Even if the coronavirus is currently restricting your travel plans, you’re still likely at risk of encountering an ATM or gas pump debit or credit card skimmer this summer. And if you use a prepaid debit card, you might find Sylvia Powers’ experience with a skimmer of particular interest. She swiped her American Express Bluebird card at the pumps of her local gas station, and a skimming device secretly recorded her information. Then, thieves duplicated the prepaid debit card and quickly began draining Powers’ funds.
Powers assumed American Express would protect her against this fraud. She assumed wrong.
Powers’ troubling skimmer encounter with her prepaid debit card is a warning for all travelers this summer. ATM and gas pump skimmers are popping up in every state at an alarming rate. It’s essential to know the signs of a skimmer so you can steer clear of them.
But this case also provides a somber statement about the use of debit cards (prepaid or traditional) for purchases. As Powers found out, these cards don’t offer the same consumer protections that credit card customers enjoy. And as Powers’ dilemma unfolded, she suddenly realized that she had placed her entire paycheck in a vulnerable state.
A credit card skimmer drained her American Express Bluebird account
Powers’ tale begins one evening in late January. She stopped for gas at the local Speedway on her way home from work. She swiped her American Express Bluebird card at the pump and filled her tank. The total: $30.02.
“A few days later, I topped off my tank at the 7-Eleven,” Powers recalled. “I used my Bluebird debit card again and it came to $6.”
Powers said she received quite a shock when she reviewed her online account about a week later.
“On those same days, at the same time, across the state of Florida, someone charged $100 at a Sunoco. Then $98 at a RaceTrac,” Powers explained. “I immediately reported the fraud to American Express Bluebird.”
Powers says that her Bluebird card was in her possession at all times.
Having read about a recent string of credit card skimmer discoveries in Florida, she suspected that she had fallen victim to a skimmer, too.
Soon, though, the response from the American Express Bluebird team made her feel even more victimized than the skimmer did.
American Express Bluebird: “These are authorized charges.”
The initial response from American Express indicated that Powers would receive a determination from the company within ten days.
It took less than a week for Powers to receive the email from American Express Bluebird entitled “Your dispute was declined.” With a heavy heart, Powers read the email from Bluebird.
This news stunned Powers.
She wanted to know what kind of investigation had determined that she had authorized these charges. “The Bluebird Team” would not respond by phone, so Powers sent a certified letter to the address listed in the last email. She waited for over one month and received no response. Then she contacted the Elliott Advocacy team for backup assistance.
How can a credit card skimmer steal your information?
When I received Powers’ cry for help, I hadn’t yet heard about the growing problem of credit card skimmers at the gas pump. So I did a little research.
ATM and gas pump skimmers appear to be an epidemic that we should all be aware of — especially as the summer traveling season begins.
My internet search found tons of articles and police reports about the detection of card skimmers at gas stations and ATMs all over the United States.
These credit card skimmers are small, almost undetectable devices. Crime rings quickly attach them to gas station pumps (and sometimes to ATM swipers). The owner of the gas station is typically unaware of the installation of the skimmer and has nothing to do with the scam. And most customers are unable to notice any difference in the card swiper at the pump either.
Swiping a debit card is particularly dangerous
When a consumer swipes their debit or credit card, the skimmer device captures the data. The skimmer device stores the information until the thief comes to pick up his treasure chest of numbers. Then, the criminal makes duplicates of the cards. And if a consumer has used a traditional or prepaid debit card, the perpetrators now have access to all of the available money in the account.
The thieves then make giant gas purchases — typically filling vehicles with large-capacity tanks. And the final step is that the scammers sell the gas on the “open market.”
The charges of $100 and $98 at a gas station on Powers’ Bluebird account supported her theory that a skimmer had captured her Bluebird card numbers. Her car does not have the capacity for $198 worth of gas.
So how did American Express determine that Powers had authorized these jumbo gas purchases? That’s what she wanted to know.
“Please help. My paycheck goes directly into my Bluebird account.”
By the time Powers contacted our team, she had already begun to look at the fraud protections that Bluebird provides to its customers. And she was worried.
Thank you so much. Please keep in mind that Bluebird from Amex is a prepaid debit card to which I have my paycheck deposited. It is not one of their real credit cards. I was very sad to have the 200 dollars stolen from my card. I have worked hard for that money. As you might imagine since I’m using a prepaid debit card, I am also not wealthy.
