What Is ATM Skimming? Bankrate Caret RightMain Menu Mortgage Mortgages Financing a home purchase Refinancing your existing loan Finding the right lender Additional Resources Elevate your Bankrate experience Get insider access to our best financial tools and content Caret RightMain Menu Bank Banking Compare Accounts Use calculators Get advice Bank reviews Elevate your Bankrate experience Get insider access to our best financial tools and content Caret RightMain Menu Credit Card Credit cards Compare by category Compare by credit needed Compare by issuer Get advice Looking for the perfect credit card? Narrow your search with CardMatch Caret RightMain Menu Loan Loans Personal Loans Student Loans Auto Loans Loan calculators Elevate your Bankrate experience Get insider access to our best financial tools and content Caret RightMain Menu Invest Investing Best of Brokerages and robo-advisors Learn the basics Additional resources Elevate your Bankrate experience Get insider access to our best financial tools and content Caret RightMain Menu Home Equity Home equity Get the best rates Lender reviews Use calculators Knowledge base Elevate your Bankrate experience Get insider access to our best financial tools and content Caret RightMain Menu Loan Home Improvement Real estate Selling a home Buying a home Finding the right agent Additional resources Elevate your Bankrate experience Get insider access to our best financial tools and content Caret RightMain Menu Insurance Insurance Car insurance Homeowners insurance Other insurance Company reviews Elevate your Bankrate experience Get insider access to our best financial tools and content Caret RightMain Menu Retirement Retirement Retirement plans & accounts Learn the basics Retirement calculators Additional resources Elevate your Bankrate experience Get insider access to our best financial tools and content Advertiser Disclosure

Advertiser Disclosure

We are an independent, advertising-supported comparison service. Our goal is to help you make smarter financial decisions by providing you with interactive tools and financial calculators, publishing original and objective content, by enabling you to conduct research and compare information for free - so that you can make financial decisions with confidence.
Bankrate has partnerships with issuers including, but not limited to, American Express, Bank of America, Capital One, Chase, Citi and Discover.

How We Make Money

The offers that appear on this site are from companies that compensate us. This compensation may impact how and where products appear on this site, including, for example, the order in which they may appear within the listing categories. But this compensation does not influence the information we publish, or the reviews that you see on this site. We do not include the universe of companies or financial offers that may be available to you. SHARE: Justin Sullivan / Staff/Getty Images October 19, 2020 Libby Wells covers banking and deposit products. She has more than 30 years’ experience as a writer and editor for newspapers, magazines and online publications. Bankrate logo

The Bankrate promise

At Bankrate we strive to help you make smarter financial decisions. While we adhere to strict editorial integrity, this post may contain references to products from our partners. Here's an explanation for how we make money. Bankrate logo

The Bankrate promise

Founded in 1976, Bankrate has a long track record of helping people make smart financial choices. We’ve maintained this reputation for over four decades by demystifying the financial decision-making process and giving people confidence in which actions to take next. Bankrate follows a strict , so you can trust that we’re putting your interests first. All of our content is authored by and edited by , who ensure everything we publish is objective, accurate and trustworthy. Our banking reporters and editors focus on the points consumers care about most — the best banks, latest rates, different types of accounts, money-saving tips and more — so you can feel confident as you’re managing your money. Bankrate logo

Editorial integrity

Bankrate follows a strict , so you can trust that we’re putting your interests first. Our award-winning editors and reporters create honest and accurate content to help you make the right financial decisions. Here is a list of our .

Key Principles

We value your trust. Our mission is to provide readers with accurate and unbiased information, and we have editorial standards in place to ensure that happens. Our editors and reporters thoroughly fact-check editorial content to ensure the information you’re reading is accurate. We maintain a firewall between our advertisers and our editorial team. Our editorial team does not receive direct compensation from our advertisers.

Editorial Independence

Bankrate’s editorial team writes on behalf of YOU – the reader. Our goal is to give you the best advice to help you make smart personal finance decisions. We follow strict guidelines to ensure that our editorial content is not influenced by advertisers. Our editorial team receives no direct compensation from advertisers, and our content is thoroughly fact-checked to ensure accuracy. So, whether you’re reading an article or a review, you can trust that you’re getting credible and dependable information. Bankrate logo

How we make money

You have money questions. Bankrate has answers. Our experts have been helping you master your money for over four decades. We continually strive to provide consumers with the expert advice and tools needed to succeed throughout life’s financial journey. Bankrate follows a strict , so you can trust that our content is honest and accurate. Our award-winning editors and reporters create honest and accurate content to help you make the right financial decisions. The content created by our editorial staff is objective, factual, and not influenced by our advertisers. We’re transparent about how we are able to bring quality content, competitive rates, and useful tools to you by explaining how we make money. Bankrate.com is an independent, advertising-supported publisher and comparison service. We are compensated in exchange for placement of sponsored products and, services, or by you clicking on certain links posted on our site. Therefore, this compensation may impact how, where and in what order products appear within listing categories. Other factors, such as our own proprietary website rules and whether a product is offered in your area or at your self-selected credit score range can also impact how and where products appear on this site. While we strive to provide a wide range offers, Bankrate does not include information about every financial or credit product or service. ATM skimming is a type of payment card fraud. It is a way of stealing PINs and other information off credit cards and debit cards by rigging machines with hidden recording devices. Bank ATMs and payment terminals at gas pumps and other merchants are the targets of this scam. Thieves then use the stolen information to produce fake cards and spend victims’ money or take cash straight from their bank accounts. “If they are able to retrieve the card number itself, it’s common to use those in online marketplaces or to sell the card numbers in batches to other criminal groups who may attempt to use them for fraudulent purchases,” says Nathan Wenzler, chief cybersecurity strategist at Tenable, a cybersecurity firm in Columbia, Maryland. Here is what you need to know about ATM skimming and how to protect yourself.

