How to Protect Yourself From Card Skimmers at ATMs and Gas Pumps

Card skimming is a growing threat that can quietly drain your bank account before you even realize something is wrong. These scams often happen at everyday places like gas stations and ATMs, where criminals install hidden devices to capture your debit or credit card information.

Understanding how skimming works — and how to prevent it — can help you safeguard your money and your identity.

What is card skimming?

Card skimming occurs when criminals attach small devices to payment terminals to steal data. These devices can read information from your card’s magnetic stripe (or magstripe) when you swipe, while tiny cameras or fake keypads can capture your personal identification number, or PIN. The stolen data is then used to make unauthorized transactions. Some fraudsters will even make new physical cards with your details.

Skimming is particularly dangerous for debit card users because funds are taken directly from your bank account. Unlike credit cards, which often offer stronger fraud protections, debit card fraud can immediately impact your available cash.

And if you’re a frequent debit card user, identifying unauthorized transactions can be challenging. With dozens of small, routine purchases — such as gas, groceries or subscriptions — scammy charges can easily blend in with legitimate activity, making them harder to spot at a glance and allowing thieves more time to do damage.

How to spot a card skimmer

Before inserting or swiping your card, take a moment to inspect the machine. A compromised terminal may have:

• A loose or bulky card reader
• A keypad that feels thicker than usual
• Visible tampering or mismatched colors
• Hidden cameras positioned near the keypad

If anything looks suspicious, avoid using the machine and choose another payment method or location. It's also a good idea to alert the bank or store manager that there may be a skimming device installed on their property.

Safer ways to pay

How you pay can significantly reduce your risk of falling victim to skimming.

Using a chip-enabled card is much safer than swiping, because chip transactions generate a unique, encrypted code for each purchase that’s difficult for criminals to replicate. Even better, opt for contactless “tap to pay” whenever it’s available, as it minimizes physical interaction with the terminal and adds another layer of security.

By contrast, swiping your card should be avoided whenever possible because the magnetic stripe contains static data that’s easy for thieves to copy.

No matter which method you use, always cover the keypad when entering your PIN to prevent hidden cameras from capturing it.

One of the most effective ways to catch fraud early is by reviewing your bank transactions frequently. Set up account alerts to receive notifications for every purchase or withdrawal. This allows you to quickly spot suspicious activity and take action before the damage escalates.

What to do if your card is skimmed

If you notice unauthorized transactions on your account, act immediately. Start by contacting your bank’s fraud department as soon as possible so they can freeze your card, stop further activity and issue a replacement. Acting quickly is critical: If your debit card is compromised, your liability depends on how fast you report the fraud under the Electronic Fund Transfer Act. If you notify your bank within two business days, your potential losses are capped at $50, but that amount can rise to $500 or even the full stolen balance if you wait too long.

Next, you can dispute the transactions. As you begin the dispute process, keep detailed records of everything, including unauthorized charges, when you spotted them and any conversations with your bank. This documentation can help speed up reimbursement and support your claim if additional investigation is needed.

You should also report the fraud to the Federal Trade Commission through IdentityTheft.gov, where you can create an official Identity Theft Report and receive a personalized recovery plan in case the incident is tied to broader identity theft.

Filing a police report is another smart step, especially if the fraud is extensive or connected to other identity crimes. Having an official report on file can help law enforcement track patterns and may be required by banks or credit monitoring services as proof.

Even if the fraud is limited to your debit card, consider adding a fraud alert to your credit file by contacting one of the major credit bureaus, such as Experian, Equifax or TransUnion. This makes it harder for someone to open new accounts in your name. In more serious cases, a credit freeze may offer even stronger protection.

Finally, secure your accounts by changing your PIN, updating your passwords and reviewing any automatic payments linked to your compromised card. Using strong, unique credentials across your financial and online accounts can help prevent thieves from turning a single stolen card into a larger identity theft problem.

Card skimming isn’t going away. In fact, it’s becoming more sophisticated. But a few simple habits can make a big difference. Always inspect payment terminals, choose secure payment methods and monitor your accounts closely.

Staying alert and acting quickly are your best defenses. With the right precautions, you can reduce your risk and keep your finances secure.