Clone Cards Meaning: What They Are and How They Work

A clone card is a fake payment card created by copying stolen card data onto a blank card. Criminals install skimming devices on ATMs, POS terminals, or fuel pumps to capture card data and PIN entries[1]. The stolen data is then encoded onto blank cards and used for unauthorised withdrawals or purchases[2].

What a Clone Card Is: Definition and Basic Concept

A clone card is a counterfeit payment card created by copying stolen card data onto a blank card. Criminals capture your card's information using skimming devices, then encode that data onto a physical duplicate that contains your account details but is not your original card.

The process begins when you use a compromised machine. When a card is swiped or inserted into a compromised ATM or point-of-sale terminal, skimmers scan the card's magnetic strip to steal the card's information[5]. This stolen data can then be stored and either downloaded or transmitted via Bluetooth to allow criminals to create cloned cards[5].

Once a skimmer captures a card's unique information, it can be copied onto a blank card or overwritten onto another stolen card[3]. The result is a physical duplicate—typically a white plastic card—that carries your account information encoded on its magnetic stripe. This clone is not your original card; it's a separate physical object that mimics the data your bank issued to you.

How Clones Differ from Original Cards

The clone contains only the data from your card's magnetic stripe. It does not replicate the EMV chip embedded in modern cards, which means cloned cards work only at terminals that still accept magnetic stripe transactions. Criminals use these clones to make direct purchases, obtain cash advances, or buy money orders[3].

Understanding this distinction matters because it affects where and how a clone can be used. A cloned card will fail at chip-and-PIN readers but succeeds at older magnetic stripe terminals and ATMs that accept swipe transactions. For a detailed explanation of how criminals capture your card data in the first place, see Clone Card: How Skimming Works and How to Protect Your Card.

How Card Cloning Works: The Skimming and Encoding Process

Card cloning occurs in two distinct steps: first, criminals capture your card data using hidden devices; second, they encode that stolen information onto blank cards. The FBI defines skimming as occurring when devices illegally installed on or inside ATMs, point-of-sale terminals, or fuel pumps capture card data and record cardholders' PIN entries, with criminals using the data to create fake payment cards[1].

Step One: Capturing Card Data with Skimming Devices

Criminals install skimming equipment on ATMs, POS terminals, and fuel pumps to intercept card information as you use these machines. A specific skimming device used on ATMs is often a realistic-looking card reader placed over the factory-installed card reader, where customers insert their ATM card into the phony reader and their account info is swiped and stored on a small attached laptop or cell phone or sent wirelessly to criminals waiting nearby[2].

When a card is swiped or inserted into a compromised machine, skimmers scan the card's magnetic strip to steal the card's information[5]. The U.S. Secret Service states that ATM and POS terminal skimming involves criminal groups installing hidden electronic devices that record cardholder information at ATMs and point-of-sale terminals[4].

How criminals capture your PIN:

• Pinhole cameras installed on or around ATMs record a customer's PIN entry[1]
• Keylogging keypad overlays are used instead of pinhole cameras to record PINs in some cases[1]
• Both methods allow criminals to match stolen card data with the correct PIN

Skimming devices are typically installed for short periods of time—usually just a few hours—and are often attached to an ATM by nothing more than double-sided tape[2]. This temporary installation reduces the chance of detection. Some skimming devices transmit stolen card data wirelessly in real time to nearby devices, while others store data to be downloaded or wirelessly transferred later[1].

Step Two: Encoding Stolen Data onto Blank Cards

After criminals download stolen account information and encode it onto blank cards, the cloned cards are used to make withdrawals from victims' accounts at other ATMs[2]. Once a skimmer captures a card's unique information, it can be copied onto a blank card or overwritten onto another stolen card[3].

The encoding process transfers the magnetic stripe data—including your account number, expiry date, and service code—onto a blank white plastic card. The result is a physical duplicate that contains your account information and can be used at any terminal that accepts magnetic stripe transactions.

The stolen data is used for unauthorised ATM withdrawals or high-end purchases or sold to other criminals[4]. This means your card data may be used directly by the group that installed the skimmer, or sold to other fraud networks who create and use clones in different locations.

