These Are The Riskiest Places To Swipe Your Credit Card

Risks Involved: ATMs themselves could be fake, easily tampered with, higher fees
How to Avoid: Use only bank ATMs for withdrawing cash 

Independent ATMs are common. These ATMs are owned by a major bank, and they became common in the 1990s as a way to let people access cash even if they were not near a bank. According to the Wall Street Journal, the theft of debit-card data has “soared” in the past twenty years.

"Independent" ATMs ©Hadrian/Shutterstock.com

The ATM itself might be illegitimate, as the independent ATM owner might be a scammer out to prey on users’ information. Or, these ATMs might be outfitted with a skimmer that allows people to clone your card and snatch your information. The Baltimore Sun said that these potentially-fake “independent” ATMs leave their users open to both “fraud” and “higher fees.” Think twice before using your Mastercard or Visa at one of these ATMs.

Risks Involved: You don’t know who’s behind the reader, a seller could easily steal your information
How to Avoid: Pay in cash, look up online reviews of sellers and vendors before purchasing  

Many fair vendors, whether the fair is a carnival or an art show, have their own card readers to accept credit or debit cards. While that is convenient, it is not always safe for the customer. The main reason is that you don’t know who is behind the reader. While most vendors are likely honest, some might not be.

Fair Vendors ©paulvelgos/stock.adobe.com

You’re engaging with an independent retailer, one that might have attached a skimmer or other malicious device to the reader to steal card information. To support fair vendors in a safe way, go to your local PNC or another bank to withdraw cash. That, especially when stored in a theft-proof bag or wallet, is your best bet for a safe transaction.

Risks Involved: Historic data breach (circa 2014)
How to Avoid: Be vigilant after using your card there, if unsure, avoid the site altogether 

Data breaches are a public-relations nightmare for companies. Often, online retailers cannot keep up with how savvy and determined hackers are. Once a breach happens, the retailer gets bad press, as they are blamed (and often sued) for the information being stolen. Some customers even leave the company as a result.

eBay ©Daniel Krasoń/stock.adobe.com

In 2014, this scandal happened to eBay. In a historic breach, hackers raided the e-commerce auction site, stealing 145 customer passwords. This meant that the raiders could access the identification and financial information of the customers from which they stole. eBay had to ask everyone to change their passwords, and the company’s initial, downplaying response was widely criticized by publications like Wired.

Risks Involved: Some sellers might take your money and run or steal your card information
How to Avoid: Only do business with “Gold Suppliers”

Alibaba itself is a legitimate site—after all, it is one of China’s largest e-commerce websites. However, that does not mean that every seller on Alibaba is legitimate. Common scams include selling faux-brand-name products, usually for a telltale cheap price, poor quality items, fake product certificates, and financial scams.

Alibaba.com ©Angelov/stock.adobe.com

Though Alibaba is often considered a cheaper version of Amazon, the many reports of scams might be a reason to avoid the site. Anyone can be a seller, and anyone can run off with your money and steal your card information. Be very careful about who you buy from, and make sure to only do business with “Gold Suppliers.” 

Risks Involved: Cards can be stolen or cloned at a concert
How to Avoid: Watch your cards after you buy from a vendor, pay in cash at the concert 

While it likely comes as no surprise that buying from scalpers with your credit or debit card is risky business, even known, verified concert vendors can be susceptible to data breaches. In 2018, Ticketmaster announced that it had been the victim of a credit-card skimming operation. This operation was one that hit not only the vendor but also eight hundred other e-commerce sites.

Concert Vendors ©hanohiki/stock.adobe.com

In addition to the dangers posed by buying tickets at vendors like Ticketmaster, be careful purchasing merchandise, food, and beverages from people at the concert. Pay in cash where you can, as it is all too easy for these independent, unknown sellers to attach a skimmer to a card reader. The hectic, loud atmosphere at a concert makes it an easy place for your debit or credit card to “accidentally” go missing. 

Risks Involved: Card readers and hidden cameras can easily be installed
How to Avoid: Pay in cash, make sure to inspect the machine for anything that seems “off”

Self-service public transportation kiosks, much like independent ATMs, might seem like the most convenient option, but they are vulnerable to hacks and theft. In 2014, a New York City MetroCard vending machine was found equipped with a hidden camera and credit card reader. A sharp-eyed customer noticed the device, reporting it to a station agent, who then turned the case over to the N.Y.P.D.

Self-Service Public Transportation Kiosk ©JKstock/stock.adobe.com

This same situation also happened the week before at a MetroCard station in Long Island. Pay in cash at these machines, and, if you have to use the card, make sure that you check the machine carefully for anything that seems “off” about the device. Though the Metropolitan Transportation Authority is a public benefit corporation (unlike other transportation companies like Union Pacific or Greyhound), it is not impervious to hackers.

Risks Involved: Thieves can use credit card skimmers to steal your information
How to Avoid: Pay in cash or with a gift card

According to Eater, restaurants are an “ideal” environment for “identity theft.” Your card is out of your possession for several minutes while the waiter or waitress is bringing you your check. This happened at a group of high-end steakhouses in Manhattan in 2017. Customers at the Capital Grille, Bicycle Club, Smith & Wollensky, Morton’s, and the Capital Grille handed over their cards to pay for their meals.

