ATM Helper, Card Swap & Shoulder-Surfing Scams

The ATM helper scam is a distraction theft built around the two things a criminal needs to empty an account at a cash machine: your physical card and your PIN. It rarely looks like a robbery. Instead, a machine appears to malfunction — it swallows the card, freezes mid-transaction, or rejects the PIN — and a helpful bystander materialises with advice: try entering the PIN again, press these keys, let me show you. While your attention is on the screen and the 'helper', your PIN is observed over your shoulder or captured by an accomplice, and your card is taken — either physically palmed and swapped for a lookalike in a moment of sleight of hand, or retained inside the machine by a trap (often called a Lebanese loop) that the scammer inserted into the card slot earlier and retrieves after you give up and leave. Minutes later, your genuine card and your freshly observed PIN are together at another machine, withdrawing your daily limit. Variants include a dropped-banknote distraction mid-transaction and fake 'bank staff' or a fake helpline number stuck to the machine that connects you to the scammer.

Preparation usually precedes the encounter. The scammer selects a machine — often a standalone or poorly observed one in a tourist area — and may tamper with it in advance: inserting a card-trapping sleeve into the slot, covering the genuine bank helpline sticker with a fake number, or simply loitering with a clear sightline to the keypad. The victim's transaction then fails in a way the victim cannot explain: the card will not come back, or the machine behaves oddly. Now the choreography begins. The helper appears quickly — sometimes warm and sympathetic, sometimes brisk and authoritative like a bank employee — and gets the victim to re-enter the PIN 'to release the card', positioning themselves or an accomplice to see the keys. In swap versions, the helper handles the card briefly ('let me try it for you') and returns a different, visually similar card; most people do not inspect a returned card. In trap versions, the victim is persuaded the machine has eaten the card and the bank will return it — 'come back tomorrow when the branch opens' — and the moment they leave, the scammer extracts the trapped card. Either way, the criminals now hold a live card and its PIN, and withdrawals begin immediately, often across several machines before the victim thinks to call the bank.

A malfunctioning ATM creates instant, genuine stress — your card, your money, and your plans are suddenly hostage to a machine — and stressed people accept help they would normally decline. The helper exploits a strong social norm: rejecting kindness feels rude, especially abroad, and the scammer's confidence reads as competence. Re-entering a PIN in front of someone violates a rule most people know, but the situation reframes it as troubleshooting rather than disclosure. The card swap survives because nobody studies a returned card — same colour scheme, same feel, transaction over. The trap version wins on plausibility: machines really do retain cards sometimes, so 'the bank will have it tomorrow' sounds like procedure rather than theft, and the delay it buys is exactly the window in which the account is drained. Everything is engineered so the victim discovers the loss hours later, when the trail is cold.

This machine does that all the time — put your code in again and press cancel twice, it releases the card. Here, I'll show you.

I work at the branch. The machine has captured your card; it happens after three attempts. Come back tomorrow at nine and the bank will return it.

Let me try it for you, sometimes you have to push the card in at an angle... there, it won't take it. Here's your card back — try another machine.

Call the number on that sticker, that's the bank's ATM support line. They'll ask you to confirm your PIN so they can unblock the card remotely.

The rule that defeats every variant: nobody legitimate helps you at an ATM. Bank staff do not troubleshoot machines from the pavement, and no genuine procedure ever requires you to re-enter your PIN for a stranger, hand your card to anyone, or read a helpline number off a sticker on the machine. If a machine retains your card or behaves strangely, stay at the machine and call your bank immediately using the number on your banking app or the back of another card — not any number displayed at the ATM — and block the card while you are still standing there. Shield the keypad with your other hand every time, on every machine, which defeats both shoulder-surfing and most hidden cameras. If a card is returned to you after any confusion, look at it: check the name and number are yours before putting it away. Prefer machines inside bank branches during opening hours, and if anyone crowds you mid-transaction, cancel the transaction, take your card, and walk away.