What a credit card skimmer is and where you'll find one
A credit card skimmer is a device that reads and stores your card number when you swipe or insert it. The skimmer sits on top of or inside a legitimate card reader — at a gas pump, ATM, parking meter, or store checkout — so you use it without knowing it's there. A criminal retrieves the device later and sells the stolen card data.
Skimmers appear most often at unmanned or poorly monitored locations: gas station pumps, ATMs in lobbies or parking lots, self-checkout machines, and parking payment kiosks. They are less common at staffed checkout counters because employees can spot them. Some skimmers also include a hidden camera or keypad overlay to capture your PIN.
The goal is not to steal your card itself — it's to copy the data so the criminal can make purchases online or create a counterfeit card. You keep your physical card and may not notice the theft for weeks.
Key Takeaways
- Skimmers are most common at gas pumps, ATMs, and self-checkout machines in locations without staff monitoring.
- A skimmer that feels loose, sits at an odd angle, or looks newer than the rest of the machine is worth avoiding.
- Chip readers are harder to skim than magnetic stripe readers, so inserting your card instead of swiping reduces your risk.
- Checking your card statements within a few days of use catches fraud early, before a thief can drain your account or max out your credit.
- If you spot a suspicious device, report it to the business owner or manager on site, not to a number on the machine itself.
How to inspect a card reader before you use it
Before you insert or swipe your card, spend five seconds looking at the card reader itself. Tug on the faceplate or card slot — a skimmer often sits loosely on top of the real reader and will move or come off in your hand. A legitimate reader is bolted down and won't budge.
Look for misalignment. The card slot should be flush with the rest of the machine. If it sticks out, sits at an angle, or looks like it was added later, skip that pump or ATM and use another one. Check the color and material too — if the card reader looks newer or shinier than the rest of the machine, or if the plastic doesn't match, that's a sign it was added recently.
At gas pumps specifically, check the door to the pump's card reader compartment. It should be sealed with a tamper-evident sticker or lock. If the sticker is broken, peeling, or missing, the pump has been opened and may have been modified. Report it to the station attendant before you use it.
Why chip readers are safer than swipe readers
A magnetic stripe skimmer reads the data off the back of your card when you swipe. A chip reader is much harder to skim because the chip creates a unique transaction code each time you use it — the code can't be reused, so stealing it is nearly worthless to a criminal.
Always insert your card into the chip reader rather than swiping, even if the machine offers both options. If a reader only has a swipe slot and no chip reader, consider using a different payment method or location. Gas pumps are the main exception — many older pumps still only have swipe readers, so you may have no choice. In that case, monitor your statement closely after the purchase.
Protecting yourself with contactless and mobile payments
Contactless payments — tapping your card or phone instead of inserting or swiping — do not expose your card number to a skimmer. The transaction happens wirelessly and creates a unique code, similar to a chip reader. If a machine offers contactless payment, use it instead of inserting your card.
Mobile payment apps like Apple Pay, Google Pay, and Samsung Pay work the same way. Your actual card number never touches the reader. These methods are the safest option at any location, especially gas pumps and ATMs where skimmers are common.
Monitoring your statements to catch fraud early
Check your card statement or your bank's mobile app within a few days of using a card at a gas pump, ATM, or other unmanned location. Look for charges you don't recognize. Fraudsters often test a stolen card number with a small purchase first — a $1 or $5 charge — to see if it works before making larger purchases.
If you spot an unfamiliar charge, contact your card issuer immediately. Most cards have zero liability for unauthorized purchases, meaning you won't pay for fraud. The sooner you report it, the sooner the card issuer can cancel the card and issue a replacement. If the fraud goes unnoticed for weeks, a criminal may have time to make multiple large purchases or open new accounts in your name.
Set up transaction alerts through your bank's app or website. Many banks let you receive a text or email notification for every purchase, or for purchases over a certain amount. This catches fraud within minutes instead of days.
What to do if you find a skimmer
If you discover a loose card reader, a suspicious device, or a tamper-evident sticker that's been broken, do not try to remove it yourself. Report it to the business owner or manager on site — the gas station attendant, bank branch manager, or store manager. Give them a clear description of what you saw and which pump or ATM it was on.
Do not call a phone number printed on the machine itself, because that number may belong to the criminal who installed the skimmer. Contact the business directly through their main phone line or website, or speak to staff in person.
If you used that machine before noticing the skimmer, contact your card issuer and ask them to monitor your account for fraud. You can also place a fraud alert on your credit report by contacting one of the three major credit bureaus — Equifax, Experian, or TransUnion. A fraud alert tells lenders to verify your identity before opening new accounts in your name.
Frequently Asked Questions
Can a skimmer steal my PIN?
Yes, if the skimmer includes a hidden camera or a fake keypad overlay. The camera records your fingers as you type, or the overlay captures the keys you press. This is why you should cover the keypad with your hand when you enter your PIN, even at machines that look legitimate.
Will my bank refund me if a skimmer steals my card number?
Yes. Credit cards and debit cards both have fraud protection, though debit cards sometimes take longer to refund. Contact your issuer as soon as you notice the charge. Most banks refund unauthorized purchases within one to three business days, though the investigation may take longer.
Is it safe to use my card at a gas pump if I don't see a skimmer?
Gas pumps are a common skimming target, but the risk is manageable if you take precautions. Use the pump closest to the station building where staff can see it, insert your chip instead of swiping, use contactless payment if available, and check your statement within a few days. These steps reduce your risk significantly.
What's the difference between a skimmer and a data breach?
A skimmer is a physical device that steals your card number at the moment you use it. A data breach is when a hacker breaks into a company's computer system and steals card numbers from thousands of customers at once. You can't prevent a data breach by inspecting a reader, but you can reduce skimming risk through the steps in this guide.
Should I stop using my debit card to avoid skimmers?
Debit cards carry the same skimming risk as credit cards, but credit cards offer stronger fraud protection in most cases. If you're concerned about skimming, use a credit card at unmanned locations like gas pumps and ATMs, and save your debit card for staffed checkout counters or online purchases.