What a skimmer looks like and where to find one

A credit card skimmer is a small device — usually plastic or metal, roughly the size of a matchbox or smaller — that reads your card's magnetic stripe or chip when you swipe or insert it. The device sits on top of or inside a legitimate card reader at an ATM, gas pump, or payment terminal. Most skimmers are designed to be invisible to a quick glance.

At an ATM, a skimmer typically covers the card slot. It looks like a slightly raised or bulging bezel around the slot, or a separate piece that seems to stick out from the machine's face. The color usually matches the machine, but the fit is slightly loose or uneven. At a gas pump, the skimmer sits inside the card reader slot itself — you cannot see it from the outside, but the slot may feel loose when you insert your card, or the reader may require extra force.

The most common external sign is a card reader that does not feel flush with the machine. If you tug gently on any part of the card slot area and something moves or feels like it might come off, that is a red flag. Legitimate card readers are bolted down and do not shift.

Key Takeaways

  • Skimmers are small devices placed over or inside card readers; they record your card number when you swipe or insert it.
  • At ATMs, look for a card slot that feels loose, bulges outward, or has an uneven fit compared to the rest of the machine.
  • At gas pumps, skimmers sit inside the slot and are invisible from outside, but the slot itself may feel loose or require extra force to insert your card.
  • Tug gently on the card reader area; if anything moves or feels detachable, do not use that machine.
  • Skimmers often work alongside hidden cameras or keypad overlays that capture your PIN, so check for cameras pointed at the keypad and inspect the keypad surface for raised or loose keys.

How skimmers are installed and what they capture

Skimmers are installed by criminals who open the machine's exterior panel — usually with a key or tool — and either glue or clip the device over the card slot, or insert it directly into the slot. The entire process takes minutes. Once installed, the skimmer records the magnetic stripe data (card number, expiration date, cardholder name) or, on newer machines, the chip data.

A skimmer alone captures only your card number and expiration date. To steal money, a criminal also needs your PIN. This is why skimmers are often paired with a hidden camera positioned to film the keypad, or a keypad overlay — a thin plastic sheet placed over the real keypad that records which keys you press. Some overlays are so thin you cannot feel the difference; others are noticeably raised or have keys that stick slightly.

The criminal returns later to retrieve the skimmer and the data it collected, or the device transmits the data wirelessly to a nearby receiver. Either way, your card information is copied within hours of you using the machine.

Skimmers at ATMs versus gas pumps

ATM skimmers are easier to spot because they are mounted on the outside of the machine. The card slot area will look slightly different — a raised bezel, a loose-fitting cover, or a piece that protrudes further than it should. Some criminals paint the skimmer to match the machine's color, but the seams are usually visible if you look closely. Run your fingers around the card slot; a real ATM slot is smooth and flush. A skimmed one has a lip or gap.

Gas pump skimmers are harder to detect because they sit inside the pump's card reader. You cannot see them from outside. The only clues are a slot that feels loose, requires unusual force to insert your card, or seems to have play or wiggle room. Some gas pumps have a security seal around the card reader door; if the seal is broken or missing, the pump may have been opened recently.

Gas pumps also have a higher risk of keypad overlays because the keypad is exposed and easy to cover. Inspect the keypad surface for any raised edges, loose keys, or a layer that seems to sit on top of the real buttons. Press each key firmly; they should all feel identical and respond immediately.

Hidden cameras and PIN capture devices

A skimmer that captures your card data is useless to a criminal without your PIN. Many skimming operations include a small camera hidden above or to the side of the keypad, angled downward to film your fingers as you enter your PIN. These cameras are often disguised as part of the machine — a screw, a bolt, a piece of trim, or a small dark object that looks like it belongs there.

Before you enter your PIN at any ATM or gas pump, look above and to the sides of the keypad. A hidden camera is usually a small dark lens, roughly the size of a pencil tip or smaller. It may be mounted in a small plastic housing or appear to be part of the machine's casing. If you see anything that looks out of place, pointed at the keypad, or installed at an odd angle, do not use that machine.

Some criminals also install a keypad overlay — a thin plastic or rubber sheet that sits on top of the real keypad and records the pressure points where you press. These overlays are designed to feel almost identical to the real keypad, but they are slightly raised, slightly stiffer, or have a seam around the edges. If the keypad feels different than usual, or if you notice a thin layer on top of the buttons, do not enter your PIN.

What to do if you suspect a skimmer

If you notice a loose card slot, a bulging reader, a hidden camera, or a keypad overlay, do not insert your card. Leave the machine and report it immediately. Contact the bank or business that owns the machine — for ATMs, call the bank's customer service number on the back of your card or on the machine itself. For gas pumps, notify the station attendant or the pump operator's customer service line.

Provide a clear description of what you saw: the location of the machine, the specific problem (loose slot, bulging reader, suspicious object), and the time you noticed it. If possible, take a photo of the suspicious area without touching it further. The bank or operator will inspect the machine and remove it from service if needed.

If you used a machine you now suspect was compromised, contact your bank immediately. Ask them to monitor your account for unauthorized charges and consider placing a fraud alert or credit freeze with the credit bureaus. Your bank can also issue a new card with a new number.

Machines most commonly targeted by skimmers

ATMs in remote locations — parking garages, convenience stores, laundromats, casinos — are targeted more often than ATMs inside bank branches, because they receive less staff attention and fewer security cameras. Gas pumps at smaller stations or stations in less-trafficked areas are also common targets. Machines that are older or less frequently serviced are easier to open and modify.

Newer ATMs with chip readers and encrypted connections are harder to skimm than older magnetic-stripe-only machines, but criminals still target them. Chip readers are more secure, but many machines still accept magnetic stripe cards as a fallback, which skimmers can exploit.

If you have a choice, use an ATM inside a bank branch during business hours, or a pump at a major gas station with visible security cameras and regular staff presence. These machines are inspected more frequently and less likely to have been compromised.

Frequently Asked Questions

Can a skimmer steal my money directly from my account?

A skimmer captures your card number and expiration date, but not your PIN or account number. Without your PIN, a criminal cannot withdraw cash from your account at an ATM. However, they can use your card number to make online purchases or create a counterfeit card. This is why skimmers are often paired with hidden cameras or keypad overlays that capture your PIN.

What is the difference between a skimmer and a keypad overlay?

A skimmer reads your card's magnetic stripe or chip data. A keypad overlay records which keys you press to enter your PIN. Criminals often use both together: the skimmer captures your card number, and the overlay captures your PIN. Either device alone is incomplete; together, they give a criminal everything needed to drain your account.

If I see a skimmer, should I try to remove it?

No. Do not touch or attempt to remove a suspected skimmer. Leave the machine, report it to the bank or business owner, and let them handle it. Touching the device could damage evidence or alert the criminal that their skimmer has been discovered before they retrieve it. It is also possible you are mistaken about what you are seeing, and removing a legitimate part of the machine could damage it.

Are chip readers safer than magnetic stripe readers?

Chip readers are more secure because the chip data is encrypted and harder to clone than magnetic stripe data. However, many machines still accept magnetic stripe cards as a backup, and skimmers can still read the stripe. If a machine offers the option, insert your card with the chip first rather than swiping the stripe.

Can I get my money back if a skimmer was used on my card?

Yes. If you report unauthorized charges to your bank within a certain timeframe — usually 60 days — you are protected under federal law. Your bank will investigate and reverse fraudulent charges. However, you must report the fraud promptly; waiting weeks or months to report it can limit your protection.