Experience finding gas pump card skimmer?
Experience finding gas pump card skimmer?
I have never been a "victim", but I read a lot about use of card skimmers at gasoline pumps. A local station (but not one I use) has recently been identified as being hit.
Any knowledge or experience in finding one on gas pumps?
Any knowledge or experience in finding one on gas pumps?
Re: Experience finding gas pump card skimmer?
Skimmers are so sophisticated that it's getting very hard even for savvy users to spot them. Many are getting installed deep inside the card readers so there's little to no external sign--without disassembling the machine, you can't tell they're there. Needless to say, merchants won't appreciate consumers trying to disassemble their gas pumps, ATMs, and credit terminals...
Older-style skimmers can be spotted by inconsistencies in the housings of the credit card slot, by a tiny hole facing a keypad (used by a camera to steal PINs at ATMs), or by keypads, bevels, or housings that aren't molded directly into the machine. Tugging on the housing, keypad, etc, can sometimes reveal if it's a skimmer attachment; it may give (or come off!) whereas a non-skimmer should be completely solid.
For a whole lot of information about skimmers, including pictures that show just how good they've gotten, see the Krebs on Security article series on skimmers.
Older-style skimmers can be spotted by inconsistencies in the housings of the credit card slot, by a tiny hole facing a keypad (used by a camera to steal PINs at ATMs), or by keypads, bevels, or housings that aren't molded directly into the machine. Tugging on the housing, keypad, etc, can sometimes reveal if it's a skimmer attachment; it may give (or come off!) whereas a non-skimmer should be completely solid.
For a whole lot of information about skimmers, including pictures that show just how good they've gotten, see the Krebs on Security article series on skimmers.
Re: Experience finding gas pump card skimmer?
0
another thing with "zero" - credit card fraud liability. Leaves me with much better things to worry about.
I would not use a debit/ATM card, only use a CC that gives you 3%+ cashback on gas, and never think twice of the issue.
another thing with "zero" - credit card fraud liability. Leaves me with much better things to worry about.
I would not use a debit/ATM card, only use a CC that gives you 3%+ cashback on gas, and never think twice of the issue.
-
- Posts: 684
- Joined: Tue Feb 07, 2017 2:23 pm
Re: Experience finding gas pump card skimmer?
I got a call from a detective at my hometown police department one day saying my card may have been compromised at a local gas station. He told me there were skimmers installed inside the machine and were in no way visible from the exterior.
Bottom line: Stick to credit cards. They cover the liability. Never use debit cards.
Bottom line: Stick to credit cards. They cover the liability. Never use debit cards.
- flamesabers
- Posts: 1848
- Joined: Fri Mar 03, 2017 11:05 am
- Location: Rochester, MN
Re: Experience finding gas pump card skimmer?
If you want to avoid the issue entirely, just pay inside instead of at the pump. I do this not because I'm worried about card skimmers, but because I have gas coupons to use.
-
- Posts: 8620
- Joined: Wed Apr 08, 2015 11:31 am
- Location: West coast of Florida, near Champa Bay !
Re: Experience finding gas pump card skimmer?
If the skimming devices are installed "deep inside" that seems to me to indicate an inside job, thru the pump provider or the card reader provider.
Who/how/when could an activity take place?
Granted, some gas stations aren't open 24X7, but the last problem with skimming I'm aware of was at a station that is open 24X7.
Wife's card was hit, immediately used for shopping trips at two Publix stores. At least they appreciated Publix's quality!
Broken Man 1999
Who/how/when could an activity take place?
Granted, some gas stations aren't open 24X7, but the last problem with skimming I'm aware of was at a station that is open 24X7.
Wife's card was hit, immediately used for shopping trips at two Publix stores. At least they appreciated Publix's quality!
Broken Man 1999
“If I cannot drink Bourbon and smoke cigars in Heaven then I shall not go." - Mark Twain
Re: Experience finding gas pump card skimmer?
A few months ago, I noticed the convenience store chain where I buy my gasoline installed tamper-proof seals on their pumps...the type that break if the pump is opened up. I knew right away it was to prevent skimmers from being installed inside the pumps. The location I usually deal with is not open 24 hours, but I think this chain has some locations that are.Broken Man 1999 wrote: ↑Wed Aug 23, 2017 1:46 pm If the skimming devices are installed "deep inside" that seems to me to indicate an inside job, thru the pump provider or the card reader provider.
Who/how/when could an activity take place?
Granted, some gas stations aren't open 24X7, but the last problem with skimming I'm aware of was at a station that is open 24X7.