Fine Dining Establishments ©suwanphoto/stock.adobe.com

Over the next eight months, a group of servers stole fifty diners’ identities in a scheme to resell and buy luxury items. Bottom line: just because a restaurant seems higher-class than McDonald’s, that doesn’t mean that an unscrupulous server won’t swipe your card information.

Risks Involved: Even established chains are susceptible to experiencing theft
How to Avoid: Pay cash and don’t opt to let the retailer save your information if paying by card  

While most of us are savvy enough to assume that suspicious websites and shoddy retailers aren’t a good place to input our credit card information, that doesn’t mean that chain retailers—established venues with billion-dollar annual revenues—are safe from hacks and breaches. Almost all major chain retailers have a rewards card and the ability to order products online, and with that has come data breaches.

Chain Retailers ©Kaspars Grinvalds/stock.adobe.com

In 2013, Target suffered one of history’s largest data breaches. The hackers stole credentials from a third-party vendor, installing malware into Target’s systems that let them swipe credit card data from 40 million customers. In 2021, Target was court-ordered to pay an $18.5 million settlement to customers impacted by the breach.    

Risks Involved: Fake websites can dupe you into thinking you’re ordering from a legitimate retailer
How to Avoid: Double-check the website’s legitimacy, watch out for red flags

These days, retailers rely heavily on their online presence. After all, online shopping has become an extremely common way to buy, so a retailer’s online presence can be a big moneymaker. But be on the lookout for copycat sites.

Copycat Retail Websites ©Andrey Popov/stock.adobe.com

These websites mimic a retailer like Kohls, Walmart, Amazon, and more, but the site itself is completely fake. You “order” the products, input your card information, and the site’s owners take your money and data and run. Telltale signs of a “cybersquatting” website include shoddy English, huge discounts, very wordy reviews, and strange URLs. If you think you have found one of these websites, report it to ReportFraud.ftc.gov.

Risks Involved: ATM skimmers, stolen card information when it’s held for your tab
How to Avoid: Bring cash, use a credit card 

A lot of us use our debit cards at bars and nightclubs, especially if we’re not planning to run up a big tab. However, be careful using debit cards at these venues, as Credit.com noted a few risks to your cash. A dishonest bartender, for example, could easily write down your information. After all, they keep your card if you open a tab.

Bars and Nightclubs ©master1305/stock.adobe.com

Additionally, bar ATMs are a prize target for ATM skimmers—magnetic strip readers that criminals use to steal your card information. Additionally, these ATMs also have very high fees associated with withdrawing cash. So, you’re not only putting your card at risk, you’re spending more than you have to when you take out money. 

Risks Involved: Prior data breach, chance you’ll be charged
How to Avoid: Remove card information before due date

Back in 2013, Adobe Systems, a software titan, encountered a bit of a scandal. Well, more than a bit, as the data of nearly three million of its customers was stolen by hackers. Credit card numbers were the hackers’ biggest target, and the hack terrified Adobe clients that fall.

Adobe.com ©Ricky Of The World/Shutterstock.com

This data breach was scary, but scammers aren’t the only way you could lose money from Adobe. Much like many other subscription-based services, Adobe Systems will charge your card if you forget to cancel your trial. Keep an eye on the time—remove the card information before the payment comes due.  

Risks Involved: Can steal a premium deposit/card info and give you nothing in return
How to Avoid: Check website’s authenticity, call agency directly for the URL

Copycat websites, as mentioned before, are those that are mere shadows of the original. In the context of a “dot-gov” website, these copycat sites offer services from your local, state, or federal government. They might look similar to the original site and offer the same things, but watch out, as they are just trying to steal your information.

Copycat Government Websites ©dencg/Shutterstock.com

One tell-tale sign of a copycat government website is that it often charges a huge premium to access services. You pay the deposit with your credit or debit card, and then you receive no benefit except stolen information. A genuine government site will have a lot of cross-references, social media posts, and portals that indicate that it is authentic. If unsure, call the agency directly and ask for the URL. 

Risks Involved: Fake sites that steal your info/cash when you place an order
How to Avoid: Avoid these retailers with unusual URLs

The AARP listed this as an “online shopping scam” to watch out for, as it has grown increasingly common. According to the organization, do not use sites with extraneous URLs that contain unusual words, characters, or domains. The URLs “.bargain” or “.app” or something that isn’t a “.com” or “.net” are signs that the site is not legitimate.

.bargain or .app Online Retailers ©VAKSMANV/stock.adobe.com

Other telltale red flags include shoddy website design and inaccurate English. Retailers have the cash to pay for top-notch website design, as their online presentation is what gets them orders. Also, if the prices are bargain-basement with insane discounts, be on the alert—they may be too good to be true.  

Risks Involved: Cards might be physically stolen or cloned by thieves taking advantage of the atmosphere
How to Avoid: Bring cash in a theft-proof bag or wallet  

At music festivals, in particular, festival-goers are encouraged to go “cashless,” loading up on e-wallets, credit cards, and debit cards before they arrive. In 2019, it was reported that 41% of festival-goers used their credit cards to cover expenses. Festivals aren’t cheap, and even food and drinks can be sky-high in price.

Festivals ©maxbelchenko/stock.adobe.com

Equifax says that you run a risk of your card being stolen at these festivals, whether physically stolen or “cloned.” People often get a little drunk at festivals, and they are a perfect ground for unscrupulous thieves to snatch your card or pretend to be a vendor. You’re better off bringing cash in a theft-proof bag/wallet.