The safest way to use an ATM card is to choose a visible, well-maintained machine, inspect the card reader before using it, cover the keypad when entering your PIN, and check your account soon after the withdrawal.
If the machine looks damaged, has loose parts, or someone nearby is making you uncomfortable, cancel the transaction and leave.
The catch is that ATM card safety does not end when the cash comes out. A stolen card number, exposed PIN, fake bank message, or unfamiliar withdrawal can become expensive when it goes unnoticed. Turn on transaction alerts, know how to lock your card, and save your bank’s official contact details before you need them.
Federal protections may limit your losses from certain unauthorized electronic transfers, but the amount you could be responsible for can depend on how quickly you report the problem. Fast action matters.
This article uses “ATM card” to mean the bank-issued card you use at an ATM, whether it is an ATM-only card or a debit card linked to your deposit account.
Choose the ATM before taking out your card
Your first safety decision happens before you touch the machine.
An ATM inside a bank lobby, busy supermarket, or well-lit shopping area is usually a better choice than one sitting alone in a dark parking lot. A visible location does not guarantee that the machine is safe, but it reduces some of the opportunities for tampering and physical theft.
The FDIC recommends avoiding ATMs in remote places, particularly when they are poorly lit or not visible to security cameras and the public. It also advises customers not to use a machine when the reader has suspicious, loose, or additional parts.
Look at the surroundings
Before approaching, check:
- Whether the area is well lit
- Whether other people are nearby
- Whether the machine is visible from the street or store
- Whether anyone appears to be watching customers
- Whether you have a clear path to leave
- Whether the ATM appears damaged or neglected
You do not need proof that something is wrong.
If the location makes you uneasy, use another ATM.
Be careful with enclosed ATM rooms
Some bank vestibules require a card to unlock the door outside business hours.
Do not hold the door open for a stranger claiming that their card does not work. Do not allow someone to follow closely behind you simply because refusing feels impolite.
Keep enough space between yourself and the next person in line. A PIN is harder to hide when someone is standing directly behind your shoulder.
Do not use an ATM because it is only slightly more convenient
A standalone machine beside a bar, market, or tourist attraction may save a short walk. It may also charge a large fee and receive less supervision than a bank-owned ATM.
The extra convenience is not worth much when the machine looks poorly maintained or unusually exposed.
Inspect the machine for skimming equipment
Skimming happens when criminals install equipment on or inside an ATM, payment terminal, or fuel pump to capture card data or record a customer’s PIN. The stolen information may be used to create fraudulent cards or make unauthorized transactions.
A skimmer may be difficult to identify. You are not expected to dismantle the ATM or perform a technical inspection.
You are looking for obvious signs that something does not belong.
Check the card reader
Look for:
- A reader that appears crooked
- A loose slot
- Plastic that does not match the rest of the machine
- An unusually thick card opening
- Glue, tape, scratches, or damage
- A part placed over the original reader
Gently check whether the card slot moves. Do not pull hard enough to damage the ATM.
Compare the reader with photographs or diagrams printed on the machine. If several ATMs sit beside each other, compare their card readers and keypads.
A part that looks different from every machine beside it deserves suspicion.
Check the keypad
Criminals may place a false keypad over the real one to record the numbers customers enter. Hidden cameras can also be positioned to capture PIN entry.
Look for:
- A keypad that appears raised
- Keys that feel unusually stiff
- An overlay that shifts or moves
- Small objects positioned above the keypad
- Unexpected holes or attachments facing your hands
If anything looks wrong, do not test the machine with your card.
Leave and notify the bank, store, machine operator, or police through a verified contact method.
Do not assume a familiar ATM is still safe
You may have used the same machine every Friday for three years.
That does not mean it was untouched this morning.
Give the reader and keypad a quick look every time. The inspection takes a few seconds and should become as routine as checking the amount before confirming a transfer.
Cover your PIN every time
Use your free hand, wallet, or body to block the keypad while entering the PIN.
Do this even when nobody appears to be standing nearby. A small hidden camera may have a better view than the person behind you.
Protect the PIN from both people and cameras
Stand close enough to the ATM to block the keypad naturally.
Keep your hand over the buttons from the first number to the final confirmation. Avoid saying the numbers aloud, even when another person is helping you with the transaction.
The FBI and FDIC both identify hidden cameras and false keypads as tools used in skimming schemes. Blocking the keypad can prevent a criminal from obtaining the PIN even if card data is captured.
Do not use an easy PIN
Avoid PINs based on information someone could guess from your wallet, phone, or social media account.