Broken Man 1999
Re: Experience finding gas pump card skimmer?
Some skimmers can be inserted into the inner workings of the card reader from the outside, but I think it's more common for scammers to pose as (or bribe/hire) maintenance workers who are supposed to be opening up the card readers anyway.Broken Man 1999 wrote: ↑Wed Aug 23, 2017 1:46 pm If the skimming devices are installed "deep inside" that seems to me to indicate an inside job, thru the pump provider or the card reader provider.
Who/how/when could an activity take place?
Some merchant point of sale terminals were compromised before being shipped to merchants, or the entire units were replaced by fraudulent ones.
Re: Experience finding gas pump card skimmer?
Cash registers and manned credit card terminals have been similarly compromised and anyone who handles your credit card could steal the information and misuse it.flamesabers wrote: ↑Wed Aug 23, 2017 1:42 pm If you want to avoid the issue entirely, just pay inside instead of at the pump.
Re: Experience finding gas pump card skimmer?
I just had this discussion a few days ago with a friend. He said that skimmers were rampant in our town according to his police detective brother-in-law.
One thing he suggested was to use the Exxon SpeedPass app. You download it, add your credit card and then scan a QR code when you buy gas at Exxon. (There's an Exxon at the end of our neighborhood that I frequently use.)
I'm going to try that.
One thing he suggested was to use the Exxon SpeedPass app. You download it, add your credit card and then scan a QR code when you buy gas at Exxon. (There's an Exxon at the end of our neighborhood that I frequently use.)
I'm going to try that.
-
- Posts: 674
- Joined: Tue Oct 19, 2010 7:27 am
Re: Experience finding gas pump card skimmer?
FYI, I was told that the COSTCO gas attendant checks each pump once an hour. I was curious & asked my local COSTCO.
"Borrow money from pessimists -- they don't expect it back"
- flamesabers
- Posts: 1848
- Joined: Fri Mar 03, 2017 11:05 am
- Location: Rochester, MN
Re: Experience finding gas pump card skimmer?
I meant the issue of card skimmers, not card fraud entirely. Gas pumps and ATMs are far more practical targets for thieves to install card skimmers on then terminals that are only available during business hours. Another consideration is not everyone uses a card to pay for stuff at a cash register, but everyone who utilizes ATMs and pays at the pump will be using a card.Pajamas wrote: ↑Wed Aug 23, 2017 2:04 pmCash registers and manned credit card terminals have been similarly compromised and anyone who handles your credit card could steal the information and misuse it.flamesabers wrote: ↑Wed Aug 23, 2017 1:42 pm If you want to avoid the issue entirely, just pay inside instead of at the pump.
Re: Experience finding gas pump card skimmer?
Manned registers may not be as likely to have skimmers but they can still have them. The first one linked to below would be less likely to be undetected than an overlay as shown in the second link, so in some ways the risk is higher.
https://krebsonsecurity.com/2013/10/nor ... -skimmers/
https://krebsonsecurity.com/2016/02/saf ... -close-up/
https://krebsonsecurity.com/2013/10/nor ... -skimmers/
https://krebsonsecurity.com/2016/02/saf ... -close-up/
Re: Experience finding gas pump card skimmer?
Some gas station is now accept contactless payment such as Apple Pay or android pay. This may also be a solution if you use a gas station like that...
-
- Posts: 5978
- Joined: Mon Aug 22, 2016 3:22 pm
Re: Experience finding gas pump card skimmer?
I would worry more about your credit card disappearing at a restaurant for 5+ minutes than a skimmer at a gas station.
Skimmers are reason number 583 to never used a debit card!
Skimmers are reason number 583 to never used a debit card!
Re: Experience finding gas pump card skimmer?
I only use credit cards, so i couldn't careless about skimmers in gas and grocery store terminals. Only place i use my atm is the bank atm.
Re: Experience finding gas pump card skimmer?
Other than gas pumps I think it has been around six months since I made a credit card purchase that was not using the chip.
I have never seen a gas pump uses the credit card chip. I wonder why they are so far behind on that.
I have never seen a gas pump uses the credit card chip. I wonder why they are so far behind on that.
-
- Posts: 5978
- Joined: Mon Aug 22, 2016 3:22 pm
Re: Experience finding gas pump card skimmer?
The requirement that pushes liability to the merchant on fuel pumps and ATM's does not kick in until October 2020. In other words, you won't see it until shortly before that time.
http://www.denverpost.com/2016/12/01/ga ... ards-2020/
Re: Experience finding gas pump card skimmer?
