Scam type
The ATM Skimmer
The only tourist scam that needs no conversation: a compromised cash machine harvests your card data and PIN while dispensing your money normally. The defense is choosing machines the way locals do — and never letting anyone 'help' you at one.
Updated August 2026
What it is
A family of attacks on the few seconds your card and PIN spend at a cash machine. At the high-tech end: a skimmer — a false front over the card slot that reads the stripe or chip data, paired with a pinhole camera or fake keypad that captures the PIN, so the crew can clone and drain later. At the low-tech end: traps and helpers — devices that hold your card or cash inside the machine, plus a friendly stranger whose job is making you leave (or re-type your PIN while he watches). No conversation, no pickpocket skill; the machine does the stealing.
How it works
The skimmer. An overlay on the card slot reads your card as it enters; your PIN arrives via a pinhole camera on a glued strip above the keypad, or a whole counterfeit keypad laid over the real one. The machine works normally — you leave with your cash, and the cloning happens days later, often in another country. Tourist-corridor and nightlife ATMs are preferred targets: high traffic, drunk or hurried users, and no bank staff walking past.
The Lebanese loop. A thin sleeve in the slot traps your card. The machine “swallows” it; a helpful local materializes, sympathizes, and suggests re-entering your PIN — now the crew has the card and the code the moment you give up and leave.
The cash trap. A glued flap over the dispenser: the notes arrive behind it, the screen completes normally, and you walk away assuming a fault. The flap comes off, with your withdrawal, minutes later.
The shoulder surf. No hardware at all: a queue that stands close, a distraction at the exact PIN moment, and a lifted wallet twenty minutes later — the distraction team’s banking division.
How to recognize it
What it looks like
A machine standing alone in a tourist corridor; a slot or keypad that looks added rather than built; anyone — anyone — who involves themselves in your transaction, whether advising, queuing against your back, or helpfully suggesting a re-entered PIN after a swallowed card. Bank machines have phone numbers, not bystander support.
How to avoid it
Do this instead
Choose the machine, then guard the PIN: withdraw at ATMs attached to bank branches (indoors when possible), cover the keypad with your whole hand every single time — it defeats cameras, fake keypads, and shoulders at once — and decline every on-screen conversion offer while you’re there. Fewer, larger withdrawals at good machines beat daily visits to convenient ones on every axis: fees, rates, and exposure.
If you’re caught
Card retained: freeze it from your banking app while standing at the machine — the entire card-trap script depends on the minutes after you walk away. Cash not dispensed: photograph the machine and its ID plate, note the time, and dispute immediately; don’t pry at the dispenser in view of whoever glued it. Cloned card (mystery charges days later): freeze, dispute every unauthorized charge — chip-era banks expect and absorb skimming fraud, and travelers who report promptly essentially always recover the money. The lasting fix costs nothing: one habit (covered PIN) and one preference (bank-attached machines), everywhere you travel, forever.
Quick answers
How do I spot a skimmer on an ATM?
Give the machine five seconds: a card slot that protrudes oddly, wiggles, or mismatches the machine's color; a PIN pad that sits high or feels spongy; anything glued near the screen that could hide a pinhole camera. Modern skimmers can be nearly invisible, though — which is why machine choice (bank-attached, indoors, busy street) protects you more than inspection skills.
Which ATMs are safest to use abroad?
Machines physically attached to bank branches, ideally inside the lobby or vestibule — serviced daily, camera-covered, and unattractive to skimmer crews. The riskiest are freestanding convenience ATMs in tourist corridors and nightlife streets, which combine the worst fees, the pushiest conversion screens, and the easiest tampering access.
The ATM took my card — what do I do?
Don't leave, and don't accept help. Call your bank's app or hotline immediately from the machine and freeze the card while standing there — the card-trap scam depends on you walking away to 'get help' while the crew retrieves it. If a stranger appears suggesting you re-enter your PIN, that's the scam confirming itself; freeze and walk.
My cash didn't come out but my account was debited — scam or glitch?
Could be either: cash traps (a glued flap over the dispenser) exist, but so do genuine machine faults. Either way the play is identical — photograph the machine and its ID number, note the exact time, don't dig at the dispenser, and dispute with your bank immediately. Bank-attached machines resolve these fast; that's another reason to prefer them.