< Blog

What Is Card Skimming? How to Spot and Avoid a Skimming Scam

Safety online
What Is Card Skimming? How to Spot and Avoid a Skimming Scam
Safety online

Learn how card skimming scams work, how to spot a skimming device, what to do if your card details are stolen, and how prepaid cards can help limit your financial exposure.

What is Skimming?

Skimming is a type of payment fraud in which criminals secretly capture information from a credit, debit, or prepaid card. This is usually done using a hidden or disguised device attached to a legitimate card reader, such as an ATM, payment terminal, or fuel pump.

Because your physical card stays in your possession, you may not realise anything has happened until you notice an unfamiliar purchase or cash withdrawal. Understanding how skimming works and knowing what warning signs to look for can help you protect your payment information.

Summary

Card skimming happens when criminals use a hidden device to steal payment card information when you insert or swipe your card. Skimmers are commonly associated with ATMs, fuel pumps, and point of sale terminals, and they may be combined with hidden cameras or fake keypads designed to capture your PIN.

You can reduce the risk by checking card readers for signs of tampering, shielding your PIN, using chip or contactless payments where available, and regularly reviewing your transactions. Prepaid cards can also offer an additional layer of spending control by allowing you to keep a limited amount available for purchases rather than routinely using a card connected to your main bank balance.

TLDR

  • Card skimming: Criminals secretly capture information from your payment card using a compromised card reader.

  • Common locations: Skimmers can appear on ATMs, fuel pumps, and point of sale terminals.

  • Warning signs: Loose, bulky, damaged, or unusual looking card readers can indicate tampering.

  • Protection: Use contactless or chip payments where possible, cover your PIN, and monitor your transactions.

  • Prepaid cards: They cannot prevent skimming, but keeping a controlled balance can help limit how much money is exposed.

  • If you are affected: Contact your card issuer immediately, block or freeze the card, and review your recent transactions.

📋 Table of Contents

  • What is Skimming?
  • What is a Card Skimming Scam?
    1. How Does Card Skimming Work?
    2. Where Does Card Skimming Happen?
  • What Does a Card Skimmer Look Like?
    1. Signs of a Skimming Device
  • How to Protect Yourself From Card Skimming
    1. Use Contactless or Chip Payments
    2. Protect Your PIN
    3. Check Your Transactions
  • Can Prepaid Cards Help Protect You From Skimming?
  • What to Do if Your Card Has Been Skimmed
  • Skimming vs. Other Common Scams
  • Frequently Asked Questions (FAQ)

What is a Card Skimming Scam?

Definition: Card skimming is a form of payment fraud in which criminals use unauthorised equipment to capture information stored on a payment card.

A skimming device may be fitted over or inside a genuine card reader. When you insert or swipe your card, the compromised reader can collect information from its magnetic stripe without preventing the legitimate transaction from going through.

That is one reason skimming can be difficult to notice. From your perspective, the payment or cash withdrawal may appear completely normal.

UK Finance explains that criminals can obtain the information required to create counterfeit cards by attaching concealed or disguised devices to card reader slots on ATMs and unattended payment terminals. These can include self service ticket machines at railway stations, cinemas, and car parks.

How Does Card Skimming Work?

A typical card skimming scam involves several steps.

  1. A criminal tampers with a card reader. A skimming device may be placed over the original card slot or concealed inside the payment terminal.
  2. You use the card reader normally. The fraudulent equipment captures information as your card is inserted or swiped.
  3. Your PIN may also be targeted. Criminals may try to observe your PIN directly or use additional equipment to capture it.
  4. The stolen information is collected. The card data can then potentially be used to make fraudulent payments or create counterfeit cards.

UK Finance reports that concealed or disguised devices attached to ATMs and unattended payment terminals can be used to obtain card data for counterfeit cards.

Where Does Card Skimming Happen?

Skimming can occur anywhere criminals can tamper with a physical payment terminal, but some locations present more opportunities than others.

🏧 ATMs

ATMs are one of the places where criminals can install concealed or disguised equipment to collect card information.

UK Finance also highlights related forms of ATM fraud, including card entrapment and distraction theft, where criminals attempt to obtain both the card and PIN.

Whenever possible, choose an ATM in a visible location and take a moment to inspect the card reader before using it.

🎟️ Unattended Payment Terminals

Self service payment machines can also be targeted.

UK Finance specifically identifies unattended payment terminals such as ticket machines at railway stations, cinemas, and car parks as locations where concealed card reading equipment can be installed.

Pay attention to anything that appears loose, damaged, raised, or inconsistent with the rest of the machine.

