An ATM skimmer can copy card information while your card stays in your hand. The best protection is layered: choose a well-maintained machine in a controlled location, inspect the reader and keypad, cover the keypad whenever you enter your PIN, and monitor your account. If anything looks or feels unusual, stop and use another ATM.
How ATM skimming works
Skimming is the unauthorized capture of payment-card data using a device placed on or inside an ATM. A device may read magnetic-stripe information as you insert or swipe a card; it can transmit the data wirelessly or store it for later retrieval. Criminals may then use the stolen information to make counterfeit cards or attempt unauthorized withdrawals. Your physical card does not have to be stolen for its data to be copied. The FBI describes common skimming methods and prevention steps.
Getting the PIN is a separate part of the scheme. A hidden camera, fake keypad overlay, shoulder surfer, or social-engineering trick may capture it. Skimming is distinct from phishing, which tricks someone into disclosing information, and from card theft or retention, though criminals can combine these methods. Similar devices also target fuel pumps, payment terminals, and some benefits cards; the specific risks and reporting processes can vary by card and account.
Where devices may be hidden
- Inside the card slot or over the original reader as a false overlay.
- In a fake ATM faceplate or around exposed exterior components and wiring.
- In or near a brochure holder, mirror, light fixture, or other object positioned to view the keypad.
- As a false keypad fitted over the real one.
Not every unusual feature is malicious, and an internal device may not be visible. A normal-looking ATM is not proof that it is uncompromised. The FDIC’s overview of skimming schemes illustrates how devices can be concealed on or around terminals.
#1 Best Overall
- Pocket sized security solution - no hardware installations or modifications required
- Detects deep insert and overlay skimmers hidden inside ATMs & fuel dispensers
- Works in ATMs, fuel pumps, kiosks, vending machines, smart parking meters & card readers
- Simple operation with bright LED and audible alert
- Made entirely in the USA
Do a 30-second ATM check
- Look at the reader. Compare it with nearby machines or one you recognize from the same bank. Watch for a protruding, crooked, loose, unusually thick, scratched, or mismatched part; gaps or adhesive residue; or a slot that looks different from the surrounding trim.
- Check the keypad. Look for a raised, thick, poorly fitted, loose, or differently colored keypad, unusual texture or spacing, or a small hole or object aimed toward the keys.
- Scan the surroundings. Look for new attachments, loose wires, nonflush seams, a faceplate that does not fit, or a nearby mirror or holder positioned oddly. A camera may not be directly above the keypad.
- Test gently. If the machine appears intact, lightly check the reader and keypad for movement. Do not force or remove anything. Never insert your card just to test an abnormal slot.
- Decide before entering your PIN. If anything seems unusual, cancel if appropriate, walk away, and use another machine. A light inspection can reduce risk but cannot rule out a hidden or internal device.
Use the same habit at every ATM rather than relying on a single clue. The FBI advises checking card readers and keypads and covering the keypad during entry: FBI skimming guidance.
Choose a lower-risk ATM and protect your PIN
When you need cash, prefer a reputable ATM inside a bank or another controlled, well-lit location, where employees or security may be nearby. Such machines are generally less exposed to unnoticed tampering, not immune to it. Be especially cautious with isolated or poorly maintained machines and in tourist areas identified by the FBI as common targets. If one machine looks suspicious, do not confront anyone or try to remove a device; report it to the owner or financial institution and choose another ATM. The FBI’s ATM skimming advice discusses machine selection and warning signs.
Rank #2
- Kit includes everything you need to detect deep-insert and overlay card skimmers
- Includes protective holsters for each skimmer detector and rugged transport case for everything
- Works in ATMs, fuel pumps, kiosks, vending machines, smart parking meters & card readers
- Made entirely in the USA
- Supports card swipers, ATMs, self-checkout terminals and gas pumps
- Cover the entire keypad with your other hand or arm while entering the PIN—not just the key you are pressing. Stand close enough to reduce over-the-shoulder viewing.
- Keep strangers from helping or distracting you. Do not reveal your PIN to anyone who contacts you by phone, text, or email, and do not write it on the card or carry it with the card.
