Pennsylvania Police Warn of 'Funeral Donation' Scam After Card Data Breach in Parking Lot Incident

Pennsylvania state police have launched a fraud alert following a targeted scam in which individuals’ payment card information was allegedly skimmed from vehicles parked in a commercial lot near a funeral home in York County. Investigators believe the perpetrators used a portable card reader to capture data during brief interactions with vehicles, often under the guise of soliciting donations for a deceased person. The scam specifically prompted victims to make donations via card payments, which were then processed through fraudulent merchant accounts. According to law enforcement, at least 23 cardholders reported unauthorized charges between February 18 and March 5, 2026, with transaction totals ranging from $45 to $870. The average unauthorized charge was $210, and 14 of the affected accounts were linked to major banks with national processing networks. While no physical theft of cards was confirmed, compromised data enabled digital transactions, including online purchases and ATM withdrawals. Consumers are advised to monitor their accounts closely, especially for small, unusual transactions that could signal data testing. Financial institutions have activated fraud detection protocols, and affected customers are urged to freeze credit and request new card numbers immediately. The Pennsylvania Department of Banking and Securities is collaborating with the Federal Trade Commission to track the origin of the fraudulent merchant IDs used in the scheme. The incident underscores the growing sophistication of localized card skimming operations, particularly in high-traffic areas. With no indication of a larger cyberattack or system-wide breach, the focus remains on individual vigilance and rapid response by financial institutions to mitigate losses.