💳 Payment Terminals

Card fraud can also happen during face to face transactions in shops and other businesses.

You do not need to assume that every unfamiliar payment terminal is dangerous. Instead, pay attention to obvious differences, damage, or parts that do not appear to belong.

What Does a Card Skimmer Look Like?

A card skimmer is designed to avoid attracting attention, which means there is no single appearance you can look for.

Some devices can be disguised as part of the original card reader, while others may be concealed inside the terminal.

The safest approach is therefore to look for anything that appears inconsistent with the rest of the machine.

Signs of a Skimming Device

Before inserting your card, take a quick look at the terminal.

Potential warning signs include:

  1. A card reader that looks unusually bulky or raised.
  2. Parts that appear crooked or poorly fitted.
  3. A card slot that moves when gently touched.
  4. Components that look different from those on similar machines nearby.
  5. A keypad that appears unusually thick or raised.
  6. Signs of damage, glue, scratches, or other tampering around the card reader.

A strange looking terminal does not automatically mean that a skimmer is present. However, if something does not look right, using another terminal is the safer choice.

How to Protect Yourself From Card Skimming

You cannot control whether someone has attempted to tamper with a payment terminal, but you can reduce your exposure by changing how you use your card.

A combination of payment security, awareness, and regular account monitoring offers better protection than relying on any single precaution.

Many shoppers ask how to get 20% off or how to get an extension code. It’s easier than you think. Just follow these simple steps at checkout to trigger your browser extension.

Use Contactless or Chip Payments

Where available, consider using chip or contactless payments rather than relying on your card’s magnetic stripe.

UK Finance reports that the introduction of chip technology in the UK, followed by wider adoption internationally, has significantly restricted criminals’ ability to use counterfeit cards created from stolen magnetic stripe information.

This does not mean that chip or contactless payments eliminate fraud completely, but they can reduce exposure to traditional forms of card skimming.

Protect Your PIN

Card details are not always the only information criminals want.

Fraudsters may also try to obtain your PIN using methods such as shoulder surfing, where someone watches you enter the number.

When entering your PIN:

  1. Cover the keypad with your free hand.
  2. Be aware of anyone standing unusually close to you.
  3. Stop the transaction if the keypad or machine looks unusual.
  4. Never share your PIN with somebody who claims they need it to verify your account.

UK Finance identifies PIN theft and shoulder surfing as techniques used alongside other forms of card fraud.

Check Your Transactions

Because skimming usually does not involve taking the physical card from you, monitoring your account is an important way to identify fraud.

Check your payments and cash withdrawals regularly. If your bank or card provider offers transaction notifications, consider enabling them so you can identify suspicious activity sooner.

If you see a payment you do not recognise, contact your bank or building society immediately.

Citizens Advice advises contacting your bank or building society straight away if you are concerned that someone has access to your account or if your statement contains payments you do not recognise.

Can Prepaid Cards Help Protect You From Skimming?

Prepaid cards can be useful for controlling how much money you make available for spending, but it is important to understand their limitations.

A prepaid card cannot automatically protect you from a skimming device.

If a physical prepaid card contains information that can be captured through a compromised card reader, it may still potentially be targeted.

Where prepaid payment cards can help is by creating greater separation between your everyday spending and your main bank balance.

With a prepaid card, you can generally choose how much money is available on the card, depending on the product and provider. For example, instead of routinely using a debit card connected to your primary bank account, you might choose to keep a predetermined amount available for certain purchases.

This can offer several benefits.

More control over spending: You determine how much is available to use.

Separation from your main balance: Everyday purchases do not necessarily require using your primary debit card.

Limited financial exposure: Keeping only the amount you intend to spend on a prepaid card can reduce the amount directly available through that payment method.

Easier budgeting: A separate prepaid balance can make certain types of spending easier to track.

However, prepaid cards should be used alongside other security precautions, not instead of them.

You should still check card readers, protect your PIN, use secure payment methods, and regularly monitor your balance.

It is also important to distinguish between using a prepaid card for your own spending and sending prepaid or gift card codes to somebody else.

Scammers can ask victims to purchase gift cards and provide the codes as payment. Treat unexpected requests to pay a debt, fee, fine, emergency, or prize using gift cards with suspicion.

You can learn more about this type of fraud in Recharge.com’s guide to digital gift card scams.

What to Do if Your Card Has Been Skimmed

If you believe your payment details have been compromised, acting quickly can help prevent further fraudulent transactions.

