blog
ATM Skimmers vs. Shimmers: What’s the Difference and How to Spot Them
Jul
ATM Skimmers vs. Shimmers: Quick Detection Guide
The difference comes down to where the device is hidden and what part of your card it attacks.
-
Skimmers are bulky plastic attachments placed on the outside of the ATM. They target your card’s magnetic stripe.
-
Shimmers are paper-thin circuit boards hidden inside the ATM slot. They target your card’s EMV chip.
1. ATM Skimmers (The External Threat)
A skimmer is a fake plastic cover that fits over the real card slot. As you slide your card in, it reads the magnetic stripe on the back.
How to Spot a Skimmer:
-
The Tug Test: Firmly grab the plastic card slot and wiggle it. Legitimate bank hardware is solidly attached. If the slot feels loose, shifts, or pops off entirely, it is a skimmer.
-
Mismatched Colors: Look for plastic that is a slightly different shade or misaligned with the rest of the machine.
-
Hidden Cameras: Look directly above the keypad. Criminals often hide a tiny pinhole camera inside a fake housing to record you typing your PIN.
-
Thick Keypad: If the PIN pad feels thick, spongy, or unusually raised, a fake overlay keypad might be sitting on top of the real one.
2. ATM Shimmers (The Internal Threat)
A shimmer is an ultra-thin piece of flexible circuit board (as thin as a piece of paper) that a criminal slides directly inside the card slot. You cannot see it from the outside. It sits between the ATM’s internal pins and your card’s gold chip to steal your account details.
How to Spot a Shimmer:
Because shimmers are invisible, you have to rely on tactile feedback (touch):
-
Card Resistance: Because the shimmer takes up tight space inside the slot, your card will feel tight. If you have to forcibly push or shove your card into the machine, stop immediately and pull it out.
-
Stuttering Mechanical Draw: If the ATM has a motorized slot that pulls your card in, watch it closely. If the card stutters, hesitates, or vibrates roughly as it goes in, a shimmer is likely blocking the track.
-
A Flash of Green or Silver: Peek inside the card slot with your phone’s flashlight. If you see a tiny sliver of a green circuit board or an exposed silver wire sticking out of the guide rails, the machine is compromised.
Quick Comparison Matrix
| Feature | ATM Skimmer | ATM Shimmer |
|---|---|---|
| Where is it? |
Outside (Overlay on the slot) |
Inside (Hidden in the chamber) |
| What does it steal? |
Magnetic stripe data |
Chip data (Account details) |
| How big is it? |
Bulky plastic shell |
Paper-thin metal sheet |
| Best way to tell? |
Wiggle it (it will feel loose) |
Feel it (card will stick/resist) |
4 Rules to Avoid Both Threats Entirely
If you want to protect your money without inspecting every machine you use, adopt these habits:
-
Tap, Don’t Insert (Use NFC): Whenever possible, use Apple Pay, Google Wallet, or tap your physical card against the contactless symbol. Contactless payments bypass the card slot completely, making both skimmers and shimmers completely useless.
-
Use Lobby ATMs: Criminals prefer outdoor, poorly lit ATMs (like those at gas stations or street corners) because they can install devices without being seen. Use ATMs located inside a secure bank lobby instead.
-
Cover Your Hand: No matter how advanced a skimmer or shimmer is, it is useless to a criminal without your PIN. Always use your off-hand or a wallet to completely shield the keypad from above when typing.
-
Turn on Push Alerts: Enable instant SMS or app notifications for all card transactions. If your card is ever copied, you will know the exact second a fraudulent charge happens so you can lock your account immediately.
Conclusion
ATM skimming and shimmering highlight the ongoing battle between financial tech developers and illicit syndicates. While traditional skimmers continue to target legacy magnetic stripes with external physical overlays, shimmers use microscopic precision to infiltrate the secure zones of EMV chip infrastructure from the inside. Staying safe against these threats requires combining physical vigilance with modern habits—such as prioritizing contactless tap-and-pay technologies and closely inspecting terminal slots for mechanical resistance. If you ever experience unusual friction when inserting a card, notice loose parts on a machine, or spot unexplained transactions on your account statement, report the incident immediately to your banking provider and local law enforcement.
Legal & Safety Disclaimer
This document is for educational and fraud-prevention purposes only to help consumers, merchants, and financial institutions recognize security vulnerabilities. Under no circumstances should this information be used to construct, source, or deploy malicious hardware. Modifying financial infrastructure or capturing unauthorized card data constitutes a severe criminal offense globally.