- Cover the keypad even when you see no camera. Cameras can be hard to spot or concealed in nearby objects. Shielding helps against cameras and shoulder surfers, but not a fake keypad that records keystrokes; inspect and lightly test the keypad too.
- Use chip or contactless options if supported. Do not assume every ATM offers them, and do not force a transaction path the machine does not support.
- Check the transaction amount and account activity. Turn on available transaction alerts and review activity regularly.
What chip, tap, swipe, debit, and credit change
| Method or card | What it can help with | What it does not prevent |
|---|---|---|
| Magnetic stripe | It is a familiar way to use a card where required. | Stripe data is a target for skimming and may be copied. |
| Chip | Chip transactions generally offer stronger protection against counterfeit-card fraud than magnetic-stripe transactions. | It does not stop PIN theft, ATM tampering, or every transaction path from exposing data. |
| Contactless | When supported, tapping can avoid exposing the card to a compromised magnetic-stripe reader. | It is not available at every ATM and does not make an account or PIN invulnerable. |
| Debit card | It provides access to funds in the linked account. | A compromised card and PIN can put linked checking, savings, overdraft, or benefits funds at risk. Ask the issuer whether linked accounts need added protection. |
| Credit card for purchases | It generally avoids an immediate withdrawal from a checking account, so it may be preferable for purchases where practical. | It does not prevent card fraud; report unauthorized charges promptly to the issuer. |
These are relative protections, not guarantees. A chip cannot protect a PIN captured by a camera or fake keypad, and a card transaction’s route depends on the terminal and transaction. For cash, use only an ATM and transaction method the issuer supports.
If an ATM keeps your card
- Do not leave assuming the card will be returned later. If the machine is still responsive, press Cancel once.
- If the card is not returned, contact the issuer immediately using the number in its official app, on its website, or on a statement—not a number supplied by a stranger at the ATM.
- Freeze or deactivate the card in the app if that control is available, and ask the issuer to cancel it, issue a replacement, and set a new PIN.
- Check pending and completed transactions, including linked accounts, and report anything you did not authorize.
- Report the ATM and its location to the bank or operator. If fraud occurred, consider reporting it to local law enforcement and the FBI’s Internet Crime Complaint Center.
A retained card can result from a malfunction or tampering; either way, treat it as unavailable and contact the issuer promptly. The U.S. Secret Service public alert advises contacting the issuing financial institution when skimming is suspected.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Rank #3
- Pocket-sized security solution – no hardware installations or modifications required
- Instantly detect credit and debit card skimmers hidden inside swiping POS retail terminals
- Works in swiping retail POS terminals, ATMs, fuel pumps, kiosks, vending machines & smart meters
- Saves time & money making it the tool of choice for retail managers and law enforcement
- Much more affordable than upgrading terminals to expensive EMV chip readers
If you suspect skimming or see unauthorized withdrawals
- Contact your bank or credit union’s fraud department immediately. Say which transaction or ATM you suspect and ask how to submit a formal fraud or error claim.
- Freeze or cancel the card and change the PIN. If you entered the PIN at the suspect machine, change it even if the card remains in your possession.
- Ask about linked accounts. Find out whether the account number itself should change and whether checking, savings, overdraft, or other linked accounts need additional safeguards.
- Preserve details. Save transaction screenshots, dates, amounts, receipts, the ATM address or machine number, and any case numbers. Note visible signs of tampering only if you can do so safely; do not handle a suspected device.
- Enable available alerts and keep monitoring. Stolen data may be used later, including after a replacement card arrives. Review recent, pending, and later transactions.
- Report the incident where appropriate. The issuer can tell you how to dispute the transaction; law enforcement or IC3 may also be appropriate if fraud occurred.
In the United States, Regulation E has different rules for lost or stolen access devices and unauthorized electronic transfers. For example, reporting a lost or stolen access device within two business days after learning of the loss generally preserves the strongest statutory liability limit; reporting a transfer shown on a statement within 60 days is also important. These are not blanket guarantees: the result depends on what happened, when notice was given, the account, and applicable law. Report promptly and follow the issuer’s formal dispute process. See the CFPB’s Regulation E liability rule and the FTC’s consumer guidance on lost or stolen cards.
