For most motorists, a trip to the gas station is a mindless routine—a brief pause in a commute defined by the rhythmic click of the nozzle and the glow of the digital price counter. However, that familiarity has become a vulnerability. Law enforcement agencies, including the Gendarmerie de l’Hérault, are issuing urgent warnings about a surge in pump-side fraud that targets drivers when they are most distracted.
These crimes range from sophisticated electronic theft to startlingly low-tech tricks involving nothing more than a piece of aluminum foil. While the methods differ, the goal remains the same: exploiting the brief window of time between a driver authorizing a payment and the fuel actually entering the tank. As fuel prices remain volatile and drivers become more preoccupied with the cost of their fill-up, criminals are finding it easier to operate in plain sight.
The current wave of scams is particularly insidious because it attacks two different points of the transaction. One targets the financial data stored on a credit card, while the other hijacks the physical mechanism of the pump to steal fuel paid for by an unsuspecting stranger. Understanding the mechanics of these attacks is the only way for consumers to effectively defend their wallets.
The Digital Trap: Understanding Skimming
Card skimming is not a new phenomenon, but it has evolved. In the context of fuel pumps, skimming involves the installation of a “shimmer” or an overlay—a thin, plastic device designed to mimic the look and feel of the legitimate card reader. These devices are placed directly over the existing slot, capturing the data from the card’s magnetic stripe or chip as We see inserted.
The theft rarely stops at the card data. To gain full access to a bank account, criminals need the Personal Identification Number (PIN). This is often achieved through two primary methods: a “pin-hole” camera hidden in a fake plastic molding above the keypad, or a “keypad overlay,” which is a thin electronic membrane that records every keystroke the user makes.
Once the data is harvested, it can be cloned onto a blank card or used for fraudulent online purchases. Because gas stations often have high volumes of traffic and unmanned pumps, these devices can remain in place for hours or even days before a station attendant notices the discrepancy. The Gendarmerie warns that these overlays are designed to be nearly invisible to the untrained eye, often matching the color and texture of the pump perfectly.
How to Spot a Skimmer
Security experts suggest a “wiggle test” as the first line of defense. Most skimming devices are adhered with double-sided tape or light glue rather than being bolted to the machine. If the card reader feels loose, shifts when touched, or appears to protrude further than usual, it should be considered compromised.
Beyond the physical hardware, the way you pay can significantly mitigate risk. Contactless payments (NFC), such as Apple Pay, Google Pay, or “tap-to-pay” cards, are vastly more secure because they use tokenization. Instead of transmitting your actual card number, the system sends a one-time encrypted code that is useless to a skimmer.
The ‘Boulette en Papier’: A Low-Tech Heist
While skimming is a crime of data, the “boulette en papier”—or aluminum foil ball—is a crime of physical manipulation. This technique does not require electronic expertise, only a basic understanding of how automated fuel pumps operate.
Most modern pumps use a sensor to detect when the fuel nozzle has been returned to its holster. Once the nozzle is locked back in place, the pump signals the payment terminal to finalize the transaction and charge the user for the exact amount of fuel dispensed. The “boulette” trick involves jamming a small, tightly crumpled ball of aluminum foil or a similar shim into the nozzle holster.
By obstructing the sensor, the fraudster tricks the machine into believing the nozzle is still in use. When the legitimate customer finishes their fill-up and replaces the nozzle, the sensor fails to trigger. The transaction remains “open,” and the payment is not immediately processed or finalized. The fraudster then steps in, removes the foil, and pumps fuel into their own vehicle using the credit already authorized by the previous driver.
“Stay in close proximity to your vehicle during both the payment and the distribution phase,” the Gendarmerie de l’Hérault advises. “Do not walk away from the pump until you have verified that the transaction has officially ended on the screen.”
Comparing the Threats
To help drivers identify which risk they are facing, the following table breaks down the differences between the high-tech and low-tech approaches currently being seen at the pumps.
| Feature | Skimming (Electronic) | Boulette en Papier (Physical) |
|---|---|---|
| Primary Target | Credit card data and PINs | Pre-paid fuel volume |
| Tool Used | Overlays, shimmers, hidden cameras | Aluminum foil or plastic shims |
| Immediate Impact | Unauthorized bank withdrawals | Theft of paid fuel |
| Best Defense | Contactless payment / Wiggle test | Monitoring the pump until completion |
Practical Steps for Driver Security
Preventing these scams requires a shift in habit. The goal of the fraudster is to rely on the driver’s autopilot mode. By introducing a few seconds of intentional observation, most of these attacks can be thwarted.
- Inspect the Slot: Before inserting your card, give the reader a firm tug. If it moves, do not use it.
- Shield Your PIN: Even if you don’t see a camera, use your free hand to cover the keypad. This blocks the line of sight for hidden lenses.
- Prioritize Tap-to-Pay: Whenever possible, avoid inserting the card entirely. Contactless methods are the most effective defense against skimming.
- Watch the Holster: Ensure the nozzle clicks firmly back into place. If you see any debris or strange materials in the holster, alert the station manager immediately.
- Verify the Receipt: Always wait for the “Transaction Complete” message on the screen and collect your receipt to ensure the amount charged matches what you pumped.
Disclaimer: This article is provided for informational purposes only and does not constitute legal or financial advice. If you suspect your card has been skimmed, contact your banking institution immediately to freeze your accounts.
As these tactics evolve, law enforcement agencies continue to coordinate with fuel station operators to install more secure, recessed card readers and improved sensor technology. The next step in mitigating these risks involves the wider adoption of encrypted payment terminals across rural networks, with further security guidelines expected from the Ministry of the Interior in the coming months.
Have you encountered any suspicious equipment at your local station? Share your experience in the comments or share this guide to help other drivers stay vigilant.
