ATM Skimming in Bali 2026: The Seminyak Fake "Broken" Scam and How to Protect Your Card

Table of Contents

1. How ATM Skimming Works
2. Documented Cases in Bali
3. The Seminyak "Broken ATM" Sign Scam
4. How to Spot a Skimming Device
5. Safest ATMs in Bali
6. High-Risk ATM Locations to Avoid
7. 6 Rules for Card Protection in Bali
8. What to Do If Your Card Is Compromised
9. Travel Cards vs Bank Cards: The Better Option
10. Safe Cash Exchange in Bali

How ATM Skimming Works

ATM skimming is a two-component fraud operation:

1. Card data capture: A thin electronic overlay (skimmer) is fitted over the ATM's card slot. When you insert your card, the skimmer reads and stores the magnetic stripe data — your card number, expiry date, and the data encoded on the strip. Modern chip cards are harder to skim directly, but many ATMs in Bali still fall back to magnetic stripe processing, and the skimmer captures that data.
2. PIN capture: A miniature camera concealed above the keypad (often disguised as a brochure holder, vent, or piece of the fascia) films your hand as you enter your PIN. Alternatively, a thin flexible keypad overlay records keystrokes. The PIN is stored with the card data.

Once both components have captured data from multiple victims, the criminal returns to the ATM to retrieve the skimmer device (usually within 24–48 hours). The card data and PINs are encoded onto blank cards, which are then used at ATMs elsewhere — often in another country — to drain accounts before victims notice anything unusual.

Card skimming accounts for a significant portion of total card fraud losses globally, and Bali's high-value tourist population (carrying foreign cards with substantial balances and less monitoring of overseas transactions) makes it a structurally attractive target for organised skimming operations. ATM fraud is one of many financial threats tourists face in Bali — for the full picture, see our complete guide to Bali tourist scams.

Documented Cases in Bali

The following cases illustrate the scale and sophistication of organised skimming in Bali. They sit within a broader pattern of organised crime targeting tourists, covered in detail in our 2026 Bali crime and safety guide.

• Ukrainian skimming network: A documented case involving Eastern European nationals (Ukrainian nationals named in Bali police records) operated a skimming network across Seminyak and Kuta tourist areas. The operation ran for approximately two years before members were arrested by Cyber Crime Unit of Polresta Denpasar. Sentences included imprisonment followed by deportation. The network had successfully compromised cards from tourists across multiple nationalities and transferred funds internationally before arrest.
• Seminyak Commonwealth Bank ATM, 2023: A handwritten "broken" sign was placed over the card reader of a Commonwealth Bank ATM on Jl. Kayu Jati in Seminyak. A skimming device was installed on an adjacent ATM in the same alcove. Multiple tourists were redirected from the "broken" machine to the compromised one. Several reported unauthorised withdrawals within 24 hours, primarily from accounts in Australia and the UK.
• Kuta minimarket ATMs: Police operations in 2024 identified ATMs inside Indomaret and Alfamart convenience stores on the Kuta tourist strip as repeatedly targeted installation points. Standalone machines inside small shops are attractive targets because staff inside the shop typically do not monitor the ATM alcove closely.

The Seminyak "Broken ATM" Sign Scam

This is the variant of skimming fraud most commonly reported by tourists in Bali and deserves detailed explanation because it is so simple and effective:

The scammer approaches a cluster of ATMs (often 2–4 machines in one alcove or short street section). They place a skimming device on one or more of the machines. On one machine — typically one of the legitimate ones that tourists would naturally use — they affix a handwritten sign: "OUT OF SERVICE," "BROKEN," "NOT WORKING," or "PLEASE USE OTHER ATM."

The tourist, deterred by the sign, moves to the adjacent machine — which is the compromised one. They insert their card and enter their PIN, completing the skimming data capture without any awareness that anything is wrong.

How to Recognise This Scam

• A genuine ATM malfunction displays an error message on its own screen. It does not have a handwritten sign taped to it. Handwritten signs are not part of any Indonesian bank's service protocol.
• If you see a handwritten "broken" sign on an ATM, treat every other machine in the immediate vicinity as potentially compromised.
• Walk to the next street or to a bank branch rather than using any machine in that cluster.

How to Spot a Skimming Device

Skimming devices have become increasingly sophisticated and some are nearly impossible to distinguish from genuine ATM hardware. However, several physical signs remain indicators:

Card Slot

• Physical overlay: The card reader housing looks slightly different from the rest of the machine — different plastic colour, slightly different texture, or visible adhesive edges around the slot
• Wobbly or loose: Grab the card slot surround and attempt to move it. Genuine card readers are solidly integrated into the machine chassis. A skimmer overlay will have some movement or flex
• Unusual depth or bulk: The card slot appears to protrude further than expected or has additional material visible around the opening

Keypad

• Keypad overlay: The keypad feels spongier than normal, or the keys sit higher than the surrounding bezel — indicating a thin overlay recording keystrokes
• Pinhole above keypad: Look for small holes in the fascia material directly above the number pad — common camera concealment points
• Modified brochure holders or privacy screens: Unusually positioned or oddly angled plastic components attached near the keypad

General Machine Condition

• Scratches or marks around the card slot that suggest repeated attachment and removal
• Glue residue visible at seams
• Colour mismatch between components that should be uniform

If anything looks wrong, do not use that machine. Take a photo if you safely can and report it to the bank branch directly.