If your card is still with you
Keeping the physical card does not establish that the account is safe: a skimmer can copy its data without taking it. If you used a suspect ATM or notice an unfamiliar withdrawal, contact the issuer, request cancellation and replacement, change the PIN if it was entered there, and review recent and pending transactions. Enable alerts and continue monitoring after replacement because misuse may not appear immediately. The CFPB recommends close account monitoring after card data is compromised.
Rank #4
- COMPATIBILITY: Works with multiple credit card terminal models including VeriFone MX 915/925, Ingenico Lane 3000/5000/7000, and PAX PX7 terminals
- QUICK DETECTION: Takes only seconds to verify if credit card terminals are free from unauthorized skimming devices
- SECURITY TOOL: Helps protect payment systems by identifying potential tampering or foreign objects on card readers
- EASY TO USE: Simple physical verification process requires no technical expertise or special training
- VERSATILE DESIGN: Available in different models to accommodate various terminal types including MX900 and M400 series
Extra precautions for EBT and benefits cards
Benefits cards may have different technology and protections from bank debit cards; some have historically been especially exposed where chip features are absent. Cash benefits can be withdrawn quickly after funds are loaded. Features and rules differ by state and issuer, so check the official benefits agency or card issuer for current options.
- Check the balance frequently and use available transaction alerts, freezes, or other account controls.
- If you suspect compromise, contact the card issuer or state benefits agency immediately and ask how to secure the account and report missing funds.
- Treat any message asking for your PIN as suspicious. Verify through a known official number or app, not the contact information in an unexpected message.
The FBI includes benefits cards among the payment cards targeted by skimming: FBI skimming guidance.
Free tools Windows power users keep installed
One-click scans. No signup required.
Best Value
- ELECTRONIC PINPOINTING: Precisely locate targets and speed up recovery for more efficient detecting.
- FIVE SEARCH MODES: Choose from All Metal, Jewelry, Custom, Relics, and Coins for versatile treasure hunting.
- ACCEPT/REJECT DISCRIMINATION: Customize discrimination patterns to focus on desired targets.
- COIN DEPTH INDICATOR: Continuous depth reading helps determine how deep a target is buried.
- USER-FRIENDLY DESIGN: Large LCD, push-button controls, battery life indicator, and adjustable arm cuff for comfort.
Safer alternatives and common mistakes
If an ATM feels wrong, use a different one—preferably a bank ATM in a monitored, indoor location. Where available, get cash through a trusted retailer’s supported cash-back service, or avoid withdrawing cash by paying with a chip or contactless card. Availability varies by retailer, issuer, and account. Keeping a modest emergency cash reserve may help you avoid using a suspicious machine when you are in a hurry.
- “I tugged the reader and it did not move, so it is safe.” Not necessarily; an internal device may not be detectable by touch.
- “It is inside a bank, so it cannot be skimmed.” Indoor placement is often preferable, but indoor machines can still be tampered with.
- “I used a chip, so skimming is impossible.” Chip use does not prevent PIN theft or every form of ATM fraud.
- “I only need to cover the PIN if I see a camera.” Cameras can be concealed, so shielding should be routine.
- “I should pull the device off.” Do not handle suspected equipment or confront anyone. Move away and notify the operator or authorities.
- “The bank will automatically reverse the money.” Do not assume reimbursement; report promptly and follow the formal claim process.
Quick checklist
- Inspect the reader, keypad, trim, and nearby objects.
- Touch components gently; stop if anything is loose, crooked, thick, damaged, or mismatched.
- Choose another machine if anything seems unusual; do not remove a device.
- Cover the whole keypad while entering your PIN.
- Check the transaction and turn on available account alerts.
- If compromise is suspected: freeze the card, call the issuer, change the PIN, review linked accounts, and keep monitoring.
For additional recovery steps after unauthorized money movement, see the CFPB guide to getting money back after an unauthorized transaction.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
