Credit Card Insecurity at the Gas Pump?

Status
Not open for further replies.
Gas pump skimmers are pretty common around here, every month or so you hear about a new rash of skimmer victims. I use Speedway gas most of the time and pay at the pump with my Speedway credit card. I like Speedway because they are the only station I know of that has the tamper evident seal tape on the card readers at the pump. The Publix grocery store here runs a coupon at least once a month where you can buy a $50.00 gas card for $40.00. My wife and I always pick up a couple of Racetrac cards. We have not used our bank cards at the gas pump in a few years now. Around here the dirtbags will get your card info even if you pay inside the store, which leads me to believe the station owners and/or employees are in on the scam. Dedicated credit cards and gas gift cards are the only safe way to pay.
 
CC used in busy gas stations that are open all through the night are always always safe - offcourse they also should have cameras.
Unsafe places are Costco etc. who turn off their pumps and shut down for a few hours.

I used in a Costco gas station only once and right there there was an unauthorized payment from Germany. Never ever filled in Costo, HEB etc etc.
 
It should be noted that scammers use a software program that randomly generates credit card numbers. Then they can use that info to make online purchases. It's already happened in my area. People have had their credit card number used-on a credit card they received from the bank-and activated but never used.

The bank says it through this number generating software they get the number. Paying at the pump and having your number stolen is really not the way they prefer. There are easier ways for the thieves to get your number.

Most-if not all gas stations have security cameras-both inside and outside of the store. In order to install a reader at the pump they have to deal with the cameras. That's part of the reason it's not that big of an issue this thread is making it out to be.
 
Last edited:
I would only use a normal credit card at gas stations. I only use my debit card if the store takes chip cards. The debit card attached to my main bank account is too important to use just anywhere.

I see no or very few gas stations that take chip cards at pay-at-the-pump.

I have a Mobil credit card and Gulf and use them for gas. Also Mobil Speed Pass. I get some discounts or gift cards using the Mobil/Gulf credit cards.

Read recently that scammers built a replica CC machine from spare parts, it transmitted codes to a nearby device using BT at the same time it transmitted them to get approved.
 
Given that you have $0 liability on a CC, im not sure of why OP has a concern.

Ive had ccs shut down due to fraudulent activity before, but have not ever had any issues with reversing charges.
 
Originally Posted By: JHZR2
Given that you have $0 liability on a CC, im not sure of why OP has a concern.

Ive had ccs shut down due to fraudulent activity before, but have not ever had any issues with reversing charges.


+1

How obvious are these skimmers? I'm imagining something super obvious.
 
Originally Posted By: Leo99
I use credit card for everything I can. I don't care if it gets skimmed. The credit card company can worry about that.


The credit card company doesn't care if your information is stolen, it falls to the retailer who ultimately loses the money from the transaction.

When I was still working, we used a processing platform called rocketgate. I could enter a correct 16 digit credit card number, the wrong expiration, and no CVV code off the back, and it would be approved with warnings about the bad information. It seems the bank didn't care since the CC # was correct, it was up to the processor (rocketgate) or the retailer (us) to decide to accept or reject the authorization from the bank.
 
I don't use a debit card and haven't used cash to pay for gas in about 40 years. Never had a problem using my cc, but if I ever do will just dispute the charge.
 
I don't know how insecure it is per se. However, the one thing that bothers me about traditional magnetic strips are that they are essentially unencrypted, and a point of sale that isn't specifically monitored can be spoofed pretty easily by someone who has a credit card number and expiration date. That could basically be done with a dummy credit card (or even an old hotel card key) and a card encoder.

I don't know if I was the victim of a card skimmer, but I did find a whole bunch of gas station charges from Ohio, Pennsylvania, and West Virginia. I called up and said I never made them and I didn't have to pay for them. However, it seemed to me like someone had encoded my credit card number on card and was using that to buy gas.

Certainly using contactless or standard smart card readers (aka "chip cards") would be a good step. It would make it impossible to skim since it's token and response mechanism where it's pretty much impossible to crack the algorithm inside the card. You could broadcast your transaction to the world and it wouldn't matter since the same token will never be used again. However, as long as people still use magnetic strip systems, there's still going to be the risk of skimming and/or fraudulent encoding. I still get rebate/reimbursement debit cards that only have a magnetic strip.
 
The card associations (Visa, MasterCard, etc.) had a three-year plan to phase in EMV-compliant POS terminals -- retail in October 2015, ATMs in October 2016, and gas pumps in October 2017. The "stick" to be used was that liability for fraudulent transactions would fall upon merchants who didn't install such equipment by the deadlines, and no longer be borne by the cards.

It hasn't gone entirely smoothly, and at the end of last year, gas station owners were granted a three-year extension to fulfill the requirements, owing to the cost of the replacements above and beyond what the other two categories already suffered. And it still may not be enough time.

More than a year later, and there is still confusion among customers as to how to interact with the new machines (Do I "swipe" or "dip?"), and it hasn't been helped by the fact that the new transactions take more time to process, as software bugs have needed to be worked out.

Even worse, some stores initially opted not to activate those features, even though the hardware was in place (see same question above).

Adding to the fustercluck has been some merchants' (Walmart, Target, CVS) reluctance to fully embrace these new methods (including contactless NFC payments) as they see an opening to try to circumvent the established cards' transactions fees. Walmart led other retailers in creating a rather complicated and lame electronic payment system (which deservedly met an unceremonious death) so it wouldn't have to pay Visa/MC/AMEX any fees. Despite the failure of that consortium's effort, they still haven't given up individually on creating their own "XXX Pay" systems.

In many ways, it's SNAFU, and ironically, a U.S.-only problem. Much of the rest of the civilized world transitioned to chipped, EMV systems long ago, and the way theirs is implemented, with a PIN requirement, is more secure than the half-baked implementation here.

