With the rise in digital banking and on-line transactions, the variety of automated teller machines (ATMs) declined worldwide to 2.95 million in 2025, in line with finance and crypto useful resource website CoinLaw. Regardless of this decline, ATM fraud continues to victimize harmless customers, with international losses estimated at $2.4 billion in 2025.
Among the many ATM-related safety points, card skimming represented nearly 60% of all reported international ATM fraud circumstances in 2025, CoinLaw reported. Different ATM-related safety threats embrace malware (21%) and cryptocurrency ATM scams. AI-driven ATM fraud, whereas in its infancy (0.11%) in 2025, is gaining traction as cybercriminals develop new phishing methods.
On this information, we are going to delve into a number of the safety threats round ATMs, with a deal with skimming, and share recommendations on defending your knowledge and cash in your checking account.
What’s ATM skimming?
ATM skimming is a type of fee card fraud the place criminals secretly set up unlawful units on card readers, gas pumps, or point-of-sale terminals, which then steal your debit or bank card data. These units, referred to as skimmers, seize the magnetic stripe knowledge out of your card whereas hidden cameras or pretend PIN pads report your private identification quantity. With each items of data, criminals can create counterfeit playing cards or make unauthorized on-line purchases utilizing your account.
Skimming units have turn out to be more and more refined and more durable to detect. Conventional overlay skimmers sit on high of official card readers, however newer “shimmer” units are inserted extra deeply into the cardboard slot, making them nearly invisible to informal inspection. These units can retailer knowledge from a whole lot of playing cards earlier than criminals retrieve them, usually utilizing Bluetooth expertise to wirelessly obtain stolen data with out bodily accessing the skimmer.
ATMs stay the commonest goal for skimming assaults, however criminals additionally goal fuel station gas pumps, which regularly have weaker safety programs and fewer frequent upkeep checks. Level-of-sale terminals at retail places, eating places, and different companies additionally current alternatives for skimming, significantly when staff are concerned within the scheme.
The menace persists for a number of interconnected causes. Fee card fraud is kind of a worthwhile enterprise and will be scaled throughout states or nations. Know-how gaps additionally contribute to the issue as many ATMs and fee terminals proceed to make use of legacy magnetic stripe expertise regardless of the introduction of safer EMV chips in newer playing cards. Criminals additionally exploit legacy programs, particularly if the ATM doesn’t obtain common safety updates.
Moreover, decommissioned ATMs will be freely gathered from junkyards or casually purchased from on-line marketplaces, giving criminals the possibility to gather private knowledge saved within the laptop and examine the discarded machine’s safety features to enhance their skimming methods.
In some circumstances, used ATMs are bought on eBay or Craigslist, then put in wherever with ample foot visitors. These machines, which can be powered by automobile batteries or just plugged into the closest outlet, are programmed to learn and duplicate bank card knowledge.
Penalties of skimming
When your card data is compromised via skimming, the monetary and private penalties will be important. Criminals might drain your account via ATM withdrawals or fraudulent purchases, doubtlessly leaving you unable to entry your individual cash. Since debit card transactions usually clear instantly, unauthorized withdrawals may cause overdraft charges and bounced test prices earlier than you even notice your account has been compromised.
Past the monetary losses, ATM skimming can result in identification theft, the place the private data captured turns into a part of bigger prison databases utilized in different fraud schemes.
Consequently, your credit score rating and banking relationships may additionally undergo if fraudulent accounts are opened in your title or in case you’re unable to resolve unauthorized prices rapidly. Whereas the legislation provides you restricted legal responsibility for fraudulent transactions, the method of restoring your accounts will be time-consuming and nerve-racking.
Varieties of ATM skimming units and find out how to spot them
Criminals use a variety of units—some apparent, others practically invisible—to steal card knowledge and PINs proper on the machine. Figuring out the principle kinds of skimmers, what they seem like, and the place they’re often positioned might help you acknowledge them and keep away from a compromised ATM.
Overlay card readers
The most typical sort of skimming system, overlay card readers are pretend attachments that criminals place instantly over the official card slot of an ATM. As you insert your card, it passes via the skimmer first, which captures your card’s magnetic stripe knowledge earlier than reaching the actual card reader.
Deep-insert or shimmer units
An evolution of skimming expertise, shimmer units are extraordinarily skinny circuit boards that criminals insert deep into the cardboard slot, making them practically unattainable to detect via visible inspection alone. While you insert your card, you may discover elevated resistance, uncommon vibrations, or your card feeling momentarily caught.