Where Skimming Devices Are Installed and How They Blend In

Skimming devices are commonly found on ATMs, point-of-sale terminals in retail stores, convenience stores, markets, and fuel pumps[1]. The FBI notes that POS skimming devices are generally designed as overlays to the POS terminal and have wireless transmission capabilities, and may be present in any market, convenience store, or retailer[1]. These locations are chosen because they process high volumes of card transactions, giving criminals access to many potential victims in a short time.

Modern skimmers are designed to be nearly undetectable. The FBI warns that the makers of skimming equipment have become very adept at creating devices, often from plastic or plaster, so that they blend right into the ATM's façade, making them usually undetectable by users[2]. A specific skimming device used on ATMs is often a realistic-looking card reader placed over the factory-installed card reader, where customers insert their ATM card into the phony reader and their account info is swiped and stored on a small attached laptop or cell phone or sent wirelessly to criminals waiting nearby[2].

Why Skimmers Are Hard to Spot

Criminals construct skimmers from materials that match the colour, texture, and shape of the legitimate machine. The overlay fits directly over the factory-installed card reader, so when you insert your card, it passes through the skimmer first before entering the real reader. This design allows the transaction to complete normally—you receive your cash or receipt—while the skimmer silently copies your card data.

Common skimmer characteristics:

• Plastic or plaster construction matching the ATM or terminal façade[2]
• Realistic-looking card reader overlay on ATMs[2]
• Wireless transmission capabilities on POS overlays[1]
• Temporary attachment with double-sided tape for quick removal[2]

POS skimmers at retail checkouts are typically designed as overlays with wireless transmission capabilities[1]. This means the device sits on top of the legitimate card reader, and stolen data is transmitted in real time to criminals nearby or stored for later retrieval. You may not notice any difference when you swipe or insert your card, because the overlay is thin enough to allow normal operation while capturing your magnetic stripe data.

For guidance on recognising compromised machines and protecting your card during transactions, see Clone Card: How Skimming Works and How to Protect Your Card.

What Criminals Do With Cloned Cards

After criminals download stolen account information and encode it onto blank cards, the cloned cards are used to make withdrawals from victims' accounts at other ATMs[2]. The U.S. Secret Service states that the stolen data is used for unauthorised ATM withdrawals or high-end purchases or sold to other criminals[4]. Equifax states that a cloned card may be used to make direct purchases, obtain a cash advance, or buy money orders[3].

Direct Uses of Cloned Cards

Criminals use cloned cards in four primary ways. First, they withdraw cash from ATMs at locations different from where the data was stolen[2]. This geographic separation makes it harder for law enforcement to connect the skimming site to the withdrawal location. Second, they make direct purchases at retail stores, restaurants, or online merchants that still accept magnetic stripe transactions[3]. Third, they obtain cash advances using the cloned card and captured PIN at bank branches or ATMs[3]. Fourth, they buy money orders, which convert stolen funds into untraceable instruments that can be cashed or deposited elsewhere[3].

The U.S. Secret Service confirms that stolen data is used for high-end purchases[4]. Criminals target expensive electronics, jewellery, or luxury goods that can be quickly resold for cash. These purchases are often made before the cardholder notices unauthorised activity, giving criminals a window of several hours or days to maximise the value extracted from each cloned card.

Selling Stolen Card Data to Other Criminals

Not all criminals who install skimmers use the cloned cards themselves. The U.S. Secret Service states that stolen data is sold to other criminals[4]. This creates a secondary market where skimming groups sell batches of card data to fraud networks that specialise in encoding and using clones. The original skimmer operators profit from the sale, while buyers assume the risk of using the cloned cards.

This division of labour means your card data may be used far from the location where it was stolen, and by individuals who had no direct involvement in installing the skimming device. For information on whether cloned card transactions can be traced back to the criminals, see Can Cloned Cards Be Traced?.

How to Protect Yourself From Card Cloning

You can reduce your risk of card cloning by inspecting machines before use, protecting your PIN during entry, and monitoring your accounts for unauthorised activity. The FBI defines skimming as occurring when devices illegally installed on or inside ATMs, point-of-sale terminals, or fuel pumps capture card data and record cardholders' PIN entries[1]. Because skimming devices are typically installed for short periods of time—usually just a few hours—and are often attached to an ATM by nothing more than double-sided tape[2], vigilance at the moment of transaction is your primary defence.

