If you leave your card in an ATM, the machine will almost always pull it back inside within about 15 to 30 seconds, route it to a locked internal capture bin, and log the event so bank staff can destroy the card later. You generally cannot get that captured card back, even at a branch, because network rules treat a captured card as potentially compromised. The real question is what happens in the seconds before retraction, or if the machine was tampered with: if someone took the card and used it, how much you owe depends on how fast you report the loss and whether it was a debit or credit card.
What the ATM Does With a Forgotten Card
After a short idle period, the ATM registers that no one has taken the card and retracts it. The exact timeout varies by machine, but it is usually well under a minute. The card drops into a capture bin that sits apart from the cash trays and the reader path, and only authorized technicians or bank staff can open it under specific security procedures. The machine’s log records the date, time, and account tied to the captured card.
Captured cards are typically logged and destroyed rather than returned to the cardholder. This is true even when the ATM sits inside the lobby of your own branch. Agreements between card issuers and ATM operators generally require destruction so the card cannot be used again after a possible compromise.
When a Stuck Card Is a Scam, Not a Timeout
Not every unreturned card is an innocent timeout. Criminals sometimes attach a small trapping device to the card slot that holds your card inside the machine. A hidden camera or an accomplice watching over your shoulder captures your PIN, and once you walk away, the thief pulls the device and your card out together. The FBI recommends inspecting the ATM before you insert your card: look for anything loose, crooked, damaged, or scratched around the slot and keypad, and watch for mismatched colors, materials, or shapes that could point to a foreign overlay.1Federal Bureau of Investigation. Skimming
If an ATM refuses to return your card after you cancel or complete a transaction, the FBI advises contacting your financial institution immediately, because the machine may have been rigged.1Federal Bureau of Investigation. Skimming Do not re-enter your PIN if a helpful-looking bystander suggests trying again.
What to Do Right Now
Call your card issuer as fast as possible. The clock on your liability starts the moment you realize the card is gone, so speed is the single biggest factor in what you might owe. Find the customer service number on your bank’s website, on a second card, or inside your mobile banking app. Do not use a phone number posted on the ATM itself, since scammers sometimes stick fake numbers on machines.
Many banking apps include a card lock or freeze toggle that instantly blocks all transactions on the card. Turning it on stops point-of-sale purchases and ATM withdrawals within seconds and buys you time before you make the formal loss report. A freeze is temporary and does not close the account or cancel the card permanently.
When you reach the bank, have your account number and recent transactions ready. The representative will verify your identity, deactivate the card, and start a replacement. The FTC recommends following the call with written notice that includes your account number, the date and time you noticed the card was missing, and when you first reported the loss.2Federal Trade Commission. Lost or Stolen Credit, ATM, and Debit Cards
What You Could Owe If It Was a Debit Card
The Electronic Fund Transfer Act caps your liability for unauthorized debit card use, but the cap depends on how fast you report the loss. Federal law sets three tiers.2Federal Trade Commission. Lost or Stolen Credit, ATM, and Debit Cards
- Report within two business days of learning about the loss, and your maximum liability is $50.3Office of the Law Revision Counsel. 15 USC Chapter 41 Subchapter VI – Electronic Fund Transfers
- Report more than two business days after learning of the loss, but within 60 calendar days of the statement being sent, and your liability rises to $500 for transfers that occurred after the two-day window closed.3Office of the Law Revision Counsel. 15 USC Chapter 41 Subchapter VI – Electronic Fund Transfers
- Wait more than 60 days after the statement is sent, and you face unlimited liability for transfers the bank can show would not have happened if you had reported sooner. That can include everything in the account and money in linked accounts.4eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
These tiers apply only to charges that hit before you notified the bank. Once you make the report, you owe nothing for anything that happens afterward.2Federal Trade Commission. Lost or Stolen Credit, ATM, and Debit Cards
What You Could Owe If It Was a Credit Card
If the card left in the machine was a credit card, the rules are simpler and more protective. Under the Truth in Lending Act, your maximum liability for unauthorized credit card charges is $50, with no escalating tiers based on reporting speed.5Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card The $50 cap covers charges made before you notify the issuer; charges after notification are not on you.
The statute puts the burden of proof on the issuer, not on you. The issuer must show either that you authorized the charge or that the conditions for the $50 liability have been met.5Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card In practice, most major card networks offer voluntary zero-liability policies that waive even the $50, though those are issuer policies, not federal requirements.
Getting Your Money Back While the Bank Investigates
When you dispute unauthorized debit charges, the bank has 10 business days after receiving your error notice to investigate and report back.6Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution If it needs more time, it can extend the investigation to 45 days, but only if it provisionally credits your account for the disputed amount within those first 10 business days.7Consumer Financial Protection Bureau. 12 CFR 1005.11 – Procedures for Resolving Errors
The bank may hold back up to $50 of the provisional credit if it has a reasonable basis to believe an unauthorized transfer occurred and your own liability applies under the reporting-speed rules.7Consumer Financial Protection Bureau. 12 CFR 1005.11 – Procedures for Resolving Errors It must also tell you the amount and date of the provisional credit within two business days of posting it, and you have full use of the funds while the investigation continues. One catch: if the bank asks for written confirmation of your phone report and you do not send it within 10 business days, the bank is not required to provide provisional credit.6Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution
Getting a Replacement Card and Cash in the Meantime
Once you report the card missing, the bank permanently deactivates it and issues a new one with a different number and security code. A standard replacement typically arrives by mail within five to ten business days. Most large banks do not charge a fee for standard delivery, though some charge a small fee, and expedited shipping is usually available for an added cost.
When the new card arrives, you have to activate it through the bank’s app, website, or automated phone line before it will work. Activation links the new number to your account and finishes retiring the old card data.
You do not have to be without cash while you wait. Several major banks, including Chase, Wells Fargo, Capital One, and Bank of America, support cardless ATM withdrawals at their own machines. Depending on the bank, that works by scanning a QR code on the ATM screen with the banking app, tapping your phone or smartwatch using Apple Pay or Google Pay over NFC, or entering a one-time code generated in the app. If your bank does not offer cardless withdrawals, you can visit a branch in person with government-issued photo ID and pull cash from a teller.
Updating Recurring Payments and Subscriptions
A new card number means every subscription and autopay tied to the old card will eventually fail, and a missed payment can bring late fees or a service cutoff. Some card networks run automated update services that share your new card details with participating merchants behind the scenes, and participating merchants are expected to update their billing files within about five days. Not every merchant participates, so do not assume the transition is invisible.
Review recent statements for recurring charges: streaming services, gym memberships, insurance premiums, loan autopayments, and utilities are common ones. Update each merchant with the new number as soon as the replacement arrives. Prioritize any payment where a missed due date brings a late fee or could show up on your credit report.