Safest ATMs in Bali

The hierarchy of ATM safety in Bali, from most to least secure:

Location Type	Risk Level	Reason
ATM inside a bank branch lobby (staffed hours)	Very low	Staff presence, security cameras, regular inspection
ATM in bank branch vestibule (after hours)	Low	Security cameras, known to bank; harder to tamper undetected
ATM in hotel lobby (major hotels)	Low–Moderate	Hotel security monitoring; less public access
ATM in shopping mall (Beachwalk, Discovery)	Moderate	CCTV, security, but high volume reduces individual inspection
Standalone street ATM	High	No staff oversight, easy physical access for device installation
ATM inside minimarket (Indomaret, Alfamart)	High	Staff attention is on the shop; documented targeting
ATM in parking area or outdoor alcove	Very high	Minimal oversight, easy access at night

Recommended Banks

All major Indonesian banks (BCA, BNI, Mandiri, BRI, CIMB Niaga) operate ATMs across Bali. The safest machines of any bank are those physically inside a bank branch during staffed hours. Of these:

• BCA (Bank Central Asia) — Widest ATM network in Bali, generally well-maintained, strong fraud monitoring
• BNI (Bank Negara Indonesia) — Reliable network, good CCTV coverage at branches
• Mandiri — Extensive network; use branch machines over standalone
• BRI (Bank Rakyat Indonesia) — Widespread, particularly useful outside the main tourist belt

High-Risk ATM Locations to Avoid

• Isolated ATM booths on the Kuta tourist strip after dark
• ATMs inside Indomaret and Alfamart on Jl. Legian and Jl. Raya Kuta
• Any ATM where you notice a handwritten sign on an adjacent machine
• ATMs in the street immediately outside nightclubs or bars (popular for late-night cash withdrawals — easy to install skimmers during peak distraction hours)
• ATMs in parking areas or basement levels with limited camera coverage

6 Rules for Card Protection in Bali

1. Use only in-branch ATMs during bank hours. Build this habit from day one. The extra two-minute walk to a bank branch is the single most effective skimming prevention measure.
2. Cover the keypad with your hand when entering your PIN. Always. Even at machines you trust. An overhead camera capturing your PIN is worthless without the card data — and your hand blocks the camera view.
3. Set a daily withdrawal limit before you travel. Log into your bank's app and reduce your daily ATM withdrawal limit to IDR 2–3 million (USD 125–185). This limits the maximum damage from any compromised transaction.
4. Check your account daily. Enable transaction notifications if your bank supports them. Early detection limits total losses and improves chargeback success rates.
5. Withdraw larger amounts less frequently. Rather than using an ATM every day for small amounts, withdraw a larger sum every 3–4 days at a single secure bank-branch machine. Each additional ATM use is an additional skimming exposure.
6. Use a dedicated travel card as your primary spending card. Keep your main bank debit card in the safe and use Wise, Revolut, or a similar travel card for daily transactions. If the travel card is compromised, you lock it from your phone and your main account is unaffected.

What to Do If Your Card Is Compromised

1. Block the card immediately via your bank's app or the emergency number on the back of your card. Do not wait to confirm the unauthorised transaction — block it the moment you suspect compromise.
2. Call your bank's international fraud line. Most banks have 24/7 international assistance numbers. Report the suspected skimming, the location and date of ATM use, and all suspicious transactions.
3. File a police report in Bali. Indonesian banks and international card networks (Visa, Mastercard) may require a local police report to support a chargeback claim. Visit Polresta Denpasar or the nearest police station to file a Laporan Polisi (LP). Bring your passport and the transaction record.
4. Document everything. Screenshot your transaction history, note the ATM location and time, and retain the police report number. Your bank's fraud team will need this to process the chargeback.
5. Do not return to the compromised ATM — this is a crime scene. If you can safely photograph the exterior of the machine from a distance, this may assist a police report.

Travel Cards vs Bank Cards: The Better Option

The structural protection offered by dedicated travel cards (Wise, Revolut, Airwallex) is significantly better than using a primary bank debit card in Bali:

Feature	Main Bank Debit Card	Wise / Revolut Travel Card
Instant lock via app	Sometimes	Yes — single tap in app
Exposure if compromised	Full bank account balance	Travel card balance only
Replacement speed	7–14 days for new card	Instant virtual card available
Transaction notifications	Varies by bank	Instant push notifications
Currency conversion fees	2–3% FX + ATM fee	Mid-market rate; low fees
ATM fees in Bali	USD 3–6 per withdrawal	Free up to monthly limit

Load your travel card with sufficient funds for your trip rather than topping up daily. Keep your main bank card locked in the hotel safe as an emergency backup only. Reducing your ATM dependency also saves money on fees — for a full breakdown of how to budget in Bali, see our guide to daily costs and travel budgets in Bali.

Safe Cash Exchange in Bali

For tourists who prefer cash, authorised money changers (PT resmi) are an alternative to ATM use. Key rules for safe exchange:

• Use only authorised money changers with an official sign, a physical office (not a street counter), and a visible Bank Indonesia or Otoritas Jasa Keuangan (OJK) permit number
• PT Central Kuta and BMC (Best Money Changer) in Kuta and Seminyak are among the most reputable authorised changers
• Count your money fully before leaving the counter — shortchange tricks (a quick-count sleight involving folded notes) are the most common money changer scam
• Never exchange money at unlicensed street touts offering unusually high rates — these operations frequently use sleight of hand or counterfeit notes
• Check the daily mid-market rate on Google before exchanging — rates more than 3–4% below the market rate should prompt you to look elsewhere

For further reference: Wise and Revolut are the most widely used travel card options for Bali visitors. The Bank Indonesia website lists authorised money changers and provides consumer fraud reporting mechanisms. For complete guidance on getting around Bali safely and affordably (reducing the need for cash), see our Bali transportation guide.