I hope their checking is better than them helping to direct traffic to the pumps. Our Costco is quite busy and some people don't pull forward to the first pump when it is empty. Instead they sit and wait for the person at the back pump to finish and then they pull up. I never see the attendants do anything about it. Meanwhile the lines are long waiting for a pump.orlandoman wrote: ↑Wed Aug 23, 2017 2:09 pm FYI, I was told that the COSTCO gas attendant checks each pump once an hour. I was curious & asked my local COSTCO.
Also, many responses seem to indicate that you can't tell from the outside that the pump has a skimmer. How is the attendant going to be able tell?
Re: Experience finding gas pump card skimmer?
For reason(s) I do not understand fully, gas station pay at the pump was exempted until later with the requirement os using the chip on debit and credit cards.
-
- Posts: 928
- Joined: Fri Jul 10, 2015 1:28 am
Re: Experience finding gas pump card skimmer?
Tug on the card reader
Never use debit
Set up instant text or email alerts for purchases made with your credit & debit cards
Never use debit
Set up instant text or email alerts for purchases made with your credit & debit cards
-
- Posts: 5978
- Joined: Mon Aug 22, 2016 3:22 pm
Re: Experience finding gas pump card skimmer?
There are tons of gas stations that will need to replace their entire set of pumps, from what I have read. No retrofit is available.
-
- Posts: 362
- Joined: Sun Feb 12, 2017 5:50 pm
debit
Don't understand the "do not use debit card" recommendation.
I never have more than $200 USD in my checking account.
I never have more than $200 USD in my checking account.
Re: Experience finding gas pump card skimmer?
I second the recommendation to read Brian Krebs: And not only about gas pump skimmers but also about other types of fraud. Brian has some fantastic pictures of ATM machine fraud which can be more damaging than a stolen credit card.mnaspbh wrote: ↑Wed Aug 23, 2017 1:25 pm Skimmers are so sophisticated that it's getting very hard even for savvy users to spot them. Many are getting installed deep inside the card readers so there's little to no external sign--without disassembling the machine, you can't tell they're there. Needless to say, merchants won't appreciate consumers trying to disassemble their gas pumps, ATMs, and credit terminals...
Older-style skimmers can be spotted by inconsistencies in the housings of the credit card slot, by a tiny hole facing a keypad (used by a camera to steal PINs at ATMs), or by keypads, bevels, or housings that aren't molded directly into the machine. Tugging on the housing, keypad, etc, can sometimes reveal if it's a skimmer attachment; it may give (or come off!) whereas a non-skimmer should be completely solid.
For a whole lot of information about skimmers, including pictures that show just how good they've gotten, see the Krebs on Security article series on skimmers.
Victoria
Inventor of the Bogleheads Secret Handshake |
Winner of the 2015 Boglehead Contest. |
Every joke has a bit of a joke. ... The rest is the truth. (Marat F)
-
- Posts: 5978
- Joined: Mon Aug 22, 2016 3:22 pm
Re: debit
For the other 90% who keep a little buffer instead of micro-managing the account, using a debit card and having it fall victim to a skimmer or likewise will drain the account and cause overdraft fees, etc.FraggleRock wrote: ↑Wed Aug 23, 2017 7:44 pm Don't understand the "do not use debit card" recommendation.
I never have more than $200 USD in my checking account.
-
- Posts: 1142
- Joined: Sun Mar 11, 2007 6:11 pm
Re: Experience finding gas pump card skimmer?
My local gas station has similar tamper evident tape covering the door seals that open the inner workings on the credit card terminals. I noticed that the tape had been cut, so that it was no longer protecting the door from opening up the innards of the machine. When I called it to the attention of the attendant he claimed it had been like that for over a week and I was the only person who complained. Then he tried to tell me it was okay to use the machine anyway because new tamper evident tape was on backorder and would be installed soon.A few months ago, I noticed the convenience store chain where I buy my gasoline installed tamper-proof seals on their pumps...the type that break if the pump is opened up.
Re: Experience finding gas pump card skimmer?
How did the detective get your phone number?investor997 wrote: ↑Wed Aug 23, 2017 1:37 pm I got a call from a detective at my hometown police department one day saying my card may have been compromised at a local gas station. He told me there were skimmers installed inside the machine and were in no way visible from the exterior.
I'm just curious about the path of communications. I would have thought you'd get a call from the credit card company.
Re: Experience finding gas pump card skimmer?
