How to spot an ATM skimmer and protect your bank account

HomeOnline safetyHow to spot an ATM skimmer and protect your bank account

Last updated: May 29, 2026

Key takeaways

  • Physical inspection: Before using an ATM, check for loose parts, bulky card readers, or misaligned keypads. These are the most common signs of a skimming device.

  • Technological shifts: While traditional skimmers target magnetic stripes, shimmers are newer devices designed to intercept data from EMV chip cards.

  • Proactive protection: Regularly monitoring your accounts, using secure banking platforms, and choosing contactless payment methods can significantly reduce your risk of fraud from ATM skimmers. 

What is ATM skimming?

ATM skimming is a type of financial fraud where criminals install illegal devices on automated teller machines to capture data from the magnetic stripe of a credit or debit card. These devices are called “skimmers,” and are often designed to fit perfectly over the existing card slot. As a result, they can be difficult to see and may go unnoticed if you aren’t looking for them. 

Beyond the card data itself, fraudsters also need your Personal Identification Number (PIN) to access your funds. They typically obtain this by installing a hidden pinhole camera that can see the keypad, but they may also place a fake keypad overlay directly on top of the real one to log your keystrokes. Once they have your card data and your PIN, criminals can then create counterfeit cards and perform unauthorized withdrawals.

How to spot an ATM skimmer: 5 common signs

Want to know how to spot an ATM skimmer? The good news is that a quick once-over can help you identify whether or not a machine is safe to use. Here are the five most common signs of ATM skimmers to look for. 

1. Bulky, uneven, or misaligned card slot

A legitimate card slot sits flush against the machine and matches its color and finish. Skimmers are overlays, meaning they're placed on top of the real slot. As a result, the area around it often looks thicker, raised, or slightly off-center compared to the rest of the ATM.

Before inserting your card, look for:

  • A card slot that protrudes further than you'd expect or wobbles when touched

  • Color or material that doesn't quite match the surrounding panel

  • Edges that don't sit flush, with visible gaps between the slot and the machine

  • Any part that moves, shifts, or feels loosely attached when you give it a gentle tug

2. Loose or spongy keypads

ATM keypads should feel firm and uniform when you press them. A keypad overlay — which is designed to capture your PIN — sits on top of the real one, which often makes the keys feel softer, spongier, or slightly raised compared to normal.

When entering your PIN, pay attention to:

  • Keys that feel mushy, sticky, or harder to press than usual

  • A keypad that sits higher than the surrounding surface

  • Inconsistent resistance across different keys

  • Any movement when you press down on the edges of the keypad

3. Visible glue or tape residue

Criminals attach skimming devices quickly, and the adhesive they use often leaves traces. These are easy to spot once you know to look for them, and they're one of the clearest signs that something has been tampered with.

Check around the card slot, keypad, and screen bezel for:

  • Sticky residue, dried glue, or double-sided tape

  • Small strips of adhesive along the edges of panels

  • Surfaces that feel tacky when you run your finger along them

4. Hidden cameras

Tiny pinhole cameras may be concealed near the screen or above the keypad. Wherever the camera is, it will be angled to record your fingers as you type.

These cameras are small but not invisible. Look for:

  • Unusual holes or dark spots on the ATM housing, especially above or beside the keypad

  • A panel or brochure holder that looks out of place or recently added

  • Small, lens-like reflections when light hits the machine at an angle

Regardless of whether anything looks suspicious, covering the keypad with your other hand while entering your PIN is a simple habit that can help protect your accounts. 

5. Blocked or tampered-at-source security seals

Many ATMs have security seals or stickers on panels that need to be opened for maintenance. These seals are designed to show visible damage if someone has accessed the internal components of a machine.

Signs that a seal has been tampered with include:

  • Seals that are torn, peeling, or partially removed

  • Stickers that look newer or different from the rest of the machine

  • "Void" text appearing on a seal, which indicates it has been lifted and reapplied

  • Panels that are slightly ajar or don't sit evenly

Comparing skimmers and shimmers

Skimmers sit on top of the ATM, and because they're added to the outside of the machine, they can often be spotted through visual or physical checks like the ones above.

