A privately owned ATM makes money two ways on every cash withdrawal: a surcharge the customer sees on screen and agrees to pay, plus a smaller interchange fee routed from the cardholder’s bank to you behind the scenes. That is how the ATM business works at the cash register level, but running one profitably means understanding the revenue split with your location, the processing relationships that connect your machine to the card networks, and the federal rules on accessibility, encryption, and fee disclosure that apply to every terminal open to the public.
Where the Money Comes From
The surcharge is the number operators focus on. It averages about $3.22 per withdrawal at privately operated machines, and in high-demand spots like bars, casinos, and airports it routinely runs $4.00 or more. You set it. A suburban convenience store might support $2.50, while a nightclub at 1 a.m. can clear $4.50 because the customer has nowhere else to go.
The interchange fee is smaller and quieter. It flows from the cardholder’s bank to you for giving that bank’s customer access to the network, and it typically falls between $0.20 and $0.60 per transaction depending on the network (Plus, Cirrus, or others) and the agreements in place. You rarely see it as a separate line; the processor bundles it into the daily or weekly settlement that lands in your business account.
Volume is what turns the per-transaction economics into a business. A machine processing 150 to 300 transactions per month in a decent location produces meaningful recurring income on hardware that can cost as little as $2,250.
Splitting Revenue With the Location
Most operators don’t own the retail space, so they share the surcharge with the merchant who provides the floor, the power, and the foot traffic. The most common structure pays the merchant a flat amount per transaction, often $0.50 to $1.25. Some agreements use a fixed monthly payment instead, which gives the merchant predictable income and lets the operator keep the upside when a location outperforms.
Getting the split right is the single most important business decision after choosing the location. Pay too little and a competitor will offer the merchant more and swap your machine out. Pay too much and the location stops being profitable at normal volumes. The processor tracks transactions in real time and deposits your share, usually within one to two business days.
What It Costs to Start and Keep Running
A new freestanding ATM from a manufacturer like Genmega or Hyosung costs roughly $2,250 to $3,500 for a standard retail model. Through-the-wall units with higher cash capacity run $7,000 or more. Every machine needs an Encrypting PIN Pad that meets PCI security standards and an EMV chip reader that accepts modern debit and credit cards.
Connectivity is a recurring line most new operators forget. Cellular wireless is more common in retail placements because it doesn’t rely on the merchant’s internet, and monthly data plans run roughly $30 to $55 depending on the carrier and tier. You’ll also need a federal Employer Identification Number for tax reporting and a dedicated business bank account to receive settlement deposits. Most ISOs will ask for proof of a valid business license and equipment insurance before activating the terminal.
Then there is the cash itself. Loading currency into a machine’s cassettes is called vaulting, and most operators start with $2,000 to $3,000 per machine, adjusting as they see how fast it depletes. Busy locations may need $5,000 or more refilled twice a week. That cash is your capital, sitting idle until a customer withdraws it and the surcharge settles back to you. Four machines loaded at $3,000 each means $12,000 doing nothing but waiting. Use crisp, flat bills; wrinkled currency is the most common cause of dispensing jams. Most processors offer an online portal that shows real-time cash levels so you can refill before a machine runs dry.
Who You Have to Work With
A fifteen-second withdrawal involves several entities behind the glass, and understanding who they are explains where the fees go and where you have leverage.
- An Independent Sales Organization (ISO) is the middleman between you and the financial networks. ISOs provide the processing contract, technical support, and in many cases sell the hardware bundled with a service agreement. They are contractually responsible for making sure the operators they sign comply with network rules.1FFIEC BSA/AML InfoBase. Risks Associated with Money Laundering and Terrorist Financing – Independent Automated Teller Machine Owners or Operators
- The processor is the technical engine. It receives the encrypted card data from your terminal, routes it to the cardholder’s bank for approval, sends the authorization back, and handles settlement after each batch closes.
- A sponsor bank provides the legal bridge to interbank networks like Plus and Cirrus, which only financial institutions can connect to directly. Risk goes down when the sponsor bank also holds your operating accounts, because it has direct visibility into your transaction patterns.1FFIEC BSA/AML InfoBase. Risks Associated with Money Laundering and Terrorist Financing – Independent Automated Teller Machine Owners or Operators
- The location merchant supplies the physical space and the customer base. In most placements the merchant doesn’t own the machine, but their cooperation determines whether it gets prime foot traffic or sits in a back hallway.
Read the Processing Contract Before You Sign
Processing agreements typically run two to three years and govern transaction fees, settlement timing, and the length of the relationship. The clause most new operators skim and later regret is early termination. Some processors charge a flat cancellation fee of a few hundred dollars. Others use a liquidated damages formula that calculates the revenue the processor would have earned over the remaining term, so canceling a three-year agreement after twelve months can mean paying for two years of projected fees with no corresponding revenue.
If a processor offers a month-to-month option or a shorter initial term, the slightly higher per-transaction fee is often worth the flexibility, especially for a first machine where you don’t yet know how the location will perform.