I use this frequently with Apple Pay off the app. I find it faster than using a card and the traditional way of pay at the pump. Literally less than 10 seconds in most cases to pump gas and the receipt is emailed to you as well. I wish more stations had this type of system...renue74 wrote: ↑Wed Aug 23, 2017 2:06 pm I just had this discussion a few days ago with a friend. He said that skimmers were rampant in our town according to his police detective brother-in-law.
One thing he suggested was to use the Exxon SpeedPass app. You download it, add your credit card and then scan a QR code when you buy gas at Exxon. (There's an Exxon at the end of our neighborhood that I frequently use.)
I'm going to try that.
Re: Experience finding gas pump card skimmer?
Another recommendation for Exxon's Speedpass app.
Re: Experience finding gas pump card skimmer?
azurekep wrote: ↑Wed Aug 23, 2017 8:26 pmHow did the detective get your phone number?investor997 wrote: ↑Wed Aug 23, 2017 1:37 pm I got a call from a detective at my hometown police department one day saying my card may have been compromised at a local gas station. He told me there were skimmers installed inside the machine and were in no way visible from the exterior.
I'm just curious about the path of communications. I would have thought you'd get a call from the credit card company.
Good catch. The "detective" could be a social engineer.
Victoria
Inventor of the Bogleheads Secret Handshake |
Winner of the 2015 Boglehead Contest. |
Every joke has a bit of a joke. ... The rest is the truth. (Marat F)
-
- Posts: 684
- Joined: Tue Feb 07, 2017 2:23 pm
Re: Experience finding gas pump card skimmer?
Not sure to be honest. Not a stretch to imagine police can coordinate with credit card company fraud departments. It wasn't social engineering. The detective left me a voicemail, and his callback # was legitimately with the local police department.azurekep wrote: ↑Wed Aug 23, 2017 8:26 pmHow did the detective get your phone number?investor997 wrote: ↑Wed Aug 23, 2017 1:37 pm I got a call from a detective at my hometown police department one day saying my card may have been compromised at a local gas station. He told me there were skimmers installed inside the machine and were in no way visible from the exterior.
I'm just curious about the path of communications. I would have thought you'd get a call from the credit card company.
- flamesabers
- Posts: 1848
- Joined: Fri Mar 03, 2017 11:05 am
- Location: Rochester, MN
Re: debit
Do you use your debit card to pay your bills and other routine expenses? If so, you must be transferring money fairly frequently to your checking account to pay for everything.FraggleRock wrote: ↑Wed Aug 23, 2017 7:44 pm Don't understand the "do not use debit card" recommendation.
I never have more than $200 USD in my checking account.
Re: debit
Same here. Also my credit union explicitly states they will immediately refund all fraudulent withdraws. Though I can't recall ever using a debit card at a gas station. Usually buy at Costco with the Costco credit card.FraggleRock wrote: ↑Wed Aug 23, 2017 7:44 pm Don't understand the "do not use debit card" recommendation.
I never have more than $200 USD in my checking account.
Re: Experience finding gas pump card skimmer?
Yes, once. I use a PenFed 5% cash back gas card but only at gas stations so the pattern algorithm kicked it right out.
- lthenderson
- Posts: 8499
- Joined: Tue Feb 21, 2012 11:43 am
- Location: Iowa
Re: Experience finding gas pump card skimmer?
I found a skimmer a couple months ago while traveling. I tugged on the credit card plastic slot and off popped the skimmer. It had some sort of adhesive holding it over the regular plastic molded piece. I gave it to the attendant inside who called the cops but I doubt anything would ever come from it unless there is security footage. Out where I live in rural America, I don't worry about it so much though I still tug on the credit card plastic piece out of habit.
-
- Posts: 1479
- Joined: Wed Mar 23, 2016 9:28 am
- Location: SE Michigan
Re: Experience finding gas pump card skimmer?
Skimmers are so common in my area, and they are getting so much harder to detect, this is one reason I started using Android Pay where offered. No security solution can be viewed in a vacuum, but I find this much safer here and now. Particularly with minimally-attended card machines (like gas stations). Plus, my experience with Android Pay so far has been quicker and more convenient than using cards anyway. The only downside is the adoption rate by merchants, but it's improving.
Re: Experience finding gas pump card skimmer?
Got hit with several thousand dollars worth of gas charges on my American Express card a couple of years ago. The only hint I got that it was happening was when I got declined for a legitimate purchase and called to find out why. So we had to to go through about a hundred transactions at gas stations in the area that were just under $100 - by pennies. How that didn't trigger a fraud alert sooner than it did is beyond me but the only loss for me was my time on the phone straightening it all out.
