
Skimmer credit cards can be a sneaky way for thieves to steal your financial information. They can be inserted into ATMs or gas pumps, and are nearly undetectable.
These devices can store hundreds of card numbers, so the thief can make multiple transactions before the card is even noticed to be missing.
ATM skimmers are often installed by thieves who will then remove the device and use the stolen card information to make purchases or withdraw cash.
What Is a Skimmer?
A skimmer is a device that's attached to an ATM or a payment terminal, designed to steal your credit card information. It's usually small and can be tricky to spot.
Skimmers are often placed over the card reader on the ATM or terminal, and they can be powered by a battery or a USB connection. They're usually made of plastic or metal and can be attached with adhesive or screws.
To use a skimmer, a thief will insert a fake card reader into the ATM or terminal, and then attach the skimmer on top. This creates a fake card reader that looks and feels like the real one.
Types of Skimmers
Credit card skimmers come in various forms, making them hard to detect.
Credit card skimmers can be designed to look like they're part of the POS system, blending in seamlessly with their surroundings. Some skimmers fit over the original card reader in the machine but may appear more bulky.
There are several types of skimmers, including physical or overlay skimmers, which go on top of legitimate card readers and capture magnetic stripe data. Physical skimmers are often found at ATMs, gas pumps, or other outdoor payment terminals.
Wireless skimmers, on the other hand, steal card data remotely using advanced technology. These devices are installed near a payment terminal, close enough to collect data without physical contact.
To help you identify these skimmers, here are some signs to look out for:
How to Protect Yourself
Protect yourself from skimmer credit cards by being aware of your surroundings and taking a few simple precautions. Use ATMs in well-lit areas and cover the keypad when typing in your pin to prevent hidden cameras from capturing your private information.
If an ATM or terminal doesn't return your card after a transaction, contact your bank immediately. Look for damage around the card reader or any evidence of possible tampering. Ensure the card reader is authentic and try to tug/jiggle it - if it's loose, there could be a card skimmer installed.
To spot skimmers, inspect the card reader and keypad. If the card reader or keypad feels loose, out of alignment, or out of place, there's a chance it could have a skimmer attached. If that's the case, avoid using it and alert the business.
Stay aware of your surroundings and trust your instincts - if something feels off, it's worth mentioning to an employee or finding another way to pay. Consider using alternative payment methods, such as contactless credit or debit cards, or paying through an app or inside with an attendant.
Internal
Internal skimming is a sneaky way for fraudsters to steal your card data. They install malware that captures your card information as it processes, making it very difficult to spot.
This type of skimming can affect a huge number of customers before it's finally removed, so it's essential to stay vigilant.
Bluetooth
Bluetooth skimmers capture and send stolen card data wirelessly. This makes them one of the most flexible skimming methods.
Fraudsters often place Bluetooth skimmers near tap to pay terminals to steal card information as victims pay.
To avoid falling victim to Bluetooth skimming, be aware of your surroundings when using tap to pay terminals.
Stay Aware
If something feels off, it might be worth it to mention it to an employee, find another way to pay or go somewhere else. Be proactive when using your credit and debit cards in public, like a Texas woman who returned to a convenience store and located a card skimmer after her bank account was "wiped clean".
Remember, you can't always rely on your instincts, so it's essential to be aware of your surroundings. At gas pumps, you can look for skimming devices by checking to see if there's an intact security seal near the card reader. If the pump panel is open or it has a broken seal, the FTC says the label will read void.
Always inspect the card reader and keypad before using it. If the card reader or keypad feels loose, out of alignment or out of place, there's a chance it could have a skimmer attached. If that's the case, avoid using it and alert the business.
Here are some signs that a skimmer might be in place:
- A bulging, raised, or out-of-alignment piece of the machine
- A loose or wiggly card reader
- A broken or missing security seal
- A keypad that feels out of place or loose
If you notice any of these signs, trust your instincts and take action.
Preventing and Recovering from Skimming
To prevent credit card skimming, you can help protect yourself by regularly checking your bank and credit card accounts for suspicious or fraudulent charges.
Checking your accounts frequently can help you catch any unauthorized transactions early on.
You can report any compromised accounts to your card issuer immediately by calling the number on the back of your card.
