Recent incidents of sophisticated financial fraud include the uptick in unauthorized capture of consumer card and PIN information through skimming and newer shimming devices, placed inside ATMs or payment terminals. Keep reading to learn how to protect your finances from these fraudulent devices and signs to look out for when using an ATM or other payment terminal.

What are Skimming and Shimming?

Skimming occurs when illegal card readers are attached to payment terminals including at the store, on gas pumps, vending machines, parking meters or on ATMs. These card readers grab data off a credit or debit card’s magnetic stripe without your knowledge. Criminals can then sell the stolen data or use it to buy items online. You can learn more about skimming devices and what to look out for by watching our YouTube video.

Shimming has evolved more recently, as card microchips (EMV chips) started being used on newer cards to curb skimming efforts. Shimmers are thin pieces of metal inserted into an ATM or a machine at a point of payment, used to capture information in the microchip. They are small and almost impossible to detect when looking at a machine from the outside. Shimming devices allow fraudsters to steal data from your EMV chip cards in the same way that skimmers capture the data from a magnetic strip.

How Does Shimming Work?

When a shimming device is installed on an ATM or point-of-sale terminal, a crook can steal the data contained on your card’s chip. They can then use the data to create a fake card and make fraudulent purchases. You most likely won’t be aware that a shimming device is inside an ATM or payment terminal. The device is typically positioned inside the machine’s card reader slot, and is designed to be undetectable. Once the device has shimmed data from unsuspecting cardholders, the crook will pull the device out of the machine to retrieve the stolen data.

Protect Yourself

There are several ways you can protect yourself from shimming, including:

• Use contactless payment methods such as Apple Pay, Google Pay and Samsung Pay, like we have available here for our First Financial members.
• Use a financial institution owned ATM. ATMs owned by a bank or credit union are more secure than one you might find at a convenience store.
• Choose a safe ATM. Skimming and shimming devices are more likely to be installed in poorly lit areas and in less public places, where even if there are cameras – they most likely won’t be able to pick anything up. Read more about ATM safety in our previous blog post.
• Always check the card slot. Be aware of how easily your card fits into a card reader slot. If it’s difficult to slide your card in, be suspicious. This might mean there’s a shimming device inside the card reader.

What Should You Do if You’re a Skimming or Shimming Fraud Victim?

• Contact your financial institution or card issuer. Once you know your card has been compromised, reach out to your card issuer to lock the card and issue you a new one right away.
• Setup account & fraud alerts and monitor your account. You can request that the credit bureaus place an alert on your credit profile, which will ask any creditors to verify your identity before issuing any new credit in your name. You’ll also want to carefully review your bank and credit card statements and online account for any unusual activity.
• File a report with the FTC. You can visit the FTC’s website to submit a report about suspected shimming.

At First Financial, your financial well-being is our top priority. Our tools and resources such as our Fraud & ID Theft Protection Guides can equip you with the knowledge necessary to protect yourself from scams. By staying informed and vigilant, you can safeguard your finances and enjoy peace of mind in an ever-evolving digital world.

For more personalized financial assistance with your First Financial accounts, call us at 732.312.1500 or visit a branch today.