Poor choices include:
- Your birth year
- Your street number
- Repeated digits such as 1111
- A simple sequence such as 1234
- The last four digits of your phone number
- Numbers printed elsewhere in your wallet
The FDIC recommends choosing PINs and passwords that are difficult to guess and avoiding readily identifiable information such as birth dates, phone numbers, or part of a Social Security number.
Never keep the PIN with the card
Do not write the PIN on the card, on a slip of paper in your wallet, or in a phone contact labeled “bank PIN.”
If your wallet is stolen, the thief should not receive both parts of the transaction in one convenient package. The FTC and CFPB specifically warn against carrying a written PIN with the card.
Keep control of the card during the transaction
Prepare before reaching the ATM.
Have the card ready, but keep it out of sight until you are standing at the machine. After the transaction, return it to the same secure place every time.
Do not hand the card to a stranger
A person may claim that the machine is confusing, that your card was inserted incorrectly, or that they can help recover it.
Do not give them the card or tell them the PIN.
If the machine is not working, cancel the transaction and move away. Contact the bank yourself.
Do not become distracted
One person may speak to you while another watches the keypad, takes the card, or removes cash.
Distraction does not always look threatening. It may begin with a friendly question, dropped money, a request for directions, or an urgent warning that something is wrong with the ATM.
Finish or cancel the transaction before responding.
Wait for the ATM to finish
Do not walk away immediately after taking the cash.
Make sure you have:
- Your card
- Your cash
- Your receipt, if requested
- A completed or canceled screen
Some machines return the card before dispensing cash. Others keep it until the end.
Learn the order rather than reaching automatically and leaving something behind.
Use contactless or cardless access carefully
Some ATMs allow contactless cards, digital wallets, or app-generated access codes.
These options can reduce the need to insert the physical card into a reader, which may reduce exposure to a card-slot skimmer. They do not remove every risk.
Use only the official bank app
Download the app through the bank’s verified website or a reputable app store.
Do not install an app through a text message claiming that you need new cardless ATM access. The FDIC advises consumers to verify financial apps and avoid links or files from unexpected messages.
Protect the phone
Use a strong device passcode, biometric lock, and automatic screen lock.
A phone containing an unlocked banking app may provide more account access than a stolen card alone.
Do not leave a cardless withdrawal code visible on the screen while waiting in line. Treat it like a temporary PIN.
Check the ATM before tapping
Contactless access does not make a damaged or suspicious machine trustworthy.
The ATM can still have a false keypad, hidden camera, altered software, or a criminal waiting nearby. Inspect the machine and surroundings as you normally would.
Check ATM fees before continuing
Safety also includes protecting your money from unnecessary charges.
An ATM operator that charges a fee must disclose the amount on the screen or on paper before you are committed to the charge. The fee can be imposed only after you receive the notice and choose to continue.
Remember that two fees may apply
The ATM owner may charge one fee, and your bank may charge another for using an out-of-network machine.
Suppose each charges $3.
A $40 withdrawal costs $6 in fees.
You receive $40 but lose $46 from the account.
That is a 15% transaction cost compared with the cash withdrawn.
Cancel when the fee is not worth it
The confirmation screen is not a formality.
Read it.
If the fee is unreasonable and the withdrawal is not urgent, cancel and use your bank’s ATM locator. You may also be able to receive cash back from a planned debit card purchase, depending on the retailer’s rules and fees.
Take the cash without advertising it
Put the cash away promptly.
Do not stand at the machine counting a large stack while other people wait nearby.
Count it in a safer place
When you need to confirm the amount, move to a secure location such as inside your locked vehicle, a bank lobby, or another private area.
If the machine dispenses the wrong amount, record the details and contact the bank promptly.
Withdraw only what you need
A large cash withdrawal may reduce the number of ATM visits, but it also increases the amount that can be lost or stolen.
Balance fee avoidance with physical safety.
Withdrawing $500 to avoid a future $3 ATM fee is not a good trade when you only need $60 and will carry the rest for several days.
Do not accept help carrying or organizing the cash
This sounds obvious until someone appears helpful while you are flustered by a machine error.
Keep control of the money and move away from the ATM.
Handle the receipt safely
An ATM receipt can help document a withdrawal, deposit, fee, or machine problem.
Take it with you.
Do not leave it hanging from the printer or throw it into an open trash container beside the ATM. FDIC travel guidance tells customers to keep debit and ATM card receipts and protect their PINs.
Keep receipts only as long as they have a job
Compare the receipt with the account transaction.
After confirming that the amount is correct and no dispute exists, securely destroy it when you no longer need it.
A routine $40 withdrawal receipt does not need to become a permanent family record.
