Every time you tap or swipe your card at a gas pump, you're trusting a piece of hardware you've never inspected, installed by someone you've never met. Most of the time, that trust is fine. Sometimes, it isn't — and the cost adds up faster than most people realize.
The scale of the problem
According to the FBI, card skimming costs financial institutions and consumers more than $1 billion every year. A skimmer is a small, often hidden device that captures your card's data the moment you pay — no warning, no visible sign anything happened.
These devices show up in more places than people expect. They can be fitted over a card reader, tucked behind a pump's outer panel, or wired directly into a pump's internal electronics. In one federal case out of Utah, thieves installed Bluetooth-enabled skimming hardware directly onto pump motherboards, then returned later — without ever touching the pump again — to download stolen card numbers, names, and zip codes from a safe distance.
Skimming isn't limited to remote installations, either. Devices can also be paired with hidden cameras or fake keypads placed directly over the real one, capturing your PIN at the same time your card number is stolen.
What happens to your information after it's stolen
Once a skimmer captures your data, criminals don't always use it right away. Often, the stolen numbers are tested first — small transactions, sometimes as little as a dollar, to check which cards are still active before attempting larger purchases or cash withdrawals. In some cases, stolen data is sold in bulk on criminal marketplaces rather than used directly at all.
This means a compromised card doesn't always show obvious signs right away. A small, unfamiliar charge that looks like a mistake is sometimes the first (and only) warning sign before a larger loss follows.
It's not just gas pumps
Skimmers appear at ATMs just as often, sometimes fitted over the card slot itself, sometimes hidden along exposed cables at freestanding machines in convenience stores. Fraud data tracked by FICO showed card skimming incidents nearly doubled in a recent year-over-year comparison, and federal investigators note the problem isn't confined to cities anymore — it's shown up in rural areas as well.
What's being done about it
This isn't going unanswered. The Secret Service, working alongside other federal and local agencies, ran a coordinated series of operations last year that removed hundreds of illegal skimming devices from businesses across major U.S. cities — inspecting tens of thousands of point-of-sale terminals, pump readers, and ATMs in the process, and potentially preventing hundreds of millions of dollars in losses.
Even so, enforcement can't catch every device before it's used once. That gap is exactly why personal awareness and habits still matter, regardless of how much agencies manage to shut down.
What actually helps
None of these steps make you invincible, but each one meaningfully reduces your exposure:
- Pick pumps closest to the store, in clear view of staff. Pumps in high-visibility spots are harder for anyone to tamper with unnoticed.
- Use tap-to-pay over swiping when it's available. Tap transactions are generally harder to compromise than a magnetic stripe swipe.
- Avoid debit at the pump if you can help it. Credit cards typically carry stronger fraud protections and a lag before money actually leaves your account; if you must use debit, run it as credit to avoid entering your PIN.
- Check the card reader and keypad before you pay. Wiggle the reader gently — loose or oddly-fitted components can be a sign of an external overlay. Look for inconsistent coloring or texture on the keypad, which can indicate a hidden overlay recording your PIN.
- Turn on transaction alerts and check your statement regularly. Catching an unfamiliar charge early is often the difference between a quick fix and a real financial headache.
- Report suspected skimming immediately to your bank and, if you'd like, to the FBI's Internet Crime Complaint Center at ic3.gov.
Where everyday carry fits in
None of the above requires buying anything — they're free habits anyone can start today. But for people who want one more small layer of precaution built into something they already carry daily, a wallet that keeps cards organized and includes RFID-blocking as an added feature is a reasonable, low-effort part of a broader fraud-conscious routine. It won't stop a compromised gas pump reader, and it isn't a replacement for the habits above — but it's a small, sensible addition for anyone who wants a bit of extra peace of mind without changing how they already pay.
Shop the story:
The Guardian — RFID-Blocking Leather Bifold Wallet →