ATM skimming is a form of card fraud where criminals attach a hidden device to a card slot to copy your card's data, often paired with a tiny camera or a fake keypad overlay to capture your PIN. Nepal Police's Central Investigation Bureau has previously flagged organized skimming activity in the country, including foreign gangs targeting ATMs in Kathmandu, and security advisories note that card skimming and electronic bank fraud occur occasionally in Nepal's larger cities. The good news is that skimming devices are physical add-ons, and with a 30-second check before you insert your card, most of them are easy to catch.
If You Notice Any of These, Do Not Use the Machine
- The card slot feels loose, wobbles, or looks like it is a slightly different color or texture than the rest of the machine.
- There is an unexplained sticker, bracket, or extra panel anywhere near the card slot, keypad, or above the screen.
- The keypad feels raised, spongy, or sits slightly higher than you would expect when you press it.
- A small hole, dark strip, or reflective bump is visible along the top edge of the machine, angled down toward the keypad.
How ATM Skimming Actually Works
A skimming setup almost always has two parts working together, because stealing your card number alone is not enough to withdraw cash. The first part, usually fitted over or inside the card slot, copies the data stored on your card's magnetic stripe as you insert it. The second part captures your PIN, either through a pinhole camera hidden above the keypad or a thin fake keypad overlay placed directly on top of the real buttons. With both pieces of information, criminals can clone your card and withdraw cash, often at a different ATM entirely, sometimes in another country.
Step-by-Step: Checking an ATM Before You Use It
1. Look at the card slot closely
Genuine card readers are usually flush with the ATM's front panel and do not move. Gently wiggle the edges of the slot with your fingers. A skimmer is an add-on device, so it often feels slightly loose, sits a little proud of the surface, or has a seam or color mismatch you would not expect on factory equipment.
2. Check the keypad before you type your PIN
Press lightly on a few number keys before entering your PIN. A fake keypad overlay sits on top of the real one and can feel spongy, slightly thicker, or not quite aligned with the machine's printed key labels underneath.
3. Scan the area above the screen and around the card slot for hidden cameras
Pinhole cameras are often disguised inside a false panel, a brochure holder, or a strip just above the keypad, angled to capture your fingers as you type. Look for anything that seems newly added, oddly placed, or slightly misaligned compared to the rest of the ATM's design.
4. Cover the keypad with your other hand while you type
This single habit defeats most PIN-capturing cameras even if one is present and you did not spot it. Use your free hand or wallet to shield the keypad completely while entering your PIN, every time, everywhere, not just at ATMs that look suspicious.
5. Prefer ATMs inside a bank branch or a well-lit, staffed location
Standalone ATMs in isolated spots are easier for criminals to tamper with unnoticed than machines inside a bank lobby, a busy shopping area, or somewhere with security staff and CCTV nearby.
Beyond the Physical Check: Habits That Protect You
| Habit | Why it helps |
|---|---|
| Set up SMS or app alerts for every transaction | You will know within seconds if your card is used somewhere you did not authorize. |
| Check your mini statement or app history regularly | Small, unfamiliar transactions are often a skimming gang testing whether a cloned card works before a larger withdrawal. |
| Change your PIN periodically, and never use an obvious one | Reduces the value of an old, possibly compromised PIN and limits the window of risk from any past exposure. |
| Avoid ATMs with visible damage, tape, or missing panels | Tampered or poorly maintained machines are easier targets for attaching skimming hardware unnoticed. |
| Use contactless or mobile banking where possible | Fewer physical card insertions mean fewer opportunities for a skimmer to capture your card data. |
Pre-Withdrawal Safety Checklist
Run through this quick checklist before you insert your card. It works fully offline and nothing you check here is saved or sent anywhere.
Before You Insert Your Card
Tick each item as you check it. This runs entirely in your browser; nothing is recorded or transmitted.
0 of 5 checked
What to Do If You Suspect a Skimmer
Do not insert your card
If anything feels wrong, walk away and use a different ATM, ideally one inside a staffed bank branch.
Report it immediately
Tell branch staff if you are at a bank ATM, or call your bank's customer care number, so they can inspect and potentially disable the machine.
Alert others nearby
A quiet word to the next person in line, or a note to bank security, can stop someone else from becoming a victim within minutes.
If you already used the machine, act fast
Call your bank immediately to block the card, then change your PIN and review recent transactions closely over the following days.
If you already withdrew money and something felt wrong afterward
Contact your bank's 24-hour helpline right away to block your card and flag the ATM, then visit the branch to file a written complaint. You can also report the incident to Nepal Police's Central Investigation Bureau, which handles organized financial fraud cases. Acting within hours, not days, gives your bank the best chance of stopping fraudulent withdrawals.
Frequently Asked Questions
Is ATM skimming common in Nepal?
It is not as widespread as in some other countries, but it does happen, particularly in larger cities. Nepal Police has previously investigated organized skimming rings, including cases involving foreign nationals, and security advisories note that card skimming occurs occasionally at ATMs in Nepal's major urban centers.
Can a skimmer steal my money without my PIN?
Rarely on its own. Most skimming setups pair a card-data skimmer with a hidden camera or fake keypad specifically to capture your PIN as well, because both pieces of information are usually needed to withdraw cash with a cloned card.
Does covering the keypad really help if I cannot find a camera?
Yes. Covering the keypad blocks the view even from a camera you did not spot, which is exactly why banks and police consistently recommend it as a default habit rather than something you only do at suspicious-looking machines.
Are chip cards safer than magnetic stripe cards against skimming?
Chip-based cards are significantly harder to clone than magnetic stripe cards, since the chip generates a unique code for each transaction. Many Nepali banks have shifted to EMV chip cards for this reason; if your card still relies only on a magnetic stripe, ask your bank about upgrading.
What should I do if my card gets declined right after I suspect skimming?
Contact your bank immediately rather than retrying repeatedly on the same or a nearby machine. If your bank has already flagged unusual activity and blocked the card as a precaution, that is a normal protective response, and your branch can help you verify your account and issue a replacement card.
A note on this topic
This guide is written to help you protect yourself, not as a technical description of fraud methods. If you are experiencing a mental health impact from financial fraud or theft, or are dealing with a stressful financial loss, consider speaking with someone you trust or a professional in addition to reporting the incident to your bank and the police.
Related Reading
Know your limits before you approach the machine: see our guide on Nepal's 2026 ATM withdrawal limits for current daily and monthly caps, and inter-bank ATM charges in Nepal if you often use a bank other than your own. If a machine ever keeps your card during a transaction, our guide on what to do if your ATM card gets stuck in Nepal walks through the recovery steps.
Discussion