What a skimmer looks like and where to find one
A credit card skimmer is a small device that reads and stores your card number when you swipe or insert it. Most skimmers are thin enough to fit over the real card slot on an ATM, gas pump, or payment terminal — you often cannot tell by looking that anything is wrong. The device sits between your card and the legitimate reader, captures your information as you use it normally, and the thief retrieves it later.
Skimmers come in different forms. The most common type looks like a slightly bulky overlay on the card slot itself — it may be plastic, metal, or a combination. Some are designed to match the color and texture of the machine they are attached to. Others are hidden inside the machine entirely, replacing the real card reader. A few newer skimmers are wireless and send your data to the thief's phone in real time, so they do not even have to return to the machine.
The places where skimmers appear most often are ATMs in low-traffic areas (parking lots, convenience stores, laundromats), gas pump card readers, and standalone payment terminals at restaurants or retail shops. Machines in busy bank lobbies are less common targets because staff monitor them and thieves have less time to install or remove a device unnoticed.
Key Takeaways
- A skimmer is a thin device placed over or inside a card reader that copies your card number when you swipe or insert your card.
- The most visible skimmers look like a slightly raised or bulky overlay on the card slot, but some are hidden inside the machine and impossible to spot by eye alone.
- Wiggling the card slot gently before you use it can reveal a loose skimmer, since legitimate card readers are built to be flush and solid.
- Gas pumps, ATMs in remote locations, and standalone payment terminals are the most common places where skimmers are found.
- If you suspect a skimmer, do not use that machine — report it to the business owner or bank and use a different location instead.
How to check a card reader before you use it
The simplest check is to wiggle the card slot gently with your fingers before inserting your card. A legitimate card reader is built into the machine and will not move. If the slot, bezel, or faceplate around it shifts, flexes, or feels loose, a skimmer is likely attached. Do not insert your card into that reader.
Look at the seams and edges around the card slot. On a real machine, the card reader sits flush with the surrounding plastic or metal — there should be no gap, no raised edge, and no visible tape or adhesive. If you see a line where two pieces of plastic meet, or if the card slot area looks slightly raised or newer than the rest of the machine, that is a warning sign.
Check the color match. Skimmers are often made quickly and may not match the exact color or finish of the machine. If the card slot area looks like a different shade of plastic, or shinier or duller than the surrounding frame, examine it more closely before using it.
Pay attention to how the card feels when you insert it. If there is unusual resistance, grinding, or a feeling that the slot is too tight, stop and try a different machine. A skimmer sitting on top of the real reader can change how smoothly your card slides in.
Red flags at ATMs and gas pumps specifically
At an ATM, check the card slot, the keypad, and the cash dispenser opening. Skimmers are most often placed on the card slot, but thieves sometimes add a fake keypad overlay to capture your PIN as you type it. The fake keypad will feel slightly raised or spongy compared to the real buttons underneath. Press a few keys gently — they should click and feel solid.
At a gas pump, the card reader is usually on the front face of the pump. Look for any part that seems to stick out, is a different color, or has visible seams. Some gas pump skimmers are installed inside the pump by someone with access to the machine, so you cannot see them from the outside — in those cases, your only protection is to use the pump closest to the station attendant or to pay inside instead of at the pump.
If an ATM or gas pump looks physically damaged, has loose parts, or appears to have been tampered with, do not use it. Report it to the bank or gas station immediately. Thieves sometimes damage machines on purpose to install skimmers, so damage is itself a reason to choose a different location.
What to do if you think you have found a skimmer
Do not try to remove it yourself. If you suspect a skimmer is attached to a machine, step away and report it to the business owner, bank, or gas station attendant right away. Tell them exactly which machine and which card slot you are concerned about. They can inspect it, call their maintenance team, or contact the police if needed.
If you used the machine before you noticed the skimmer, contact your bank or card issuer as soon as you can. Tell them the date, time, and location where you used the card. They can monitor your account for fraudulent charges and issue you a new card if necessary. You are not responsible for charges made by a thief, but the sooner you report it, the faster your bank can protect you.
Consider using a different payment method at machines you are unsure about. Many banks now offer contactless payment (tap or mobile wallet) at ATMs and gas pumps, which does not require inserting your physical card into a reader. If your bank supports it, this is a safer option in locations where you cannot inspect the machine carefully.
Why skimmers work and how thieves use the stolen data
Skimmers work because they sit between you and the legitimate reader, so your card goes through both devices. The real reader processes your transaction normally — the machine dispenses cash or the pump starts — so you have no reason to suspect anything went wrong. Meanwhile, the skimmer has silently copied your card number, expiration date, and sometimes your PIN.
Thieves retrieve the skimmer later and download the data, or in the case of wireless skimmers, they receive the data in real time on their phone. They then sell the card numbers to other criminals or use them to make fraudulent purchases online or create counterfeit cards. This is why skimming is so profitable: one skimmer can capture dozens of card numbers before anyone notices.
The lag between when your card is skimmed and when fraudulent charges appear can be days or weeks. This delay is why checking your bank and credit card statements regularly is important — the sooner you spot unauthorized charges, the sooner you can report them and limit the damage.
Differences between skimmers and other card reader problems
Not every card reader that feels odd or looks unusual has a skimmer on it. Some machines are simply old, worn, or poorly maintained. A card slot that is sticky or slightly misaligned might just need cleaning or repair, not removal of a criminal device.
The key difference is whether the card slot itself looks like it has been added on top of the machine. A worn or damaged original reader will show wear evenly across the whole machine. A skimmer will look like a separate piece attached to the surface. If you are uncertain, the safest choice is to use a different machine and report your concern to the business or bank.
Newer machines with chip readers and contactless payment are harder targets for skimmers because the chip technology is more difficult to copy than magnetic stripe data. However, skimmers can still be placed on machines that accept both chip and magnetic stripe cards, and they will capture data from the magnetic stripe.
Frequently Asked Questions
Can a skimmer steal my PIN?
A skimmer on the card slot alone cannot capture your PIN — it only reads the card itself. However, if a thief also installs a fake keypad overlay on top of the real buttons, they can record your PIN as you type it. This is why checking the keypad for a raised or spongy feel is important at ATMs.
Will my bank refund me if my card is skimmed?
Yes. You are not responsible for fraudulent charges made with your card number. Report the unauthorized charges to your bank as soon as you notice them, and they will investigate and refund the money. The faster you report it, the faster the process moves.
Is it safe to use my card at a gas pump?
Gas pumps are a common skimming target, but you can reduce your risk by paying inside the station instead of at the pump, using a pump close to the attendant where it is monitored, or using contactless payment if your card supports it. Inspect the card slot before you use it, and check your statements regularly.
What is the difference between a skimmer and a data breach?
A skimmer is a physical device a thief installs on a specific machine to steal card numbers one at a time. A data breach happens when a criminal hacks into a company's computer system and steals thousands of card numbers at once. Both result in stolen card data, but they happen in different ways and require different responses.
Can I get a skimmer off a machine myself?
No. Do not attempt to remove a suspected skimmer. Report it to the business owner, bank, or police instead. Removing it yourself could destroy evidence, and you might accidentally damage the legitimate machine underneath.