The personal information on an ATM receipt is thinner than most people assume. Federal law caps the printed card number at the last five digits, forbids printing the expiration date, and keeps your PIN, security code, and Social Security number off the paper entirely. What a receipt does show is the transaction amount, the date and location, a short account identifier, and often your remaining balance. That makes a lost receipt a privacy annoyance rather than a path to fraud.
What Actually Prints on the Receipt
Regulation E, the federal rule for electronic fund transfers, sets the required fields on every ATM receipt: the transfer amount, the date, the type of transaction (withdrawal, deposit, or transfer), a terminal location identifier, and a number or code identifying your account. The account identifier is deliberately short. The rule says it “need not exceed four digits or letters,” so most banks print only the last four digits of your account or card number.1eCFR. 12 CFR 1005.9 – Receipts at Electronic Terminals; Periodic Statements
Many banks also print your balance after the transaction. Regulation E does not require that, and nothing stops you from asking your bank whether it can suppress the balance line on your receipts.
A separate law, the Fair and Accurate Credit Transactions Act (FACTA), tightens the limit on card numbers specifically. No business that accepts credit or debit cards may print more than the last five digits of the card number on an electronically printed receipt, and the expiration date must be deleted entirely.2Office of the Law Revision Counsel. 15 USC 1681c – Requirements Relating to Information Contained in Consumer Reports The rule covers ATMs, gas pumps, and retail terminals alike, and it applies to both consumer and business debit cards.3Federal Trade Commission. Slip Showing? Federal Law Requires All Businesses to Truncate Credit Card Information on Receipts The only carve-out is for transactions where the card number is written down by hand or captured by a physical imprinter rather than an electronic printer.
What Never Prints on an ATM Receipt
Several pieces of data never reach the paper. Your PIN is processed in encrypted form and destroyed once the transaction is authorized; the system is not built to route it to a printer. The full 16-digit card number, the three-digit security code on the back of your card, and your Social Security number are also absent. Your full name typically does not print, though a small number of older ATMs may show a first name or an account label.
What Someone Could Learn From a Found Receipt
Someone who picks up your discarded receipt sees the last four or five digits of your card number, the dollar amount of your transaction, your balance if the bank prints it, and the time and place of the withdrawal. That combination will not get them into your online banking, let them make a purchase, or let them open a fraudulent account in your name. It does tell a stranger roughly how much money you have on hand, which is a reason to be careful about where you drop the paper, not a reason to panic.
If Your Receipt Shows More Than the Law Allows
If an ATM prints more than the last five digits of your card number, or includes the expiration date, the operator has broken federal law. You have two realistic paths.
Sue for Statutory Damages
For a willful violation of the truncation rules, you can recover between $100 and $1,000 per violation in statutory damages even if you lost no money. A court may also award punitive damages and order the violator to pay your attorney’s fees.4Office of the Law Revision Counsel. 15 USC 1681n – Civil Liability for Willful Noncompliance You generally have two years to file, measured from the date of the violation or the date you discovered it, whichever is later.5GovInfo. 15 USC 1681p – Jurisdiction of Courts; Limitation of Actions
Report It to the FTC
If a lawsuit is more than you want to take on, report the violation at ReportFraud.ftc.gov. Pick the closest category, or choose “Something Else” and describe what happened in the comments. You can’t attach documents, but you can paste text. If you can’t use the online form, call the FTC’s Consumer Response Center at 877-382-4357.6Federal Trade Commission. ReportFraud.ftc.gov – FAQ
Disposing of ATM Receipts
Once you’ve confirmed the transaction against your bank statement or mobile app, the receipt has done its job. A cross-cut shredder is the cleanest way to get rid of it. If you don’t own one, tearing the paper into several pieces before throwing it out makes casual snooping much harder.
Most ATM receipts are printed on thermal paper, the same glossy stock stores use. Thermal paper is coated with chemicals that can include bisphenol A (BPA) or its substitute BPS, and environmental agencies recommend putting these receipts in the regular trash rather than the recycling bin so they don’t contaminate other paper.
The simplest fix is to skip the paper. Declining the printed receipt at the ATM and checking the same transaction in your bank’s app leaves nothing behind to shred, lose, or let someone else read.