When you dispute an ATM withdrawal, your bank investigates by pulling three sources of evidence: the machine’s electronic transaction journal, a physical count of the cash inside the ATM, and security camera footage of the person at the machine. Federal law, specifically the Electronic Fund Transfer Act and Regulation E, requires the bank to finish that investigation and tell you the result in writing within 10 business days, or take up to 45 days if it first deposits a provisional credit for the disputed amount into your account.1eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors How banks investigate ATM withdrawals comes down to matching those three records against each other and against what you reported.
Pulling the ATM’s Electronic Journal
The first step is digital. Every ATM keeps an internal log, commonly called an Electronic Journal, that records each step of every interaction: the moment your card was read, the entry of your PIN, the exact amount requested, and whether the cash dispenser completed its cycle. Investigators locate the entry for the date and time of your transaction and look for error codes that signal a mechanical failure.
Common failure codes flag a bill jam, a communication failure with the bank’s server, or a mismatch between the number of bills the machine counted internally and the number that actually reached the exit slot. If the journal shows the dispenser reported a successful completion with no errors, the bank’s digital record supports the position that your money left the machine. If the journal shows a fault at the moment of your withdrawal, that is a strong early signal in your favor, and the bank moves to confirm it against the physical cash.
Auditing the Cash Inside the Machine
If the journal alone does not resolve the question, a bank employee or armored car service opens the ATM and manually counts the remaining cash in its currency cassettes. That count is compared to what the digital ledger says should be in the machine after all logged transactions.
The math tells the story. If the machine holds more cash than it should, for example an extra $200 that matches your $200 dispute, that overage is strong evidence the machine failed to dispense your money even though your account was debited. If the cash count matches the ledger, the bank’s records suggest the funds were dispensed as requested. A shortage points the same direction: the money left the machine. Because the audit relies on physical currency and hard data rather than anyone’s word, a clean dollar-for-dollar match between a customer’s dispute and an unreconciled overage usually decides the case.
Reviewing Security Camera Footage
The bank then checks its physical and digital findings against video. Most ATMs have a camera near the screen or keypad that captures the person performing each transaction, and investigators may also pull footage from wider-angle perimeter cameras or nearby branch surveillance.
A few things drive the footage review. Investigators confirm whether the cardholder was actually the person at the machine or whether a third party used the card. They watch the dispenser slot closely, because in some cases an ATM dispenses cash and then retracts it after a timeout when no one collects it, which can produce a legitimate dispute even when the journal shows a completed withdrawal. Examiners also look for signs of tampering, such as a skimming device attached to the card reader or an overlay placed on the keypad.2Federal Bureau of Investigation. Skimming If the footage shows the person at the machine collecting cash from the dispenser, the bank will likely deny the dispute.
Investigation Timelines and Provisional Credit
Regulation E puts the bank on a clock. After receiving your notice of error, the bank has 10 business days to finish its investigation and report the result. If it needs more time, it can extend the investigation to 45 days, but only if it deposits a provisional credit for the disputed amount into your account within those first 10 business days.1eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors The provisional credit lets you use the money while the bank continues reviewing logs, cash counts, and footage.
Three categories of transactions receive extended timelines:
- New accounts, where the disputed transaction occurred within 30 days of the first deposit, give the bank 20 business days instead of 10 before it must issue provisional credit, and up to 90 days instead of 45 to complete the investigation.3Consumer Financial Protection Bureau. 1005.11 Procedures for Resolving Errors
- Point-of-sale debit card transactions extend the investigation window to 90 days.1eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors
- Transfers not initiated within a U.S. state, such as an ATM withdrawal abroad, also get up to 90 days.1eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors
Even under the extended timelines, the bank must still issue provisional credit within 10 business days (or 20 for new accounts) and report its final results within three business days after completing the investigation.1eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors
How the Bank Closes the Case
When the review is finished, the bank sends you a written notice of its findings.1eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors If the evidence supports your claim, for instance a cash audit overage matching your dispute, any provisional credit already in your account becomes permanent and the case closes.
If the bank concludes no error occurred or that the error differed from what you described, the written notice must explain the findings and tell you about your right to request the documents the bank relied on.3Consumer Financial Protection Bureau. 1005.11 Procedures for Resolving Errors If provisional credit was already in your account, the bank will reverse it. Before doing so, the bank must notify you of the date and amount it will remove, and for five business days after that notification it must honor checks and preauthorized payments from your account without charging overdraft fees.1eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors That buffer gives you time to adjust your balance before the reversal posts.
Why Timing Shapes the Outcome
How fast you report an unauthorized ATM withdrawal directly controls how much you can lose while the investigation runs. Federal law sets three liability tiers based on when you notify the bank:
- Notice within 2 business days caps your liability at $50 or the amount of unauthorized transfers before you notified the bank, whichever is less.4eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
- Notice after 2 business days but within 60 days of the statement can raise your liability to $500.4eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
- Notice more than 60 days after the statement that first showed the unauthorized transaction leaves you with unlimited liability for transfers after that 60-day window closes.5Consumer Financial Protection Bureau. 1005.6 Liability of Consumer for Unauthorized Transfers
The 60-day clock starts when the bank sends the statement showing the unauthorized transaction, not when you open it. There is also a separate deadline that affects the investigation itself: if the bank asks for a written confirmation of a phone dispute, you have 10 business days to send it, and missing that deadline can relieve the bank of its obligation to issue provisional credit while it investigates.3Consumer Financial Protection Bureau. 1005.11 Procedures for Resolving Errors
What to Do if the Bank Denies Your Dispute
A denial is not the end of the road. Ask the bank for copies of every document it used to reach its decision. Under federal law, the bank must promptly provide those documents on request, including converting machine-readable data such as magnetic tape records into a readable format.3Consumer Financial Protection Bureau. 1005.11 Procedures for Resolving Errors Reviewing the transaction logs, cash audit results, and footage summaries yourself can reveal inconsistencies worth raising in a follow-up appeal.
If the bank does not resolve the issue, you can file a complaint with the Consumer Financial Protection Bureau, which accepts complaints about checking and savings accounts, including ATM disputes, and forwards them directly to the bank.6Consumer Financial Protection Bureau. Submit a Complaint Companies generally respond within 15 days, though some cases take up to 60. Complaints can be submitted online or by phone at (855) 411-2372, Monday through Friday, 8 a.m. to 8 p.m. ET.
If the bank violated any part of the investigation process, such as missing the provisional credit deadline, blowing the investigation timeline, or failing to provide a written explanation, you may have grounds to sue under the Electronic Fund Transfer Act. A bank that fails to comply is liable for your actual losses, statutory damages between $100 and $1,000, and reasonable attorney’s fees.7Office of the Law Revision Counsel. 15 USC 1693m – Civil Liability The bank can avoid liability only by proving the violation was an unintentional, good-faith error despite reasonable procedures to prevent it.