Pinhole cameras
Criminals use tiny cameras to seize your PIN as you enter it on the keypad. They’re so small they are often hidden in seemingly harmless places across the ATM. Search for a small digital camera hooked up to the highest of the display screen, hidden in a brochure holder, and even hid in a pretend safety signal.
Pretend PIN pads
These units are positioned over the official ATM keypad to seize your PIN as you enter it. The keypad might really feel spongier than traditional, have a unique texture, or appear thicker than regular. You may discover the numbers are printed in another way, the buttons don’t press down so far as anticipated, or there’s a slight colour distinction between the keypad and the remainder of the ATM. If the keypad feels free, raised, or completely different from different ATMs you’ve used, don’t enter your PIN.
Bluetooth-enabled skimmers
Thought of a complicated skimming method, wi-fi Bluetooth-enabled skimmers can wirelessly transmit your stolen card and PIN knowledge to criminals, eliminating the necessity for them to return to retrieve the system. You would detect them by checking your telephone’s Bluetooth settings for uncommon system names showing within the space, although many criminals use generic names to keep away from detection. In the event you see individuals loitering close to ATMs with cell units, particularly in the event that they appear to be monitoring ATM customers, this might point out a Bluetooth skimming operation in progress.
Mixture assaults
Criminals usually mix a number of kinds of skimming units to maximise their knowledge seize. A typical mixture assault may contain an overlay card reader paired with a pinhole digital camera, or a shimmer system mixed with a pretend PIN pad. This is the reason safety consultants suggest following all protecting measures while you use an ATM.
Rising applied sciences
Current advances in skimming applied sciences embrace units that may be inserted via present openings within the ATM with out requiring exterior attachments, and skimmers that use near-field communication (NFC) expertise to seize contactless fee data.
Protecting steps to take earlier than inserting your ATM card
Select bank-operated ATMs in well-lit areas
Your most secure wager is to make use of ATMs inside financial institution branches or these clearly operated by main monetary establishments. These places have higher safety measures, corresponding to surveillance cameras and common checks that detect tampering. At outside ATMs, choose machines in well-lit, high-traffic areas the place prison exercise is much less prone to happen unnoticed. Keep away from ATMs in dimly lit, remoted places the place skimmers will be simply put in.
Look at the cardboard slot
Earlier than inserting your card, carefully examine the cardboard insertion slot. Respectable ATM card readers ought to have a uniform look with clean edges and constant coloring. Search for uncommon attachments or units that appear to have been added on high of the unique reader. The cardboard slot ought to align completely with the encompassing ATM fascia. Any gaps, misalignments, or indicators that one thing has been glued or hooked up ought to elevate speedy crimson flags. Belief your intestine.
Carry out the wiggle take a look at
One of the efficient methods to detect pretend card readers on ATMs is thru tactile inspection. Gently grasp the cardboard reader and attempt to wiggle it. A official card reader ought to really feel stable and completely hooked up. If the reader or the housing feels free, it is a sturdy indicator of a skimmer. If something strikes when it shouldn’t, don’t use that ATM and report it to the financial institution instantly.
Examine the keypad
Look at the keypad rigorously for any indicators of modification or overlay units. Overlay keypads usually seem barely thicker or misaligned with the encompassing space. When urgent the buttons, every one ought to have constant resistance and really feel. Any button that sticks or appears increased than others may point out tampering. Take note of the realm across the keypad for adhesive residue or scratches. Respectable ATM keypads have constant button spacing, uniform coloring, and will really feel stable when pressed.
Examine the ATM’s fascia and bezel
The ATM’s outer casing and bezel ought to have a uniform look with no apparent modifications corresponding to free panels, additional items of plastic, or areas with completely different coloring or texture from the remainder of the machine. Examine for any uncommon wiring, small cameras, or units that seem misplaced. The world across the display screen needs to be examined for any tiny cameras or recording units that seize PIN entry. All textual content, logos, and branding ought to seem skilled and according to the financial institution’s commonplace ATM design.
Survey the encompassing space
Earlier than utilizing any ATM, test the realm for any uncommon objects that might home cameras or recording gear, together with pretend brochure holders, uncommon signage, or any gadgets that appear misplaced. Examine for individuals loitering close by who appear to be watching ATM customers or autos parked unusually near outside ATMs with passengers or drivers who seem like monitoring ATM exercise.
