When an ATM screen displays “card retained,” it means the machine has physically kept your debit or credit card inside and will not return it. This is almost always deliberate: the ATM acted on instructions from your bank, the machine’s operator, or its own security programming. Federal law caps what you can be charged for unauthorized use, and the major card networks promise zero liability when you report the problem quickly, so the priority now is calling your bank before anything else.
Why the ATM Kept Your Card
Retention usually falls into one of three buckets, and figuring out which one applies helps you know what to say when you call.
Security Triggers
The most common cause is entering the wrong PIN too many times. Most banks set the cutoff at three consecutive failures, though some allow more. Repeated wrong guesses look to the system like someone other than you is trying to get in, so the machine keeps the card to shut down access. Your issuer can also flag a transaction that looks out of pattern, such as a large withdrawal in a city you don’t normally use, and tell the ATM to hold the card until it verifies the activity. A card that has already been reported lost or stolen will be retained the moment it’s inserted anywhere on the network.
Administrative Reasons
If the card has expired, been canceled by your issuer, or is tied to an account that has been closed or seriously overdrawn, the ATM pulls it out of circulation. In these cases the machine is enforcing a decision your bank has already made.
Mechanical or Network Failures
Sometimes the equipment is the problem. A power surge, a jammed card reader, or a break in communication between the ATM and the bank’s processing network can leave the machine defaulting to holding the card rather than returning it. This kind of retention is accidental and usually happens mid-transaction, before anything has been authorized.
When a Retained Card Is Actually Theft
Not every retained card is the bank’s doing. Criminals slip devices into ATM card slots that physically trap your card so it looks like the machine ate it. You leave frustrated. They come back, extract the device with your card still inside, and use it. These traps are sometimes paired with a pinhole camera or a fake keypad overlay to capture your PIN at the same time.
The FBI has warned that criminals install skimming and trapping hardware inside or over ATM card readers and use hidden cameras or keypad overlays to record PINs as customers type.1FBI. Skimming Before inserting a card at any ATM, run a finger along the card slot and tug gently on the plastic housing. Anything that feels loose, bulky, or out of place is a reason to walk away and find another machine. If your card has already been trapped and something about the ATM looks off, treat it as a possible theft rather than a routine retention.
What to Do in the First Few Minutes
The minutes right after a retention matter more than the days that follow. Don’t leave and deal with it later.
Look at the Machine Before You Walk Away
Check the ATM for tampering: attachments on the card slot, a camera that seems out of place, anything stuck to the keypad. Note or photograph the machine’s exact location, the time, and any terminal ID number shown on the screen or printed on the housing. Your bank will ask for this.
Call Your Bank Using a Number You Trust
Use the phone number on a recent statement or in your bank’s official app. Do not call a number posted on the ATM itself. Scammers sometimes stick fake “customer service” labels on compromised machines.
Ask the representative to place an immediate hold on the account or permanently cancel the retained card. Write down who you spoke with, when, and any reference number they give you. That record matters if you later need to dispute a charge or prove when you first reported the loss.
Reporting quickly does two things at once. It activates the card network’s zero-liability pledge, and it locks in your strongest federal protections. Visa and Mastercard both promise you won’t be held responsible for unauthorized charges when you report the loss promptly and have taken reasonable care of your card.2Visa. Visa Zero Liability Policy3Mastercard. Zero Liability Protection
How Much You Could Owe If Someone Uses the Card
Network promises are useful, but federal law sets a harder floor. The rules differ sharply between credit cards and debit cards.
Credit Cards
Federal law caps your liability for unauthorized credit card charges at $50. If you report the loss before any unauthorized charges appear, you owe nothing.4GovInfo. 15 USC 1643 – Liability of Holder of Credit Card Most issuers waive even that $50 under their own zero-liability policies, so a retained credit card is financially low-risk as long as you make the call.
Debit Cards
Debit cards carry more risk because the money leaves your checking account in real time. Regulation E, the federal rule implementing the Electronic Fund Transfer Act, ties your maximum liability directly to how fast you report:5eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
- Report within 2 business days of learning about the loss, and your liability tops out at $50, or the amount of unauthorized transfers before you reported, whichever is less.
- Report after 2 business days but within 60 days of the statement showing the unauthorized activity, and your liability can climb to $500.
- Wait longer than 60 days from that statement, and you can be on the hook for the full amount the bank can show would have been prevented by earlier reporting.
The jump from $50 to $500 at the two-day mark is why calling your bank immediately isn’t just good advice. It’s a financial decision with a real dollar figure attached.
Getting Cash While You Wait
A retained card doesn’t have to leave you without money.
If you’ve already added your debit card to a digital wallet like Apple Pay, Google Pay, or Samsung Pay, many major bank ATMs, including Bank of America, Chase, and Wells Fargo machines, let you tap your phone on a contactless reader, enter your PIN, and withdraw cash normally. This only works if the card was added to the wallet before it was retained.
You can also walk into any branch of your bank with a government-issued photo ID and withdraw from your account through a teller. Some branches print a replacement debit card on the spot, so you may be able to leave with a working card the same day.
For travelers, Visa runs an emergency cash disbursement service available at more than 270,000 locations worldwide. You call Visa customer service, provide identifying information, and pick up cash at a designated location, typically within a business day once your issuer approves the request.6Visa. How to Get Emergency Cash Mastercard offers a similar service. Worth knowing about before you need it.
Getting a Replacement Card
Don’t count on getting the retained card back. If the ATM belongs to a different bank than yours, the operator will almost certainly destroy it under standard security procedures. Even your own bank is unlikely to fish it out of the machine. The realistic path is cancellation and reissuance.
Most issuers start processing a replacement as soon as you finish the phone report. A standard replacement typically arrives in the mail within seven to ten business days. Many banks charge nothing for a standard reissue; some charge a small fee. Expedited shipping can cut the wait to two or three business days for an added fee.
The replacement will carry a new card number, a new expiration date, and a new security code. That’s deliberate, so anyone who has the old card’s details can’t use them.
Update Your Digital Wallets and Autopay
A new card number means every service storing the old one needs updating. This is the step people forget, and it’s what causes declined payments and late fees weeks later.
Digital wallets often handle the transition on their own. Google Wallet notes that your bank may automatically update the card in the app once the new card is issued, so tap-to-pay on your phone can keep working even before the physical card arrives; for online purchases stored in your Google account, you may still need to enter the new details manually.7Google Wallet Help. Manage Payment Methods Added to the Google Wallet App Apple Pay generally updates automatically when the bank supports it. Check the app after the new card is issued to confirm.
Then make a list of every service that runs on the old card: streaming subscriptions, insurance premiums, gym memberships, utility autopay, loan payments. Update each one as soon as the replacement arrives. A missed automatic payment on a loan or insurance policy can cost far more than the inconvenience of the retention itself.