An ATM looks like a machine that gives out cash, but a cash withdrawal is really a coordinated banking transaction. The machine must identify a card, collect a PIN securely, send a request through a payment or banking network, receive authorization, count physical banknotes, detect whether the notes moved correctly, present them to the customer, update transaction records and later reconcile the cash remaining inside the machine. If you are asking how ATMs work, how an ATM verifies a PIN, how it knows your bank balance, how cash dispensers count notes, why a withdrawal can be declined, what happens when an ATM keeps a card, or how ATMs connect to banks, the answer is a system of electronics, cryptography, cash handling, networks and financial controls.

The central idea is that an ATM does not usually decide on its own whether you are allowed to withdraw money. It acts as a secure terminal connected to banking systems. Your card supplies account-related credentials or payment-network information. The ATM gathers the transaction request. The issuing bank or authorized processor evaluates rules such as card status, PIN verification, available balance, withdrawal limits and fraud controls. Only after approval does the machine normally proceed to dispense cash.

This guide explains ATMs from first principles. We will move through cards, chips, magnetic stripes, PINs, encryption, bank networks, authorization, cash cassettes, note picking, sensors, deposits, cash recycling, settlement, fees, limits, reconciliation, physical security, skimming defenses, accessibility, failure modes, worked examples, misconceptions and practical use. The goal is not to expose secret security procedures. It is to show how a familiar machine safely connects digital money records with physical banknotes.

The simplest mental model: an ATM is a bank terminal with a cash-handling machine attached

An ATM combines two very different worlds. One world is digital: account identifiers, authorization messages, encrypted credentials, network connections and transaction records. The other is physical: banknotes stored in cassettes, motors, rollers, sensors, shutters and secure enclosures.

A successful withdrawal requires both worlds to agree. The bank must approve the financial transaction, and the dispenser must physically deliver the requested amount. If either side fails, the system needs a way to record what happened and resolve the difference.

This is why an ATM is more than a vending machine. A snack machine can often decide locally whether the product has dropped. An ATM participates in a regulated financial network where cash movement and account records must be reconciled.

What information is on a payment card?

A bank card can contain a chip, a magnetic stripe and printed information. The exact data and security functions depend on card type and payment scheme, but the card provides identifiers and cryptographic capabilities used to route and authenticate transactions.

The card does not normally contain a live copy of your bank balance. Your balance changes across purchases, transfers, deposits and other events, so the authoritative account record is held in banking systems. The ATM must contact those systems or an authorized processor to learn whether a withdrawal is allowed.

This distinction explains why an ATM may show an old-looking receipt only if a network problem occurs or why a transaction can fail even though the card itself appears undamaged. The card is a credential and routing instrument, not the entire bank account.

Chip cards: a tiny computer on the card

A chip card contains an integrated circuit capable of processing data and participating in cryptographic protocols. When inserted into a compatible reader, the card and terminal exchange information according to the transaction rules of the card system.

Chip transactions are designed so the card can prove more than a static number. Dynamic cryptographic data can make copied transaction information less useful than simple duplicated magnetic-stripe data.

The chip does not eliminate all fraud, but it changes the security model. Instead of trusting only fixed data, the system can evaluate transaction-specific cryptographic evidence.

Magnetic stripes: an older data-carrying method

The magnetic stripe stores encoded information in magnetized tracks. A reader senses changes in magnetic orientation as the card moves past a read head. This technology is simple and widely compatible, but the stored data are comparatively static.

Because static data can be copied more easily than chip-generated transaction data, many systems prefer chip transactions where available. Magnetic stripes can still exist for compatibility or fallback under controlled rules.

An ATM therefore needs to know not only what card data it read but how those data were obtained. The method affects the transaction’s risk and processing rules.

The PIN: proving knowledge without sending it around casually

A personal identification number is a secret known by the cardholder and verified through banking security systems. The ATM keypad captures the digits, but secure design aims to protect the PIN from being exposed as ordinary readable text through the transaction path.

PIN information is typically handled using cryptographic protections and specialized secure components. The bank or authorized verification system determines whether the entered PIN is correct according to the card and account rules.

The ATM screen may simply say “incorrect PIN,” but behind that message is a controlled authentication process. Repeated incorrect attempts can trigger limits or card controls because the system treats guessing differently from an ordinary transaction decline.

Encryption: protecting sensitive transaction data

ATMs communicate across networks that may span branches, processors, payment schemes and banks. Sensitive data therefore need cryptographic protection so unauthorized observers cannot simply read or alter transaction messages.

Encryption transforms information using keys so that only systems with the appropriate cryptographic capability can recover or verify it. Authentication mechanisms can also help systems detect whether messages were modified.

