For most Portuguese people, Multibanco is part of their daily routine. Withdrawing money, paying for services or checking balances are automatic gestures. However, seemingly harmless actions have taken on new risks, as a result of the increase in fraud schemes associated with ATMs.
In recent months, authorities have identified several cases of illegal equipment installed in Multibanco terminals, designed to collect card data without the user noticing. These situations occur more frequently in machines located in places with little traffic or with poor surveillance, making it easier for fraudsters to operate.
Increasingly sophisticated fraud
According to the Judiciary Police, traditional cloning methods, which involved placing false readers visible in the card slot, are being progressively replaced by techniques that are more difficult to detect. One of the most recent is shimming, which uses extremely thin devices inserted inside the slot to copy data from the chip.
In addition to these practices, there is also the so-called physical phishing, which crosses information obtained online with data collected at terminals, increasing the likelihood of fraud being successful. The PJ warns of the increasing complexity of these schemes and the difficulty in identifying the devices with the naked eye.
In 2025, a criminal network responsible for losses of more than 450 thousand euros was dismantled, involving card cloning and money laundering. At the same time, the Portuguese Banking Association launched the campaign “Don’t pass a card to fraud”, drawing attention to the constant evolution of the techniques used, even on equipment that appears to be in perfect condition.
Where are the most occurrences recorded?
The metropolitan areas of Lisbon and Porto continue to concentrate a high number of alerts, as a result of the large influx of users and the vast network of available terminals. Constant movement makes it difficult to immediately detect changes to equipment.
In the Algarve, especially during periods of greater tourist demand, several similar situations have been recorded. Specific cases also arise in Alentejo and the North of the country, leading the PJ to reinforce surveillance in locations such as Beja, Serpa and Viana do Castelo. These episodes demonstrate that the risk is not limited to large urban centers.
How scammers work
The most common schemes use two types of devices: skimmers and shimmers. The former capture data from the magnetic strip, while the latter access information from the chip in a more discreet way. Often, these mechanisms are complemented by hidden micro-cameras or false keyboards, designed to record the PIN code entered by the user.
In some cases, the terminals present small, almost imperceptible changes, such as overlays on the keyboard or disguised openings, making the scheme difficult to identify on first use.
Warning signs before using a terminal
Before inserting the card, it is advisable to carefully observe the ATM. Loose or misaligned slots, unstable keyboards, traces of glue, strange holes or abnormal resistance when inserting the card may indicate tampering with the equipment.
If there is any suspicion, the recommendation is not to use the terminal and look for another one, preferably inside a bank branch or in a place with permanent surveillance.
Simple measures to reduce the risk
recommends the use of ATMs located in supervised spaces and advises against using isolated machines, especially at night. Covering the keyboard when entering the PIN, regularly checking account movements and activating transaction alerts are essential precautions.
Avoiding withdrawals of large amounts in public places and acting quickly in case of suspicion also makes a difference. Whenever there is evidence of fraud, the user must immediately contact the bank to block the card and file a complaint with the authorities.
Simple preventive measures continue to be the best way to ensure that using Multibanco remains safe and free from unpleasant surprises.
Also read:
