Distance
No company truck close enough to have taken the fuel.
I do not inspect pumps and I do not run a forensics lab. I read the card file you already have and the GPS you already pay for. A swipe with no tractor is the result a skimmer, a shared PIN, or a stolen card can leave.
Repeated stops at one site, with no load nearby in the TMS, are worth a line. One odd stop can be a glitch. A pattern is a review.
I will not deactivate a card. I will name it. The person who manages cards decides whether to kill it, reissue it, or call the card company.
If the gallons later show up in a fleet tank, I move the line out of this pile. A shared card that fueled a company truck is misuse or a habit, not a skimmer story.
What I look for
No company truck close enough to have taken the fuel.
The same card or site showing up again without a route.
A named card your team can shut off. I do not touch it.
Short answers
No. I catch the purchases that do not match a truck. The hardware is a different job.
That is your policy. I will show which cards have purchases no truck can explain.
Next step
15 minutes. Bring the card brand and the GPS. I do not need a new login for your shop.