Credit Card Fraud and Skimming: How Cards Get Compromised and How to Stay Safe
Credit card fraud remains one of the most common financial crimes, with skimming devices, data breaches, and card-not-present fraud accounting for billions in losses annually. In 2024, the US accounted for over 35% of global credit card fraud losses.
Credit card fraud occurs when someone uses your credit card information without your authorization to make purchases or withdraw cash. The fraud can happen in two ways: card-present fraud (where the physical card is used, such as at a tampered ATM or point-of-sale terminal) and card-not-present fraud (where the card information is used online, over the phone, or through mail order). Card-not-present fraud has grown significantly as e-commerce has expanded, accounting for over 70% of total card fraud losses in 2024.
Skimming is one of the most common methods of card-present fraud. Criminals install small electronic devices on ATMs, gas pumps, and point-of-sale terminals to capture the magnetic stripe data from cards as they are swiped. Skimmers are often placed over the legitimate card reader and can be difficult to detect. Criminals may also install tiny cameras or overlay fake PIN pads to capture the cardholder's PIN. With the magnetic stripe data and PIN, criminals can create counterfeit cards and withdraw cash from ATMs. The shift to chip (EMV) technology has reduced card-present fraud in the US, but skimming persists because many merchants and ATMs still accept magstripe transactions, and criminals have developed techniques to intercept chip card data.
How Card Data Gets Stolen
Card data is stolen through various methods. Skimmers on ATMs and gas pumps capture magnetic stripe data. Data breaches at retailers, restaurants, and online merchants expose millions of card numbers in a single incident. Phishing tricks cardholders into entering their card details on fake websites. Malware on point-of-sale systems harvests card data from transactions. Card trapping devices capture the physical card in an ATM slot. Shoulder surfing is as simple as watching someone enter their PIN. Account takeover uses stolen credentials to add a card to a digital wallet. Once stolen, card data is sold on dark web marketplaces for $5-$50 per card, often bundled with the CVV, zip code, and cardholder name. Fraudsters test stolen cards by making small purchases before attempting larger transactions.
Prevention Tips
Use chip readers instead of swiping whenever possible — chip data is dynamic and cannot be reused to create counterfeit cards. Cover the keypad when entering your PIN at ATMs and terminals. Inspect ATMs and gas pumps for tampering — check if the card reader is loose, has mismatched colors, or has a different shape than surrounding machines. Use contactless payments (tap-to-pay) which are more secure than swiping. Use virtual card numbers for online purchases — many card issuers offer single-use or merchant-specific virtual card numbers. Set up transaction alerts for all card activity. Use a credit card rather than a debit card for purchases — credit cards offer better fraud protection (your liability is limited to $50, and most issuers have zero-liability policies). Debit card fraud can drain your bank account, and recovering those funds takes longer.
FAQs
Am I liable for fraudulent credit card charges?
Under federal law, your maximum liability for unauthorized credit card charges is $50. Most major card issuers offer zero-liability policies, meaning you will not be responsible for any fraudulent charges. Debit card liability depends on how quickly you report the fraud.
How do criminals get my credit card number without skimming?
Through data breaches at online merchants, phishing websites that look like legitimate stores, malware on your device, or by guessing card numbers using algorithms that generate valid card numbers. They may also buy stolen card data on dark web marketplaces.
Can I detect a skimmer on an ATM?
Look for signs of tampering: loose or misaligned card reader, different coloring or materials on the keypad, unusually thick or bulky card slot, hidden cameras (check for small holes in the ATM fascia), or loose keypad overlays. If something looks off, use a different machine.