You can use an ATM without a card by opening your bank’s mobile app or a digital wallet on your phone, choosing the cardless option at a compatible machine, and confirming the withdrawal with your PIN. Banks support this through one of three methods: tapping your phone against the ATM’s contactless reader, scanning a QR code on the ATM screen, or typing in a one-time access code your banking app generates. The same federal protections that cover debit card transactions apply.
The Three Cardless Methods
Cardless ATM access isn’t one technology. Which method you’ll use depends on your bank and the ATM in front of you.
Tap With a Digital Wallet (NFC)
Near Field Communication is the same short-range wireless link you use to tap and pay at a store register. Your phone’s NFC chip sends encrypted account credentials to a reader on the ATM when you hold the two within a few inches of each other. The connection runs through Apple Pay, Google Pay, or Samsung Pay. Chase accepts all three at its ATMs; Bank of America supports Google Pay for cardless withdrawals. After the tap, you still enter your PIN on the ATM keypad.
Scan a QR Code
Some ATMs display a time-sensitive QR code on screen. You open your bank’s app, point your phone’s camera at the code, and the app reads the encrypted data to link the session. This method needs only a camera, which makes it work on older phones that don’t have NFC. The code expires quickly, so a photo taken from across the room won’t buy an onlooker anything.
Enter a One-Time Access Code
The third method skips the phone-to-ATM link entirely. In your banking app, select the amount you want, and the app generates a single-use numeric code. At the ATM, choose the cardless option, then type the code and your PIN. The code works once and expires within a short window. Because the machine just needs a keypad, this method works on the widest range of ATM hardware.
Which Banks Support It
Most large national banks now offer some form of cardless ATM withdrawal, though the specific method varies. Chase supports NFC through Apple Pay, Google Pay, and Samsung Pay, and also offers access codes through the Chase Mobile app. Bank of America lets you add your debit card to Apple Pay and use it at contactless-enabled ATMs. Wells Fargo advertises card-free options at its ATM network. Fifth Third Bank supports Apple Pay, Google Pay, and Samsung Pay. If your bank’s app has a menu item labeled something like “Cardless ATM,” “Mobile Cash,” or “Card-Free Access,” you’re covered. Smaller banks and credit unions are adopting the technology more slowly, so check your institution’s app or website.
Setting It Up Before You Go
Setup has two parts: securing the app, and linking your card to whichever method your bank offers.
Download your bank’s official mobile app if you don’t already have it and log in with your online banking credentials. Most banks send a one-time code by text or email to verify your identity, and most require you to enable biometric authentication, such as fingerprint or facial recognition, before they’ll turn on cardless features.
For NFC withdrawals, add your debit card to a digital wallet. On an iPhone, open the Wallet app, tap the plus sign, and follow the prompts. Bank of America also lets you add your card directly from within its mobile banking app under “Digital Wallets.” Android users follow a similar flow through Google Pay or Samsung Pay. Your bank verifies the card before it goes live, which usually takes a few minutes.
For QR scans or access codes, setup happens inside the bank’s own app. Look for the “Mobile Cash,” “Cardless ATM,” or “Card-Free” section, turn it on, and complete any remaining verification. After that, you can generate a code or scan a QR prompt the next time you’re at an ATM.
What You’ll Do at the Machine
Walk up to the ATM and choose the cardless or mobile option on the main screen. What comes next depends on the method:
- For an NFC tap, open your digital wallet, select your debit card, and hold the phone near the contactless symbol on the ATM. It’s usually near the card slot or on a dedicated reader panel.
- For a QR scan, open your bank’s app and point your camera at the code on the ATM screen.
- For an access code, generate the code in the app and type it into the ATM keypad.
Once the ATM recognizes your credentials, enter your PIN just as you would with a physical card. Pick a preset withdrawal amount or enter a custom one, confirm, and the cash dispenses through the standard slot. Most banking apps send a push notification or a digital receipt right after.
Where Cardless Access Falls Short
Cardless works well for straightforward cash withdrawals, and less well for almost everything else you might do at an ATM.
- Cardless withdrawals generally work only at your own bank’s ATMs. Third-party machines at convenience stores or gas stations rarely support the specific digital handshake your bank’s app uses, so you’ll still need your card there.
- Banks cap how much you can pull out per day, and cardless limits are sometimes lower than physical-card limits. Regulation E requires banks to disclose these limits but doesn’t set specific amounts, so check your app or call your bank before counting on a large withdrawal.
- Deposits, PIN changes, and some balance inquiries are typically unavailable through cardless interfaces. The session is built for getting cash out.
- Cardless ATM access abroad is extremely limited for U.S. bank customers. The feature is tied to your bank’s domestic ATM network. Pack your physical card for international travel.
- Using your own bank’s ATMs cardless shouldn’t cost extra. The same surcharge rules apply if you do manage to use an out-of-network machine: the ATM owner can charge a fee, and your bank may add one.
If Your Phone Is Lost or Stolen
A lost phone with a banking app on it feels worse than a lost debit card, but the legal protections are the same and the practical ones are arguably stronger.
Federal law defines an “access device” broadly enough to cover your phone, your digital wallet, and any access codes the app generates. The consumer liability limits under Regulation E apply in full to cardless transactions, and how much you’re on the hook for depends on how fast you report the loss:
- Report within two business days, and your liability for unauthorized withdrawals is capped at $50.
- Report between two and 60 days, and the cap rises to $500.
- Wait longer than 60 days, and you can be liable for the full amount of unauthorized transfers made after that window closes, with no cap.
Speed matters. Call your bank as soon as you realize the phone is gone, not after you’ve exhausted every locator trick. Most banking apps can be deactivated remotely through the bank’s website or customer service line. Apple’s Find My and Android’s Find My Device let you lock the phone or wipe it, which takes the digital wallet with it. If you’ve set biometrics on both the phone’s lock screen and the banking app, a thief has to defeat two layers before attempting a withdrawal.
If unauthorized cardless ATM charges appear on your account, contact your bank to report fraud and request a review. The bank is required to investigate and provisionally credit your account while the investigation is pending.