Operation Potomac: A Coordinated Crackdown on Skimming Devices
In the wake of Operation Potomac—a joint law enforcement effort that led to the recovery of multiple credit card skimmers from businesses across the Washington, D.C. area—authorities are urging consumers to remain vigilant in safeguarding their financial data.
Credit card skimming is a form of fraud in which criminals attach unauthorized devices to ATMs, gas pumps, or point-of-sale terminals to steal card information. These devices extract data from the magnetic stripe, which is then used to create counterfeit cards and commit fraud.
The U.S. Secret Service estimates that EBT skimming alone costs consumers and financial institutions over $1 billion annually. Each individual skimmer can be responsible for up to $300,000 in fraudulent transactions.
Operation Potomac, conducted from January 29 to 30, 2025, involved a collaborative sweep by the Secret Service and local police departments from Fairfax, Montgomery, Prince George’s, Prince William, and Arlington Counties, along with the D.C. Metropolitan Police. Together, they inspected 6,561 terminals at 879 businesses throughout the National Capital Region.
27 Skimmers Recovered in Operation Potomac, Blocking $7.2M in Fraud
The recent Operation Potomac resulted in the recovery of 27 skimming devices, potentially preventing an estimated $7.2 million in fraud losses.
“Some of these devices are actually embedded inside the terminals—when you insert your card, they capture your data,” explained Matt McCool, Special Agent in Charge of the Secret Service’s Washington Field Office.
“Others are attached over the top and mimic the appearance of a legitimate terminal, though they’re often slightly bulkier.”
How to Detect a Credit Card Skimmer
The U.S. Secret Service has outlined several tips to help consumers identify suspicious devices and protect themselves:
- Visual Inspection: Look for anything unusual on card readers, such as overlays or coverings on the keypad that may hide miniature cameras.
- Physical Check: Gently tug or wiggle the card reader and keypad. Loose or misaligned components may indicate tampering.
- Alignment Verification: Make sure the card reader and keypad fit properly on the machine—misalignment can signal a modification.
- Shape Awareness: Watch for readers that seem bulkier or more convex than usual; skimmers are often placed directly over the original device.
- Location Matters: Be especially cautious at ATMs and gas pumps, which are common skimming targets due to limited oversight.
Security researchers have found that 71% of skimmers use communication protocols like serial, SPI, or I2C to transmit stolen data.
Innovative tools such as the Skim Reaper help detect these devices by using measurement cards that identify the presence of unauthorized read heads—one of the clearest signs of a skimmer.
Under Requirement 9.9 of the Payment Card Industry Data Security Standard (PCI DSS), businesses are obligated to protect card readers from tampering and substitution.
EBT Cardholders Among Most Targeted
Criminals often focus on Electronic Benefit Transfer (EBT) cards, which are used by individuals relying on public assistance.
“They’re stealing from people who desperately need those funds to survive,” McCool said. “Meanwhile, the criminals are using that money to purchase luxury items.”
Consumer Protection Tips
The Secret Service encourages all consumers to:
- Regularly monitor their bank and credit card statements for unauthorized transactions.
- Immediately report any suspicious activity to their financial institution.
- Use contactless payment methods when possible to reduce physical contact with potentially compromised machines.