Powers was right to be concerned. The Bluebird card, like other American Express prepaid cards such as Serve, is not a credit card.
If you happen to be caught up in a skimmer scam and you are using a credit card, you’ll be able to file a formal dispute. The Fair Credit Billing Act (FCBA) requires your credit card company to investigate and protect you against fraud and billing errors. But a prepaid debit card is not covered by the FCBA.
Regulation E and prepaid debit cards
The Bureau of Consumer Financial Protection has issued a “final ruling” that prepaid cards should be protected against fraud in the same way as traditional debit cards.
As of April 1, 2019 Regulation E which covers unauthorized electronic fund transfers (EFTs) and, at least in theory, limits consumer liability to $50, applies to prepaid debit cards. Unfortunately, as we’ve frequently seen, fraudulent transactions involving traditional and prepaid debit cards do not appear to be forcefully pursued by the issuers of these cards in the same way that credit card companies investigate these disputes.
And our team has seen time and again that consumers who use these cards often hit walls of resistance when they try to dispute a fraudulent charge.
Unfortunately, there are no current laws that force a company issuing a prepaid debit card to conduct a traditional credit card style chargeback investigation.
So why use a prepaid debit card?
As Powers alluded to, prepaid debit cards are typically used by consumers who don’t meet the criteria for traditional bank accounts or credit cards. With their often high transaction and monthly fees and lack of comprehensive consumer protection, these prepaid debit cards have been criticized as taking advantage of the middle to the low-income consumer population.
But to be fair, with no monthly fee, the American Express Bluebird card appears to have some of the most consumer-friendly policies with its prepaid debit card.
Unfortunately, the advertised “Fraud protection” for the Bluebird card did not materialize for Powers.
Every company, including American Express, is always free to use its own discretion to investigate possible fraud aggressively. But the swift denial of Powers’ claim and lack of explanation as to the findings left her disillusioned. She had the impression that there had been no formal investigation at all of her complaint.
Asking American Express Bluebird to reopen this investigation
The fact that Powers’ giant gas charges occurred simultaneously across the state of Florida provided strong evidence of a card skimmer attack.
And so I reached out to our friends at American Express. And soon came relief for Powers. Bluebird would restore her hard-earned money to her account.
I’m reaching out on behalf of the program manager for the American Express Bluebird Cards.
We can share that we have thoroughly reviewed the request from Ms. Powers and provided her with an update, to resolve the issue.
To respect the privacy of our customers, we cannot share specific details about individual customers.
Unfortunately, Bluebird did not provide us with the details that explained the original decision by the Bluebird team. For Powers, it doesn’t matter — she’s just happy to have her money returned.
But there are further implications for Powers. After all, if a thief removed $200 from her account and American Express considered the transaction “authorized,” what would stop a thief from removing her entire paycheck? She’s deeply concerned about that possibility and is considering all alternative “banking” options.
By the way, if you have your own problem with American Express, our research team has got you covered. They’ve compiled an American Express executive company contacts list for your convenience.
How to protect yourself against debit and credit card skimmers
Here are some ways you can decrease your chances of being victimized by a skimmer.
- Pay inside (preferably with cash). The easiest way to make sure that you avoid a skimmer is to pay inside the gas station. Unless the owner of the gas station is involved in the scam, it is highly unlikely that you’ll encounter a skimmer device inside the building.
- Don’t use a traditional or prepaid debit card at the pumps. If you do and gas station predators skim your card, they will have access to all of your cash. And, as we’ve seen in this case, the issuer of your card might not be willing to aggressively defend you (and a consumer advocate may or may not be able to get your money back).
- Look for the security seal on the pump. Many gas stations are installing security seals to combat skimmers. Try to visit only pumps with these seals. If the security seal is broken or damaged, that’s another clue that there could be a skimmer on that card reader. Report it and move on.
- If the card reader feels loose, don’t use it. The card readers that have been compromised by skimmer devices are often wiggly. This instability is a prime clue that the pump or ATM may have a skimmer installed.
- Does the equipment look beat up or different from the other pumps? If so, hit the road and get your gas elsewhere. The risk just isn’t worth it. (This article first appeared in May 2019. Last updated: July 2020)