EBT / Benefits-Card Skimming & Cloning
Criminals hide skimmers on checkout terminals and ATMs to copy the magnetic stripe and PIN from EBT and benefit cards, clone them onto blank cards, and drain food or cash benefits — often within hours of the funds loading.
Last reviewed: 24 July 2026
What this scam is
EBT and benefits-card skimming is the theft of benefit funds by copying a card's data at the physical point where it is used. Many government benefit cards — SNAP, cash assistance, and similar programs in various countries — still carry an unencrypted magnetic stripe and no chip, so everything needed to spend the balance sits on the swipe, protected only by a PIN. Criminals attach a skimmer to a store card reader or ATM that reads the stripe, paired with a hidden camera or an overlay keypad that records the PIN as it is entered. With the stripe data and PIN together, they encode the details onto a blank magnetic-stripe card — a clone — that spends exactly like the original. Because the real cardholder still holds their own card and receives no warning, the theft is invisible until the balance is checked. Victims are overwhelmingly low-income households, and the stolen money buys food or covers essentials that are difficult, slow, or in some places impossible to have replaced.
How it works
The setup is physical and patient. A skimmer is fitted over or inside a payment terminal or ATM — a slim overlay on the card slot, a device spliced into a store reader, or a bezel that swallows and reads the stripe — while a pinhole camera or a fake keypad laid over the real one captures the PIN. Every card swiped through that compromised machine is copied. The operators later retrieve the harvested data, or receive it wirelessly, then encode blank cards with an inexpensive magnetic-stripe writer, producing clones that carry a genuine account's stripe and spend with the matching stolen PIN. The timing is deliberate: benefit programs load funds on predictable schedules, so thieves often strike in the hours around a known deposit day, cloning a card and emptying the balance before the household has spent it. The purchases may happen far from where the victim lives, sometimes in another state or region, converting benefits into resold goods or cash. The cardholder discovers the loss only when a purchase is declined or the balance reads zero.
Why this scam works
The magnetic stripe is the root weakness. Unlike a chip, which generates a unique code for each transaction, a stripe holds static data that is copied and replayed with no way for the terminal to tell an original from a clone. Benefit programs have been slow to issue chip cards, so the vulnerability persists for the people least able to absorb a loss. Predictable deposit dates hand criminals a schedule to exploit, and skimmers are cheap, small, and easily hidden on machines the public uses without a second glance. Crucially, nothing alerts the victim: no message, no missing card, no obvious tampering. Many benefit recipients also cannot easily monitor balances or reach support, so days can pass before anyone notices the money is gone.
Common red flags
- A card slot or keypad that feels loose, bulky, or looks a different colour or finish from the rest of the machine
- Your balance dropping to zero or far lower than expected, especially right after a deposit
- Purchases you did not make, often in a different city, state, or region
- Benefits gone within hours of your scheduled load date
- A card that is suddenly declined despite funds having just loaded
- Standalone or poorly lit terminals and ATMs in unattended spots
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Card reader overlay: a plastic housing sits slightly proud of the machine, and the card slot wobbles when you tug it.
Balance check by phone: 'Your current available balance is: zero dollars and zero cents' — hours after your benefits were due to load.
Store printout: 'TRANSACTION DECLINED — INSUFFICIENT FUNDS' on a card you have not used since the deposit posted.
Transaction history showing back-to-back purchases at stores in a town far from where you live, on the morning your funds arrived.
How to verify before you act
You cannot inspect a swipe after the fact, so protection is preventive and habitual. Before using any terminal or ATM, tug the card slot and wiggle the keypad — skimmer overlays are often loose, bulky, or a slightly different colour or finish than the machine. Always cover the keypad with your other hand as you type your PIN, which defeats hidden cameras. Check your balance the moment benefits are due to load and again after, using your program's official app, website, or phone line, so any drain is caught within hours rather than weeks. If your card provider or benefits program offers card locking, transaction alerts, or a block on out-of-state or online use, switch them on. Prefer terminals inside staffed stores over isolated standalone machines, and favour chip or contactless payment where your card and the reader both support it.
Payment methods used
- Cloned magnetic-stripe card
- Skimmed card data plus PIN
- EBT/benefit card swipe
Who is usually targeted
- SNAP and food-benefit recipients
- Cash-assistance recipients
- Low-income households
- Older and disabled benefit recipients
What to do immediately
- Contact your benefits program or card provider immediately to report the theft and freeze or cancel the card
- Ask for a replacement card and a new PIN, and change the PIN to one you have never used before
- Request the transaction history and note every charge you did not make, with dates, amounts, and locations
- Ask your program whether stolen benefits can be reimbursed or replaced, and how to file that claim — rules vary by program and place
- Report the theft to police and to your national fraud service so the compromised terminal can be investigated
- If you used a particular store or ATM just before the loss, tell staff so the machine can be checked for a skimmer
How to prevent it
- Cover the keypad with your free hand every time you enter your PIN, at every terminal and ATM
- Check the card slot and keypad for loose, bulky, or mismatched parts before swiping
- Check your balance right around your deposit day and lock or freeze the card between uses if your program allows
- Turn on transaction alerts and any block on out-of-state or online spending offered by your benefits program
- Use chip or contactless payment where available instead of swiping the magnetic stripe
- Prefer terminals inside staffed stores over standalone machines in unattended locations
Evidence to preserve
- The transaction history showing the unauthorised purchases, with dates, amounts, and locations
- Your own receipts and records proving where you actually were and shopped
- The date and time you last used the card and the machine you used
- Any claim, case, or report reference numbers from your benefits program, police, or fraud service
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
Why are EBT and benefit cards so much easier to skim than a normal bank card?
The difference is the chip. Most modern bank cards carry an EMV chip that creates a one-time code for each transaction, so copied data cannot be reused. Many benefit cards still rely only on a magnetic stripe, whose data is static — copy it once and a clone works indefinitely until the card is cancelled. Benefit programs have been slower to issue chip cards, which leaves the stripe, plus a PIN caught on camera, as the single point of failure criminals exploit.
How is this different from an EBT phishing text or call?
The distinction that matters most is where the theft happens. Phishing tricks you into handing over your card number and PIN through a fake text, call, or website — you are deceived into giving the data away. Skimming takes nothing from you directly: your card is copied by a hidden device while you make a completely genuine purchase, and no message ever arrives. That is why phishing awareness alone does not protect you here. Guarding against skimming means shielding your PIN and checking terminals, not spotting a scam message.
Can I get stolen benefits back after my card is cloned?
It depends entirely on your program and where you live. Some benefit programs have processes to replace stolen SNAP or cash benefits, sometimes within limits or for a defined period; others offer little or no reimbursement, which is what makes this theft so damaging. Report the loss the moment you find it, ask your program specifically how to file a replacement or reimbursement claim, and keep every reference number. Acting fast also helps get the card frozen before more of the balance disappears.