Me? I try to use cash, unless it's a very large amount, or an online transaction.
 
Who cares if they get your card number anyways. I've never lost a dime. Just make sure that if they send you a new card that you update your automatic bill pay if you have that. I didn't and got a note in the mail saying they were going to cancel my truck insurance in 15 days if I didn't pay. lol Took a little while to figure out what happened. oops kind of embarrassing.
 
Originally Posted By: Carmudgeon
The card associations (Visa, MasterCard, etc.) had a three-year plan to phase in EMV-compliant POS terminals -- retail in October 2015, ATMs in October 2016, and gas pumps in October 2017. The "stick" to be used was that liability for fraudulent transactions would fall upon merchants who didn't install such equipment by the deadlines, and no longer be borne by the cards.

It hasn't gone entirely smoothly, and at the end of last year, gas station owners were granted a three-year extension to fulfill the requirements, owing to the cost of the replacements above and beyond what the other two categories already suffered. And it still may not be enough time.

More than a year later, and there is still confusion among customers as to how to interact with the new machines (Do I "swipe" or "dip?"), and it hasn't been helped by the fact that the new transactions take more time to process, as software bugs have needed to be worked out.

Even worse, some stores initially opted not to activate those features, even though the hardware was in place (see same question above).

Adding to the fustercluck has been some merchants' (Walmart, Target, CVS) reluctance to fully embrace these new methods (including contactless NFC payments) as they see an opening to try to circumvent the established cards' transactions fees. Walmart led other retailers in creating a rather complicated and lame electronic payment system (which deservedly met an unceremonious death) so it wouldn't have to pay Visa/MC/AMEX any fees. Despite the failure of that consortium's effort, they still haven't given up individually on creating their own "XXX Pay" systems.

In many ways, it's SNAFU, and ironically, a U.S.-only problem. Much of the rest of the civilized world transitioned to chipped, EMV systems long ago, and the way theirs is implemented, with a PIN requirement, is more secure than the half-baked implementation here.

Me? I try to use cash, unless it's a very large amount, or an online transaction.



No cash for me. My credit cards provide substantial rebates that I use to pay for restaurants meals and many online purchases. If it's $4.00 or more....it gets charged.
 
Last edited:
I go inside, except at Costco (where they have onsite employees monitoring everything ... two at the one here).

Security is higher here ... we have Chip + PIN authorization rather than chip alone ... but with a skimmer, you are screwed either way.

I tell all the retailers I see with "stock" terminals at the counter to mark them so that scammers can't as easily do the switcheroo. I also tell them to contact the Commercial Crime Division of the RCMP rather than just take my word for it, who will offer the same advice.

All you need to do is mark it with a Sharpie, it can even be only on the area facing the clerk, but it doesn't have to be neat ... the messier the better, actually. You can do the same thing with pads at the pump, although there is more opportunity to copy with a cellphone photo and mimic it on the replacement unit.

In any case, a properly marked POS terminal will be noticed by alert staff and the authorities can be called (who I hope would be interested in setting a trap for the retrieval phase, and catch the crooks in the act).

The Point Of Sale terminals are easier to get (easy to purchase online) and easier to use for the criminals ... they just need one person to distract the clerk while the other swaps the POS terminals. They leave them there for a week or so, then go back and do it again, replacing their unit with the original store's unit. The Crook's POS terminal records the PIN and Card Stripe information to be used to defraud people.

So, you are not necessarily safe if you go inside to pay. The only way to insure safety is to pay in Cash or Cash equivalent (gift card, etc).
 
Originally Posted By: SubLGT
Are chipped credit cards now being accepted at gas pumps?

We do up here, almost exclusively. I know people talk about paying cash and stuff like that, but try filling a gas tank at 2:00 a.m. and see what happens. You're going to a store that they have locked up, because the kid works alone, to give him cash so he'll turn the pump on in the first place, and then you have to go see him again for your change. Or, you just pay at the pump and avoid the hassle. I buy most of my gas at weird hours, so I expect a station to be open late and have a functional pay at the pump system. In 1997, I would just leave ID at places like the truck stop while filling late, or some cash. These days, that's what the card is for.

And Leo99 is absolutely right. No matter how careful you are, stuff happens. A buddy of mine had a fraudulent charge on his credit card before he even physically received the stupid thing.

Johnny2Bad: If you see a Chase terminal in your travels, they're more secure than just about every other one out there. The pad has to be properly mated to the terminal before installation. If you took two legitimate pads and switched them from two legitimate terminals, they would all stop functioning. Unfortunately, not all processors are so careful.
 
I don't use a credit card, I use my EFTPOS card, which only has my weekly allowance for lunch and fuel in it....if they clean me out I'll have to wait until next week. The local Z station has pay at the pump, and the forecourt is manned, I don't think it would be subject to any tampering. The other pay at pump is rural, unmanned and can't be seen from the road, more likely to have scimmers...but then they would be aware of the potential problem and maybe keep a close eye on it.
 
Cash only for me. Saves me $.10/gallon at 99% of the stations I visit. I don't mind going back inside to get my change, though I avoid busy hours if I can. Plus, its easier to keep track of the money Im spending. The day after payday I go to my bank ATM and pull out $160, and thats my budget for stuff (including gas) until next payday.
 
A few years ago I got gas and went inside and paid.
Later that day I checked my account and it was empty.
I went to my bank and they looked at the activity and asked if I was in New York City 2 hours ago.
I'm in Texas!
They fixed everything and a few months later arrested the clerks at the station.
They were connected to a ring of thieves in NYC that had over 300 IDs.
Be careful
 
Status
Not open for further replies.
Back
Top Bottom