What ATM skimming is and why it targets you

ATM skimming is when someone installs a hidden device on an ATM to steal your card number and PIN as you use the machine. The skimmer reads your card data, and a hidden camera or fake keypad records your PIN. Later, the thief uses that information to withdraw cash from your account or sell the data to someone else.

Lower-income accounts are often targeted because they may have fewer fraud protections, smaller daily withdrawal limits that make theft less obvious, and less frequent monitoring. A thief might drain $200 to $500 before you notice — money you cannot afford to lose.

The good news: skimming is preventable. Most of it happens at standalone ATMs in convenience stores, gas stations, and laundromats rather than bank branches. You can learn to spot the devices and protect your PIN in under a minute at each machine.

Key Takeaways

  • Skimmers are physical devices placed over the card slot or hidden inside the machine; they are often loose, bulky, or slightly misaligned compared to the rest of the ATM.
  • Always cover the keypad with your hand or body while entering your PIN, even if you are alone — cameras can be mounted above or to the side.
  • Use ATMs inside bank branches during business hours when staff are present, rather than standalone machines in remote locations.
  • Check your account balance and transaction history at least weekly, and report any unfamiliar withdrawals to your bank within 24 hours.
  • If you discover skimming on a machine you used, contact your bank when ready and file a report with the FBI's Internet Crime Complaint Center (IC3) at ic3.gov.

How to inspect an ATM before you use it

Before you insert your card, spend 10 seconds looking at the machine. Start with the card slot — run your finger around the edges. A skimmer is usually a plastic or metal overlay that sits on top of the real slot. It may be slightly raised, loose, or a different color or texture than the surrounding bezel. If it moves when you touch it, do not use that machine.

Look at the keypad next. Real keypads are usually flush and uniform. A skimmer keypad may be slightly raised, bulky, or have uneven spacing between buttons. Press a few buttons gently — they should feel solid. If they feel spongy, loose, or like they are sitting on top of something, walk away.

Check for cameras. Legitimate ATMs have no visible cameras. Look above the screen, to the sides, and in the corners of the machine's housing. A small hole, lens, or wire that does not belong is a red flag. If you see anything that looks like it was added after the machine was built, use a different ATM.

If anything feels off — even if you cannot name why — use another machine. Your instinct is worth more than the convenience of that location.

Protecting your PIN while you enter it

Even if the card slot is clean, a camera can be watching your fingers. Always cover the keypad with your other hand, your body, or a piece of paper while you type. Do this every single time, at every ATM, without exception. It takes two seconds and stops a camera from recording your PIN.

Stand close to the machine so your body blocks the view from the side and behind. If someone is standing very close to you or watching your hands, step away and use a different machine or come back later. You have the right to feel safe and unobserved while handling your money.

If the ATM is in a dark corner, poorly lit, or in a location where you feel unsafe, do not use it. Skimmers are often placed on machines in isolated spots where the thief can retrieve the device without being seen. A well-lit ATM inside a bank branch or busy store is a safer choice.

Choosing safer ATM locations

ATMs inside bank branches are the safest option. They are monitored by staff during business hours, cleaned regularly, and checked for tampering. If you bank with a credit union or smaller bank, use their machines whenever you can.

If you must use a standalone machine, choose one in a busy, well-lit location — a grocery store, pharmacy, or gas station with good lighting and foot traffic. Avoid machines in laundromats, bars, casinos, or remote corners of parking lots. Thieves target quiet machines where they can install and retrieve skimmers without being noticed.

Some banks and credit unions offer surcharge-free ATM networks. Ask your bank whether they participate in a shared network like Allpoint, MoneyPass, or CO-OP. Using machines within your bank's network means you avoid fees and use machines your bank maintains.

What to do if you spot a skimmer

If you find a loose card slot, a raised keypad, or a suspicious camera, do not try to remove it yourself. Step away from the machine and report it when ready to the bank or business that owns it. If it is a bank ATM, call the bank's customer service line. If it is in a store or gas station, tell a manager or employee right away.

Take a photo of the machine and the suspicious device if you can do so safely, and note the exact location and time. This information helps the bank and law enforcement investigate. You can also report the skimmer to the FBI's Internet Crime Complaint Center at ic3.gov, though the bank report is the most important step.

If you used that machine before spotting the skimmer, contact your bank when ready. Tell them you may have been skimmed and ask them to watch your account for suspicious activity. Many banks will issue you a new card and monitor your account for free if you report suspected skimming.

Monitoring your account after using an ATM

Check your account balance at least once a week, especially if you use ATMs frequently. Many banks offer free text or email alerts when a withdrawal is made. Set up these alerts if your bank offers them — they notify you within minutes of any ATM withdrawal, so you catch fraud fast.

Review your transaction history online or on your bank's mobile app. Look for withdrawals you did not make, especially small amounts ($50 to $200) that might be straightforward to miss. If you see something unfamiliar, contact your bank the same day.

If you discover unauthorized withdrawals, call your bank when ready. Federal law protects you if you report fraud within 60 days of your statement, but reporting within 24 hours gives you the strongest protection. Your bank may refund the money while they investigate, or they may issue you a new card and account number to stop further theft.

What your bank must do if you are skimmed

Under the Electronic Funds Transfer Act, your bank must investigate any unauthorized ATM withdrawal you report. If you report within 60 days of your statement, you are protected from liability — meaning you will not lose money if the bank confirms the withdrawal was fraudulent.

If you report within 24 hours, your protection is stronger and the investigation is faster. Your bank should issue you a new card and may provide a temporary card or cash advance while they investigate. Ask your bank about their specific process when you call to report the fraud.

Keep records of every call you make to your bank about the skimming — write down the date, time, the name of the person you spoke with, and what they told you. If the bank disputes your claim later, these notes are proof you reported it promptly.

Frequently Asked Questions

Can a skimmer steal my money if I use my debit card at a store instead of an ATM?

Yes. Skimmers are also placed on gas pump card readers, store checkout terminals, and other machines where you swipe or insert your card. The same protection applies: cover the keypad when you enter your PIN, inspect the card slot for loose or raised overlays, and monitor your account regularly. Inside a store, ask a cashier to run your card instead of using a self-checkout if you feel unsafe.

What if my bank says I am responsible for the skimmed money?

Push back. Under federal law, you are not liable for unauthorized withdrawals if you report them within 60 days. If your bank refuses to refund you, file a complaint with the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov. You can also contact your state's banking regulator or attorney general's office. Document everything in writing and keep copies of all correspondence.

Is it safer to use my phone to pay instead of my debit card?

Mobile payment apps like Apple Pay, Google Pay, and Samsung Pay do not expose your card number to the merchant or the ATM, so they are safer than swiping or inserting a physical card. However, not all ATMs accept mobile payments yet. If your ATM does, use it. If not, follow the inspection and PIN-protection steps above.

How do I know if my card number was stolen if I have not used the ATM yet?

You may not know until fraudulent charges appear on your statement. This is why monitoring your account weekly is critical. If you used an ATM that was later reported to have a skimmer, contact your bank proactively and ask them to monitor your account or issue a new card as a precaution.

Can I get my money back if I wait more than 60 days to report skimming?

Possibly, but your legal protection is weaker. Federal law protects you fully only if you report within 60 days. After 60 days, your bank may still refund you, but they are not required to. This is why checking your statement weekly and reporting fraud when ready is so important — do not wait.