Keep problem receipts
Save the receipt when:
- The cash amount was wrong
- No cash came out
- The machine kept the card
- The deposit was not credited correctly
- An unexpected fee appeared
- You need to dispute the transaction
Photograph the receipt if the print is likely to fade, then store the image securely.
Turn on ATM and debit card alerts
A transaction alert can show an ATM withdrawal within seconds or minutes, depending on the bank’s system.
This is especially useful when someone uses copied card information while your physical card remains in your wallet.
Useful alerts to activate
- Every ATM withdrawal
- Withdrawals above a chosen amount
- Low account balance
- Debit card purchases
- International activity
- New device login
- Password or contact detail changes
The FDIC recommends reviewing statements and using available account alerts to identify unauthorized activity.
Set the amount low enough to catch a test transaction
Criminals do not always begin with a $1,000 withdrawal.
A smaller transaction may be used to test whether stolen card details work.
An alert only for withdrawals over $500 may miss the activity you most need to notice.
Keep contact information current
An alert sent to an old phone number does not protect you.
Review the email address and phone number attached to the account after moving, changing providers, or replacing a phone.
Review the account after using an unfamiliar ATM
Check the transaction through the official banking app or website, particularly after using a machine while traveling or in an unfamiliar location.
Confirm the withdrawal amount
Make sure the amount shown in the account matches the cash you received.
Also check:
- The ATM location
- The operator fee
- Your bank’s out-of-network fee
- Whether the transaction appears more than once
Continue watching the account
Stolen card data may not be used immediately.
Review account activity regularly and examine each monthly statement rather than assuming the card is safe because nothing happened that afternoon.
The FBI says skimming equipment can capture card data and PIN information that criminals later use for unauthorized purchases or account withdrawals.
Know how to lock the card quickly
Many bank apps allow you to temporarily lock or freeze a debit card.
Learn where the control is before the card disappears.
A lock is useful when the card may be nearby
If you cannot find the card at home, lock it while you search.
When you find it in yesterday’s jacket, you may be able to unlock it. If it remains missing, contact the bank and request a replacement.
A lock does not replace reporting theft
Do not assume that pressing one app button completes every step required by the bank.
If the card was stolen, the PIN may be compromised, or an unauthorized transaction has appeared, contact the institution promptly through its official channel.
Ask whether the account number, card number, PIN, and digital wallet tokens need to be changed.
Store the bank’s contact number separately
The number printed on the back of the card is not very helpful when the card is missing.
Save the official number in your phone and record it in your secure financial records system. Verify it through the bank’s website or statement.
Report a lost or stolen ATM card immediately
Do not wait until the next business day because you hope the card will return on its own.
Lock it if the option is available, then contact the bank.
Reporting speed can affect your possible loss
Under federal rules, when a debit or ATM card is lost or stolen, reporting it within two business days after discovering the loss generally limits your responsibility to no more than the unauthorized transactions or $50, whichever is less.
If you wait beyond two business days, your possible responsibility may rise to as much as $500. Further losses can become possible when unauthorized activity shown on a statement is not reported within the required period.
These rules are important, but you should not treat the maximum deadline as a waiting period.
Report the card now.
Tell the bank exactly what happened
Explain whether:
- The card is lost
- The card was stolen
- The PIN may have been seen
- The ATM kept the card
- You still have the card but see unauthorized activity
- Your phone or wallet was also taken
The bank needs the correct information to decide whether to lock the card, replace it, change the PIN, restrict the account, or begin an error investigation.
Follow up in writing when requested
A bank may require written confirmation after you initially report an unauthorized transaction by phone. If it asks for written confirmation and you do not provide it within the stated period, that can affect whether temporary credit is required during the investigation.
Save case numbers, dates, employee names, messages, receipts, and copies of documents you submit.
Report unauthorized withdrawals even when you still have the card
You can be a skimming victim without losing the physical card.
If an ATM withdrawal appears that you did not make or authorize, contact the bank immediately.
Do not assume the bank will notice first
Fraud systems may stop suspicious activity, but they will not identify every unauthorized transaction.
You know whether you withdrew $300 in another state at 2 a.m.
Tell the bank.
Review every statement within 60 days
When you still have the card and an unauthorized electronic withdrawal appears on a periodic statement, the CFPB says you should report it immediately and no later than 60 days after the statement was sent. Waiting longer can expose you to additional losses occurring after that period.
A statement review once every six months is not enough.
Ask what happens during the investigation
A financial institution generally has 10 business days to investigate an electronic transfer error, with different timing for some newer accounts and certain transactions. When it needs more time, it may generally provide temporary credit while completing the investigation, subject to the regulation’s conditions. Some investigations can take up to 45 or 90 days depending on the transaction.
