How Credit Card Skimming Works
Thieves Use Credit Card Skimming to Steal Your Data
Victims of credit card skimming are completely blindsided by the theft. They notice fraudulent charges or money withdrawn from their accounts, but their credit and debit cards never left their possession. How did the theft happen?
Credit Card Skimming
Credit card skimming is a type of credit card theft where crooks use a small device to steal credit card information in an otherwise legitimate credit or debit card transaction. When a credit or debit card is swiped through a skimmer, the device captures and stores all the details stored in the card's magnetic stripe.
The stripe contains the credit card number, expiration date, and the credit card holder's full name. Thieves use the stolen data to make fraudulent charges either online or with a counterfeit credit card.
Skimming at ATMs and Gas Stations
Credit card skimmers are often placed over the card swipe mechanism on ATMs and gas stations, but the skimmers can be placed over almost any type of credit card reader. With ATMs, criminals may also place a small, undetectable camera nearby to record your PIN. This gives the thief all the information needed to make fake cards and withdraw cash from the cardholder's checking account.
Skimming at Restaurants or Retail
Occasionally, some retail and restaurant workers who handle credit cards are recruited to be part of a skimming ring. These workers use a handheld device to skim your credit card during a normal transaction. For example, we routinely hand our cards over to waiters to cover the check for a restaurant. The waiter walks away with our credit cards and, for a dishonest waiter, it becomes the perfect opportunity to swipe the credit card through a skimmer without being detected.
How Thieves Use the Information
Once the victim's credit card information is stolen, thieves will either create cloned credit cards to make purchases in-store, use the account to make online purchases, or sell the information on the internet. Victims of credit card skimming are often unaware of the theft until they notice unauthorized charges on their account, have their card unexpectedly declined, or receive an overdraft notification in the mail.
How to Spot a Credit Card Skimmer
Credit card skimming devices are crafted to blend in seamlessly with the machine it's placed on. Unless you're specifically looking for a skimming device, you may not notice anything out of the ordinary.
While you should look for credit card skimmers anywhere you swipe your credit card, gas stations and remote ATMs are more likely to be altered.
Becoming familiar with the look and feel of regular credit card readers can help you detect when there's something out of place. There are some tell-tale signs that a credit-card skimmer is installed. A credit card reader that sticks out far past the panel is an indicator because skimmers are designed to fit over the existing credit card reader. This is most recognizable when an additional part seems to be affixed to the rest of the credit card reader.
At a gas station, you can compare a suspicious credit card reader to the readers at nearby pumps. If something looks out of the ordinary, avoid paying at the pump. Pay inside or go to another gas station.
If a skimmer is installed, the credit card reader will appear loose or move when jiggled. The credit card reader should be securely in place. Moving parts are a sign the reader has been tampered with or that a skimming device has been affixed to the existing reader.
Gas stations often place a security label across the gas pump that lets you know if the cabinet panel on the fuel dispenser has been tampered with. When intact, the label has a flat red, blue, or black background. However, once the seal has been broken, the words "Void Open" appears in white. If the seal missing, displays the message or is loose, it's a sign that someone without authorization has accessed the cabinet. Let the gas station attendant know and do not use the credit card machine at that pump.
Many people don't take the time to look over a fuel pump or an ATM. Complacency is a thief's ally. Take a few moments to inspect the machine before trusting that someone else has inspected it.
In addition to a card skimming device, thieves may place a fake keypad on top of the real one to capture your keystrokes. This way they can capture your pin or billing zip code in addition to your credit or debit card details. If the keys seem hard to push, eject your card and use another ATM. Use a bank-operated ATM, which is less likely to have a skimmer, rather than an ATM at a store or gas station.
How to Prevent and Detect Credit Card Skimming
Thankfully, many banks and credit card issuers are becoming better at detecting fraudulent transactions and may not process suspicious charges until you verify that you initiated the transaction.
Simply using your credit card puts you at risk of becoming a credit card skimming victim. Catching fraudulent charges related to a skimming incident requires you to watch your accounts frequently. Monitor your checking and credit card accounts online at least weekly and immediately report any suspicious activity to your bank or credit card issuer.
Here are a few more tips for avoiding credit card skimming.
- Watch where you shop. Restaurants, bars, and gas stations seem to be the places where credit card incidents happen most frequently. Retail store self-checkouts and ATMs, especially standalone ATMs (those that aren't at the bank) are also places that skimmers can be found.
- Check ATMs before using them. At ATMs, skimmers often place a camera within view of the keypad to steal your PIN. These cameras are often tiny and difficult to detect. When you're using an ATM, cover your hand as you type your PIN to keep a camera from catching a view of what you're typing.
- Don't hand your card to someone for cleaning. Thieves will claim to clean the magnetic strip on your credit card to help it work better. These thieves simply swipe your credit card through a credit card skimmer and take your credit card information.
How to Report a Credit Card Skimming Loss
If you think you've been a victim of credit card skimming, contact your bank or credit card issuer even if you haven't spotted any fraudulent charges. The sooner you report your suspicions, the more you shield yourself from the liability of unauthorized charges. Providing as much detail as possible about the location of the skimmer (e.g., the gas station you visited with pump number, or the ATM location) can help the bank prevent future losses.
Federal Trade Commission. "Watch Out For Card Skimming at the Gas Pump." Accessed Feb. 4, 2020.