Protecting Credit Cards From Skimmers and Scanners

Quick answer

• Always use credit cards at the point of sale, not for inserting into unattended machines.
• Be wary of unusual card readers or payment terminals.
• Shield your card when entering your PIN.
• Monitor your credit card statements regularly for unauthorized charges.
• Enable transaction alerts with your credit card issuer.
• Consider using contactless payment options when available.
• Report any suspicious activity or potential skimming immediately.

Who this is for

• Anyone who uses credit cards for everyday purchases.
• Individuals concerned about identity theft and financial fraud.
• Consumers who frequent gas stations, ATMs, or other self-service payment locations.

What to check first (before you act)

• Your Credit Card Usage Habits:

Consider where and how you most frequently use your credit cards. Do you often use gas pumps, ATMs, or self-checkout kiosks? Are you more likely to insert your card into a reader or swipe it? Understanding your typical usage patterns can help you identify the areas where you might be more vulnerable.

• Your Current Statement Review Process:

How often do you review your credit card statements? Do you look for every transaction, or just the large ones? A thorough review process is your first line of defense against fraudulent activity. If you don’t have one, establishing a regular habit of checking your statements is crucial.

• Your Card Issuer’s Security Features:

What security measures does your credit card company offer? Many issuers provide mobile apps with real-time transaction alerts, the ability to temporarily lock your card, and fraud monitoring services. Familiarize yourself with these tools and ensure they are activated and configured to your preferences.

Step-by-step (simple workflow)

1. Inspect Payment Terminals:

• What to do: Before inserting or swiping your card, visually inspect the card reader. Look for anything that seems loose, misaligned, or out of place. Check if there are any extra devices attached to the terminal.
• What “good” looks like: The card reader appears to be an integrated part of the machine, with no visible signs of tampering or extra attachments.
• A common mistake and how to avoid it: Assuming all terminals are secure. Avoid this by making inspection a routine habit at every self-service terminal.

2. Test Card Readers for Looseness:

• What to do: Gently try to wiggle the card slot or the keypad. If it feels loose or easily detaches, it might be a sign of a skimmer.
• What “good” looks like: The card slot and keypad are firmly attached and do not move when lightly tugged.
• A common mistake and how to avoid it: Not performing a physical check. Avoid this by making a light tug a standard part of your inspection process.

3. Shield Your PIN Entry:

• What to do: When entering your Personal Identification Number (PIN), use your free hand or a piece of paper to cover the keypad.
• What “good” looks like: Your PIN entry is completely obscured from any potential cameras or onlookers.
• A common mistake and how to avoid it: Forgetting to shield your PIN, especially when distracted. Avoid this by consciously remembering to cover the keypad every single time you enter your PIN.

4. Prioritize Chip Readers and Contactless Payments:

• What to do: Whenever possible, use the EMV chip reader on your card or opt for contactless payment methods (like tapping your card or using your smartphone). These methods are generally more secure than traditional magnetic stripe swiping.
• What “good” looks like: You are consistently using chip-and-PIN or contactless payment options for your transactions.
• A common mistake and how to avoid it: Sticking to swiping out of habit. Avoid this by actively seeking out and choosing chip or contactless options.

5. Be Cautious at Gas Pumps and ATMs:

• What to do: These are common targets for skimmers. Pay extra attention to the card reader and keypad at these locations. If something looks suspicious, use a different machine or go inside to pay.
• What “good” looks like: You feel confident that the card reader and keypad at the gas pump or ATM are legitimate.
• A common mistake and how to avoid it: Rushing through the transaction. Avoid this by allocating a few extra seconds to thoroughly inspect these machines before use.

6. Use Credit Cards Over Debit Cards for Unattended Terminals:

• What to do: When using a self-service terminal where you might feel less secure, prefer using a credit card. Credit cards typically offer stronger fraud protection than debit cards, which draw directly from your bank account.
• What “good” looks like: You have a system in place where credit cards are your default for potentially risky transactions.
• A common mistake and how to avoid it: Using your debit card out of habit for convenience. Avoid this by consciously choosing your credit card when interacting with self-service terminals.

7. Enable Transaction Alerts:

• What to do: Contact your credit card issuer or log into your online account to set up real-time alerts for transactions. You can often choose to be notified for all purchases, or for those over a certain amount.
• What “good” looks like: You receive an immediate notification on your phone or email whenever your card is used.
• A common mistake and how to avoid it: Not setting up alerts because it seems like too much effort. Avoid this by understanding that the minimal effort upfront can save significant trouble later.

8. Monitor Your Statements Regularly:

• What to do: Set a schedule (e.g., weekly or bi-weekly) to review your credit card statements for any unfamiliar charges.
• What “good” looks like: You can quickly identify and question any transactions that you don’t recognize.
• A common mistake and how to avoid it: Only checking statements once a month, or not at all. Avoid this by creating a consistent review habit, even if it’s just for a few minutes.

9. Report Suspicious Activity Immediately:

• What to do: If you notice any unusual charges, suspect a skimmer, or see a compromised terminal, contact your credit card company immediately.
• What “good” looks like: You know the fraud department number for your card issuer and can call them quickly.
• A common mistake and how to avoid it: Delaying reporting, hoping the charge will disappear or that it was a mistake. Avoid this by understanding that prompt reporting is key to minimizing your liability.

