Javascript is not enabled.

Javascript must be enabled to use this site. Please enable Javascript in your browser and try again.

Skip to content
Content starts here
CLOSE ×
Search
CLOSE ×
Search
Leaving AARP.org Website

You are now leaving AARP.org and going to a website that is not operated by AARP. A different privacy policy and terms of service will apply.

What to Know About Credit Card Skimmers

7 tips to protect yourself from criminals who install skimmers on card readers to steal users’ cash


spinner image a credit card skimmer
Paul Spella

Before police ended his crime spree, Christos Mavrokelos stole some serious cash. Mavrokelos installed skimmers — devices placed in credit and debit card readers that capture data from the card’s magnetic strip — on ATM machines throughout California. Over a two-year period, Mavrokelos stole roughly $149,000 from at least 40 accounts, according to the U.S. Attorney’s Office for the Eastern District of California. In July 2024, he was sentenced to 18 months in prison and ordered to pay $75,000 in restitution.

Skimming scammers like Mavrokelos are keeping law enforcement busy, and showing no signs of slowing down. In September 2024 alone, skimmers were found on checkout card readers around the country, including at three grocery stores in Columbus, Ohio; on multiple registers at an Ocean Mart grocery store in Roy, Utah; and at four Wawa locations in Delaware.And the economic damage is jaw-dropping: Skimming costs financial institutions and consumers more than $1 billion annually, according to the FBI.

How card skimmers work

With fuel pumps (a frequent target), the skimmers are often attached to the machine’s internal wiring, which makes them hard to detect. In other cases — as with ATMs or point-of-sale card readers — criminals attach the skimmers over the card slot.

Criminals sometimes take additional steps on ATM machines to steal your PIN. Some place tiny cameras on or near the machine to record you while you enter your number. Another tactic is to put an alternative keypad over the real one to capture your keystrokes.

The scams may seem James Bond-level sophisticated, but they’re actually quite simple, experts say.

“Skimming scams are sophisticated only in the sense that they require hardware and tampering,” says Petros Efstathopoulos, vice president of research for the RSA Conference, an annual cybersecurity event. “[The criminals] have to attach the malicious hardware to the devices in a stealthy manner. But it’s fairly easy to capture the card information from the magnetic stripe and use it online or even replicate the card.”

Skimmers also target low-income individuals who receive government benefits through an Electronic Benefits Transfer (EBT) card. Unlike most new credit cards, the EBTs don’t have chips, which help protect against skimming (although a new type of skimming device, called a shimmer, allows criminals to read a card’s microchip).

How to protect yourself from losing money to card skimmers

The next time you fill your tank, use an ATM, or insert your card in any machine, take these steps to avoid skimmers.

1. Look for signs of tampering. “If a machine looks a little worn or beat up, think twice about inserting your card,” says Michael Sherwood, vice president of product at Malwarebytes, a consumer-focused cybersecurity company. Warning signs include card-reading machines with exposed cables or anything that’s loose, bent, broken, damaged, crooked, or scratched. Pull on a card slot to make sure it isn’t covered with a skimmer and wiggle the keypad for signs of an overlay, the Delaware State Police suggest.

2. Tap rather than insert your card. If your card has the tap option — and most do these days — use it. That way a skimmer can’t read your card. Sherwood also recommends paying with digital options such as Apple Pay: “Unlike the physical reader, that’s not something you can easily hack,” he says.

3. Beware of self-checkouts. Scammers need to conceal themselves while sneakily installing their skimming hardware, which makes self-checkout an easier target than a register manned by a clerk. “It’s not easy for [a criminal] to walk into a pharmacy, go behind the counter, and pretend to be an attendant,” says Efstathopoulos.

4. Avoid convenience store ATMs. Most banks regularly inspect the ATMs connected to their branch offices; that’s less likely to happen with an ATM in a busy store location.

AARP Fraud Watch Network™ Helpline  

Get guidance you can trust from trained fraud specialists:  Call toll-free 877-908-3360.

  

 

5. Be careful at gas stations. Choose a well-lit pump that’s close to an attendant or mini-mart. It’s the same principle as self-checkout: Criminals want a well-hidden spot to install their skimmers, so they’ll likely choose the pump that’s farthest away from employees.

And don’t enter PINs at the pump. Some gas pumps let you run your debit card as a credit card. If that’s an option, use it: By choosing credit mode, you don’t have to enter your PIN.

6. Even better, avoid using debit cards at all. Banks offer more protection for credit cards than debit cards. If a criminal uses your credit card number for purchases, federal law limits your liability to no more than $50. “Credit cards have a lot more backing to them — they’re more secure,” says Sherwood.

7. Be even more vigilant in tourist areas. Bustling, Times Square-style tourist spots can be a skimmer’s paradise, the FBI warns. Among the reasons: You’re usually distracted and more likely to miss the warning signs of a skimming scam. Plus, tourist areas often have large numbers of unattended ATM machines, and the high volume of pedestrians can make it easier for scammers to install their hardware. “You would think that all those people would discourage them, but it can actually provide cover for tinkering with the machines,” Efstathopoulos says. “If you have a busy street, and maybe only one camera, and somebody stands in front of an ATM for five minutes, there will probably be enough noise and it’s so busy that they go unobserved.”

8. For overseas travel, consider using cash. “I’ve been in situations where I'm in a taxi, and the driver has his own reader, and it just feels odd,” Sherwood says. “Cash is just safer in that situation.”

Unlock Access to AARP Members Edition

Join AARP to Continue

Already a Member?