Good security depends on key management as much as on algorithms. Keys must be generated, stored, rotated and used under controlled procedures. The visible ATM is only one endpoint in a wider security architecture.

Secure hardware: why banking systems use dedicated cryptographic devices

Financial institutions often use hardware security modules, or HSMs, to perform sensitive cryptographic operations and protect important keys. These devices are designed to resist extraction and to enforce controlled use of keys.

An ATM environment may also contain tamper-resistant modules for PIN entry and transaction security. If a component detects certain kinds of tampering, it can disable sensitive functions or protect stored secrets.

The broad principle is separation of trust. Ordinary application software should not casually handle the most sensitive cryptographic secrets when dedicated secure hardware can enforce stronger boundaries.

How a withdrawal request travels

After the card is read and the customer chooses an amount, the ATM constructs a transaction message. The message includes information needed to identify the card relationship, ATM, transaction type and requested amount, along with protected authentication data.

The request travels through the ATM operator’s network and may pass through a payment switch or card network before reaching the card-issuing bank. If the ATM belongs to the same bank as the card, the route may be shorter, but the logical steps remain similar.

Each intermediary needs enough information to route the message correctly without gaining unnecessary access to secrets. The network behaves like a specialized message-routing system for financial decisions.

Authorization: the bank decides whether to approve

The issuer evaluates the withdrawal request against account and card rules. It may consider whether the card is active, whether authentication succeeded, whether sufficient funds or credit are available, whether daily limits permit the withdrawal, and whether risk systems detect unusual activity.

An approval means the bank is willing to authorize the requested transaction under those conditions. A decline does not always mean the account is empty. It can result from limits, card restrictions, temporary system problems, location rules or risk controls.

This is why the ATM cannot always explain the full reason for a decline. The decision may originate in the issuing bank, while the ATM receives only a standardized response.

Available balance is not always the same as ledger balance

Bank accounts can have several balance concepts. The ledger or book balance reflects posted entries, while available balance can account for holds, pending card transactions, overdraft arrangements or deposits that are not yet fully available.

When an ATM checks whether a withdrawal can proceed, the bank typically uses the balance definition relevant to its rules. A customer may therefore see a positive account balance but still be unable to withdraw the full amount.

This distinction is not unique to ATMs. Digital banking systems often separate recorded money from money currently available for new transactions because some obligations are already reserved.

Withdrawal limits: managing risk and cash

Banks and ATM operators can apply per-transaction or daily withdrawal limits. These limits reduce potential loss if a card or credential is compromised and help manage the physical cash capacity of machines.

Limits can vary by account type, card product, country, ATM operator or time period. Some banks allow customers to change certain limits through secure channels, while others use fixed rules.

A limit is therefore a policy layer on top of available funds. Having enough money in the account does not guarantee that the entire amount can be withdrawn in one ATM transaction.

Cash cassettes: banknotes stored by denomination

Inside a cash-dispensing ATM, banknotes are usually stored in secure cassettes. Different cassettes can hold different denominations, allowing the machine to combine notes to make requested amounts.

The cassette is designed for controlled loading and tracking. Staff or cash-service providers replenish machines under security procedures, and the system records how many notes are expected in each cassette.

An ATM cannot dispense any amount imaginable if its available denominations cannot construct that amount. A machine stocked only with 20-unit notes cannot deliver 30.

How notes are picked and counted

When a withdrawal is approved, motors and rollers feed notes from the required cassettes. Sensors monitor note movement, thickness, timing and position. The mechanism tries to separate one note at a time and detect doubles, skewed notes or jams.

Dispensed notes can pass through a staging or presenter area before the customer-facing shutter opens. This gives the machine a chance to verify the bundle before presenting it.

The system does not merely trust the number of motor rotations. Physical sensors create evidence that the expected notes actually moved through the mechanism.

Reject bins: what happens to suspiciously fed notes

If sensors detect a note that appears doubled, skewed or otherwise unsuitable for presentation, the ATM can divert it into a reject area rather than give it to the customer.

This protects transaction accuracy. The machine’s internal count then needs to distinguish notes successfully dispensed from notes diverted to the reject bin.

During servicing, cash counts can reconcile cassettes, reject bins and transaction records. The physical notes become evidence against the digital ledger.

The presenter and shutter: controlling the final handoff

Many ATMs stage the complete bundle behind a shutter. Once the dispenser believes the amount is correct, the shutter opens and the notes are presented for the customer to take.

Sensors can detect whether notes were removed. If a customer walks away without taking them, some machines can retract the cash into a separate area after a timeout. The exact handling and account adjustment depend on operator design and banking rules.

