When an ATM flashes “restricted card,” it means your issuing bank has placed a hold on the card and the machine cannot process your withdrawal, balance inquiry, or other request. The machine may return the card or keep it, depending on the situation. The good news is that most restrictions are temporary, and a phone call to your bank clears the majority of them within minutes.
Why the Card Got Restricted
The single most common trigger is entering the wrong PIN three times in a row. After the third try, the card locks automatically so a thief cannot guess their way in. This is standard across nearly every bank and card network, and it usually takes a call or a branch visit to reset.
Fraud detection is the next most likely reason. Banks run algorithms that flag activity outside your normal pattern: a withdrawal in a city you have never visited, an odd hour, a sudden spike in spending. The system would rather inconvenience you than let someone drain the account. Traveling without notifying your bank is a classic trigger. Some banks have moved away from requiring travel alerts because their fraud detection has improved, but many still suggest setting one through the mobile app or by calling the number on the back of your card before a trip.
A damaged or dirty EMV chip can also produce a restricted or declined message. The chip is how the ATM authenticates the card; if the reader cannot talk to it, the machine treats the card as unreadable. Wiping the chip with a soft cloth sometimes helps. A scratched or cracked chip usually needs a replacement card.
Other causes are more account-specific:
- Expired card. Once the printed date passes, the card stops working. Check your mail for the replacement your bank should have sent.
- Negative balance. A prolonged overdraft can prompt the bank to restrict outgoing transactions. Banks that still charge overdraft fees typically assess around $35 per incident, though many large institutions have reduced or eliminated them.
- Dormant account. If you have not made a deposit, withdrawal, or transfer in roughly 12 months, most banks start treating the account as inactive. After three to five years of no activity, depending on state law, the account may be classified as dormant and the card deactivated.
- Legal hold. A court-ordered levy or garnishment freezes outgoing funds until the underlying debt is resolved. You should receive written notice of the levy and your right to challenge it.
- Exceeding daily limits. ATM withdrawal limits vary widely by bank and account type, often from $300 to $5,000 per day. Some systems return a “restricted” message when they block additional withdrawals for the day.
How to Clear the Restriction
Check your bank’s mobile app or website first. Many banks display an alert explaining why the card was restricted, and some let you lift certain fraud holds directly in the app by confirming that a flagged transaction was really yours. If the app does not resolve it, call the number on the back of your card and ask for the fraud or security department.
Have this on hand so the representative can verify you quickly:
- Your full legal name and the last four digits of your Social Security number
- The card number, or at least the last four digits
- Dates, amounts, and locations of your recent transactions
The representative will walk through the flagged activity with you. If the transactions were legitimate, the hold usually comes off during the call and the card works again within minutes. Some banks impose a short waiting period of up to 24 hours before full functionality returns, particularly after a PIN lockout.
If a Legal Hold Caused It
A restriction tied to a court-ordered levy is different, and the bank cannot simply lift it. The bank will usually give you a case number or the name of the legal entity that initiated the freeze. To release the hold, you have to satisfy the underlying judgment or successfully challenge the levy in court. Once the bank receives an official release from the court or creditor, the freeze comes off within a normal business cycle.
If the ATM Kept Your Card
Some ATMs physically retain a restricted card rather than ejecting it. The card is not gone for good. Contact your bank right away, by phone or through the app. In most cases the bank will cancel the captured card for security reasons and mail a replacement rather than try to recover the physical card from the machine. Standard replacements typically arrive in 5 to 10 business days. Expedited delivery is available for a fee at most banks, and some branches can print a temporary card on the spot.
If the ATM belongs to another bank or an independent operator, that institution is supposed to hold or destroy captured cards under network rules. Do not try to get the card back from the ATM owner. Work through your own bank.
Getting Cash While the Card Is Restricted
A card restriction does not mean the account is frozen. Unless a legal hold is involved, your money is usually still reachable through other channels.
- Branch withdrawal. Walk into your bank with a government-issued photo ID. A teller can process the withdrawal using your account number even if the card is inactive, and can look up the account number from your ID if you do not have it.
- Cardless ATM access. Several major banks let you withdraw using a mobile wallet on your phone instead of a physical card: tap the phone on the contactless reader, enter your PIN, and complete the transaction normally. Whether this works during a restriction depends on your bank, so check the app first.
- Transfers and payments. Online bill pay, Zelle, and ACH transfers typically still work because they pull from the account itself rather than routing through the card. Peer-to-peer apps linked to the account number rather than the card number are another workaround.
Your Liability if Fraud Triggered the Hold
If the restriction appeared because unauthorized transactions were detected, federal law caps how much you can lose, and the cap depends entirely on how fast you report. Under the Electronic Fund Transfer Act, reporting within two business days of learning your card was lost or stolen limits liability to $50. Reporting after two business days but before your next statement can raise liability to $500 for unauthorized transfers that occurred after those first two days. Waiting more than 60 days after the bank sends a statement showing the unauthorized activity can leave you responsible for everything taken after that 60-day window, with no cap. The rule is blunt: call the moment you notice. If something like hospitalization prevented a timely report, the law requires the bank to extend those deadlines to a reasonable period.
Once you file the claim, federal regulations give the bank 10 business days to investigate. It can extend the investigation to 45 days only if it provisionally credits your account within those first 10 business days so you are not left without funds. The bank may withhold up to $50 from that provisional credit if it has a reasonable basis to believe the activity was unauthorized. Results have to be reported to you within three business days of the investigation closing.
When the Bank Will Not Budge
If the bank refuses to lift a restriction you believe is unjustified, or the investigation drags on without provisional credit, you can file a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov/complaint or by phone at (855) 411-2372, Monday through Friday, 8 a.m. to 8 p.m. ET. The online form takes about 10 minutes. The CFPB forwards your complaint to the bank, which generally has 15 days to respond, or up to 60 days for complex cases. You get updates by email and can review and respond to the bank’s answer. The complaint is also published, without your personal details, in the CFPB’s public database.
Avoiding a Repeat
Most restrictions are preventable. Keep your contact information current with the bank so fraud alerts reach you by text or email instead of tripping an automatic lockout. Before a trip, check whether your bank still wants a travel notice. Watch the balance to head off overdraft freezes. And if the chip is showing wear, request a replacement before it fails at the worst possible time. A five-minute call now beats a lockout at midnight in an unfamiliar city.