Ask the bank:
- When the investigation began
- Whether written confirmation is required
- Whether temporary credit will be issued
- How bills should be handled while funds are missing
- How you will receive the decision
What to do when the ATM keeps your card
Do not accept help from a stranger and do not enter the PIN again because someone tells you the machine needs to release the card.
Lock the card immediately
Use the bank’s official app when possible.
Then call the machine operator or your bank using a verified number. An ATM may retain a card because it was reported lost, entered incorrectly several times, expired, damaged, or affected by a machine problem.
Ask whether the card will be destroyed
A bank branch may not be allowed to hand the card back, even when the machine sits in its lobby.
The machine may be serviced by another company, or the bank may require replacement for security reasons.
Do not leave the card active while waiting several days to find out.
Watch the account
A false card-trapping device can make it appear that the ATM swallowed the card while allowing a criminal to retrieve it after you leave.
Locking the card and reporting the problem promptly reduces the opportunity for later use.
What to do when no cash comes out
An ATM may debit the account even though it provides no cash or dispenses the wrong amount.
Do not repeat the same withdrawal several times without checking the account.
Record the machine details
Write down or photograph:
- The ATM location
- The machine identification number
- The date and time
- The amount requested
- The amount received
- The error message
- The receipt
Do not photograph other customers or sensitive information displayed on the screen.
Contact your bank promptly
Report that the account was debited incorrectly.
If the machine belongs to another institution, your own bank may still need to begin the electronic transfer error process because it holds the affected account.
Do not wait several weeks to see whether the money returns automatically.
Protect yourself from ATM-related scams
Some ATM scams do not involve altered machinery.
The criminal convinces you to make the withdrawal yourself.
No bank employee needs your PIN
A caller may claim that your account is under attack and tell you to withdraw money, move it to a “safe” account, or read a code to stop the fraud.
Hang up.
Call the bank using the official number on its website, statement, or saved contact record.
The FDIC advises people to verify unexpected communications through another channel and avoid clicking links or following instructions in suspicious messages.
Do not withdraw cash to protect it
A scammer may impersonate the bank, police, government, or technology support and claim that cash must be withdrawn before criminals steal it.
Taking money out of the insured account and handing it to a stranger does not protect it.
The FTC states that it will not threaten people, tell them to move money for protection, or instruct them to withdraw cash or buy gold for delivery.
A Bitcoin ATM is not a normal cash ATM
Bitcoin ATMs allow cryptocurrency purchases or transfers. Scammers may send victims to one with instructions to scan a code and deposit cash.
Once the cryptocurrency is sent, recovery may be extremely difficult.
The FTC warns that government agencies and legitimate businesses do not demand payment through a Bitcoin ATM.
Use extra care while traveling
Travel changes your normal ATM routine.
You may use unfamiliar machines, carry more cash, deal with another currency, and have less reliable phone access.
Find supported ATMs in advance
Use your bank’s official locator before leaving the hotel or airport.
Search for machines inside banks or established businesses rather than choosing the first freestanding ATM near a tourist area.
Check international fees
Your withdrawal may involve:
- Your bank’s international ATM fee
- An out-of-network fee
- The machine owner’s surcharge
- A foreign transaction fee
- A currency conversion cost
The FDIC recommends asking about ATM and foreign transaction fees before traveling.
Consider declining dynamic currency conversion
An overseas ATM may offer to convert the withdrawal into U.S. dollars.
The offer can feel safer because the amount looks familiar, but the ATM’s conversion rate may be less favorable than your card network or bank’s rate.
Read the terms and conversion cost before accepting.
Carry a backup payment method
One ATM card should not be your only access to money while away.
Keep a backup card separately, along with the bank’s international contact number. Do not carry both cards in the same wallet.
Manage withdrawal limits and overdraft settings
A daily withdrawal limit can reduce how much money leaves through the card in a short period. It can also inconvenience you during a legitimate large withdrawal.
Know your limit
Ask the bank:
- What the daily ATM limit is
- When the limit resets
- Whether bank-owned ATMs have a different limit
- Whether you can lower or temporarily raise it
- Whether purchases and withdrawals share one limit
A lower limit may reduce exposure, but it should still allow reasonable access during an emergency.
Check your overdraft choice
An ATM withdrawal that exceeds the available balance may be declined or may overdraw the account, depending on your account and overdraft settings.
Federal rules generally prohibit a bank from charging an overdraft fee on an ATM withdrawal unless you opted into the covered overdraft service.
A withdrawal fee plus an overdraft fee can make a small cash transaction extremely expensive.
