County of Humboldt press release: 

The County of Humboldt’s Agricultural Commissioner’s Office/Sealer of Weights and Measures (Sealer’s Office) this week became aware of an apparent attempt to install a credit card “skimmer” in local gas pump payment card reader at two different locations. The attempt was unsuccessful, however, it is important that you are aware of the signs that a machine may have been tampered with, and the steps you can take to protect yourself.

The Sealer’s Office has contacted all local gas station owners, making them aware of the attempt and advising them to inspect their retail fuel dispensers for anything out of the ordinary, and to review surveillance footage. This is the first report that the Sealer’s Office has received a report confirming potential skimmer activities in Humboldt County. The incident has been reported to local law enforcement and appropriate federal authorities.

The Sealer’s Office performs routine and special-circumstances inspections of gas pumps throughout the county and test devices used in commercial transactions, including grocery store scales, propane dispensers, and other devices in which sales occur based on weight, measure, or count.

What are payment card “skimmers” and what do they do?

Payment card skimmers are devices that fraudulently collect payment card (e.g., credit and debit cards) information when the card is used for a purchase. This information is then saved within the skimmer to be retrieved at a later time by the perpetrator or may instantly transmit this information wirelessly to anywhere in the world. Payment card skimmers are a major form of theft and are often linked to organized crime.

Where are payment card skimmers located?

Skimmers can be installed anywhere payment cards are used, such as gas pumps, card readers at stores and restaurants, ATM’s, etc. On fuel dispensers, they may be attached externally to the legitimate card reader or they may be installed internally within the dispenser’s cabinet.

What do payment card skimmers look like?

In relation to fuel dispensers, there are predominantly two types: internally and externally mounted.

The externally mounted skimmers attach directly over top of the legitimate card reader. They appear very similar to the legitimate card reader and they may be very difficult to distinguish.

The internally mounted skimmers are installed inside of a dispenser’s cabinet among the internal components. They are not detectable from the outside of the dispenser. 

To obtain personal identification numbers (PIN), the perpetrators may use very small “pinhole” cameras to observe and record entry of a PIN; they may use a keypad overlay that captures the PINs as they are typed in; or devices installed internally that connect to the keypad itself.

In the cases of internally installed payment card skimmers and keyboard PIN-theft devices, they are invisible to the consumer.

How quickly can payment card skimmers be installed on fuel dispensers?

It has been reported that payment card skimmers can be attached to fuel dispensers in as little as 7-8 seconds.

What can consumers do?

• Be alert where they are using their payment cards.
• When using payment cards for fuel purchaes, consumers should try to select dispensers that are within sight of the cashier.
• Gently attempt to move the card reader on the fuel dispenser. Do not force it. If legitimate, it will not move nor come off.
  
• Look for broken or missing adhesive security seals on the cabinet of fuel dispensers where the card reader is located. Many businesses are attaching customized adhesive seals to these places to provide evidence that the card reader has been accessed. If a consumer observes the seal broken or missing, they should report it to the business immediately. Be mindful that not all businesses are taking this extra step of precaution.
• Be aware of where purchases are made.
• Change passwords to payment card accounts frequently. Use secure passwords.
• Treat payment cards as cash or any other valuables.
• Check payment card statements frequently, if not daily. Compare payment card receipts to the statements. Look for any suspicious purchases. Communicate with other family members to be alert to where they use their payment cards and any fraudulent charges.
• Ask the card issuing institution if they have purchase monitoring available. There may be a fee associated with this service. These services will detect and report unusual purchase patterns to the customer.
• Report suspicious payment card transactions to the card issuing institution immediately. They can “freeze” the card so no additional authorizations can be made.
• Contact the three major credit bureaus: TransUnion, Equifax, and Experian. They can also “freeze” the card to prevent additional authorizations.
• Contact law enforcement immediately. Payment card fraud is theft.
• Perpetrators may not use the payment card for 2 or more months after they have stolen the information. Then they may make a small purchase to just check if the card is active. Once they are satisfied that the card is active, then they will use it for fraudulent purchases. Consequently, consumers should not assume that their card has not been compromised.

According to the California Department of Food & Agriculture’s Division of Measurement Standards (DMS) there are about 10,000 gas stations and 200,000 fueling dispensers throughout California. In mid-December 2019, DMS reported that 286 skimmers had been discovered and confiscated during the year to that point. It’s likely that number is only a fraction of the amount that have been planted. DMS reports that many skimmer installations are done by organized crime syndicates, including ones based overseas, that send in people to plant skimmers for a few days and then move to the next town, city, or county. If you have any question or need assistance, please contact the County Sealer of Weights & Measures at 707-441-5260.