Scan for Bluetooth units
Earlier than utilizing an ATM, test your smartphone’s Bluetooth settings to scan for close by units with suspicious names, corresponding to these with generic or random characters, or names that don’t correspond to official companies within the space. An uncommon focus of unknown units close to an ATM may very well be a warning signal. This method works greatest in areas the place there usually shouldn’t be many Bluetooth units, corresponding to standalone ATMs.
ATM security suggestions
Allow and use contactless withdrawal
Allow contactless withdrawals via your financial institution’s cell app to authenticate and authorize QR code-based transactions and scale back your want to make use of an ATM. This expertise makes use of tap-to-pay performance or near-field communication (NFC) options, offering the identical handy entry to your funds. Contact your financial institution to study contactless ATM choices and find out how to activate these options in your accounts.
Confirm ATM authenticity via official channels
Financial institution web sites or cell apps often present the places of their official ATMs. In the event you’re not sure about an ATM’s authenticity, test these official assets to substantiate the machine is listed as a official location. This step might help you keep away from each skimming units and different fraudulent ATM operations fully. Be significantly cautious of ATMs in uncommon areas. When touring, persist with ATMs inside recognizable monetary establishments.
Defend your PIN entry
Even when ATMs seem official, at all times shield your PIN entry from potential commentary. Use your free hand, physique, or a handbag to cowl the keypad whereas coming into your PIN to protect in opposition to each hidden cameras and shoulder-surfing by close by criminals. Take into account altering your PIN usually and by no means write it down. In the event you suspect your PIN might have been compromised, change it instantly via safe channels.
Monitor your account exercise vigilantly
Implement sturdy account monitoring to detect and tackle any skimming-related fraud as rapidly as attainable. Arrange real-time account alerts via your financial institution’s cell app to obtain speedy notifications of all transactions. Evaluate your account statements usually and report any unauthorized exercise instantly. Take into account setting each day withdrawal limits to match your utilization patterns to reduce losses in case your card data is compromised.
Report suspicious ATMs instantly
In the event you uncover indicators of tampering or suspicious exercise at an ATM, report it instantly to the financial institution to guard different prospects from changing into victims and to assist legislation enforcement monitor down the criminals. Contact the financial institution’s customer support line utilizing the telephone quantity on the again of your card as an alternative of the numbers displayed on the doubtless compromised ATM. Doc the ATM’s location, together with the tackle and any figuring out numbers or codes seen on the machine.
Keep knowledgeable about ATM fraud developments
Hold your self up to date on the most recent ATM skimming methods and prevention methods via dependable sources. Client alerts supply up to date recommendation on defending your self from these crimes, as do main card networks corresponding to Visa and Mastercard. Following your financial institution’s safety updates and fraud alerts helps you keep conscious of latest threats in your space and rising prison methods that you must look ahead to throughout ATM transactions.
Keep away from help from strangers
Be extraordinarily cautious of anybody providing that can assist you with ATM troubles, even when they seem well-intentioned, particularly in the event that they recommend utilizing their telephone to name the financial institution or supply to indicate you find out how to full your transaction. In the event you encounter issues with an ATM, cancel your transaction, retrieve your card, and speak to your financial institution instantly..
Use ATMs throughout daylight or banking enterprise hours
Criminals often set up skimming units when fewer individuals are round to witness their actions. Daytime transactions in high-traffic areas make it extra doubtless for suspicious habits to be observed and reported. In the event you should use an ATM at evening, select one in a really well-lit space with good visibility, ideally close to companies which are nonetheless open with workers and prospects current. Think about using indoor ATMs completely.
Hold your ATM receipts safe
All the time take your ATM receipts and retailer them securely till you’ve gotten verified the transaction in your assertion. Don’t depart them on the machine or throw them away in close by trash cans the place criminals may retrieve them to collect details about your account; even partial account numbers and transaction particulars may very well be helpful to identification thieves. You possibly can shred the receipts when you’ve confirmed the transactions.
Perceive your rights and protections
Familiarize your self together with your financial institution’s insurance policies relating to ATM fraud and your rights below federal legislation. The Digital Fund Switch Act supplies particular protections for customers who expertise unauthorized ATM transactions. These protections give you as much as 60 days to report unauthorized transactions to restrict your legal responsibility, however reporting inside two enterprise days supplies the strongest safety.