Methods of ATM skimming

Thieves employ several techniques to steal data that’s embedded in the magnetic stripe on credit and debit cards: A plastic overlay placed over the ATM keypad captures PINs as they are entered. An overlay placed over the card insertion slot records the data on the magnetic stripe. Tiny cameras placed on an ATM record keypad entries and your fingers as you type. An overlay that covers the whole ATM faceplate is embedded with cameras and card-slot and keypad overlays. “Skimmers are getting harder and harder to detect, especially with the advent of 3-D printers and other inexpensive fabrication devices,” warns Wenzler. Even chip-enabled payment cards, which are more secure than magnetic stripe cards, are vulnerable to theft. By placing a super-thin shim between the chip and the chip reader inside the ATM, thieves can capture your PIN and other card information. These devices are called “shimmers,” and as chip technology becomes more prevalent, they are starting to supplant skimmers as thieves’ choice tool.

How prevalent is ATM skimming

You hear quite a lot about ATM skimming these days, especially at gas pumps. It’s a scam that costs consumers and U.S. financial institutions . “ATMs and gas pumps are certainly the most common targets,” Wenzler says, “but customers should be aware and vigilant of any card reader anywhere, whether that’s restaurants, retail stores, coffee shops or wherever else you may swipe your card.” Wenzler notes that advancements in 3-D printers that can replicate an ATM’s card reader are making skimming cheaper, easier and more accessible to less sophisticated criminals. “Plus, they can sell or share these (skimming) blueprints with others, making it easier to scale up attacks wherever that particular model of ATM is used … This makes it even harder for law enforcement to track and trace who is performing these kinds of attacks,” he says. Also, wireless technology enables cyber-thieves to retrieve stolen PINs and other card data “without approaching the ATM ever again, making it very difficult to catch them in the act,” Wenzler says.

Ways to avoid ATM skimming

To avoid becoming a victim of ATM skimming and possibly having your bank account cleaned out, follow these tips: Go with transactions. Using your smartphone and your bank’s mobile app, you can conduct ATM transactions from anywhere, without a physical debit card. Use debit and credit cards with chip technology, which is more secure. Run your debit card as a credit card transaction and don’t enter your PIN. Avoid using a debit card if you have linked accounts. Use a credit card instead. Use a mobile payment system such as Google Pay, Apple Pay, Samsung Pay or PayPal. Check your bank statements regularly for suspicious transactions; get account alerts and notifications. Besides using safer payment methods, there are some physical, common-sense ways to avoid being an ATM skimming victim: Don’t use ATMs located in dark, out-of-the-way places, in bars and restaurants or in areas with lots of tourists. Go to your bank or inside a store to use an ATM. If the ATM doesn’t immediately return your card after the transaction, waste no time in reporting it to the card issuer. Look over the ATM for signs of skimmers or ask the store manager to do it for you. Don’t use ATMs that have damaged or loose parts or look as if they have been tampered with. “Try wiggling the card reader area to see if it feels loose or if there is a ‘cover’ over it,” advises Wenzler. “That could be a sign of a skimmer having been placed on top of the actual card reader itself.” Use a gas pump that is within view of the gas station attendant or pay inside. Cover the PIN pad when you enter your PIN.

Beware of e-skimming

While some criminals skulk around banks and stores to attach skimmers to physical payment terminals, other criminals steal your credit and debit card data without getting out of their pajamas. “Cyber-criminals now practice the concept of digital skimming or e-skimming,” says Ameet Naik, security evangelist and director of product marketing at PerimeterX, a California-based cybersecurity company. “Instead of placing a physical device on the ATM, they inject a piece of malicious code into a website script that skims credit card numbers from checkout pages on e-commerce sites.” When there is an online payment transaction, the business collects personal data from the buyer, explains Naik. This usually includes name, email address, phone number, password, payment card data and verification code. “This data is most vulnerable at the point of entry,” Naik says. The store, payment processor or bank is often not aware that skimming has occurred, Naik says, because the information was taken from the consumer’s device, not a company server. “The lack of visibility means that the attacks often go undetected for weeks or months, while hackers yield a rich bounty of credit card numbers to sell on the dark web,” he says.

Ways to avoid e-scamming

Don’t enter your card number repeatedly on a website. “If your trusted merchant has an option to save the card number for future purchases, choose it so as to minimize the times you have to type in your information,” advises Naik. Use alternative payment methods such as Apple Pay, Google Pay or PayPal so that you don’t have to type in payment card information. “However, consumers must ensure they use strong passwords to secure these services and avoid account compromise,” Naik says. Be on the lookout for fake checkout pages that impersonate an online merchant. “Be especially wary of payment transactions that appear to fail,” warns Naik. “If that happens, immediately contact the card issuer who can place a fraud alert on your account. Monitor your credit reports and bank and credit card statements routinely for suspicious activity, and report it right away.

Bottom line

Whether you are using a physical bank ATM, a point-of-sale terminal at a merchant or doing cardless ATM transactions, there is always a risk of fraud. Chip-enabled credit and debit cards are safer than magnetic stripe cards, but even those can be hacked. “Frankly, until we can move away from using magnetic stripes for transactions, the technology that creates skimmers will continue to advance and improve, resulting in more attacks against more devices against the globe,” Wenzler says. To minimize your risk exposure, follow the tips and advice outlined here and stay vigilant.

Learn more

SHARE: Libby Wells covers banking and deposit products. She has more than 30 years’ experience as a writer and editor for newspapers, magazines and online publications.

Related Articles