Report the withdrawal and lock access
- Lock or report the affected card and change its PIN through an approved method.
- Record the amount, time, ATM description and transaction status.
- Ask for the dispute process, case number and next update date.
Capture the ATM transaction before details disappear
Use the bank's transaction record as the base and add only facts you can support.
Transaction
Amount, local date and time, status, terminal location and available reference.
Card access
Where the physical card was and who could access it at the relevant time.
Reports
Card block time, bank case number and any terminal or police report requested.
Preserve the ATM facts the bank may need
Describe only what you know
Say whether the physical card is present, who could access it, and whether the PIN may have been exposed. Do not select a story merely because it sounds closest in an app.
Review nearby activity
Check for balance inquiries, small test transactions, transfers, cardless withdrawals and changes to contact details around the same time.
Protect essential payments
List rent, utilities, food, transport or medical payments due before the case may be reviewed. Ask what provisional or hardship process applies; do not assume it is automatic.
Follow up in the required form
The bank may require written confirmation or a specific form. Record the address or secure upload route and retain proof of submission.
Build the ATM transaction record before details fade
Start with the bank's own transaction line, then add facts about card possession, location and access without guessing how the withdrawal occurred.
- Transaction identity
- Record amount, local date and time, status, terminal description, location and available reference. Note whether related fees or additional withdrawal attempts appear separately.
- Card and PIN control
- State where the physical card was, when it was last used and who could access it. Do not write the PIN in the file or speculate that a particular person knew it without evidence.
- Immediate control
- Record when the card was locked or reported, whether the bank replaced it and whether the account itself needs added protection. Review nearby card, transfer and login activity for the same time window.
- External report
- Ask the bank whether it needs a terminal complaint, police report or written confirmation and how to submit it. Keep that reference separate from the bank's own fraud case number.
A cash withdrawal and a card purchase may follow different review paths. Confirm exactly which transaction is in the case and when the bank expects the next action or document.
If the incident reaches another account or record
The cash-flow impact can be different from credit-card fraud; review the debit-versus-credit reporting differences.
Build the bank submission around a focused transaction evidence record.
If the statement entry is an electronic bank debit rather than ATM cash, use the unauthorized ACH debit response.
Record the disputed cash withdrawal
- Copy the amount, date, time, terminal location and transaction status from the account record.
- Note where the physical card was and who could access it at the relevant time.
- Record card blocking, the bank dispute reference and any terminal or police report requested.
Questions that come up during containment
Should I contact the ATM owner first?
Start with the institution holding the account unless its instructions say otherwise. It controls the account report and can coordinate the investigation.
Does having the card prove the withdrawal was remote?
No. Card data, wallet access, cardless features or another card can complicate the facts. Let the institution investigate.
Processes, rights and deadlines depend on your location, provider and policy. Use the relevant official service for your jurisdiction.