Don't Be Ambushed at the ATM
'Skimming' devices let criminals steal your debit card data
Fraud at automated teller machines has reached an all-time high. Helping to drive the surge: Crooks have turned their attention to ATMs now that security at retail stores is being bolstered by chip-enabled credit and debit cards, which are hard to counterfeit.
Subscribe to the AARP Money Newsletter for more on scams and consumer protection
The FICO Card Alert Service, which monitors about 3 of every 5 debit cards used in the U.S., reports that the number of ATMs compromised by criminals rose more than 500 percent last year over 2014.
The rise is being propelled by "the proliferation and sophistication of inexpensive skimming technology," FICO official T.J. Horan tells Scam Alert. The crooks take an average $650 from each person skimmed, according to the ATM Industry Association. The law limits your liability—but only if you report the crime quickly.
What it's about
Never heard of skimming? It's a con in which criminals install illegal card-reading devices on ATMs, as well as gas pumps and other public-area machines that process debit cards. You put your card in, and the device "skims" your information from the card's magnetic strip. A nearby hidden camera records the PIN that you enter. The criminals then make duplicate cards to drain cash from your accounts, or they sell your card number and PIN on the black market. And they're always upgrading their technology.
Stealthier and more advanced skimmers include "shimmers," which wedge inside ATM slots to read data from chip-enabled cards. Bluetooth capabilities aid transmission of stolen data to the bad guys. "Criminals are moving faster to make it harder for banks to react and shut down the compromises," Horan says.
See also: Former con man now fraud fighter
The crooks also exploit the fact that cards with secure computer chips still have vulnerable magnetic strips. And updating ATMs with new readers like those at retail stores (in which payment cards are inserted rather than swiped) is time-consuming and expensive. "Most domestic ATMs still require, or at least accept, cards with magnetic strips, and this allows fraudsters to counterfeit cards at ATM locations," Horan adds.
Your defense against skimming
- Go to the bank. Although not immune to skimming, ATMs at banks are typically more secure—with their own 24/7 camera surveillance—and better maintained. Machines at convenience stores and other non-bank locations account for the majority of ATM compromises.
- Inspect before using. Beware of ATMs whose card slots are a different color than the rest of the machine; have unusual equipment on the slot, keypad or sides, or overhead (which could hide a camera); or don't accept your card smoothly. If the slot is not securely attached, walk away. Newer ATMs have a flashing or steady light at the card slot. If it's obscured, suspect tampering.
- Hide it. When entering a PIN, cover your hand as you press the numbers to protect personal information.
- Keep close tabs on all payment cards. As with credit cards, most banks offer real-time alerts via text message or email on debit card transactions.
- Create a separate account. Open a smaller account, separate from your primary checking account, and use it exclusively for debit card transactions. If the account is skimmed, the lower balance would limit your losses.
- Lower your daily limit. Banks generally set a daily limit for ATM withdrawals, but you can request to have the amount of the limit reduced—say, $100 or less per day—to prevent scammers from making successive withdrawals within minutes.
Sid Kirchheimer is the author of Scam-Proof Your Life, published by AARP Books/Sterling.