Inspect ATMs and POS Terminals Before Inserting Your Card

Before you insert or swipe your card, examine the card reader for signs of tampering. The FBI warns that the makers of skimming equipment have become very adept at creating devices, often from plastic or plaster, so that they blend right into the ATM's façade, making them usually undetectable by users[2]. A specific skimming device used on ATMs is often a realistic-looking card reader placed over the factory-installed card reader[2].

What to check:

• Gently pull on the card reader to see if it's loose or attached with tape
• Compare the card slot to adjacent ATMs from the same bank; look for differences in colour, alignment, or thickness
• Check for unusual gaps, overlays, or attachments around the keypad or card slot
• Inspect the area around the PIN pad for pinhole cameras or protruding objects

If anything looks unusual or feels loose, do not use that machine. Move to a different ATM or terminal, preferably inside a bank branch where skimmers are less common.

Cover the Keypad When Entering Your PIN

Pinhole cameras installed on or around ATMs record a customer's PIN entry, and in some cases keylogging keypad overlays are used instead of pinhole cameras to record PINs[1]. Even if a skimmer captures your card data, criminals cannot use it for ATM withdrawals or chip-and-PIN transactions without your PIN. Covering the keypad with your hand or wallet as you type blocks the camera's view and prevents PIN capture.

This precaution works because skimmers rely on matching stolen card data with the correct PIN. If the camera cannot see your keystrokes, the cloned card becomes far less useful to criminals.

Be Cautious at High-Risk Locations

The FBI notes that POS skimming devices may be present in any market, convenience store, or retailer[1], and skimming devices are commonly found on ATMs, point-of-sale terminals, and fuel pumps[1]. Small retailers, standalone ATMs in convenience stores, and outdoor fuel pumps are particularly vulnerable because they receive less frequent inspection than machines inside bank branches.

Where to exercise extra caution:

• Standalone ATMs in convenience stores, shopping centres, or petrol stations
• Fuel pumps with card readers (pay inside when possible)
• Small independent retailers with older POS terminals
• Any location where the card reader is accessible to the public without direct staff supervision

Whenever possible, use ATMs located inside bank branches during business hours. These machines are monitored more closely and inspected more frequently, reducing the likelihood that a skimmer has been installed.

Monitor Your Account Statements Regularly

Check your bank and credit card statements at least weekly for unauthorised transactions. After criminals download stolen account information and encode it onto blank cards, the cloned cards are used to make withdrawals from victims' accounts at other ATMs[2]. Early detection limits your financial loss and helps your bank identify the compromised machine.

Set up transaction alerts through your bank's mobile app or online banking portal. Most issuers allow you to receive instant notifications for every purchase, withdrawal, or declined transaction. If you notice any activity you did not authorise, contact your card issuer immediately. For step-by-step guidance on what to do if you discover unauthorised transactions, see What to Do If My Card Is Cloned.

Typical Mistakes and Misconceptions

Card cloning attracts several persistent misconceptions, partly because the term "clone card" gets used loosely across social media and fraud forums. These errors often lead people to underestimate their exposure or to focus on the wrong protective measures. The following points clarify what actually happens when card data is copied.

"Chip cards cannot be cloned"

This belief comes from the fact that EMV chips use cryptographic authentication that cannot be copied in the same way as a magnetic stripe. However, skimming devices still target the magnetic stripe, which remains present on most chip cards for backwards compatibility. According to the FBI, skimming occurs when devices illegally installed on or inside ATMs, point-of-sale terminals, or fuel pumps capture card data and record cardholders' PIN entries[1]. This means the chip does not prevent cloning when a criminal reads the magnetic stripe at a compromised terminal.

The practical consequence is that a chip card can still be cloned and used at merchants or ATMs that accept magnetic stripe transactions. Equifax explains that once a skimmer captures a card's unique information, it can be copied onto a blank card or overwritten onto another stolen card[3]. You should not assume that holding a chip card makes you immune to card cloning.

