Home / For Business / Juniper Mist skimmer detection
The Juniper Mist access points already deployed across your sites can passively watch your payment terminals for card skimmers around the clock — with no new hardware to install.
SkimGuard detects skimmers that transmit a wireless signal. A clear result is not a guarantee that a terminal is safe — always check the card reader physically as well.
Mist + SkimGuard Automated
Yes — Juniper Mist can help detect card skimmers. Mist access points already observe the Bluetooth devices around them, and SkimGuard's Automated tier turns that telemetry into always-on skimmer monitoring for your payment terminals.
Handheld scanning is a snapshot: a skimmer installed an hour after the morning check goes unseen until the next one. The Mist path closes that gap. Because Mist is cloud- and AI-driven (Mist AI) and built for multi-site fleets, the integration is API-based and scales cleanly from one store to a national footprint.
This is SkimGuard's Automated tier. A license is locked to one tier — Automated (always-on monitoring via network or desktop agent) or Handheld (staff scan with the app). SkimGuard scans Bluetooth today and adds new wireless detection technologies over time as the threat environment evolves.
What sets Mist apart is that its access points carry a dedicated BLE radio — Mist's virtual BLE (vBLE) — alongside the Wi-Fi radios. That vBLE array is already the engine behind Mist's location services: wayfinding, asset tracking, and proximity messaging. SkimGuard rides the very same Bluetooth stream. The radios that guide a shopper to an aisle now also watch the payment terminals near them for skimmer signatures, so you get always-on coverage from hardware whose entire job is already to listen for Bluetooth.
Mist is cloud-managed through the Mist portal, with Mist AI (Marvis) handling operations. The SkimGuard integration is API-driven: you generate an API token in the Mist portal, scoped to your organization and sites, and SkimGuard uses it to consume the vBLE telemetry your APs are already producing. Because it's an authorized token rather than a box on the wall, authorization can be issued — and revoked — centrally at any time, and there is nothing to install at the counter.
Mist organizes coverage as an organization → site → AP hierarchy, and the token is scoped to match. That structure is why the integration scales cleanly from a single store to a national footprint without re-plumbing anything.
Mist is common in larger retail and multi-site enterprise networks, where a lot of locations are run centrally and consistency matters. Because SkimGuard's connection is per-org and per-site over the API, every Mist site you monitor reports into a single SkimGuard dashboard — a chain or campus sees all of its locations in one place, and adding a new site is a matter of extending the token's scope, not shipping hardware.
FAQ
Yes — paired with SkimGuard's Automated tier, Juniper Mist access points act as card-skimmer sensors. Mist APs observe nearby Bluetooth devices, and the Mist cloud forwards that BLE telemetry to SkimGuard, which classifies each device against known skimmer-hardware signatures so your existing Mist network watches your payment terminals around the clock.
Yes. Mist access points include a dedicated BLE radio — Mist's virtual BLE (vBLE) — already used for location services like wayfinding and asset tracking. SkimGuard consumes that same vBLE Bluetooth stream, so the radios already listening for Bluetooth now also watch payment terminals for skimmer signatures, with no extra sensing hardware.
The integration is API-driven. You generate an API token in the Mist portal, scoped to your organization and sites, and SkimGuard uses it to receive your APs' Bluetooth telemetry. Because it's an authorized token rather than an appliance, access can be issued and revoked centrally at any time, and nothing is installed at the counter.
The Mist cloud sends per-site, per-AP Bluetooth Low Energy observations to SkimGuard through Mist's API. SkimGuard runs the same detection engine used across the platform to flag advertisements that match skimmer hardware. Because Mist is API-driven and multi-site, detections from every Mist site roll up into one SkimGuard dashboard with a public “scanned recently” badge.
Yes. Mist is designed for multi-site deployments, and the SkimGuard integration is API-driven per site and per AP. Every Mist site you monitor reports into a single SkimGuard dashboard, so a chain or campus sees all of its locations in one place.
No. The Mist integration reuses the Juniper Mist access points you already have. Once the Mist cloud is configured to forward Bluetooth telemetry to SkimGuard, those APs become the sensors — nothing new is installed at the counter or on the network.
It's SkimGuard's Automated tier, priced per location at a flat rate — unlimited Mist access points with no per-AP charge — and the handheld app is included free. See the for-business page for current pricing, or start setup to get a quote for your locations.
Get started
Turn your existing Juniper Mist Wi-Fi into always-on skimmer detection. Start setup for your locations — see the for-business page for current pricing.