ATM card skimming in the UK: warning signs and safer cash withdrawals
Card skimming aims to capture card data and often the PIN. Modern fraud methods change, so the safest approach is to combine physical checks at the machine with fast account monitoring and sensible PIN protection.
If an ATM looks tampered with, has a loose card slot or unusual overlay, do not use it. Shield the keypad when entering your PIN and prefer well-lit, maintained machines. If your card is retained unexpectedly or you see an unauthorised cash withdrawal, freeze the card and contact your bank immediately through an official route.
What skimming tries to capture
Traditional skimming devices copy information from a card’s magnetic stripe while a hidden camera or false keypad records the PIN. Fraud technology continues to evolve, and not every compromised machine will have an obvious bulky attachment. The goal is usually to obtain enough card data and authentication information to make unauthorised transactions.
Chip technology has reduced some older forms of counterfeit-card fraud, but criminals adapt. The practical lesson is not to become an expert in every device; it is to notice when the machine looks or behaves differently from normal and to stop before entering a PIN if something feels wrong.
Check the machine before inserting the card
Look at the card slot, keypad and surrounding fascia. A component that is loose, a colour mismatch, adhesive marks or an unexpected plastic overlay can be a warning. Compare the machine with another ATM nearby if possible. Do not pull aggressively at parts of a machine, but do not use a terminal that appears damaged or modified.
Prefer ATMs in busy, well-maintained locations and be aware of people who try to distract or 'help' you while the card is inserted. Shoulder-surfing and card-trapping can be combined with other fraud methods. If someone crowds you, cancel the transaction and move away.
Always shield the PIN
Cover the keypad with your free hand even when nobody appears to be watching. A tiny hidden camera can be positioned above or beside the keypad, and visual shielding is effective regardless of where the camera might be. Do not write the PIN on the card or keep it beside the card in a wallet.
If the machine behaves strangely after the PIN is entered, such as failing to return the card, contact the bank or ATM operator using a number you independently verify. Do not accept a stranger’s suggestion to re-enter the PIN to 'release' the card.
Monitor the account after a suspicious ATM visit
Check the account for cash withdrawals you did not make and turn on transaction alerts if the bank provides them. Fraudulent activity may happen later rather than immediately after the compromised ATM visit. If you are worried, freezing the card in the app can provide a fast temporary barrier while you speak to the bank.
Record the location and approximate time of the ATM transaction. If the machine retained the card or looked tampered with, photograph the ATM from a safe distance if practical, without interfering with it. Those details can help the bank or operator investigate.
Report unauthorised withdrawals quickly
Tell the bank immediately when you see an unauthorised cash withdrawal. Explain whether you still possess the card, where you last used it and whether anything unusual happened at the machine. The bank will assess the claim under the relevant payment rules and may replace the card or PIN.
Do not respond to a later call claiming to be the bank simply because the caller knows about the ATM incident. Fraudsters can use stolen transaction information to make a follow-up scam credible. End the call and reconnect using the bank’s known official channel.
Use cash withdrawals as a controlled routine
Decide roughly how much cash you need before approaching the machine so you spend less time distracted at the ATM. Put the cash and card away before checking a receipt or phone. Criminals do not need sophisticated electronics if they can simply observe a PIN and steal the wallet afterwards.
For travel, consider lowering cash-withdrawal limits when you do not need large amounts and keep a second card separately. A stolen wallet containing every payment method turns one incident into a complete loss of access. Account controls are most useful when they are configured before the stressful moment.
If you need to report a suspicious ATM, note the exact location, operator branding and time rather than relying on memory later. The operator can have several machines in one area, and precise details help it identify the terminal, inspect logs and decide whether other customers may also have been exposed. If the ATM is inside a branch or shop, alert staff as well so the terminal can be taken out of service quickly.
Sources and verification
Victoria Hughes — Consumer Rights Specialist
ATM security is a good example of why simple habits outperform trying to identify every new fraud gadget. I would use three habits every time: look at the machine before inserting the card, cover the PIN, and check the transaction alert afterwards. None is perfect on its own, but together they make several attack methods harder. I also prefer ATMs attached to or located inside reputable, busy premises when that is practical, especially late at night or in an unfamiliar area. If a machine keeps the card, I do not take instructions from a stranger standing nearby and I do not repeatedly enter the PIN. I freeze the card and contact the bank or ATM operator using a verified number. The same caution applies after the event: a caller who knows where you withdrew cash is not automatically genuine. Criminals often exploit the anxiety created by the first incident to run a second scam. Fast reporting plus disciplined verification is more valuable than trying to diagnose the exact skimming hardware yourself. I also separate cards while travelling. A spare card in the same wallet is not really a backup, and a lower cash limit can reduce exposure when I know I will not need a large withdrawal. Small operational habits often matter more than recognising a particular skimmer model.
MyBankAnswers uses official provider and UK regulatory sources wherever practical. Information is general and does not constitute financial advice.