Are gas station card readers safe?

Gas pumps are outdoors, unattended for most of the day, and — on many older models — share a single, widely-copied cabinet key. A thief can pop the panel, clip a skimmer onto the card reader's internal wiring in under a minute, and walk away. The device then quietly copies every card inserted and, in most modern cases, broadcasts the stolen data over Bluetooth so the criminal can collect it from the parking lot without ever touching the pump again.

That Bluetooth broadcast is exactly what SkimGuard listens for — but the physical basics come first.

The 5-second pump check

1. Wiggle the reader. Grab the card slot and give it a firm tug and shake. A real reader is bolted solid; an overlay skimmer clips on top and often feels loose, bulky, or rattly.
2. Look for a broken security seal. Most stations put a tamper-evident sticker across the pump panel seam. If it reads VOID, is torn, or is missing, don't use that pump — tell the attendant and pay inside.
3. Check the bezel and slot. A card slot or surrounding bezel that looks oversized, a slightly different color, or newer than the rest of the pump is a red flag.
4. Cover the PIN pad. Skimmers are often paired with a pinhole camera. Cover your hand as you type, and prefer a pump you can see from the store window.
5. Scan it with SkimGuard. Open the app before you insert your card. It checks the pump's Bluetooth for a transmitting skimmer and returns Good, Warning, or Alert.

SkimGuard turns your phone into a skimmer detector. When you open it at a pump, it listens to nearby Bluetooth Low Energy (BLE) and Bluetooth Classic (BR/EDR) advertisements and classifies them against known skimmer-hardware signatures — with more wireless detection technologies added over time as skimmer hardware evolves. In a few seconds you get one clear verdict for the location:

• 🟢 Good — scanned, nothing suspicious found. A good sign, not a guarantee.
• 🟡 Warning — something worth a closer look before you pay.
• 🔴 Alert — a likely skimmer signature nearby. Use a different pump and pay inside.

Every scan (with your home excluded and kept private) contributes an anonymized result to the public SkimGuard community safety map, so the next driver benefits from yours. On Android the app also scans Bluetooth Classic devices; iPhone is limited to BLE because Apple's CoreBluetooth doesn't expose Classic, so Android has broader coverage of older skimmer modules.