Compliance

ATM security and compliance in Australia

Most venues are surprised by how little sits with them. Here's the split between your responsibilities and the operator's.

Most enquiries receive a response within 3 hours during business hours.

Short answer

ATM security and compliance in Australia

For a venue hosting an operator-owned ATM, obligations are mostly practical: a secure, well-lit, camera-covered position, safe access for replenishment, and not obstructing the machine or its fee disclosure. Regulatory obligations — AML/CTF registration and reporting, transaction monitoring and fee disclosure — sit with the ATM deployer, not the host.

Your side

What the venue is responsible for

  • A secure position where the machine can be anchored properly.
  • Adequate lighting over and around the machine.
  • Camera coverage of the machine and its approach.
  • Keeping the screen, fee disclosure and signage unobstructed.
  • Safe access for cash replenishment during agreed hours.
  • Reporting damage, tampering or faults promptly.
  • Landlord or centre-management approval where required.

Operator's side

What the ATM deployer carries

AML/CTF obligations

Registration, transaction monitoring, threshold and suspicious-matter reporting sit with the deployer as the reporting entity, not the host venue.

Fee disclosure

The on-screen surcharge disclosure and the customer's ability to cancel free of charge are the deployer's obligation and are built into the machine software.

Security standards

PCI-compliant card handling, encryption, key management and software updates are all managed by the deployer.

Insurance

Cover over the machine and the cash inside it is arranged by the party that owns them — the operator under placement agreements.

Siting

Physical security that actually reduces incidents

Machines sited within line of sight of staff, under existing lighting and inside camera coverage see materially fewer incidents than isolated positions. External and through-the-wall units need attention to the surrounding footpath, lighting and any blind spots.

Anchoring matters. A properly bolted machine on a solid substrate is a far less attractive target, and it is a condition of most placement agreements and insurance arrangements.

Owner-operators

If you buy the machine yourself

Owning the ATM changes the compliance picture significantly. As deployer you may take on AUSTRAC registration and reporting obligations, transaction monitoring, fee disclosure, PCI-related requirements, and insurance over the machine and cash. Get advice specific to your circumstances before you buy.

This is a common reason venues choose placement even when volumes would justify ownership — the revenue difference is smaller than the administrative difference.

FAQs

Questions people ask

Not when the ATM is owned and operated by a deployer under a placement agreement — those obligations sit with the deployer. If you own and operate the machine yourself, you should get advice on your own AML/CTF obligations.

Want this answered for your venue specifically?

Tell us your site and volumes and we'll give you the real numbers. Or call 0412 025 552 — Mon–Fri 8:30am – 7:30pm AEST · Online enquiries 24/7.