Previously they figured an employee (totally plausible because some are a bit sketch), but now it seems that either an employee is cool with "checking the pumps for skimmers" or its someone remote-ish. I guess they can put a skimmer within 50-100 yards and pull your info without even on the property and when traffic slows down, they can go snatch the machine (even though they already have received all the info they gathered remotely). I don't know this 100% on that, but I work for the county so I hear some stuff floating around. But having someone say they only used her brand new card, very shortly actively activated and the only purchase she'd spent since activating it was circle K... Pretty hard to ignore