What are the warning signs of a atm & card skimming?

Watch for: Card slot feels loose, sticks out, or has a different colour plastic; Keypad feels spongy, sits high, or has a second layer; Tiny pinhole above the screen or on a brochure holder beside it; Stranger 'helping' you at the ATM or standing too close.

How can I tell if this is a scam?

Stop and verify independently. Contact the organisation using details you look up yourself, never the ones in the message, and don't act on urgency. You can also paste the message into the ScamShield AI scam checker for a risk assessment — it gives guidance, not a guarantee.

What should I do if I clicked the link or replied?

Stop all contact, change the password on any account you logged into and turn on two-factor authentication, and watch your accounts for changes you didn't make. Tug the card slot before inserting — overlays usually come off. Cover the keypad with your other hand when entering PIN. Prefer ATMs inside bank branches; avoid standalone tourist ATMs.

What should I do if I already sent money?

Contact your bank immediately and ask about stopping or recalling the payment, keep all evidence, then report the scam. Be wary of anyone who later offers to recover your money for a fee.

Where should Australians report this scam?

Report scams to Scamwatch (National Anti-Scam Centre), report cybercrime to ReportCyber, forward scam texts to 7726, and contact IDCARE if identity details were exposed. Contact your bank first if money is involved.

All scams

💳

ATM & card skimming

Hidden devices on ATMs, fuel pumps or EFTPOS terminals copy your card and PIN.

Senior

How it works

Criminals attach a thin overlay to the card slot and a pinhole camera or fake PIN pad above the keypad. Your card data and PIN are captured, then cloned onto blank cards used overseas — or used for contactless 'tap' transactions until you notice. Petrol stations, tourist-area ATMs and standalone (non-bank-branch) ATMs are highest risk.

Common scenarios to watch for

This scam shows up in several different shapes. Recognise the pattern, not just one message.

Reporting locationHotlines on the printed checklist will match this location.

Overlay on a tourist-area ATM

A thin plastic overlay sits on top of the real card slot, capturing the magnetic stripe as your card passes through. A pinhole camera films your PIN.

"After using a CBD convenience-store ATM at midnight, $3,800 is spent on contactless purchases in Eastern Europe two days later."

Red flags to spot

Does the card slot look bulkier, loose, or a different colour to the rest of the machine?
Is there a brochure holder, mirror or strip placed unusually close to the keypad?
Is the ATM standalone (not inside a bank branch)?
Were you watched or 'helped' by someone standing nearby?

Compromised fuel-pump EFTPOS

Skimmers are installed inside fuel-pump card readers, often at unattended late-night stations. Cards are cloned and used for online purchases.

"Three $1.99 'test' transactions appear overnight, followed by $1,200 of online shopping you didn't make."

Red flags to spot

Did you pay at the pump rather than inside?
Was the pump's card reader at a remote or unattended station?
Are there small unfamiliar test transactions on your statement?
Were larger overseas or online purchases attempted right after?

Red flags

🚩Card slot feels loose, sticks out, or has a different colour plastic
🚩Keypad feels spongy, sits high, or has a second layer
🚩Tiny pinhole above the screen or on a brochure holder beside it
🚩Stranger 'helping' you at the ATM or standing too close
🚩Small unfamiliar test transactions ($1-$3) on your statement

What to do

1Tug the card slot before inserting — overlays usually come off.
2Cover the keypad with your other hand when entering PIN.
3Prefer ATMs inside bank branches; avoid standalone tourist ATMs.
4Enable transaction notifications in your banking app.
5If skimmed: freeze the card in-app, dispute transactions, and report to the bank and police.

Who's targeted

ATM users at petrol stations, convenience stores and tourist areas.
Travellers using fuel-pump and standalone EFTPOS terminals.

Why it works

Skimming overlays are nearly invisible to the casual user.
Cards are cloned and used overseas before the victim notices.

Common variations

Different shapes of the same scam — recognise the pattern.

1Card-slot overlay + pinhole camera above the keypad.
2Fake keypad layer recording your PIN.
3Compromised EFTPOS terminal at a small retailer.

If you've already been scammed

1Freeze the card in-app or via your bank immediately.
2Dispute fraudulent transactions — banks usually refund skimming losses.
3Report to police and your bank's fraud team.

Frequently asked

Are tap-to-pay cards safer?▾

Yes — contactless doesn't expose your PIN, but limits still apply.

Can I spot a skimmer?▾

Tug the card slot and keypad — overlays often shift or fall off.

What about mobile wallets?▾

Apple Pay and Google Pay use one-time tokens — much safer than physical cards.

Questions people ask about this scam

How does the atm & card skimming work?: Criminals attach a thin overlay to the card slot and a pinhole camera or fake PIN pad above the keypad. Your card data and PIN are captured, then cloned onto blank cards used overseas — or used for contactless 'tap' transactions until you notice. Petrol stations, tourist-area ATMs and standalone (non-bank-branch) ATMs are highest risk.
What are the warning signs of a atm & card skimming?: Watch for: Card slot feels loose, sticks out, or has a different colour plastic; Keypad feels spongy, sits high, or has a second layer; Tiny pinhole above the screen or on a brochure holder beside it; Stranger 'helping' you at the ATM or standing too close.
How can I tell if this is a scam?: Stop and verify independently. Contact the organisation using details you look up yourself, never the ones in the message, and don't act on urgency. You can also paste the message into the ScamShield AI scam checker for a risk assessment — it gives guidance, not a guarantee.
What should I do if I clicked the link or replied?: Stop all contact, change the password on any account you logged into and turn on two-factor authentication, and watch your accounts for changes you didn't make. Tug the card slot before inserting — overlays usually come off. Cover the keypad with your other hand when entering PIN. Prefer ATMs inside bank branches; avoid standalone tourist ATMs.
What should I do if I already sent money?: Contact your bank immediately and ask about stopping or recalling the payment, keep all evidence, then report the scam. Be wary of anyone who later offers to recover your money for a fee.
Where should Australians report this scam?: Report scams to Scamwatch (National Anti-Scam Centre), report cybercrime to ReportCyber, forward scam texts to 7726, and contact IDCARE if identity details were exposed. Contact your bank first if money is involved.

General scam awareness information. ScamShield AI cannot guarantee that every scam will be detected or that a message is legitimate.

Check a message like this Report & next steps