Skimming is theft of your card number without taking the card itself
Skimming is a method criminals use to capture the information on your debit or credit card — the card number, expiration date, and sometimes the PIN — without ever physically taking the card from you. A skimmer is a small device or hidden camera that reads your card data when you swipe, insert, or tap it at an ATM, gas pump, or payment terminal. The thief then uses that stolen information to make purchases or withdraw cash, often before you realize anything happened.
The term comes from the act of "skimming" data off the magnetic stripe or chip on your card. Skimming happens in seconds and leaves no visible damage to the card or machine. You may not notice it at all until fraudulent charges appear on your statement.
Key Takeaways
- Skimmers are small devices placed over legitimate card readers at ATMs, gas pumps, and store terminals that capture your card number when you insert or swipe.
- Criminals often combine a skimmer with a hidden camera to record your PIN, giving them everything needed to drain your account or make fraudulent purchases.
- ATMs in remote locations and unattended gas pumps are common targets because they receive less monitoring and maintenance than bank branches.
- Checking your card reader for loose or misaligned parts before use and monitoring your bank statements weekly can catch skimming early.
- If you discover skimming fraud, contact your bank immediately to freeze the card and dispute unauthorized charges.
How a skimmer device works
A skimmer is typically a thin plastic or metal overlay that fits over the legitimate card slot on an ATM, gas pump, or payment terminal. When you insert your card, it passes through the skimmer first, which reads and records the magnetic stripe or chip data. The skimmer stores this information in its memory, and the thief retrieves it later by removing the device.
Some skimmers are more sophisticated. They may be installed inside the machine itself, replacing or sitting alongside the real card reader. These internal skimmers are harder to spot because there is nothing visible on the outside of the machine. Criminals may also use a shimmer — a thin device inserted into the chip reader slot that captures data from the chip without being easily noticed.
The stolen data is often combined with video from a hidden camera pointed at the keypad. The camera records your PIN as you type it. With both your card number and PIN, a thief can withdraw cash directly from your account at any ATM, or use the card number online or in stores.
Where skimmers are most commonly found
ATMs in low-traffic areas are frequent targets — machines at convenience stores, laundromats, or remote locations that see less frequent maintenance and monitoring than bank branch ATMs. Gas pumps, especially at unattended stations, are also common because you are outside and distracted, and the pump sits unmonitored for hours.
Retail payment terminals are less common targets for skimming because store staff are usually nearby and the machines are checked regularly. However, skimmers have been found at self-checkout kiosks and outdoor terminals. Restaurants and bars with handheld card readers used tableside are occasionally targeted, though the reader is in the employee's hands rather than left unattended.
Vending machines, parking meters, and ticketing kiosks can also be rigged with skimmers. The pattern is consistent: the device is placed where it will see many transactions, where the machine sits unattended for extended periods, and where the thief can retrieve it without drawing attention.
Signs a card reader might have a skimmer
Before you insert your card, inspect the card slot and the surrounding area. A skimmer overlay may look slightly raised, misaligned, or a different color or material than the rest of the machine. Try gently tugging on the card slot cover or bezel — if it moves or feels loose, do not use that machine.
Look for gaps between the card reader and the machine frame, or parts that seem to stick out. Some skimmers are obvious if you know what to look for; others are nearly invisible. If anything feels off or looks unusual, use a different machine or go inside to a teller.
A hidden camera is harder to spot, but look for small holes or lenses near the keypad, or a small device attached to the top or side of the machine pointing downward. Cameras may be disguised as part of the machine's design, so look for anything that seems out of place.
What to do if you suspect skimming
If you notice suspicious charges on your statement that you did not make, contact your bank immediately. Tell them which ATM or terminal you used and when. Your bank can freeze your card, issue a replacement, and dispute the fraudulent charges. Most banks have fraud protection that limits your liability for unauthorized transactions, though the specifics vary by institution and account type.
Do not wait to see if more charges appear. The sooner you report it, the sooner your bank can stop the bleeding and investigate. Keep records of the date, time, location, and amount of each fraudulent charge.
If you saw a skimmer device on a machine, report it to the business that owns or operates the machine — the bank, gas station, or store. They can remove it and check for others. You can also report it to local police, though they may not investigate a single device without evidence of actual fraud.
How to reduce your skimming risk
Use ATMs inside bank branches or well-lit, high-traffic locations whenever possible. These machines are checked more often and are less likely to have skimmers. Avoid ATMs in remote corners of parking lots or convenience stores in unfamiliar areas.
At gas pumps, use the pump closest to the station entrance where staff can see it. Pay inside with the cashier instead of at the pump if you are uncomfortable. When entering your PIN, cover the keypad with your other hand to block any hidden camera's view.
Monitor your bank and credit card statements weekly, not just monthly. Many banks and card issuers offer text or email alerts for transactions over a certain amount, or for any transaction at all. Turn these on. The faster you catch fraud, the faster you can stop it.
Consider using contactless payment (tap or mobile wallet) instead of inserting or swiping your card when the option is available. Contactless payments do not expose your full card number to the terminal in the same way, though they are not completely immune to fraud.
The difference between skimming and other card fraud
Skimming is the theft of card data from a physical reader. Phishing is when a criminal sends you a fake email or text pretending to be your bank and tricks you into entering your card number or PIN on a fake website. Card-not-present fraud happens when someone uses your card number online or over the phone without having the physical card. Identity theft is broader — it means someone uses your personal information (name, Social Security number, address) to open accounts or take out loans in your name.
Skimming is one of the oldest and most direct forms of card fraud because it requires no social engineering or hacking — just a device and access to a card reader. It is also one of the hardest for you to prevent entirely, which is why monitoring your statements and catching fraud early is so important.
Frequently Asked Questions
Can skimming happen with a chip card or contactless payment?
Chip cards are harder to skim than magnetic stripe cards because the chip uses encryption, but skimmers still exist for chip readers (called shimmers). Contactless payments are more secure because the full card number is not transmitted to the terminal in the same way, but they are not completely immune. Magnetic stripe cards remain the easiest target for skimmers.
Will my bank refund me if I fall victim to skimming?
Most banks and credit card companies have fraud protection that limits your liability for unauthorized charges. Debit card fraud protection varies by bank and how quickly you report it — federal law limits your liability to $50 if you report within two days, but some banks offer better protection. Credit cards typically limit your liability to $50 regardless of how long you wait. Check your account agreement or call your bank to confirm your coverage.
Is skimming more common at certain times of year?
Skimming happens year-round, but criminals may increase activity during holiday shopping season when people withdraw more cash and make more transactions. There is no safe time to let your guard down, but staying alert during high-spending periods is especially important.
Can I get skimmed if I use my debit card at a store instead of an ATM?
Yes, if the store's payment terminal has a skimmer installed. However, retail terminals are checked more frequently and are usually staffed, so skimming at stores is less common than at ATMs or gas pumps. The risk is lower but not zero.
What should I do if I find a skimmer device on a machine?
Do not touch it or try to remove it yourself. Report it to the business that operates the machine and to local police. If you used that machine recently, contact your bank and monitor your statements closely for fraudulent activity.