Step by Step: What to Do After Card Skimming

  1. Contact your bank or card provider: Tell them immediately if you believe your card details or PIN have been compromised.
  2. Freeze or block your card: If your provider offers this feature, prevent additional payments as soon as possible.
  3. Review recent transactions: Look for purchases or cash withdrawals you do not recognise.
  4. Report fraudulent transactions: Follow your provider’s process for reporting unauthorised payments.
  5. Change your PIN if necessary: Your bank or card provider can advise you about the appropriate next steps.
  6. Report the suspicious terminal: Inform the bank, retailer, station, car park operator, or business responsible for the machine.
  7. Continue monitoring your account: Keep checking for further suspicious activity after reporting the incident.

Citizens Advice recommends contacting your bank immediately if you think your account details or PIN have been stolen. It also advises continuing to monitor your bank statements for unusual transactions.

Always use an official contact method for your bank rather than a phone number or link received unexpectedly.

Skimming vs. Other Common Scams

Skimming is only one of the ways criminals try to obtain payment information.

Understanding how it differs from other common scams can make suspicious situations easier to recognise.

🎣 Phishing

Phishing generally uses fraudulent emails, websites, or messages to trick you into revealing sensitive information.

With traditional skimming, criminals try to collect information directly from a physical payment card rather than persuading you to enter it into a fraudulent website.

📱 Smishing

Smishing is phishing conducted through SMS or other text messages.

A scammer might impersonate your bank, a delivery service, or another company and encourage you to follow a fraudulent link.

📞 Vishing

Vishing uses phone calls to convince you to reveal personal or financial information.

Scammers may pretend to represent your bank, the police, a government organisation, or a familiar company.

🎁 Gift Card Scams

Gift card scams usually involve a criminal persuading someone to purchase a gift card and provide the redemption code.

Once a code has been shared and redeemed, recovering the money can be difficult.

This is different from choosing to use a prepaid product yourself as part of your normal spending.

To understand more of the warning signs, read Recharge.com’s guide to digital scams, including phishing, smishing and vishing.


Frequently Asked Questions (FAQ)

What is card skimming?

Card skimming is a form of payment fraud in which criminals secretly collect information from a payment card using unauthorised equipment installed on or around a genuine card reader.

How can you tell if a card reader has a skimmer?

A skimmer is not always visible. Warning signs can include a loose card slot, unusually bulky components, a raised keypad, damaged parts, or a reader that looks different from similar machines nearby. If a payment terminal appears suspicious, avoid using it.

Can contactless payments be skimmed?

Traditional card skimming generally targets information obtained from a physical card, particularly magnetic stripe data.

UK Finance says the introduction of chip technology in the UK has restricted criminals’ ability to use counterfeit cards. No payment method eliminates all fraud, so you should still monitor your transactions.

Can a debit card be skimmed?

Yes. Debit card information can potentially be targeted using a compromised card reader. Criminals may also attempt to obtain the PIN to carry out additional fraudulent transactions.

Can a credit card be skimmed?

Yes. Credit card details can potentially be captured using skimming equipment, particularly where magnetic stripe data is involved.

Can a prepaid card be skimmed?

Yes. A physical prepaid payment card is not automatically immune to skimming.

Its potential advantage is different. Keeping a deliberately limited amount available on a prepaid card can help you control how much money is directly available through that payment method.

Are prepaid cards safer than debit cards for skimming?

Neither type of card is automatically protected against a compromised card reader.

A prepaid card can provide additional spending separation because you can generally limit the amount available on it rather than using a debit card connected directly to your primary bank balance.

The exact protections and features depend on the provider.

What should I do if I think an ATM has a skimmer?

Do not use the ATM. Inform the bank or ATM operator if you suspect the machine has been tampered with.

If you have already used it and are concerned that your card information may have been compromised, contact your bank or card provider and monitor your account for transactions you do not recognise.

What should I do if I see a transaction I don’t recognise?

Contact your bank or building society immediately using an official contact method.

Citizens Advice recommends getting in touch straight away if your statement contains payments you do not recognise or you think someone may have access to your account.

Is skimming the same as phishing?

No. Skimming typically involves stealing information through compromised physical payment equipment. Phishing usually involves impersonating a legitimate organisation to persuade you to provide sensitive information yourself.

Both can ultimately lead to financial fraud, which is why recognising the warning signs of each is important.

Take More Control of How You Pay

Good payment habits can help reduce your exposure to card fraud. If you want more control over how much you make available for everyday spending, a prepaid payment card may be worth considering.

Explore the prepaid cards available on Recharge.com and choose an option that suits how you want to pay and manage your spending.

Browse prepaid cards


Written by

Conor Byrne