Teach teenagers and older relatives the same safety habits
Anyone using the card should know the rules.
That includes a teenager receiving their first debit card and an older relative who may be targeted by impersonation scams.
Practice before the first independent withdrawal
Show a new card user how to:
- Choose a safe machine
- Inspect the reader
- Cover the PIN
- Read the fee screen
- Take the card, cash, and receipt
- Lock the card through the app
- Report a problem
Do not simply provide the card and hope the machine explains the rest.
Create one clear scam rule
No stranger, bank employee, police officer, government agent, or technology worker should tell them to withdraw cash or reveal a PIN during an unexpected call.
When someone creates urgency, hang up and call a trusted person or the bank directly.
A simple ATM safety routine
Before the withdrawal
- Choose a visible, well-lit ATM
- Check who is nearby
- Inspect the reader and keypad
- Have the card ready
- Know approximately how much you need
During the withdrawal
- Stand close to the machine
- Cover the PIN
- Decline unexpected fees when appropriate
- Ignore strangers offering help
- Do not become distracted
After the withdrawal
- Take the card
- Take the cash
- Take the receipt
- Put everything away before leaving
- Check the transaction in the bank app
- Continue watching the account
The full routine takes only a little longer than an unprotected withdrawal.
Common ATM card safety mistakes
Using the same easy PIN for several cards
One exposed number can place several accounts at risk.
Writing the PIN in the wallet
A stolen wallet then contains both the card and the instructions.
Ignoring a loose card reader
Do not continue because another person used it successfully five minutes earlier.
Letting someone stand too close
Ask for space or use another machine.
Leaving without the receipt
A receipt may contain transaction and account information and can help document an error.
Waiting to report a lost card
Reporting deadlines can affect your possible financial responsibility.
Ignoring a small unfamiliar withdrawal
A small amount may be an error, a forgotten transaction, or a test of stolen card information.
Trusting an incoming call
Caller ID can be misleading. End the call and contact the bank yourself.
Withdrawing cash for a caller
A legitimate fraud department does not protect your account by asking you to empty it.
Frequently asked questions
Can someone use an ATM card without the PIN?
An ATM cash withdrawal normally requires a PIN, but a debit card may also be used for other transactions that do not use the ATM PIN. Stolen card data can be used in several ways, so report a missing or compromised card even when you believe the PIN is safe.
Does covering the keypad really help?
Yes.
It can block another person or hidden camera from seeing the PIN. It does not prevent every type of skimming, but it may stop captured card data from being paired with the number needed for an ATM withdrawal.
Should you pull on the ATM card reader?
A gentle check for looseness can reveal an obvious overlay. Do not use enough force to damage the machine.
When anything looks suspicious, leave and report it.
Are bank ATMs always safe?
No machine is completely risk-free.
A bank-owned ATM in a monitored location may be easier to inspect and report problems with, but you should still examine the reader and cover your PIN.
Is contactless ATM access safer?
It can reduce the need to insert the physical card into the slot, which may reduce exposure to card-reader skimming.
You still need to protect the PIN, phone, app, cash, and account.
What should you do if someone watches you enter the PIN?
Cancel the transaction when possible and move to another location.
If you believe the PIN was exposed, change it through the bank’s approved process and monitor the account.
Can you get your money back after ATM fraud?
Federal protections may apply to unauthorized electronic transfers, but the process and your possible responsibility can depend on how and when the problem is reported.
Contact the bank immediately and follow its written dispute instructions.
What if the ATM shows a fee after you entered the PIN?
An ATM operator charging a fee must disclose the amount before you are committed to paying it and must allow you to decide whether to continue.
Should you use an ATM at night?
Use one only when the location is well lit, visible, and feels safe.
A daytime visit or indoor machine may be a better option when the area is isolated.
How often should you change the PIN?
Change it promptly when you suspect it was seen, stolen, or compromised. Also change default or temporary PINs and avoid reusing a weak number.
Your bank may have its own process or security recommendations.
The bottom line
ATM card safety depends on a series of small decisions.
Choose a visible machine. Inspect the card reader and keypad. Cover your PIN. Keep control of the card, cash, and receipt. Read the fee screen before continuing, and check the account after the withdrawal.
Then prepare for the problem you hope never happens.
Turn on alerts, know how to lock the card, and keep the bank’s official contact number somewhere other than the back of the card. Report a missing card, compromised PIN, or unfamiliar withdrawal immediately because federal protections can depend on how quickly you act.
Most ATM visits are uneventful.
That is exactly why the safety routine needs to become automatic. You should not have to remember it only after a suspicious reader, missing card, or unexpected withdrawal gives you a very expensive reminder.