Table of Contents
A credit card skimmer is an illegal, hidden device attached to payment terminals to steal card information during legitimate transactions. Criminals can use the stolen data to make unauthorized online purchases or create counterfeit physical cards.
These devices can be difficult to detect and cost consumers and financial institutions an estimated $1 billion per year, according to the FBI. Here’s how skimmers work, how to spot them, and what to do if your card is compromised.
Key Points
• Credit card skimmers are illegal devices installed on payment terminals to steal card details during a transaction.
• To detect a skimmer, visually inspect the card reader for loose, crooked, or misaligned parts, and test the keypad for sponginess.
• Skimming targets often include outdoor ATMs, gas pumps, and self-checkout terminals due to low supervision.
• Tapping or dipping your chip-enabled cards is generally more secure than swiping the magnetic stripe.
• If your card is skimmed, contact your card issuer immediately; federal law limits your liability for unauthorized charges.
What Is a Credit Card Skimmer?
Credit card skimming is a form of theft that occurs when someone installs a small electronic device inside or on top of a card reader. When a credit card is swiped, the device captures sensitive information such as the cardholder’s name, card number, and expiration date.
Skimmers are most often placed on unattended or low-visibility terminals to avoid detection. Primary targets include outdoor ATM machines, gas station pumps far from the attendant, and self-checkout payment terminals in stores.
Identifying Credit Card Skimmers
Knowing how to spot a skimmer can help you avoid this common type of credit card fraud — especially when using outdoor or isolated payment machines. Use this quick checklist before you swipe:
• Inspect the card reader: Look for parts that appear crooked, loose, off-center, or that cover graphics or arrows normally visible on the machine.
• Compare nearby terminals: If one reader looks newer, bulkier, or misaligned compared to others, it may have been tampered with.
• Test the keypad: A raised, spongy, or flimsy keypad could indicate a fake overlay has been installed.
• Check security seals on gas pumps: When paying at the pump, look for security tape over the cabinet panel. If it’s torn, broken, or says “void,” choose another pump.
• Watch for hidden cameras: Some skimmers are paired with tiny cameras to capture PINs. Look for suspicious pinhones or attachments above the keypad.
What Happens When a Credit Card Is Skimmed
When a skimmer reads the magnetic stripe on a credit card, it can capture:
• Cardholder name
• Card number
• Expiration date
The stolen data is either stored internally for the thief to retrieve later or transmitted wirelessly using technologies like Bluetooth to a nearby device. Once a thief has your credit card information, they can use it to:
• Make unauthorized online transactions
• Create counterfeit cards for in-person purchases
• Sell stolen data bulk on the dark web
• Use the information to commit broader identity theft
Protecting Yourself From Credit Card Skimmers
Skimmers aren’t always easy to detect, but these habits can greatly reduce your risk:
Use Supervised Terminals
Whenever possible, choose payment terminals that are in clear view of staff, cameras, or heavy foot traffic. Generally, the more visible the terminal, the less likely it is to be compromised. Busy locations naturally discourage tampering because criminals tend to prefer machines they can access without being noticed. When using a gas station pump, consider paying inside the store if the station appears quiet or poorly lit.
Tap or Dip Whenever Possible
Credit cards today typically come with an EMV chip that allows you to make payments without actually swiping your card. Generally, the safest option is to “tap to pay,” but if contactless payments aren’t available, your next-best option is to insert your EMV chip card rather than swiping the magnetic stripe.
While credit card “shimmers” (high-tech devices that steal data from a card’s EMV microchip) do exist, chip transactions are still significantly more secure than swiping.
Sign Up for Alerts
Many card issuers allow you to sign up for real-time alerts via text, email, or app notifications. You may be able to receive alerts for:
• Every transaction
• Purchases over a set amount
• Suspicious or unusual activity
Immediate alerts help you catch fraud quickly and limit damage.
Check Your Accounts Regularly
Review your transactions at least monthly — weekly is even better. Criminals often use stolen card data infrequently or in small amounts to avoid detection, so consistent monitoring is key. The sooner you spot suspicious activity, the easier it is to report the issue and prevent additional fraudulent charges.
Recommended: How to Protect Your Credit Card from Hackers
Can You Get a Refund if Your Card Gets Skimmed?
Typically, yes — especially if you report the fraud quickly.
Under federal law, your liability for unauthorized credit card charges is capped at $50 if you report the fraud within 60 days of receiving the statement showing the charge. Many credit card issuers go even further with zero-liability policies, meaning you may pay nothing at all.
If you think your credit card has been skimmed, reach out to your card issuer right away. The company will likely lock your card, send you a new card with a new number, and issue temporary (provisional) credits for any unauthorized transactions while the investigation is ongoing. If the investigation confirms the transactions were fraudulent, the credits become permanent.
The Takeaway
Credit card skimming is a real and ongoing threat, but simple precautions can dramatically lower your risk. Smart steps include inspecting payment terminals for signs of tampering, prioritizing chip or contactless payments, enabling alerts, and monitoring your accounts regularly. If you ever suspect your card has been skimmed, contact your card issuer immediately — federal protections and issuer policies are designed to shield you from major financial loss.
Looking for a new credit card? Consider credit card options that can make your money work for you. See if you're prequalified for a SoFi Credit Card.
FAQ
What does a credit card skimmer do?
A credit card skimmer is an unauthorized electronic device designed to illegally capture information from the magnetic stripe of a credit card during a legitimate transaction. This stolen information — including your name, card number, expiration date, and CVV — can then be used by thieves to create counterfeit cards or make fraudulent online purchases.
Are card skimmers illegal?
Yes, card skimmers are illegal. The installation and use of card skimmers violate various federal and state statutes, and perpetrators can face serious felony charges for fraud, identity theft, and possession of these devices.
How common is credit card skimming?
Credit card skimming is a persistent threat. While it’s difficult to get precise, up-to-the-minute numbers, the FBI has reported that card skimming devices cost consumers and financial institutions an estimated $1 billion annually. Skimming is most common at unattended terminals like gas pumps and outdoor ATMs, but efforts by banks and merchants to adopt EMV chip technology and contactless payment are helping to reduce the overall frequency of successful magnetic stripe skimming attacks.
Photo credit: iStock/greyj
SoFi Credit Cards are issued by SoFi Bank, N.A. pursuant to license by Mastercard® International Incorporated and can be used everywhere Mastercard is accepted. Mastercard is a registered trademark, and the circles design is a trademark of Mastercard International Incorporated.
Financial Tips & Strategies: The tips provided on this website are of a general nature and do not take into account your specific objectives, financial situation, and needs. You should always consider their appropriateness given your own circumstances.
SOCC-Q126-025