Plan your money wants prematurely
Scale back your ATM utilization by planning your money wants and making bigger, much less frequent withdrawals to scale back your general publicity to potential skimming makes an attempt. Take into account getting money again throughout purchases at grocery shops, pharmacies, and trusted retailers, slightly than utilizing unfamiliar ATMs, particularly when touring or in unfamiliar areas.
Be additional vigilant throughout the vacation season
ATM skimming makes an attempt surge throughout peak purchasing and journey intervals when foot visitors will increase at malls, airports, resort lobbies, and different industrial or vacationer places. Elevated money withdrawals, crowded purchasing areas, and vacationers utilizing unfamiliar ATMs create ideally suited circumstances for skimming operations. As well as, criminals know that vacation consumers are sometimes distracted, rushed, and fewer vigilant about utilizing ATMs. That’s why it’s vital so that you can be additional cautious. In the event you should use an ATM, take a breath and decelerate to totally examine the machine and your environment earlier than inserting your card.
Fast steps to take in case your card was skimmed
The steering beneath walks you thru precisely what to do within the second and proper after, so you possibly can restrict threat to your self and stop others from changing into victims, too.
- Contact your financial institution instantly. Name the quantity on the again of your card or use your financial institution’s cell app to report unauthorized transactions. Most banks have 24/7 fraud hotlines that may freeze your account inside minutes to stop additional unauthorized use.
- Dispute unauthorized prices promptly. Your legal responsibility protections rely on how rapidly you report fraud. For bank cards, federal legislation limits your legal responsibility to $50 for unauthorized prices. For debit playing cards, report inside two enterprise days to restrict legal responsibility to $50, or inside 60 days to cap legal responsibility at $500. After 60 days, you possibly can be chargeable for all unauthorized transactions.
- Request a alternative card. Your financial institution will cancel your compromised card and subject a brand new one with completely different numbers. Most banks can expedite supply inside 1-2 enterprise days, although some might cost a price for rush supply. Ask about short-term digital playing cards for speedy on-line use whereas ready to your bodily card.
- Inform your ID Theft safety supplier. You probably have an identification theft safety subscription, inform your service to activate proactive identification surveillance, monitor your credit score and private data, and search assist from fraud decision brokers who can work via the method of resolving the identification theft points.
- Place a fraud alert in your credit score stories. Contact one of many three main credit score bureaus—Experian, Equifax, or TransUnion—to put a free fraud alert. This alert requires collectors to confirm your identification earlier than opening new accounts and robotically applies to all three bureaus for one yr.
- Take into account a credit score freeze for enhanced safety. A credit score freeze prevents new collectors from accessing your credit score report and identification thieves from opening accounts in your title. You possibly can freeze and unfreeze your credit score totally free with all three bureaus on-line, by telephone, or by mail.
- Monitor your accounts carefully. Evaluate all financial institution and bank card statements for the subsequent few months. Arrange account alerts for transactions over a certain quantity, and think about using your financial institution’s cell app to test account exercise each day throughout this era.
- File further stories if identification theft happens. If criminals used your card data for identification theft past simply card fraud, file a report with the Federal Commerce Fee and take into account submitting a police report. The FTC supplies a customized restoration plan and pre-filled varieties for collectors.
- Replace automated funds. Substitute your outdated card data together with your new card particulars for any automated funds, subscriptions, or saved fee strategies with on-line retailers to keep away from service interruptions.
- Hold detailed information. Doc all communications together with your financial institution, together with dates, instances, consultant names, and reference numbers. Save copies of dispute varieties and any correspondence associated to the fraud investigation.
Ultimate ideas
Defending your self from ATM skimming requires ongoing consideration, however you’re now geared up with the data to make use of ATMs confidently and securely—carry out a visible inspection, do the wiggle take a look at, assessment the keypad, and pay attention to your environment. Belief your instincts. If one thing feels mistaken or appears to be like suspicious about an ATM, discover one other location. Your instinct is a priceless device in recognizing doubtlessly compromised machines.
Share these ATM security practices with your loved ones members and buddies to strengthen their safety as nicely. Take a second to revisit your financial institution’s fraud safety tips and make sure you perceive their notification procedures for suspicious exercise. Your monetary establishment can accomplice with you in stopping fraud, so don’t hesitate to achieve out with questions on their newest safety features.
For extra assets and the most recent fraud prevention updates, go to the the McAfee blogs and guides and know the steps to take in case you turn out to be a sufferer of card fraud.
