What a skimmer looks like and where to find it
A credit card skimmer is a small device — usually plastic or metal, roughly the size of a deck of cards or smaller — that reads and stores your card number when you swipe or insert it. The most common ones sit on top of the card slot at ATMs, gas pumps, and payment terminals. They are designed to look like part of the machine.
At an ATM, a skimmer typically covers the card slot and may be slightly raised or have a different color or texture than the rest of the machine. At a gas pump, it slides over the existing card reader on the outside of the pump. Some are so well-fitted that they blend in almost completely; others are visibly loose or misaligned. The device itself contains a magnetic stripe reader that captures your card data as it passes through.
Skimmers do not require batteries or a power source — many are passive devices that straightforward store data until someone retrieves them. Others transmit data wirelessly to a nearby receiver. Either way, you cannot see the theft happening. The machine processes your transaction normally while the skimmer silently copies your information.
Key Takeaways
- Skimmers are small devices that fit over card slots at ATMs and gas pumps and copy your card number as you insert or swipe.
- A skimmer may look slightly raised, loose, have a different color, or feel different when you touch it compared to the rest of the machine.
- Wiggling the card slot, checking for gaps, and looking for misalignment are the fastest ways to spot a skimmer before you use the machine.
- Skimmers at gas pumps are harder to detect because they are installed on the outside; pumps at busy, well-lit stations are lower risk.
- If you suspect a skimmer, do not use the machine — report it to the business or bank that owns it and use a different location.
How to check an ATM or payment terminal for a skimmer
Before you insert your card, spend ten seconds inspecting the card slot. Gently wiggle the plastic bezel or faceplate around the slot — a skimmer will move or feel loose because it is glued or taped on top of the real slot. The legitimate machine part should not budge. If something shifts or clicks, do not use that machine.
Look for gaps between the card slot and the surrounding plastic. A skimmer creates a visible space because it sits on top of the original slot. Check whether the slot color matches the rest of the machine, or whether the plastic around it looks newer or shinier. Run your finger around the edges — a skimmer often has a seam or edge that feels different from the smooth machine body.
Tilt your head and look at the slot from the side. A skimmer adds depth and may cast a shadow or create a step where there should be a flush surface. If the machine is indoors and well-lit, use that light to look for anything that appears to be sitting on top rather than built into the machine.
Why gas pump skimmers are harder to spot
Gas pump skimmers are installed on the outside of the pump, on the card reader panel you face when you pay. Because the pump's exterior is already a separate panel, a skimmer blends in more easily than it does on an ATM. The skimmer may cover the entire card slot or just part of it, and it is often painted or colored to match the pump.
The best defense at a gas pump is to use pumps at busy, well-lit stations during daylight hours. Thieves prefer isolated or poorly monitored pumps because they can install and retrieve skimmers without being seen. Major branded stations and busy locations have higher foot traffic and more frequent maintenance checks.
If you must use a pump and you are unsure, pay inside with the attendant instead of using the card reader on the pump. This bypasses the skimmer entirely. Some banks and card issuers also offer virtual card numbers or one-time-use card numbers for online and in-person purchases, which limit the damage if a skimmer does capture your information.
Signs your card may have been skimmed
You will not know a skimmer has read your card until fraudulent charges appear on your statement. Watch your account for small test charges — thieves often charge $1 or a few dollars first to confirm the card number works before making larger purchases. Check your statement weekly, not just monthly.
If you see charges you did not make, contact your card issuer when ready. Most banks and card networks (Visa, Mastercard, American Express, Discover) limit your liability for fraudulent charges to $50 if you report them within 60 days of the statement date. Some issuers offer zero liability, meaning you pay nothing. The sooner you report, the faster the investigation moves.
If you used a debit card at a skimmed ATM or pump, the risk is higher because the thief has direct access to your bank account. Report it to your bank right away. Debit card fraud liability depends on when you report it — if you report within two business days, you are typically liable for no more than $50, but waiting longer can increase your liability significantly.
What to do if you think you have found a skimmer
Do not remove the device yourself. If you suspect a skimmer, step away from the machine and do not use it. Report it to the business or bank that owns the machine — tell a gas station attendant, call the bank's customer service number on the back of your card, or contact the ATM operator directly.
Provide the location and description of what you saw: the machine address, what looked wrong, and when you noticed it. The bank or business will send someone to inspect and remove it if it is real. Law enforcement may also get involved if a skimmer is confirmed, but your job is to report it and let the owner handle removal.
Use a different machine at a different location for your transaction. If you are at a gas station, pay inside. If you are at an ATM, find another ATM at a different branch or location. This small delay is worth the security.
Skimmers versus other card theft methods
Skimmers are one way thieves steal card numbers, but not the only way. Card-not-present fraud happens when someone uses your number online or over the phone without the physical card. Phishing tricks you into giving your number to a fake website or email. Data breaches at retailers or banks expose thousands of card numbers at once.
Skimmers are different because they target you directly at a machine you use regularly. They do not require you to click a link or enter information into a fake site. The theft is passive — the device does the work while you complete a normal transaction. This makes skimmers a persistent threat at ATMs and gas pumps, even though they are less common than online fraud.
The defense against skimmers is vigilance at the point of use. The defense against other fraud methods is monitoring your statement, using strong passwords, and being skeptical of unsolicited requests for your card number. Together, these habits catch most fraud before it causes serious damage.
Frequently Asked Questions
Can a skimmer read a chip card or only a magnetic stripe?
Most skimmers read the magnetic stripe on the back of your card. Chip cards are harder to skim because the chip uses encryption and requires a PIN or signature. However, some advanced skimmers can read chip data, and thieves can still use the magnetic stripe data from a chip card for online or phone purchases where the chip is not required.
Do contactless or tap payments protect me from skimmers?
Contactless payments (tap or wave) are safer than swiping because you do not insert your card into a slot where a skimmer can sit. However, contactless readers can theoretically be skimmed too, though it is much less common. If you have the option to tap instead of swipe, it is a small security advantage.
What if I used a card at a machine and later found out it had a skimmer?
Contact your card issuer when ready and report the location and date you used the machine. The bank will monitor your account for fraud and may issue a new card. If fraudulent charges appear, report them within 60 days of your statement date to stay within the liability window. Most issuers will reverse the charges.
Are ATMs inside banks safer than standalone ATMs?
ATMs inside bank branches are generally safer because they are in find locations with cameras and staff present. Standalone ATMs in convenience stores, malls, or on street corners are higher risk because they are less monitored. If you have a choice, use an ATM inside your bank's branch during business hours.
Should I cover the keypad when I enter my PIN?
Yes. Cover the keypad with your hand or body while you enter your PIN, whether or not you suspect a skimmer. Some skimmers include a hidden camera or overlay keypad to capture your PIN. Blocking the view prevents this. This habit takes no extra time and protects you against multiple theft methods at once.