Shimmers are harder to detect. Instead of sitting on the surface, a shimmer is a paper-thin device inserted inside the card slot itself, positioned between your chip card and the reader. It intercepts data from your card's chip as the ATM reads it.

Because shimmers are hidden inside the machine, they won't change the look or feel of the card slot. They're also newer and increasingly common as chip cards have become standard. The good news is that shimmers can't fully clone a chip card the way skimmers can clone a magnetic stripe. However, the data they capture can still be used to create counterfeit magnetic stripe cards or for other types of fraud.

If your card feels unusually tight going in or comes out with more resistance than normal, it could indicate a shimmer is present inside the slot. Monitor your account carefully if this is the case. And as always, practicing online safety and being aware of the latest tech fraudsters are using is essential to protecting your accounts. 

Best practices to protect your financial information

A few small habits can go a long way in keeping your accounts secure, whether you're withdrawing cash, checking your balance, or using your card online.

  • Cover the keypad with your hand every time you enter your PIN, even if nothing looks suspicious

  • Perform a quick “wiggle test” by grasping the card reader before inserting your card, and if any part feels loose, don't use the machine

  • Use ATMs inside bank branches where possible, as they're typically more regularly monitored and harder to tamper with

  • Avoid standalone ATMs in low-traffic or poorly lit areas, such as convenience stores or tourist spots

  • Enable transaction alerts through your bank so you're notified of any activity in real time

  • Check your account statements regularly and flag any unfamiliar charges immediately

  • Use contactless or mobile wallet payments where available, as these don't expose your card's physical data to the reader

  • If anything about an ATM looks or feels off, trust your instinct and find another one

Explore all savings offers

What to do if you suspect your card is compromised

If you notice unfamiliar transactions, receive an unexpected alert, or realize you've used a suspicious ATM, acting quickly can limit the damage. Here’s what to do if you suspect your card was compromised: 

  • Contact your bank or credit union immediately to report the issue and request a card freeze or replacement

  • Change your PIN and update any online banking passwords associated with the account

  • Review your recent transactions carefully and flag any you don't recognize

  • File a report with your bank's fraud department, as most institutions have a dedicated process for disputed charges

  • Report the compromised ATM to the bank that operates it so they can inspect and secure the machine

  • Consider filing a report with local law enforcement, especially if you've lost funds

  • Monitor your account closely over the following weeks, as fraudulent charges don't always appear right away

In most cases, banks and credit unions are required to investigate and resolve unauthorized transactions. Under the Electronic Fund Transfer Act, your liability for unauthorized withdrawals is limited, but only if you report the fraud promptly. The sooner you report the issue, the stronger your protections are. If you report within two days, your maximum liability is only $50. 

And remember: reviewing your transaction history through secure high-yield savings accounts or checking apps can help you spot small "test" transactions that often precede larger fraudulent withdrawals. This allows you to act quickly if your account information is ever stolen. 

Bottom line

Protecting your hard-earned savings requires a combination of physical awareness and digital caution. 

By learning how to spot an ATM skimmer and favoring modern payment technologies like contactless tapping, you can significantly reduce your vulnerability to card fraud. 

And remember, always trust your instincts. If a machine looks suspicious, it is better to find another ATM than to risk your account security. You worked hard for those savings, so taking extra steps to protect them is always worth the effort. 

Explore today's best savings offers

Frequently asked questions

A card skimmer on an ATM typically looks like a plastic attachment that fits over the existing card slot. It may be slightly different in color, feel loose when wiggled, or obscure the flashing LED lights usually found on a card reader. 

Some skimmers are very sophisticated and perfectly match the color and texture of the machine, so it’s important to physically pull on the card reader to see if anything is amiss. 

Chip cards provide significantly better protection than magnetic stripe cards because they use encryption. However, they aren’t entirely immune to ATM skimming. 

While a traditional skimmer cannot use chip data, a device called a shimmer can intercept chip information. To maximize safety, use the contactless "tap" feature if the ATM supports it, as you won’t need to insert the card at all. 

