A credit card skimmer is a malicious device criminals attach to a payment terminal—most commonly on ATMs and gas pumps. When you use an terminal that’s been compromised in such a way, the skimmer will create a copy of your card and capture your PIN (if it’s an ATM card).