Overall, credit and debit cards are relatively safe to use, but it's still essential to take precautions to protect yourself.
Preventing Fraud
To avoid falling victim to skimming, shimming, and other frauds and scams, be aware that attackers can insert malicious code into payment websites to snatch away your card information.
E-skimming is a digital equivalent of skimming, where attackers compromise online store administrator accounts or web hosting servers to distribute tainted software.
You can help protect yourself by being cautious when entering sensitive information online, as attackers can tamper with authentic-looking payment pages.
E-skimmers are added by compromising administrator accounts, web hosting servers, or by directly compromising payment platform vendors, so be careful who you trust with your information.
By taking these precautions, you can significantly reduce your risk of falling victim to e-skimming and other types of credit card fraud.
Account Skimming Recovery
Regularly checking your bank and credit card accounts can help you notice suspicious or fraudulent charges.
It's essential to report any compromised accounts to your card issuer immediately by calling the number on the back of your card.
Many issuers, including Capital One, offer tools and features to help keep accounts secure, but safety features don't guarantee protection.
To recover from a skimming incident, it's crucial to act quickly and report the issue to your card issuer as soon as possible.
You can't rely solely on safety features to protect yourself, so it's vital to be proactive in monitoring your accounts and taking steps to prevent skimming.
Common Methods and Scams
There are many different types of card skimmers, and the methods they choose depend on where they're stealing card information from.
Card skimmers can be found at ATMs, gas pumps, and other public payment terminals.
Card trapping scams are similar to POS scams, where the device traps the card so it won’t eject, allowing the scammers to come back later and take the cards they’ve trapped.
Online skimming scams, or e-skimming, steal card information directly from e-commerce websites, often by adding malicious code into payment pages that intercept card data at checkout.
Common Methods and Scams
Card skimmers have many different methods at their disposal, and they choose which one to use based on where they're stealing card information from.
There are various types of card skimmers, and the methods they choose depend on their target location.
Card skimmers often use devices that are designed to blend in with the surrounding environment, making them difficult to spot.
The scam is just as important to card skimmers as the skimmer device itself, and there are several common scams to watch out for.
Some of the most prevalent card skimming scams include those that target specific locations, such as ATMs or gas pumps.
Online
Online skimming scams are a real threat, and they're not limited to physical stores. They can happen online, where fraudsters add malicious code into payment pages that intercept card data at checkout.
If a website doesn't have an SSL certification, it's especially vulnerable to these attacks. You can tell if a website has an SSL certification by looking for "https" in the URL instead of just "http".
Online skimming scams are similar to e-skimming, where an attacker inserts malicious code into a payment website that snatches away your card information. This can happen through various means, including compromising the online store's administrator account credentials or the payment platform vendor.
You might be wondering how to avoid these scams. One way is to only shop on websites that have an SSL certification. This will help protect your card information from being intercepted.
Online skimming scams can be sneaky, but being aware of the risks can help you stay safe. Just remember to always check for "https" in the URL and shop on reputable websites to minimize the chances of falling victim to these scams.
Hidden Cameras
Hidden cameras can be used to record your personal identification number (PIN) or keystrokes. This is often done in conjunction with skimmers that steal your card information.
Some machines, like ATMs, have legitimate security cameras. However, it's still a good idea to cover the keypad when you enter your PIN to prevent any cameras from recording you.
Look closely above the card reader to see if there are any holes pointing down to where you would enter a PIN. This can be a sign that a hidden camera is present.
Frequently Asked Questions
Does tap to pay avoid skimmers?
Yes, tap to pay is safer against skimmers because it uses Near Field Communication (NFC) technology that only works over a short distance, making it harder for thieves to intercept your card info.
How close does someone have to be to scan your credit card?
You can be scanned from as close as 10 feet away with a basic RFID reader, and potentially even farther with more powerful devices.
Sources
- https://www.secretservice.gov/investigations/skimming
- https://www.launchcu.com/blog/card-skimmers-and-how-to-avoid-them-with-contactless-payments/
- https://www.datavisor.com/wiki/card-skimming/
- https://www.pcmag.com/explainers/how-to-spot-and-avoid-credit-card-skimmers
- https://www.capitalone.com/learn-grow/privacy-security/credit-card-skimmers/
Featured Images: pexels.com