Old-School Credit Card Scams Are Far From Dead

Old-School Credit Card Scams Are Far From Dead

Old-school credit card scams are thriving in 2026. The evidence is arriving in mailboxes across Europe. Consumers have spent years training themselves to distrust every unexpected text message and email, and yet criminals have quietly revived two analog tactics that many people assumed were obsolete, fake cards sent through the postal service and magnetic stripe skimmers attached to payment terminals. But we've been watching the wrong channels. They're back.

The mail-based scheme works. It exploits trust, not technology. In recent years, households in Portugal, France, and Germany have reported waves of physical credit card scams, in which criminals mail phony replacement cards or letters to potential victims. The letters claim a current card is about to expire. It doesn't matter if you don't actually hold a card nearing its expiration date. To activate the new card, the letter instructs, the recipient should register it using an enclosed QR code or URL.

Some of these sham cards even carry the victim's real name printed on them. That personal touch is the entire point.

"The card is almost like a token that creates the trust that is needed in order to fall for the actual trick," says Georg Hauer, an advisor for digital banks.

Scan the QR code. You land on a fake banking website. Enter your details there, and you may hand cybercriminals direct access to your real accounts. Hauer says the campaign has been escalating for close to two years, and he suspects it has proven successful enough to spread beyond its current borders, which means the scheme that started in one place may already be running quietly in others. The economics have shifted in the criminals' favor. AI can now copy a card design from a single image, which has driven down the cost of producing a personalized fake card. And a higher conversion rate per victim, Hauer argues, may justify the extra expense.

An Indictment Straight Out of the 1990s

Mail fraud isn't the only throwback making a comeback. Last week, the US Attorney's Office for the Northern District of Alabama indicted two Romanian nationals on charges related to alleged credit card skimming, and authorities say the pair specifically targeted government SNAP food assistance benefits. Those benefits reach recipients in most states on antiquated magnetic stripe-only debit cards. They're called Electronic Benefit Transfer cards. And they don't offer much protection.

Chip cards aren't immune either. But classic skimmers that target magnetic stripes remain in circulation because enough swiping still happens to make them profitable, and this case highlights a simple reality. The FBI says EBT card skimming has grown in popularity among scammers since about 2021. That's it.

"Skimmer fraud is rampant with losses in the United States alone reaching over $1 billion each year," US Attorney Phillip W. Williams Jr. said in a press release about the indictment. "It is a silent insidious theft that occurs by merely swiping a credit card at a point of sale."

That billion-dollar figure covers multiple types of credit card skimming, not just EBT targeting. The scope is still staggering.

Why Magnetic Stripes Refuse to Die

Gary Warner is director of intelligence at DarkTower, a cybersecurity firm, and he points out that dozens of states continue to issue mag-stripe-only cards for benefits purposes, which means the stripe is the only thing standing between a recipient and a cloned card. The risk is straightforward. If the stripe is compromised, a clone can be created. And that clone can access the current balance. It can access future value too. So the danger isn't just what's on the card right now, because a thief who clones the stripe can reach not only the current balance but future value as well, and that's a problem states don't seem to be fixing.

Warner sees broader exposure too. Even cards that include modern chips can be vulnerable at certain terminals. Non-bank ATMs and smaller non-chain merchants may expose a chip-enabled card to magnetic stripe reading. Skimmers are often installed in a way that forces the chip read to fail, pushing the transaction onto the less secure stripe.

Magnetic stripes are fading. They've been phased out gradually in the US over many years, but they haven't disappeared, and they're still around. Mastercard said last month that it will stop issuing any cards with stripes in 2029, with its remaining batch completely out of circulation by 2033, so that's the end date.

The Real Target Is Your Savings

Financial fraud is now one of the largest overall crime categories in the US and around the world. Many attacks lean on social engineering, mass phishing campaigns, and other schemes where victims send money in transactions that look legitimate to banks and other institutions, and that's what makes them so hard to stop. But the ambitions behind old-school credit card scams are often larger. They're bigger than a quick cash grab.

"The real idea behind some of these scams is to not essentially try to steal €2,000 from someone's bank account, but rather actually empty a proper savings account, which holds much more money," Hauer says.

That framing matters. A skimmed EBT card drains a monthly benefit. A compromised savings account can take years to rebuild.

How to Push Back

If dodging scams already feels like a full-time job, the defenses against these older tactics are refreshingly simple.

• Avoid swiping cards whenever possible, and opt for chip or contactless payment instead.
• When swiping is unavoidable, as with many EBT cards, inspect the terminal for anything unusual, altered, or broken. If something looks off, use a different terminal.
• Apply the same skepticism you reserve for texts and calls to physical mail. Marketers, healthcare providers, banks, and the IRS still send letters, but so do scammers.

We dismiss a paper letter as harmless. That's the whole trick. The instinct to wave off a piece of mail as harmless is exactly what makes old-school credit card scams work, because it's the thing that gets you to drop your guard. A convincing card with your name on it carries a weight that a suspicious text never will. So treat unexpected mail about your accounts the way you'd treat an unexpected link. Verify before you scan.

Frequently Asked Questions

What are the two analog tactics that criminals have revived according to the article?

The article states that criminals have revived fake cards sent through the postal service and magnetic stripe skimmers attached to payment terminals. These are described as old-school credit card scams that are thriving in 2026.

How does the mail-based credit card scam trick recipients into handing over their details?

The scam involves mailing phony replacement cards or letters claiming a current card is about to expire, and the letter instructs the recipient to register the new card using an enclosed QR code or URL. Scanning the QR code leads to a fake banking website where entering details may give cybercriminals direct access to real accounts.

Why have magnetic stripe skimmers remained profitable despite the gradual phase-out of magnetic stripes?

The article explains that classic skimmers that target magnetic stripes remain in circulation because enough swiping still happens to make them profitable. Additionally, skimmers are often installed in a way that forces the chip read to fail, pushing the transaction onto the less secure stripe.

When did the FBI note that EBT card skimming began to grow in popularity among scammers?

According to the article, the FBI says EBT card skimming has grown in popularity among scammers since about 2021. This is mentioned in the context of an indictment against two Romanian nationals for alleged skimming targeting SNAP benefits.

Who is Georg Hauer and what does he say about the real target of some of these scams?

Georg Hauer is described as an advisor for digital banks who says the card in the mail-based scheme is almost like a token that creates the trust needed to fall for the trick. He also states that the real idea behind some of these scams is to empty a proper savings account, which holds much more money, rather than just steal a small amount.