A tampered keypad often feels "thick" or sits higher than the rest of the machine's surface, often with keys that feel loose, visible edges of a secondary pad underneath, or buttons that don’t have a tactile click when pushed. This overlay records your PIN while allowing the transaction to proceed normally.

If you suspect your data has been stolen, follow these steps:

  • Notify your bank immediately to deactivate the card and request a replacement

  • Change your PIN and review your recent statements for any unauthorized activity 

  • Report the incident within two business days to limit your liability for unauthorized charges to $50 (waiting longer can increase your potential losses)

The above article is intended to provide generalized financial information designed to educate a broad segment of the public; it does not give personalized tax, investment, legal, or other business and professional advice. Before taking any action, you should always seek the assistance of a professional who knows your particular situation for advice on taxes, your investments, the law, or any other business and professional matters that affect you and/or your business.

Raisin logo
Als Pionier für Spar-, Investment- und Altersvorsorgeprodukte ermöglichen wir Privatkunden einen unkomplizierten Zugang zu globalen Einlagen- und Kapitalmärkten – ein Vorteil, der auch Finanzinstitute stärkt.

Follow us on

The Raisin name and logo are trademarks of Raisin SE. All other trademarks, logos, marks, and brand names are the property of their respective owners.

*APY means Annual Percentage Yield. APY is accurate as of May 29, 2026. Interest rate and APY may change after initial deposit depending on the terms of the specific product selected. Minimum opening deposit is $1.00.

Raisin is not an FDIC-insured bank, and FDIC deposit insurance only covers the failure of an insured bank.

Raisin is not an NCUA-insured credit union. NCUA deposit insurance only covers the failure of an insured credit union.

Raisin does not hold any customer funds. Customer funds are held in various custodial deposit accounts. Each customer authorizes the Custodial Bank to hold the customer’s funds in such accounts, in a custodial capacity, in order to effectuate the customer’s deposits to and withdrawals from the various bank and credit union products that the customer requests through Raisin.com. The Custodial Bank does not establish the terms of the bank or credit union products and provides no advice to customers about bank or credit union products offered by the applicable bank or credit union through Raisin.com. Each customer also authorizes the Service Bank to move funds among the various banks and credit unions at the customer’s request. First International Bank & Trust (FIBT), Member FDIC, is the Service Bank. Bell Bank and Starion Bank, each Member FDIC, are the Custodial Banks.

†Based on $250,000 in FDIC or NCUA insurance coverage per insurable category of ownership at each partner bank or credit union on the Raisin platform (each a "Product Bank"), when aggregated with all other deposits held by you at such Product Bank and in the same insurable category. Deposits made through Raisin will be eligible to receive deposit insurance from the FDIC or the NCUA (each a "Deposit Insurer") in accordance with and up to the maximum amount permitted by law at each Product Bank. Raisin is not a bank or credit union and does not hold any customer funds. Funds are held at FDIC-insured banks and NCUA-insured credit unions. Deposit insurance covers the failure of an insured bank or credit union. Certain conditions must be satisfied for pass through deposit insurance coverage to apply. Customers may choose to deposit funds with identically registered accounts at different Product Banks on the Raisin platform to be eligible for Deposit Insurer coverage up to $10 million for individual accounts and $20 million for joint accounts when at least 40 Product Banks are utilized. Please be aware, however, that any deposits you have at a Product Bank, whether through the Raisin platform or outside the Raisin platform, that you may hold in the same capacity (such as in an individual capacity or joint capacity) count toward the applicable Deposit Insurer's deposit insurance maximum amount, and any such amounts that you hold in the same capacity at a Product Bank that exceed the maximum insurance coverage by the applicable Deposit Insurer will not be insured. For more information on FDIC deposit insurance, please see here. For more information on the NCUA share insurance fund, please see here. You are solely responsible for monitoring the amount of funds you have on deposit at each a Product Bank, whether through the Raisin platform or outside the Raisin platform, to confirm that the deposits you hold in the same capacity at each Product Bank do not exceed the maximum deposit insurance coverage provided by the applicable Deposit Insurer.