Card skimmers at gas pumps, ATMs and checkouts: what to check before you pay

What's happened

Card skimmers, devices that copy your card details when you pay, are still turning up at gas pumps, ATMs and store checkouts across the country. The US Secret Service said on January 7, 2026 that its anti-skimming operations in 2025 removed 411 illegal skimming devices.

Agents ran 22 outreach operations in cities nationwide, visited more than 9,000 businesses and inspected nearly 60,000 point-of-sale terminals, gas pumps and ATMs. The agency estimates that removing the devices prevented more than $428.1 million in potential losses, and it says skimming costs consumers and financial institutions more than $1 billion a year.

The operations have continued in 2026. In February, a Secret Service assistant special agent in charge, Michael Peck, said the threat "remains widespread."

Who's affected

Anyone who swipes or inserts a card, and especially anyone who types a PIN. Skimmers can sit inside or on top of a card reader. At ATMs, a hidden camera or fake keypad can also capture your PIN, which lets criminals take cash straight from your account.

People who get SNAP or other benefits on EBT cards have been hit hard, because many EBT cards still rely on a magnetic stripe and PIN. Stolen benefits are hard to recover, so the Secret Service has focused many of its operations on stores that accept EBT. Tourist areas are another favorite target.

What to check before you pay

• Look and wiggle. Check the reader for anything loose, crooked, damaged or scratched, and for tape or glue. A card slot that moves when you pull it is a warning sign.
• Compare with the one next to it. If one pump or reader looks different from the others, don't use it, and tell the staff.
• Check the seal. Many gas stations put security tape over the pump cabinet. If it's broken or says "void," pay inside.
• Choose your ATM. The Secret Service says ATMs in well-lit, indoor locations are less vulnerable.

What it means in dollars: a worked example

This is an illustration, not a real case.

Carlos fills up and pays at the pump with his debit card, typing his PIN. A week later, his checking account shows three ATM withdrawals of $400 he didn't make, $1,200 in all.

Because his card wasn't lost or stolen, only copied, federal rules mean he owes nothing for these unauthorized transfers if he reports them within 60 days of the statement that first shows them. His bank generally has 10 business days to investigate, or up to 45 days if it provisionally credits his account. But the $1,200 is missing from his account until it's sorted out, which can mean bounced payments.

Had he used a credit card, his liability for unauthorized charges would be capped at $50, and the money in his checking account would never have been touched.

What to do now

1. Tap if you can. The Secret Service recommends tap-to-pay or chip cards whenever possible. Tapping your card or phone doesn't use the magnetic stripe that skimmers copy.
2. Use credit, not debit, at the pump. If you do use a debit card at a gas station, the Secret Service suggests running it as credit so you don't type your PIN. If you must enter a PIN, cover the keypad with your other hand.
3. Turn on alerts. Text or app alerts for every card transaction let you spot fraud in minutes rather than weeks.
4. Check your statements. Read every statement and report anything you don't recognize straight away, well within the 60-day window.
5. Report it. Tell your bank or card issuer, and report the skimmer to the store and local police. EBT users should also report stolen benefits to their state agency.

FAQs

Are skimmers found at self-checkouts too?

Yes. The Secret Service inspects point-of-sale terminals in stores as well as gas pumps and ATMs. Overlay skimmers can be fitted to card readers at registers, so the same checks apply anywhere you pay.

Does a chip card stop skimming?

It helps a lot. The chip creates a one-time code for each payment, which is much harder to copy than the magnetic stripe. But some devices still target the stripe, and a camera can still record your PIN, so tap-to-pay is safer still.

How quickly do I need to report fraud on a debit card?

As soon as you can. If your card is lost or stolen, report it within two business days to limit your liability to $50. For unauthorized transfers when you still have the card, report them within 60 days of the statement to avoid any liability.

Sources: US Secret Service: card skimming operations prevent more than $400 million in fraud loss in 2025 (January 7, 2026), US Secret Service: 2026 EBT fraud and ATM skimming outreach, WFSB/InvestigateTV: Secret Service warns card skimmers still targeting ATMs and gas pumps (February 27, 2026), CFPB: Regulation E, section 1005.6, CFPB: Regulation E, section 1005.11, FTC: using credit cards and disputing charges