This final handoff matters because authorization and physical possession are separate events. The system needs evidence about both.

When an ATM debits the account

The financial record can involve authorization, posting and later settlement rather than one single instant database action. The exact sequence depends on network and bank design.

From the customer’s perspective, the withdrawal often appears immediately or very quickly in available balance. Internally, the transaction may still pass through reconciliation and settlement stages between institutions.

This layered model helps explain why a rare disputed cash-dispensing event can require investigation. The bank compares electronic messages with ATM journal records and physical cash reconciliation.

ATM journals and audit records

ATMs maintain transaction logs or electronic journals that record operational events. These records can include timestamps, transaction stages, errors, cash-dispensing results and device status.

The journal does not need to expose secrets to be useful. It provides a sequence showing what the machine believed happened: card read, request sent, response received, cash command issued, notes presented or error detected.

Audit records support troubleshooting, dispute handling and maintenance. They turn a brief customer interaction into a traceable technical event.

Reconciliation: matching physical cash with digital records

At servicing or replenishment, the expected cash position is compared with physical notes. Starting cash minus successful withdrawals plus accepted deposits and other adjustments should align with what remains, subject to the machine’s design.

Differences can point to jams, rejects, loading errors or recording problems. Reconciliation is important because digital approval alone cannot prove that physical money moved exactly as intended.

This is a powerful systems idea: when a process crosses from software into the physical world, independent reconciliation helps detect divergence.

Cash replenishment: ATMs are small secure warehouses

An ATM can only dispense while it has suitable banknotes. Operators forecast cash demand and schedule replenishment before cassettes run empty.

Demand varies by location, day of week, payday patterns, holidays and events. Loading too little creates outages and expensive emergency visits. Loading too much leaves more cash idle inside the machine.

Cash management therefore resembles inventory planning. The product happens to be money, but the operational problem is still forecast, stock, replenishment and security.

Deposit ATMs: reversing the direction of value flow

Deposit-capable ATMs accept cash or cheques, depending on the banking system. Modern cash-accepting machines can scan notes, evaluate denomination and perform authenticity checks before storing them.

A deposit may be credited immediately, provisionally or after further processing depending on bank rules. The machine’s count and the bank’s availability policy are related but not identical.

Deposit functions increase mechanical complexity because the ATM must identify incoming items, reject unsuitable ones, store accepted items and maintain a trustworthy record of what entered.

Cash recyclers: using deposits to supply withdrawals

A cash-recycling ATM can store accepted valid banknotes in a way that allows some of them to be dispensed again. This can reduce the amount of cash that must be transported between machine and cash centre.

Recycling requires strong note validation and inventory tracking because incoming customer notes become outgoing inventory. Denomination, quality and authenticity need to be controlled.

The idea is operationally elegant: instead of treating deposits and withdrawals as separate physical streams, the machine can balance local inflow and outflow.

Why an ATM sometimes says it cannot dispense the requested amount

The ATM may be low on one denomination even while it still contains substantial total cash. A request for 50 cannot be built if the machine only has 20-unit notes available.

The dispenser may also take a cassette out of service after repeated feed errors. Software then calculates possible combinations using only healthy cassettes.

This is another example of constrained capacity. Total resources can appear sufficient while the specific mix needed for the request is unavailable.

Connectivity: what happens if the network goes down

ATMs normally rely on secure network connectivity to authorize transactions. If the connection to the processor or bank is unavailable, the machine may be unable to complete ordinary withdrawals.

Some financial systems have controlled stand-in or offline rules for selected transaction types, but these involve risk and are tightly governed. The customer should not assume that a disconnected ATM can simply trust the card locally.

Reliable communications are therefore part of cash availability. A fully stocked, mechanically healthy ATM can still be unusable if authorization systems cannot be reached.

Fees: who can charge and why

ATM transactions can involve the cardholder’s bank, the ATM owner and network intermediaries. Depending on account terms and jurisdiction, the customer may face an ATM operator surcharge, an out-of-network fee from the bank, currency conversion costs or other charges.

A fee is not created by the physical act of counting banknotes alone. It reflects network access, cash handling, machine ownership, servicing and commercial agreements.

Good user practice is to read the on-screen fee disclosure before confirming. The machine should present required charges clearly enough for the customer to decide.

Foreign cards and currency conversion

When a card is used abroad, the transaction may be routed through an international payment network. The withdrawal can involve currency conversion between the ATM’s local currency and the account currency.

Some ATMs offer dynamic currency conversion, where the machine presents an amount converted into the cardholder’s home currency at a stated rate. Choosing this is different from letting the card network or issuing bank perform conversion later.

The important principle is to separate the cash amount, ATM fee and exchange-rate decision. They are three different components that can affect the final account cost.

Physical security: protecting a machine that contains cash

ATMs use strong enclosures, locks, alarms, anchoring and site security appropriate to their risk environment. The cash safe is separated from the customer-facing computer and display components.

Physical attacks remain possible, so security design uses layers rather than one barrier. Location, surveillance, construction, access procedures and rapid response can all contribute.

Operational security also matters during cash loading. The period when the safe is opened is managed under controlled procedures because normal protective barriers are temporarily reduced.

Skimming and card-reading fraud: why the card interface is monitored

Criminals have sometimes attempted to capture card data or PINs by adding unauthorized devices or overlays to legitimate terminals. Banks and ATM operators respond with anti-tamper design, monitoring, chip technology, secure PIN pads and inspection routines.

For users, the practical lesson is simple: if a card slot, keypad or surrounding panel looks damaged, unusually loose or inconsistent with the machine, avoid using it and report the problem through a trusted channel.

Security advice should stay defensive. The goal is to recognize abnormal equipment and protect credentials, not to reverse-engineer protective mechanisms.

Cameras and privacy

ATMs may be monitored by security cameras to deter crime and provide evidence around disputed or suspicious events. Camera placement and retention are governed by the operator’s policies and applicable privacy law.

A camera does not need to see the PIN. In fact, secure design should prevent surveillance from capturing sensitive keypad entry in a usable way.

Security monitoring therefore balances evidence with privacy. The system wants to know what happened around the machine without exposing the secret used to authorize the transaction.

Why ATMs sometimes keep a card

A card can be retained for several reasons depending on machine and bank rules: repeated authentication failure, a card reported blocked, a malfunction during the transaction, or the customer failing to remove the card within a timeout.

Modern machines that use dip or contactless interfaces may reduce some retention scenarios, but inserted-card ATMs can still physically hold a card.

If a card is retained, the safest response is to contact the issuing bank through a trusted number rather than relying on assistance from an unknown person near the machine.

Contactless ATM access

Some ATMs support contactless card or mobile-wallet interfaces. The customer presents a compatible credential near the reader instead of inserting the physical card.

Contactless changes the local interface but not the fundamental transaction model. The ATM still needs authenticated credentials, authorization from banking systems and a successful physical cash-dispensing sequence.

The user experience can be faster and avoids some card-retention risks, but security still depends on the wider account, device and network controls.

Accessibility: banking access must work for different users

ATMs can include tactile keypads, audio guidance, screen-reader modes, suitable reach ranges, high-contrast interfaces and other accessibility features. The exact requirements differ across jurisdictions and machine designs.

Privacy is important in accessibility. Audio guidance, for example, should allow use through headphones rather than broadcasting financial information to bystanders.

Accessibility is not an optional cosmetic layer. If a customer cannot independently understand or operate the machine, the banking service is not functionally available to that person.

Receipts and on-screen confirmations

ATM receipts can show transaction type, amount, time and sometimes partial account information or balance. Sensitive identifiers are normally masked or limited.

A receipt is useful evidence but not the complete banking record. The bank’s transaction history remains the authoritative financial record if a dispute arises.

Users should still protect receipts containing personal or financial information rather than leaving them at the machine. Small fragments of data can become useful when combined with other information.

Maintenance: an ATM is a networked electromechanical system

Technicians maintain card readers, dispensers, sensors, printers, screens, keypads, communications modules and power systems. Software and security updates also matter.

Preventive maintenance can reduce jams and unexpected downtime, but ATMs operate in varied environments with dust, humidity, heavy use and occasional vandalism. Failures cannot be eliminated entirely.

Remote monitoring helps operators distinguish cash-low conditions, printer problems, network failures and mechanical faults so the right service team and parts can be dispatched.

Worked example: a normal 200-unit withdrawal

A customer inserts a card, enters the PIN and requests 200. The ATM reads the card, protects the authentication data and sends an authorization message through the relevant network.

The issuing bank confirms the card and PIN status, checks available funds and limits, and returns approval. The ATM calculates a note combination, feeds and verifies the required banknotes, stages the bundle and opens the cash shutter.

Sensors confirm the notes were presented and taken. The transaction is logged, account records are updated through the banking process, and the ATM’s expected cassette counts fall by the notes dispensed.

Worked example: approved transaction but no cash appears

Suppose authorization succeeds, but the dispenser detects a jam before the cash reaches the customer. The machine records a dispense error and may reverse or flag the financial transaction according to network rules.

