How do I spot a skimmer?
Being extra observant can help keep you from becoming a victim of card skimming. For example, the Federal Trade Commission (FTC) recommends inspecting the pump panel before you insert your credit card1 to make sure the panel hasn't been tampered with. Many gas stations now put security seals — often about the size and shape of a large plastic bandage — over one edge of the pump panels. If one of these thin, sticky labels is broken, or shows a warning like “void," that's an indication that the panel has been opened and may have been tampered with.
Another tip from the FTC is to check out the card reader, noticing whether it looks different from others at the station. You could even try to wiggle it. “If it moves, report it to the attendant," the FTC advises. “Then use a different pump."
Most card skimmers use Bluetooth to transmit stolen data,2 as CNET notes. If you have an Android cell phone, there's a handy app from SparkFun Electronics3 that can detect a skimmer's Bluetooth signal. You can download the app to your mobile phone from the Google Play store. There's no iPhone version currently available.
What else can I do to protect myself?
Here are some good practices to follow:
- When possible, the FTC advises that you run your debit card as a credit purchase instead of entering a PIN like you do with a debit transaction.
- If you must use a PIN, use your hand to cover the keypad so your entry can't be recorded. Besides using a skimming device, some scammers insert a tiny pinhole camera above the keypad area.
- Monitor your credit card and bank accounts regularly for unauthorized charges or withdrawals. Many banks allow you to set up card alerts that go straight to your phone or email inbox when certain types of transactions occur.
What if I think my card has been compromised?
Report any suspicious activity on your card to your bank or card issuer. The FTC also recommends that you consider placing a fraud alert or credit freeze on your credit report. That way, businesses must confirm your identity before approving a credit application in your name — an extra layer of protection against a card skimmer trying to use your stolen data this way. If you think you've seen a card skimmer in use, report it to the FTC.4
Perhaps the most important thing you can do to fight card skimming is to pay attention — to the places where you use your cards, to the monthly statements showing your card activity, and to any incorrect or unexpected items in your credit report. Being alert won't stop cyber criminals from trying to steal your data and profit from it, but it can make it much harder for them to succeed.