Short answer: A free Android app reported by CyberScoop in September 2017 scanned for a particular Bluetooth signal associated with three gas-pump skimmers examined by SparkFun CEO Nate Seidle. It was not a universal skimmer detector, and its current availability, Android compatibility and effectiveness are unverified.
What the app was designed to detect
CyberScoop reported on September 20, 2017, that Nate Seidle developed an open-source Android app called Skimmer Scanner after local police asked him to examine three skimmers. The app searched for Bluetooth broadcasts identified in the report as HC-O5 using the password 1234.
CyberScoop described an approximate 10–15-foot range for the broadcasts from the devices tested. That is a historical observation about those particular skimmers, not a guaranteed detection distance for other equipment.
The report did not establish that the app could find every skimmer, detect devices using different Bluetooth hardware, identify non-Bluetooth skimmers, or work with current Android releases. The app’s present listing, maintenance status, permissions and performance have not been verified.
#1 Best Overall
- Pocket sized security solution - no hardware installations or modifications required
- Detects deep insert and overlay skimmers hidden inside ATMs & fuel dispensers
- Works in ATMs, fuel pumps, kiosks, vending machines, smart parking meters & card readers
- Simple operation with bright LED and audible alert
- Made entirely in the USA
How an internal pump skimmer works
The devices described in the report were installed inside a fuel pump rather than placed visibly over the card slot. Seidle characterized a skimmer as “basically a man in the middle attack.”
In his description, the skimmer listens to the card reader’s serial traffic, records it to flash memory and then forwards the same traffic to the pump controller. The pump can therefore process the transaction while the device retains card data for later retrieval. The reported serial speed for that particular device was 9,600 bits per second.
This architecture explains why an exterior visual check may not reveal every compromise and why a Bluetooth scanner aimed at one device signature cannot stand in for a complete inspection.
Rank #2
- COMPATIBILITY: Works with multiple credit card terminal models including VeriFone M400 & M440 stationary terminals
- QUICK DETECTION: Takes only seconds to verify if credit card terminals are free from unauthorized skimming devices
- SECURITY TOOL: Helps protect payment systems by identifying potential tampering or foreign objects on card readers
- EASY TO USE: Simple physical verification process requires no technical expertise or special training
- VERSATILE DESIGN: Available in different models to accommodate various terminal types including M400 for Verifone M400 / M440. The MX 900 for Verifone MX900/MX925, Ingenico Lane (3000/5000/7000), Pax PX7 and more.
What “detect” meant in the 2017 report
In this context, “detect” meant finding a nearby Bluetooth broadcast that matched the configuration associated with the tested skimmers. It did not mean proving that a pump was safe or analyzing all of the pump’s electronics.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11| Approach | What it can address | Important limit |
|---|---|---|
| Skimmer Scanner’s Bluetooth search | A nearby device broadcasting the reported HC-O5 signature | It targets a narrow signal and was described in connection with devices examined in 2017; current compatibility and coverage are unverified. |
| Visual and physical pump checks | Signs of a loose, altered or tampered reader and access panel | An intact exterior does not rule out an internal skimmer. |
| Account monitoring | Unauthorized transactions after card use | It detects financial harm after the fact rather than inspecting the pump. |
How to check a gas-pump card reader
The Federal Trade Commission recommends practical precautions rather than relying on a detector app:
- Check that the pump’s access panel is closed and shows no obvious tampering.
- Compare the card reader with readers on neighboring pumps for mismatched parts or appearance.
- Gently test the reader. Do not use it if it moves or feels loose.
- If anything looks suspicious, use another pump and report the reader to the station or appropriate authorities.
- Pay inside when you are concerned about an outdoor terminal.
- If using a debit card, choose the credit option where available so you do not enter your debit PIN at the pump.
These steps reduce exposure; they do not certify that a pump is secure. The FTC guidance does not endorse Skimmer Scanner or any consumer detector product.
Rank #3
- COMPATIBILITY: Works with multiple credit card terminal models including VeriFone MX 915/925, Ingenico Lane 3000/5000/7000, and PAX PX7 terminals
- QUICK DETECTION: Takes only seconds to verify if credit card terminals are free from unauthorized skimming devices
- SECURITY TOOL: Helps protect payment systems by identifying potential tampering or foreign objects on card readers
- EASY TO USE: Simple physical verification process requires no technical expertise or special training
- VERSATILE DESIGN: Available in different models to accommodate various terminal types including MX900 and M400 series
What to do if you suspect your card was skimmed
Contact the issuer promptly
Call your bank or card issuer using the number on the card or an official statement. Follow its process for blocking or replacing the card and disputing unauthorized transactions.
Monitor every related account
Review card and bank activity for unfamiliar charges and continue checking after the suspected incident. Report suspicious activity as soon as it appears.
Recommended Free Tools
Record the location and timing
Note the station, pump and approximate time of use. Those details can help the issuer or investigators connect your report with other complaints.
Rank #4
- MSR90 is a USB emulation keyboard interface that not need any driver or software,USB simply plug and play
- Reads up to 3 tracks of information,can reads ISO7811, AAMVA, CA DMV and most other card data formats
- Threaded inserts for mounting. LED indicator, green light is on when connecting,green light blinks when cards swiped
- Bi-directional swipe reading, superior reading of high jitter, scratched, and worn magstripe cards, reliable for over 1,000,000 card swipes
- Configuration software makes configuration changes easy,works with: Windows OS and Mac OS
Can an Android phone detect a gas-pump skimmer today?
Not reliably on the evidence available here. The 2017 report documents a narrowly targeted Bluetooth scan, but it does not establish that the named app remains downloadable, runs on current Android versions or detects modern skimmers. A phone that finds no matching broadcast cannot prove that a pump is clean.
For current consumers, the defensible approach is to treat any scanner as a supplementary check, use the FTC’s physical and payment precautions, and monitor accounts. No physical consumer detector or product recommendation is substantiated by the cited sources.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Why the story still matters
The report illustrates two different parts of the skimming problem: some attacks can be found through a distinctive nearby radio signal, while the underlying theft can occur inside a pump as communications are intercepted and relayed normally. Those are useful insights, but neither the historical app nor a quick pump check is a guarantee.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Best Value
- Multi-protocol support: Featuring nRF52840 and LR1110, it supports LoRa (global ISM bands in the 863-928 MHz range). After purchasing the T1000-E, you can freely choose your region in the Meshtastic app. It also supports Bluetooth 5.0, Thread, and Zigbee, ensuring compatibility with a wide range of devices and networks.
- Powerful Positioning Capabilities: Integrated with the Mediatek‘s AG3335 GPS chip, it provides high-precision positioning services.
- Expandable Interfaces: Designed with four pogo pins, it supports USB interface for DFU (Device Firmware Upgrade), serial logging, and API interface, simplifying device management and debugging.
- Open Source Support: Compatible with the Meshtastic open-source mesh networking protocol, suitable for long-range and low-power communication needs.
Frequently Asked Questions
Was Skimmer Scanner confirmed to work on current Android phones?
No. The report concerns a 2017 app, and its current listing, updates, permissions, compatibility and performance were not verified.
Does a Bluetooth scan prove that a gas pump is safe?
No. The reported scan targeted one Bluetooth signature associated with devices examined at that time; a different or non-Bluetooth skimmer could go undetected.
Should I buy a special skimmer detector?
The cited sources do not validate a specific consumer detector. Use the FTC’s inspection, payment and account-monitoring guidance instead.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitches
