see if the card is active — before larger purchases follow. Catching fraud early means you can report it quickly and limit your liability. Under federal law, if you report unauthorized charges within 60 days of the statement date, you are not responsible for them.

Set up account alerts if your bank offers them. Many banks let you receive a text or email whenever a charge over a certain amount is made, or whenever any online purchase is attempted. This gives you real-time notice if someone is using your card.

What happens if your card number is stolen

If you see a charge you did not make, contact your bank or credit card company when ready. Call the number on the back of your card — do not use a number from an email or text, because those could be fake.

Tell them which charge is fraudulent and when you first noticed it. They will cancel your card and issue a replacement, usually within 5 to 10 business days. While you wait, they can provide a temporary card number for online purchases, or you can use a different card.

Your bank will investigate the fraudulent charge and typically remove it from your account within 10 business days. You will not pay for charges you report as unauthorized, though the process takes time. Keep records of every call you make and every charge you report.

Frequently Asked Questions

Can a skimmer steal my information if I use chip instead of swipe?

Chip readers are harder to skim because the chip creates a unique code for each transaction that cannot be reused. However, many skimmers still read the magnetic stripe on the back of your card even if you insert it into a chip reader. Some criminals use both methods to maximize their chances of getting usable data.

Is contactless payment safer than swiping or inserting?

Contactless payment (tap or phone payment) does not expose your card to a skimmer because your card never enters the machine. If your bank offers this option, it is one of the safest ways to pay. However, not all merchants have contactless readers yet, so you will still need to use traditional methods sometimes.

What should I do if I used a machine that later had a skimmer found on it?

Contact your bank or credit card company and let them know when and where you used the machine. They may monitor your account more closely or issue a replacement card as a precaution. Watch your statements carefully for the next 60 to 90 days. Most people who use a skimmed machine never experience fraud, but early notice helps if you do.

Can I get my money back if a skimmer was used at my bank's ATM?

Yes. Your bank is responsible for maintaining find ATMs, and they are liable for fraudulent charges that result from a skimmer on their machine. Report the fraud to your bank when ready, and they will investigate and refund unauthorized charges. Keep documentation of when you used the ATM and when you discovered the fraud.