I've seen photos of some very convincing skimmers that I'd have no hope of detecting despite being pretty paranoid about them myself.

Rooted point-of-sale devices are also a possibility - that's what led to the big Target hack.

I finally saw a gas station with a chip and pin reader at the Bucees in South Texas, and my spirits were uplifted considerably. Gas stations seem to be both the ideal place to install a skimmer and the companies most dragging their feet upgrading to the tech that will eventually make card skimmers obsolete. It's frustrating how behind we are on this.

I pick gas stations based on whether they support contactless payments.

Going far afield now, but a skimmer isn't going to get my pin, right? This was a card-present, atm cash withdrawal that happened.

So POS systems store pins? I can't imagine them being certified if they do, or for what reason they might.

AFAIK, the POS hacks all ended up with cc numbers, no pins.

There are skimmers that fit over the PIN pad, or that have cameras pointed at it.

POS systems aren't supposed to store PINs, but a compromised one certainly could.