If the account nevertheless appears debited, the customer can report the dispute. The bank or operator can compare authorization records, ATM journal events and later physical cash reconciliation.

This is why an ATM dispute can take investigation even when the customer’s experience is simple. The system must determine whether digital approval and physical delivery diverged.

Worked example: why a cash-rich ATM can still refuse 30

Imagine the machine contains thousands of units in 20-value notes but has no 10-value notes. A customer requests 30. The machine cannot create that exact amount from available denominations.

The problem is not insufficient total cash. It is denomination mix. A request for 40 might succeed immediately using two 20-value notes.

This is the same resource-allocation principle seen in many systems: total capacity and usable capacity for a specific request are different.

Common misconceptions about ATMs

“The ATM stores my bank balance on the card.” It normally obtains authorization from banking systems because account balances change independently of the physical card.

“If the ATM has cash, it must approve my withdrawal.” Approval depends on the issuing bank, card status, available funds, limits and risk controls as well as physical cash.

“A decline means I have no money.” A decline can have many causes, including limits, temporary connectivity problems, card restrictions or issuer risk rules.

More misconceptions: PINs, cash and network messages

“The ATM operator can simply read my PIN.” Secure systems are designed so PIN handling uses protected components and cryptographic processing rather than casual readable storage.

“The machine knows exactly how much cash it has because software says so.” Software maintains expected counts, but physical reconciliation and sensors are still important because jams, rejects and loading errors can create differences.

“The ATM and my bank are always the same company.” Many machines are operated by organizations different from the card issuer and communicate through shared payment networks.

A practical way to diagnose an ATM problem

If a card is not read, the issue may be the card, reader or interface. If authentication fails, the problem is different from a cash-dispensing error. If authorization succeeds but cash does not appear, preserve the transaction details and contact the bank or ATM operator through trusted channels.

If the ATM shows out of service, the cause could be cash depletion, network failure, maintenance, printer fault or another device issue. The message is intentionally simple because the machine does not need to expose internal diagnostics to customers.

For financial disputes, time, location, amount and account transaction records are useful. Do not rely on an unknown bystander to troubleshoot a banking credential or retained card.

Frequently asked questions about ATMs

How does an ATM know my PIN is correct?

The entered PIN is handled through protected cryptographic processes and verified by the issuing bank or authorized security system according to the card rules.

Does an ATM know my full bank balance?

It can request balance or authorization information from banking systems when the service is supported. The live balance is not normally stored as a simple value on the card.

Why can an ATM decline a withdrawal when I have money?

Possible reasons include daily limits, card restrictions, available-balance rules, network problems or fraud-prevention controls.

How does an ATM count banknotes?

The dispenser feeds notes from cassettes and uses sensors to detect movement, thickness, position and potential doubles or jams.

What happens if I forget to take the cash?

Some machines can retract uncollected notes after a timeout. Account handling depends on the ATM and bank process, so the transaction should be checked and reported if needed.

Why do ATMs charge fees?

Fees can come from the ATM operator, card issuer or international network arrangements and can reflect cash handling, network access and service costs.

Why does an ATM sometimes keep a card?

Possible reasons include security rules, repeated failed authentication, a blocked card, a device problem or failure to remove the card in time.

Can an ATM work without the internet?

ATMs use secure banking communications rather than ordinary browsing, but they generally need network access to authorize normal transactions. Limited stand-in rules, where used, are tightly controlled.

What is a cash-recycling ATM?

It can validate some deposited banknotes, store them securely and later use eligible notes for withdrawals, reducing cash-transport needs.

What should I do if an ATM debits me but gives no cash?

Record the ATM location, time and amount, check your banking record, and contact your bank or the ATM operator through a trusted official channel so the transaction can be investigated.

The bigger idea: an ATM joins digital trust to physical money

An ATM works because several systems agree on one transaction. The card presents credentials. Cryptography protects sensitive information. Networks route the request. The bank decides whether the account permits the withdrawal. Motors and sensors move physical notes. Journals record events. Reconciliation later checks that the digital story matches the cash left inside the machine.

The deeper lesson is that modern money is partly information and partly physical settlement. An ATM sits exactly at that boundary. It turns an authorized change in a bank ledger into banknotes in a person’s hand, and it does so by making every stage observable enough to detect when the digital and physical worlds fail to match.

Useful routes from here

• Tell Me About Banks for deposits, loans, payments, interest and bank safety.
• Tell Me About Cryptography for encryption, keys and secure communication.
• Tell Me About Computers for processors, software, storage and networks.
• Tell Me About the Internet for packet networks and digital communication.
• How Financial Systems Work for money, credit, payments, markets, risk and stability.