What is Skimming?

Definition

Skimming is a fraudulent technique used to collect sensitive card details by using a discreet device, typically placed on ATMs or gas station payment terminals. The purpose of skimming is to clandestinely capture information from the magnetic stripe or chip embedded in the payment card, including the cardholder’s name, card number, and expiration date.

When an unsuspecting user inserts their card into a compromised machine, the skimming device reads the card’s information, while a hidden camera or keypad overlay may also record the PIN code entered. With this stolen data, perpetrators can create cloned cards, make unauthorized online purchases, or sell the information to other criminals.

Types of Skimming Devices and Technology

Skimmers range from simple to sophisticated devices, each designed to steal card information without detection:

Card Reader Overlays

• ATM overlays: Thin devices placed over legitimate card slots that read magnetic stripe data as cards are inserted
• Gas pump skimmers: Internal devices installed inside fuel dispensers, often requiring keys to access

Shimming Devices

• Ultra-thin devices inserted into chip card readers
• Target EMV chip cards by intercepting communication between the card and terminal
• Nearly impossible to detect visually as they fit inside the card slot

Handheld Skimmers

• Portable devices used by dishonest employees or criminals
• Card is swiped through the device during legitimate transactions
• Often disguised as normal payment processing equipment

Companion Devices

• Hidden cameras: Positioned to record PIN entry, often disguised as brochure holders or fake security devices
• Keypad overlays: Fake keypads placed over legitimate ones to capture PIN numbers
• Bluetooth transmitters: Allow criminals to collect stolen data remotely without returning to the compromised machine

Common Locations Where Skimming Occurs

Understanding high-risk locations helps you make informed decisions about card usage:

High-Risk Locations

• Standalone ATMs: Particularly those in poorly lit or isolated areas
• Gas stations: Fuel pumps are frequent targets due to easy access and minimal supervision
• Tourist areas: ATMs in heavily trafficked tourist locations
• Convenience stores: Smaller retailers with less security monitoring

Lower-Risk Locations

• Bank-operated ATMs: Generally have better security and more frequent monitoring
• Indoor ATMs: Located within bank branches or well-monitored establishments
• Busy, well-lit areas: Higher foot traffic makes installation and retrieval more difficult

How to Spot and Prevent Credit Card Skimming

Visual Inspection Tips

• Check for loose or misaligned parts: Card slots, keypads, or screens that appear different from normal
• Look for unusual attachments: Anything that seems added on or doesn’t match the machine’s design
• Examine the keypad: Feel for overlays or keys that seem raised or spongy
• Inspect card slots: Look for protruding devices or slots that appear thicker than normal
• Check for hidden cameras: Look for small holes or unusual objects positioned to view the keypad

Prevention Strategies

• Cover your PIN: Always shield keypad entry with your hand or body
• Use contactless payments: Tap-to-pay methods are more secure than inserting cards
• Choose secure locations: Prefer bank ATMs and well-monitored payment terminals
• Monitor accounts regularly: Check statements and account activity frequently
• Set up account alerts: Enable notifications for all transactions
• Use chip-enabled cards: EMV chips provide better security than magnetic stripes alone

Technology-Based Protection

• Mobile banking apps: Use bank apps to monitor transactions in real-time
• Digital wallets: Apple Pay, Google Pay, and similar services add extra security layers
• Account alerts: Set up immediate notifications for any card activity

What to Do If You’re a Skimming Victim

Immediate Actions

1. Contact your bank immediately: Report suspected fraud as soon as possible
2. Monitor all accounts: Check all bank and credit card accounts for unauthorized activity
3. Change PINs and passwords: Update all relevant account access codes
4. Request new cards: Ask for replacement cards with new numbers
5. File a police report: Document the incident with local law enforcement

Follow-Up Steps

• Review credit reports: Check for any new accounts opened fraudulently
• Document everything: Keep records of all communications with banks and authorities
• Follow up regularly: Stay in contact with your financial institutions during the investigation
• Consider credit monitoring: Use services that alert you to changes in your credit profile

Due to their discreet nature, skimmers are favored by fraudsters as they can be easily installed and quickly retrieved, leaving victims oblivious to the act until unauthorized transactions appear on their accounts. Ultimately, skimming poses a significant threat to the security and privacy of individuals’ financial information, making awareness and prevention crucial for all card users.