ATM Card-Skimming Scam

ATM card skimming is the theft of your card details at a cash machine using hardware criminals have attached to it. A skimmer is a small reading device fitted over or inside the machine's card slot that copies the data stored on your card's magnetic stripe as you insert it. On its own that data is not enough, so skimming rigs almost always include a second component to capture your PIN: a pinhole camera hidden in a false panel above the keypad, or a thin fake keypad laid over the real one that records every press. The machine still works normally, your withdrawal goes through, and nothing feels wrong. Days or weeks later, money starts leaving your account through withdrawals you never made, often in a different city or country. Skimming targets any card with a magnetic stripe, and although chip technology has made it harder, stripe data remains valuable wherever fallback swiping or stripe-only machines are still accepted.

The criminals prepare a skimmer moulded to match a specific ATM model, so it sits flush over the real card slot and is hard to notice. They fit it in seconds, often at night or at quiet machines: standalone ATMs in shops, transport hubs, and tourist areas are favourites because they are less monitored than machines inside bank branches. At the same time they install the PIN-capture component, either a pinhole camera concealed in a strip of plastic above the keypad or a keypad overlay. You then use the machine exactly as normal. The skimmer reads your stripe as the card passes through, the camera or overlay records your PIN, and your genuine transaction completes, so you have no reason to suspect anything. The criminals retrieve the device later or collect the data wirelessly from nearby. The stolen stripe data is encoded onto blank cards, and with your PIN those clones are used to withdraw cash, frequently in another region so the pattern is harder for you and your bank to connect to the machine you used.

Cash machines are trusted infrastructure, and most people use them on autopilot: insert card, type PIN, take cash, leave. A well-made skimmer is moulded to match the machine, so unless you deliberately inspect the slot and keypad there is nothing to see. Crucially, your transaction succeeds — you get your money, a receipt prints, and the machine behaves perfectly, which removes any signal that something went wrong. The theft is also separated in time from the crime: by the time unfamiliar withdrawals appear on your statement, you have used several machines and cannot say which one was compromised.

'That machine keeps eating cards — use the one around the corner, it always works.' — a helper steering you toward the compromised ATM

'These machines are slow with foreign cards, you sometimes have to enter your PIN twice.' — a bystander positioned to watch your keypad

A stranger taps your shoulder to point out dropped money while an accomplice notes your PIN over the machine

Before inserting your card, give the card slot and keypad a firm wiggle — genuine parts are solidly fixed, while skimmers and overlays often flex, shift, or come away. Look for glue residue, tape, mismatched plastic or colour around the slot, and any small hole or unusual strip above the keypad where a camera could hide. If two machines stand side by side, compare them: differences are suspicious. Always cover the keypad completely with your free hand while typing your PIN, which defeats hidden cameras. Prefer machines inside bank branches during opening hours, and where your bank offers it, use cardless or contactless withdrawal instead of inserting the card at all.