Home / Payment security

Payment security, both sides of the counter.

Card skimmers hit shoppers and merchants alike. This is the practical guide to protecting yourself with the free app — and protecting your business with always-on monitoring built on hardware you may already own.

Read this first

SkimGuard detects skimmers that transmit a Bluetooth signal. A clear result is not a guarantee that a terminal is safe — it cannot detect a purely mechanical or non-transmitting skimmer. Always check the card reader physically as well.

The problem

What a card skimmer actually does.

A skimmer is a device a thief attaches to a payment terminal — a gas pump, an ATM, a checkout reader — to copy your card's magnetic stripe, usually alongside a pinhole camera or overlay keypad that grabs your PIN. Most modern skimmers broadcast the stolen data over Bluetooth so the criminal can harvest it from nearby without returning to the machine. Your card keeps working, so the theft is invisible until the fraudulent charges land. That Bluetooth signal is the thread SkimGuard pulls on — for shoppers and for the businesses that run the terminals.

For consumers

A skimmer detector in your pocket.

The free SkimGuard app scans nearby Bluetooth Low Energy and Bluetooth Classic advertisements for known skimmer-hardware signatures and gives you one clear verdict — Good, Warning, or Alert — for wherever you're about to pay, with new wireless detection technologies added over time as the threat environment evolves. Anonymized results build a public community safety map, while your home scans stay private and are never published.

  • Completely free — no subscription, no ads, sign-in optional.
  • iPhone and Android, plus Apple CarPlay and Android Auto.
  • Android also scans Bluetooth Classic; iPhone is BLE-only (Apple's CoreBluetooth doesn't expose Classic).
  • Best used alongside the basics: wiggle the reader, tap or chip over swipe, credit not debit, cover the keypad.

See the dedicated guides for gas station pumps, ATMs, and road trips.

For business

Protect your terminals — and your customers' trust.

A skimmer on your reader is a liability and a reputation problem. SkimGuard for business comes in two service tiers, priced per location, so you can match coverage to your risk. A license is locked to one tier.

Handheld

Staff scan payment terminals with the SkimGuard app on a point-in-time basis — a fast, human-initiated check as part of opening or closing routines. Ideal for smaller footprints and periodic verification.

Automated

Always-on monitoring that watches continuously instead of at intervals — via desktop agents running on lane computers and/or the Wi-Fi access points you already own passively scanning for skimmer signatures around the clock. The handheld app is included free. Everything rolls up into one dashboard, and a public “scanned recently” badge lets customers see the location is monitored.

Use the network you already have

The Automated tier integrates with Cisco Meraki, Juniper Mist, HPE Aruba, Ruckus, and Cisco Catalyst (via Cisco Spaces) — turning existing access points into skimmer sensors with no new hardware to install. See network skimmer detection and integrations.

Document PCI DSS 9.5 & 10

Both tiers include a payment-terminal inspection logbook that helps you document and meet PCI DSS v4.0 Requirement 9.5 (POI-device inventory, tamper inspections, risk-based frequency and staff training) and keeps an immutable audit trail of those actions of the kind Requirements 10.2 and 10.3 expect — one-tap CSV/PDF export for your assessor. It helps you document and meet these controls; it is not itself a certification of PCI compliance.

Pick your side of the counter

Free for shoppers. Serious for merchants.

Consumers get the app free forever. Businesses get point-in-time or always-on coverage across every location.