-
- Posts: 362
- Joined: Sun Feb 12, 2017 5:50 pm
Re: debit
I visit my credit union website almost every day.flamesabers wrote: ↑Thu Aug 24, 2017 9:32 amfrequently to your checking account to pay for everything.
I sit in front of my iMac for 5+ hours per day.
So, no extra effort.
-
- Posts: 5978
- Joined: Mon Aug 22, 2016 3:22 pm
Re: debit
Sounds like a waste of time to me, but personal finance is just that - do what works for you.FraggleRock wrote: ↑Thu Aug 24, 2017 6:45 pmI visit my credit union website almost every day.flamesabers wrote: ↑Thu Aug 24, 2017 9:32 amfrequently to your checking account to pay for everything.
I sit in front of my iMac for 5+ hours per day.
So, no extra effort.
-
- Posts: 928
- Joined: Fri Jul 10, 2015 1:28 am
Re: Experience finding gas pump card skimmer?
Capital One lets you lock/unlock your debit card via website or app. Hopefully this becomes an option at all banks.
Re: Experience finding gas pump card skimmer?
Owner of a convenience store with gas here.....
You can not see the skimmer, it is inside the pumps. In many cases, the keys to access the pumps are the same for every station with identical equipment.
I check pumps at my station frequently, and have found a skimmer.
Best practices to avoid being skimmed....
Look for security tags
Dont use the pumps on either end of the gasoline island. ( these are typically less visable to store staff )
Get gas at clean well maintained stations, they are more likely to be on top of preventing fraud via skimmers.
I second the no debit card. I do not have a debit or ATM card & there is not one associated with my checking account. ( no paper checks either)
You can not see the skimmer, it is inside the pumps. In many cases, the keys to access the pumps are the same for every station with identical equipment.
I check pumps at my station frequently, and have found a skimmer.
Best practices to avoid being skimmed....
Look for security tags
Dont use the pumps on either end of the gasoline island. ( these are typically less visable to store staff )
Get gas at clean well maintained stations, they are more likely to be on top of preventing fraud via skimmers.
I second the no debit card. I do not have a debit or ATM card & there is not one associated with my checking account. ( no paper checks either)
Fools think their own way is right, but the wise listen to others.
- flamesabers
- Posts: 1848
- Joined: Fri Mar 03, 2017 11:05 am
- Location: Rochester, MN
Re: Experience finding gas pump card skimmer?
USAA offers this option as well.boglerdude wrote: ↑Thu Aug 24, 2017 8:01 pm Capital One lets you lock/unlock your debit card via website or app. Hopefully this becomes an option at all banks.
- SmileyFace
- Posts: 9080
- Joined: Wed Feb 19, 2014 9:11 am
Re: debit
So do you folks use a separate checking account for your bills versus the one for your debit? With thousands in-and-out in a month - I can't imagine trying to keep this low of a balance. (Thus I never use debit - always a credit-card).sreynard wrote: ↑Thu Aug 24, 2017 9:38 amSame here. Also my credit union explicitly states they will immediately refund all fraudulent withdraws. Though I can't recall ever using a debit card at a gas station. Usually buy at Costco with the Costco credit card.FraggleRock wrote: ↑Wed Aug 23, 2017 7:44 pm Don't understand the "do not use debit card" recommendation.
I never have more than $200 USD in my checking account.
-
- Posts: 1405
- Joined: Tue Feb 14, 2012 11:31 am
Re: Experience finding gas pump card skimmer?
I look and shake the card reader but not saw anything out of norm. My cards have not been skimmed yet either.
Re: Experience finding gas pump card skimmer?
Gas pumps do not use chip function of CCs yet, at least in my area. Most of the stores now do.
I think if chip transaction is used, skimmer would be useless since you need chip to be present to run the card. Not 100% sure though, perhaps one can get enough info to make the card usable at non-chip locations.
I think if chip transaction is used, skimmer would be useless since you need chip to be present to run the card. Not 100% sure though, perhaps one can get enough info to make the card usable at non-chip locations.
-
- Posts: 382
- Joined: Thu Jul 16, 2015 9:36 am
Re: Experience finding gas pump card skimmer?
If your debit card number is skimmed and you report fraudulent activity within two months of receiving your statement, you have $0 liability.
-
- Posts: 3909
- Joined: Sun Apr 03, 2016 5:41 pm
Re: Experience finding gas pump card skimmer?
But the bank doesn't have to return the money right away. And it's 60 days from statement being sent, not from when you receive it (small detail).