Common mistakes (and what happens if you ignore them)

Mistake	What it causes	Fix
Not inspecting card readers	Skimmers can capture your card data and PIN, leading to unauthorized purchases.	Make it a habit to visually and physically inspect card readers before every transaction.
Not shielding PIN entry	Keyloggers or hidden cameras can record your PIN, compromising your account.	Always use your free hand or an object to cover the keypad when entering your PIN.
Relying solely on magnetic stripe swiping	Magnetic stripes are easier to copy than EMV chips.	Prioritize using the EMV chip or contactless payment options whenever available.
Using debit cards at unattended terminals	Debit cards draw directly from your bank account, offering less protection.	Use credit cards at gas pumps, ATMs, and self-checkout stations for better fraud protection.
Ignoring transaction alerts	You might miss early signs of fraud, allowing thieves to make more purchases.	Set up real-time transaction alerts with your card issuer and respond to them promptly.
Infrequent statement reviews	Unauthorized charges can go unnoticed for extended periods, increasing losses.	Review your credit card statements at least weekly for any unfamiliar transactions.
Using compromised ATMs or gas pumps	Skimmers at these locations are designed to steal your card information.	If a machine looks tampered with, find another one or use a different payment method.
Not reporting suspicious activity promptly	Delays can make it harder to recover funds and may increase your liability.	Contact your credit card issuer immediately if you suspect fraud or see a compromised terminal.
Assuming all public terminals are secure	Skimmers can be expertly installed and difficult to spot.	Treat all public payment terminals with a degree of caution and always perform a quick inspection.
Not using a physical barrier for PIN entry	Visible PIN entry makes it easy for someone to steal your code.	Develop the habit of using your hand or an object to block the view of the keypad when entering your PIN.

Decision rules (simple if/then)

• If a card reader looks loose or has an extra piece attached, then do not use it because it may be a skimmer.
• If you are at a gas pump or ATM, then inspect the card reader and keypad carefully because these are common targets for skimmers.
• If you can use a chip or contactless payment, then do so because these methods are generally more secure than swiping.
• If you are entering your PIN, then shield the keypad with your other hand because this prevents others from seeing your code.
• If you receive a transaction alert for a purchase you didn’t make, then contact your credit card issuer immediately because prompt reporting is crucial for fraud resolution.
• If your credit card statement shows an unfamiliar charge, then investigate it right away by contacting your card issuer because unauthorized transactions need to be disputed quickly.
• If a payment terminal seems to be malfunctioning or behaves unusually, then abort the transaction and find another terminal because this could indicate a hidden skimmer.
• If you frequently use a specific gas station or ATM and notice a change in its card reader, then be extra vigilant or choose a different location because this could signal a new skimming device.
• If you are using a credit card at a self-service kiosk, then prefer it over a debit card because credit cards typically offer stronger consumer protections against fraud.
• If you are concerned about a particular location, then consider paying inside with cash or a different card if possible because this reduces your exposure to potential skimmers.
• If your card issuer offers a mobile app with security features, then download and use it because these tools can help you monitor and manage your account security effectively.

FAQ

What is a credit card skimmer?

A skimmer is a small device, often disguised, that is attached to a legitimate card reader. It illegally captures the magnetic stripe data from your credit or debit card when you swipe or insert it.

How can I tell if a card reader has a skimmer?

Look for anything that seems loose, misaligned, or out of place. Skimmers might cause the card slot to protrude or have a different texture. Gently wiggling the reader can also reveal if it’s a fake attachment.

What is the difference between a skimmer and a shimmers?

A skimmer typically attaches to the outside of a card reader to capture data from the magnetic stripe. A shimmer is a thin device that is inserted inside the card slot itself, also capturing magnetic stripe data. Both aim to steal your card information.

Are contactless payments (like Apple Pay or Google Pay) safe from skimmers?

Yes, contactless payments are generally considered very safe from traditional skimmers. They use tokenization, where a unique, one-time code is generated for each transaction, making it impossible for a skimmer to capture persistent card data.

What should I do if I suspect my card has been skimmed?

Contact your credit card issuer immediately to report the suspected skimming. They can help you cancel your compromised card and issue a new one, and may also initiate a fraud investigation.

How often should I check my credit card statements?

It’s best to check your statements at least weekly, or even more frequently if your card issuer offers real-time transaction alerts. The sooner you spot unauthorized charges, the easier it is to resolve.

Are gas pumps and ATMs more vulnerable to skimmers than retail stores?

Yes, gas pumps and ATMs are often more vulnerable because they are unattended for longer periods and people tend to be in a hurry. This provides more opportunity for criminals to install and retrieve skimmers.

What is the role of the EMV chip in protecting my card?

The EMV chip creates a unique transaction code for each purchase, making it much harder for skimmers to copy your card data compared to the older magnetic stripe technology.

What this page does NOT cover (and where to go next)

• Specific legal protections and liability limits: While general protections exist, specific nuances can vary. Consult consumer protection resources or legal advice for detailed information.
• Advanced identity theft prevention strategies: This guide focuses on card skimming. For broader identity theft concerns, explore resources on securing personal information online and offline.
• How to report a crime to law enforcement: If you’ve been a victim of fraud, reporting it to the police is a separate step from contacting your bank.
• Detailed information on credit score impacts: While fraud can indirectly affect your credit, understanding credit scoring is a distinct topic.
• International credit card security practices: This guide is tailored for the US market. Security measures and regulations can differ in other countries.