You walk up to an ATM, slide your card in, punch in your PIN, grab your cash, and go. You’ve done it a thousand times. But here’s the thing: criminals have gotten incredibly good at making a compromised ATM look perfectly normal. If you don’t know what to look for, you’re basically handing your bank account to a stranger. And the worst part? You won’t even know it happened until the charges start rolling in.
ATM skimming cost Americans over $1 billion in 2023, according to the FBI. That number keeps climbing. The devices are cheaper to produce, easier to install, and harder to spot than ever before. So let’s talk about what a rigged ATM actually looks like, and what you can do to protect yourself without becoming paranoid every time you need twenty bucks.
The Card Slot Looks Wrong
This is the number one thing to check, and it takes about three seconds. Before you insert your card, grab the card reader and give it a firm wiggle. A legitimate card slot is mounted flush against the machine and doesn’t budge. A skimmer, on the other hand, is a plastic overlay that sits on top of the real reader. It might look slightly bulkier than you’d expect, or the color might be just a shade off from the rest of the ATM housing.
If anything moves, even slightly, do not use that machine. Walk away. Report it to the bank if there’s a branch nearby, or call the number on the ATM itself. Skimmers are designed to snap on and off quickly, so criminals can install them in under 30 seconds and retrieve them later with all your data stored on a tiny chip inside.
Check the Keypad Before You Type Anything
Skimming the card number is only half the equation. Thieves also need your PIN, and the most common way to get it is with a fake keypad overlay. These are thin rubber or plastic pads that sit right on top of the real buttons. When you press your PIN, the overlay records every keystroke.
Here’s how to spot one: press a couple of the keys before you start your transaction. Do they feel spongy or unusually thick? Does the keypad seem raised compared to the surface around it? Try pressing the edges of the pad. If it lifts or flexes, that’s a serious red flag. Real ATM keypads are metal, firmly recessed, and don’t have any give to them.
Even if the keypad seems fine, always cover your hand with your other hand while typing your PIN. This one habit alone defeats hidden cameras, which brings us to the next trick.
Look Up, Around, and Behind You
Tiny pinhole cameras are the other half of the PIN stealing operation. Criminals mount them in spots you’d never think to look. The most common locations are inside a fake panel directly above the screen, inside a brochure holder mounted on the ATM, or even on a small piece of plastic glued to the top of the machine.
Before you start your transaction, run your fingers along the top edge of the ATM near the screen. Feel for anything that seems stuck on or out of place. Look at the little plastic housing around the screen itself. If there are any small holes that don’t seem to serve a purpose, be suspicious. Some of these cameras are literally the size of a pinhead, so covering your PIN entry with your free hand is still your best defense even if you can’t find a camera.
The Machine Is in a Sketchy Location
Not all ATMs are created equal. The one inside your bank’s lobby, behind a locked door that requires your debit card to enter? That’s about as safe as it gets. The standalone machine at a gas station off a rural highway, or the one in the back corner of a convenience store with no security cameras? That’s where skimmers are most commonly found.
Criminals target ATMs that have low foot traffic and minimal surveillance. Think about it from their perspective: they need time to install the device and time to come back later to remove it. An ATM in a busy bank lobby with security cameras and foot traffic all day is a terrible target. A freestanding machine in a poorly lit parking lot is a perfect one.
Your rule of thumb should be: use bank-owned ATMs whenever possible, preferably ones inside the actual branch. If you have to use an independent ATM, pick one in a well-lit, high-traffic area. The $3.50 fee at that random gas station ATM could end up costing you a whole lot more.
Something Looks New on an Old Machine
This is a subtler one, but it’s worth training your eye for. If you use the same ATM regularly, you’ll get familiar with how it looks. Pay attention one day. Note the color, the shape of the card reader, whether there are stickers or security seals, and how the screen housing is designed. Then, if something looks different the next time you visit, that change should make you pause.
Criminals sometimes add extra pieces to an ATM that weren’t there before. A new panel above the screen. A piece of trim around the card slot that’s a slightly different shade of gray. A plastic guard around the keypad that didn’t exist last week. Banks don’t usually make cosmetic updates to their ATMs on a random Tuesday. If something is new, that’s your cue to wiggle, inspect, and possibly walk away.
Your Card Gets Stuck or the Transaction Feels Off
Some skimming setups involve a device called a “Lebanese loop,” which is basically a thin sleeve inserted into the card slot that traps your card inside. You think the machine ate it. You walk away frustrated, planning to call your bank in the morning. Meanwhile, the criminal comes back, removes the sleeve with your card still in it, and already has your PIN from the camera or overlay keypad.
If your card gets stuck, do not leave. Call your bank immediately, right there at the machine. Most banks have a 24/7 number on the back of your card (which you won’t have, because it’s stuck in the machine, so save your bank’s number in your phone now). Also keep an eye out for anyone who approaches you offering to “help.” That’s a common tactic where the accomplice tries to get you to re-enter your PIN while a camera records it.
Use Tap Instead of Insert Whenever Possible
If your debit card has contactless tap capability (look for the little sideways wifi symbol on the card), use it. Tap transactions are significantly harder to skim because the card never enters the reader. There’s no magnetic stripe to copy. Many newer ATMs at major banks like Chase, Bank of America, and Wells Fargo now support tap, and you should be using it every single time.
If your card doesn’t have tap, ask your bank for a replacement. Most issue them for free now. Some people also use their phone’s digital wallet (Apple Pay or Google Pay) at compatible ATMs, which is even more secure since it generates a one-time transaction code instead of transmitting your actual card number.
Set Up Transaction Alerts Right Now
Even if you’re careful, stuff happens. The best backup plan is instant notifications. Every major bank app lets you set up real-time alerts for ATM withdrawals, card-not-present transactions, and purchases over a certain dollar amount. Turn all of these on. If someone clones your card and tries to pull $500 from an ATM in another state, you’ll know within seconds instead of finding out when you check your balance next week.
While you’re in the app, check whether your bank offers the option to temporarily lock your debit card. Chase, Capital One, and most credit unions have this feature. If you get a suspicious alert, you can freeze the card in about five seconds flat from your phone.
What About Those ATMs Inside Stores?
The white or beige ATMs you see inside gas stations, delis, bars, and laundromats are privately owned and operated. They’re not maintained by a bank. The owner might check on the machine once a week, or once a month, or never. That means a skimmer could sit on one of those machines for days before anyone notices.
Does that mean you should never use them? Ideally, yes. But if you’re in a pinch, apply everything from this article: wiggle the card reader, press the keypad edges, cover your PIN, and look around for anything out of place. And maybe keep your withdrawal small. If the machine is compromised, losing $40 stings a lot less than losing $400.
The Quick Pre-ATM Checklist
Print this out, screenshot it, whatever. Run through these every single time:
1. Wiggle the card reader. If it moves, leave.
2. Press the keypad edges. If they lift or feel spongy, leave.
3. Look for tiny holes or new plastic pieces above the screen or near the card slot.
4. Cover your PIN with your hand. Every time, no exceptions.
5. Use tap or digital wallet if the machine supports it.
6. Prefer bank-owned ATMs in well-lit, high-traffic locations.
7. If your card gets stuck, don’t leave. Call your bank immediately.
None of this takes more than 10 seconds. And those 10 seconds could save you weeks of dealing with a drained bank account, filing disputes, and waiting for replacement cards. It’s one of those things where a tiny amount of awareness goes a really, really long way.