Legal Rules You Can’t Skip
Fee Disclosure
Federal law requires you to tell customers the surcharge amount before they commit to the transaction. Under Regulation E, the fee must appear on the screen or on a printed notice before the withdrawal is finalized, and the customer must have the chance to cancel without being charged.2CFPB. Regulation E Section 1005.16 – Disclosures at Automated Teller Machines The disclosure is built into the software on every major platform. If you customize any transaction screens or prompts, make sure the fee notice appears before the confirmation step.
ADA Accessibility
Every ATM open to the public has to comply with the Americans with Disabilities Act, which is enforced through civil penalties and private lawsuits. All machines must provide speech output so visually impaired customers can complete a transaction independently, delivered through a standard headphone jack or telephone handset, with Braille instructions on how to initiate the speech mode. Physical reach ranges and screen visibility rules apply too, including a requirement that the display be visible from 40 inches above the floor to accommodate wheelchair users.3U.S. Access Board. Chapter 7 Communication Elements and Features – Section 707 Automatic Teller Machines and Fare Machines Name-brand machines generally ship ADA-compliant, but the installation itself (placement height, surrounding clearance, approach path) is on you to get right.
EMV, Encryption, and PCI
If your machine reads an EMV chip and a fraudulent transaction still goes through, liability generally falls on the card issuer. If your machine can only read magnetic stripes and the card had a chip, liability falls on you. That alone makes a chip reader non-negotiable on any machine deployed today.
Every ATM must also encrypt PIN data using a method compliant with ISO 9564.4PCI Security Standards Council. PCI EPP Security Requirements v2.1 The industry commonly uses Triple DES, which scrambles the PIN from the moment it’s entered until it reaches the bank’s secure server. The Encrypting PIN Pad does this inside a tamper-resistant shell that destroys its encryption keys if someone tries to break into it. PCI guidelines also require operators to keep ATM operating systems hardened and patched, follow the OS supplier’s lockdown recommendations, and distribute any software updates through authenticated, secure channels.5PCI Security Standards Council. Information Supplement – ATM Security Guidelines A machine that falls behind on patches can get disconnected from the network, which means zero revenue until it’s fixed.
Bank Secrecy Act
The regulatory burden here is lighter than most new operators assume. In 2007, FinCEN concluded that a non-bank ATM operator offering only balance inquiries and cash withdrawals from customer accounts is generally not classified as a money services business under the BSA.1FFIEC BSA/AML InfoBase. Risks Associated with Money Laundering and Terrorist Financing – Independent Automated Teller Machine Owners or Operators Independent operators typically don’t need their own written anti-money laundering program or FinCEN registration as long as they stick to standard withdrawals and balance inquiries. The sponsor bank handles transaction monitoring and files Currency Transaction Reports when a customer’s cash transactions exceed $10,000 in a day. Add services beyond basic withdrawals, like cash loading for prepaid cards, and the regulatory picture changes substantially and likely triggers MSB registration.
Insuring the Cash
The currency inside your machine is your responsibility, and a standard commercial property policy usually won’t cover cash sitting in a third-party retail location. Two specialized coverages fill the gap. Cash-in-transit insurance covers losses during the physical move from your bank to the machine, including robbery, vehicle accidents, and employee theft. A separate inland marine or specie policy covers the cash while it’s inside the ATM vault, including theft, vandalism, and mysterious disappearance.
General liability is worth carrying as well in case a customer is injured near the machine, whether from cabling, an improperly installed terminal that tips, or a slip near the equipment. Most ISOs require proof of equipment insurance before they’ll activate the machine, so plan for premiums up front rather than scrambling at the last minute.
Tax Treatment of the Hardware and the Income
ATM hardware qualifies for favorable depreciation. Under Section 179, a business can deduct up to $2,560,000 in qualifying equipment costs in the year the asset is placed in service for the 2026 tax year, with the deduction phasing out dollar-for-dollar once total equipment purchases exceed $4,090,000. For an operator buying machines in the $2,000 to $7,000 range the phase-out is irrelevant, and the full cost can be expensed immediately. Section 179 does require the business to have positive taxable income in the year the deduction is claimed.
If you don’t have enough taxable income to use Section 179, bonus depreciation offers an alternative. As of January 2025, 100% bonus depreciation was made permanent for qualifying property, meaning the full purchase price of an ATM placed in service in 2026 can be deducted regardless of income level.6IRS. Treasury, IRS Issue Guidance on the Additional First Year Depreciation Deduction
On the income side, ATM processors are third-party settlement organizations that must issue Form 1099-K to operators who exceed $20,000 in gross payments and 200 transactions in a calendar year.7IRS. Publication 1099 – General Instructions for Certain Information Returns (2026) Income below those thresholds is still taxable; you just won’t get the form. Deductible business expenses include interest on borrowed capital used to load the machines, cellular data plans, merchant revenue share payments, processor fees, mileage to service locations, and insurance premiums.