When an ATM screen says “card retained,” it means the machine has deliberately kept your debit or credit card inside and will not return it. The retention was intentional, triggered by instructions from your bank, the ATM operator, or the machine’s own security programming. What matters now is calling your card issuer right away, because federal law ties your financial protection to how quickly you report the problem.
Why the ATM Kept Your Card
Card retention usually falls into one of a few categories. Knowing which one applies helps you explain the situation when you call your bank.
Security Triggers
The most common cause is entering the wrong PIN too many times. Most banks set the threshold at three consecutive failures, though some allow more. The system reads repeated wrong guesses as a sign that someone other than the cardholder is trying to break in, so the machine captures the card to shut down access.
Your issuer can also flag a transaction that looks suspicious, such as a large withdrawal in a city where you’ve never used the card, and instruct the ATM to hold the card until the activity is verified. A card already reported lost or stolen will be retained automatically the moment it’s inserted into any ATM on the network.
Administrative Reasons
If your card has passed its expiration date or your issuer has already canceled it, the ATM is programmed to pull it out of circulation. The same thing happens when the underlying account is closed or seriously overdrawn. In those cases the machine is enforcing a decision your bank already made.
Mechanical and Network Failures
Sometimes the machine itself is the problem. A power surge, a jammed card reader, or a sudden loss of communication with the bank’s processing network can all cause the ATM to default to holding the card rather than returning it. This kind of retention is accidental and usually happens mid-transaction, before anything has been authorized against your account.
Criminal Card-Trapping Devices
Not every retained card is the bank’s doing. Criminals install devices inside ATM card slots that physically trap your card so it looks like the machine ate it. You walk away frustrated, and they come back minutes later, pull out the device with your card still inside, and use it. These traps are sometimes paired with a pinhole camera or a fake keypad overlay to capture your PIN at the same time.
The FBI warns that criminals install skimming and trapping hardware inside or over ATM card readers and use pinhole cameras or keypad overlays to record PINs as customers type them.1FBI. Skimming Before using any ATM, run a finger along the card slot and tug gently on the plastic housing. If anything feels loose, bulky, or out of place, walk away. If your card has already been trapped and the machine looks off, treat the situation as a potential theft, not a routine retention.
What to Do in the First Few Minutes
The minutes right after a card retention matter more than the next few days. Don’t just leave and deal with it later.
Inspect and Document the Machine
Look closely at the ATM for signs of tampering: unusual attachments on the card slot, a camera that seems out of place, anything stuck to the keypad. Write down or photograph the machine’s location, the time, and any identifying information shown on the screen or printed on the housing. Many ATMs display a terminal ID that your bank will want when you file a report.
Call Your Bank Right Away
Contact your card issuer using a number you already trust, such as the one on a recent statement or inside your bank’s official app. Do not call any number posted on the ATM itself. Scammers sometimes stick fake “customer service” labels on compromised machines.
Ask the representative to place an immediate hold on the account or permanently cancel the retained card. Write down the representative’s name, the date and time of the call, and any reference number you’re given. That documentation becomes important if you later need to dispute a charge or prove when you first reported the problem.
Reporting quickly does two things at once. It activates your card network’s zero-liability pledge, and it starts the clock on your strongest federal protections. Both Visa and Mastercard promise you won’t be held responsible for unauthorized charges when you report the loss promptly and have taken reasonable care of your card.2Visa. Visa Zero Liability Policy3Mastercard. Zero Liability Protection
How Fast You Report Determines What You Owe
Card network promises are reassuring, but federal law sets a harder floor. The rules differ in an important way depending on whether the retained card was a credit card or a debit card.
Credit Cards
Federal law caps your liability for unauthorized credit card charges at $50. If you report the loss before any unauthorized charges post, you owe nothing.4GovInfo. 15 USC 1643 – Liability of Holder of Credit Card In practice, most credit card issuers waive even that $50 under their own zero-liability policies, so a retained credit card is financially low-risk as long as you make the call.
Debit Cards
Debit cards carry more exposure, because the money moves out of your checking account in real time. Federal regulations tie your maximum liability directly to how fast you report:
- Report within 2 business days, and your liability tops out at $50 or the amount of unauthorized transfers made before you reported, whichever is less.
- Report after 2 business days but within 60 days of your statement, and your liability can reach $500.
- Report after 60 days from your statement, and you could be on the hook for the full amount of any unauthorized transfers the bank can show would have been prevented by earlier reporting.
Those tiers come from Regulation E, the federal rule implementing the Electronic Fund Transfer Act.5eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers The jump from $50 to $500 happens at the two-day mark, which is why calling immediately isn’t just good advice. It’s a financial decision.
Getting Cash Before Your Replacement Arrives
A retained card doesn’t have to leave you stranded. A few options can bridge the gap.
Many major banks support cardless ATM withdrawals through a mobile phone. If your debit card is already loaded in a digital wallet like Apple Pay, Google Pay, or Samsung Pay, you can tap your phone on an ATM with a contactless reader, enter your PIN, and withdraw cash normally. Bank of America, Chase, and Wells Fargo are among the large banks whose ATMs support this. The key requirement is that you added the card to the wallet before it was retained.
You can also walk into any branch of your bank with a government-issued photo ID and withdraw cash directly from your account through a teller. Some branches print a new debit card on the spot, letting you walk out with a working card the same day.
If your card is retained while traveling, Visa offers emergency cash disbursement at over 270,000 locations worldwide. You call Visa’s customer service line, request emergency funds, provide identifying information, and pick up cash at a designated location, typically within one business day and sometimes as quickly as two hours after your issuer approves the request.6Visa. How to Get Emergency Cash Mastercard offers a similar service. These programs are worth knowing about before you need them, especially for international travel.
Getting a Replacement Card
Don’t expect the retained card back. If the ATM belongs to a different bank than yours, the operator will almost certainly destroy the card under standard security procedures. Even your own bank is unlikely to retrieve it from inside the machine. The path forward is cancellation and reissuance.
Most issuers start processing a replacement as soon as you complete the phone report. A standard replacement typically arrives by mail within seven to ten business days. Many banks charge nothing for a standard replacement, though some charge a small fee. If you need the card sooner, expedited shipping can shorten the wait to two or three business days for an additional fee that varies by issuer.
The replacement will have a new card number, a new expiration date, and a new security code. That’s deliberate. It ensures anyone who obtained the old card’s details can’t use them.
Updating Digital Wallets and Recurring Payments
A new card number means every service storing the old one needs updating. This is the step most people forget, and it leads to declined payments and late fees weeks later.
Digital wallets handle the transition differently from one another. Google notes that your bank may automatically update the card in Google Wallet once the new card is issued, letting you continue tap-to-pay even before the physical card arrives, though you may still need to update the saved card manually for online purchases.7Google Wallet Help. Manage Payment Methods Added to the Google Wallet App Apple Pay typically updates automatically when your bank issues a replacement. Whether the automatic update works depends on your bank supporting it, so check your wallet app after the new card is issued to confirm.
For everything else, make a list of services that bill the old card: streaming subscriptions, insurance premiums, gym memberships, utility autopay, loan payments. Update each one as soon as the new card arrives. Missing an automatic payment on a loan or insurance policy can trigger consequences far more expensive than the inconvenience of the retained card itself.