"Skimmers are easy to spot if you look carefully"

Modern skimming devices are designed to blend into the machine they are attached to. The FBI warns that the makers of skimming equipment have become very adept at creating devices, often from plastic or plaster, so that they blend right into the ATM's façade, making them usually undetectable by users[2]. A specific skimming device used on ATMs is often a realistic-looking card reader placed over the factory-installed card reader[2].

Because these overlays match the colour and texture of the legitimate reader, visual inspection alone is unreliable. The transaction completes normally, so the user receives cash or a receipt without noticing anything wrong. This does not mean inspection is useless, but it does mean you cannot rely on spotting a skimmer by sight alone.

"Cloned cards are mainly used for online shopping"

Cloned cards are most directly useful for in-person transactions where a magnetic stripe can be swiped and, if needed, a PIN entered. The FBI states that after criminals download stolen account information and encode it onto blank cards, the cloned cards are used to make withdrawals from victims' accounts at other ATMs[2]. The U.S. Secret Service confirms that stolen data is used for unauthorised ATM withdrawals or high-end purchases[4].

Online fraud more often involves stolen card numbers and security codes, which is a different type of fraud from cloning. A cloned card is a physical object that can be used at terminals, not just a set of credentials typed into a website. Equifax states that a cloned card may be used to make direct purchases, obtain a cash advance, or buy money orders[3], all of which require a physical card or card data encoded onto a blank card.

"If my card is cloned, I will not get my money back"

Liability rules for unauthorised transactions depend on your card issuer, the type of card, and how quickly you report the loss. The purpose of cloning is to make withdrawals from victims' accounts at other ATMs[2], but this does not automatically mean the cardholder bears the loss. Most card issuers have procedures for reversing unauthorised transactions once they are reported.

The key variable is reporting speed. If you delay reporting, you may be held responsible for a larger portion of the loss. Check your cardholder agreement or contact your issuer to understand the specific liability rules that apply to your account.

"Buying a clone card is a safe way to get money"

Forums and social media posts sometimes present clone cards as a low-risk way to obtain funds. This is a serious misunderstanding of both the technology and the legal exposure. The U.S. Secret Service states that criminal groups install hidden electronic devices that record cardholder information, with the stolen data used for unauthorised ATM withdrawals or high-end purchases or sold to other criminals[4]. Possessing or using a cloned card is a criminal offence in the United Kingdom, and transactions made with cloned cards are recorded by the same payment networks that process legitimate purchases.

Law enforcement agencies actively investigate skimming operations and the sale of stolen card data. A person who buys a cloned card is not anonymous; the card is linked to a victim's account, and the transaction trail leads back to the point of use. The idea that clone cards offer easy money ignores the fact that each use creates evidence that can be used in a criminal prosecution.

"Only ATMs are targeted by skimmers"

ATMs receive a lot of attention, but they are not the only place where skimming occurs. The FBI defines skimming as occurring when devices illegally installed on or inside ATMs, point-of-sale terminals, or fuel pumps capture card data and record cardholders' PIN entries[1]. PayPal explains that when a card is swiped or inserted into a compromised machine, skimmers scan the card's magnetic strip to steal the card's information[5].

Point-of-sale terminals at retail checkouts, fuel pumps at petrol stations, and standalone card readers in convenience stores are all common targets. The FBI notes that POS skimming devices may be present in any market, convenience store, or retailer[1]. This means you should apply the same caution at a shop checkout or fuel pump as you would at an ATM.

Key Takeaways

• A clone card is a physical copy of your card data encoded onto a blank card, created after skimming captures the magnetic stripe and, where possible, your PIN[1][3].
• Skimming devices are often installed for only a few hours and may transmit stolen data wirelessly or store it for later retrieval[2][1].
• Cloned cards are used for unauthorised ATM withdrawals, direct purchases, cash advances, and money orders[3][2].
• Visual inspection alone is unreliable because modern skimmers are designed to blend into the machine[2].
• Covering the keypad, checking for loose readers, and monitoring statements weekly reduce your exposure.

If you notice unauthorised transactions, act immediately by contacting your card issuer and following the steps in What to Do If My Card Is Cloned.

Explore More on Card Security

Discover additional resources to enhance your understanding.