ATM Skimmer

An ATM skimmer is a fraudulent device installed onto or inside a cash machine to steal card data and PINs from unsuspecting users. A typical deployment combines two components: a card reader overlay placed over the genuine card slot that reads the magnetic stripe as the card is inserted, and either a hidden pinhole camera aimed at the keypad or a fake keypad overlay that records PIN keystrokes. The captured data and PINs are stored on the device or transmitted wirelessly to the fraudster.

The stolen magnetic-stripe data is then encoded onto blank cards (card cloning) and used with the captured PIN to make fraudulent ATM withdrawals from the victim's account. More sophisticated variants include 'shimming' attacks that target chip-based cards and 'deep-insert' skimmers placed entirely inside the card slot and invisible to external inspection.

ATM skimmers are typically installed quickly in locations with limited surveillance — petrol station forecourts, standalone ATMs in convenience stores, and tourist-area machines are disproportionately targeted. Users can reduce risk by covering the keypad when entering their PIN, checking for loose or misaligned panels around the card slot, using ATMs inside bank branches, and enabling SMS transaction alerts.