The best place to put an ATM is a commercially zoned, high-traffic location where customers routinely need cash, such as a convenience store, bar, hotel, laundromat, or entertainment venue, and where you can satisfy local zoning, ADA accessibility, surcharge disclosure, and payment card security rules before the first transaction runs. Picking the spot is the easy half. The compliance work around it is what separates a profitable placement from a liability.
Locations That Actually Earn
Two traits drive withdrawals: steady foot traffic and a customer base that prefers or needs cash. Convenience stores and gas stations top the list because customers already have their wallets out. Bars, nightclubs, and restaurants perform well on the strength of tipping and split checks. Hotels, laundromats, event venues, and large shopping centers round out the reliable placements. A busy site can process 500 or more transactions per month; a slower one might see around 200.
Independent ATMs sit off bank premises and route through third-party networks, which is a different regulatory posture than a bank-branch machine. That changes what insurance you need, who your processor is, and how your transactions get authorized.
Zoning and Local Licensing
Before you negotiate anything with a host, confirm the site is zoned for commercial use and that an ATM qualifies as a permitted accessory use under that zoning category. Most cities require at least a general business license, and some require a separate permit specifically for automated teller machines. Fees and processing times vary, so call the local planning or licensing office early.
Outdoor placements draw extra scrutiny. A through-the-wall installation or a freestanding unit on a sidewalk can trigger rules on public right-of-way encroachment, sign restrictions, and pedestrian clearance. Indoor placements are simpler, but you still need the building’s certificate of occupancy and use classification to accommodate the machine. Operating without the right permits can produce daily fines until the unit is removed or brought into compliance.
ADA Accessibility at the Install
Every ATM open to the public must meet the 2010 ADA Standards for Accessible Design. If you place both an interior and an exterior machine, each installation counts as a separate location, and at least one machine at each location must be fully accessible and offer every function available there.1U.S. Department of Justice. 2010 ADA Standards for Accessible Design
The physical setup comes down to reach and space. Keep a clear floor area of at least 30 inches by 48 inches in front of the machine so a wheelchair user can approach head-on or from the side. All operable parts, including the keypad, card reader, and screen, must sit no higher than 48 inches from the floor on an unobstructed approach. If there is an obstruction such as a counter the user has to reach over, the maximum drops to 44 inches for a forward reach deeper than 20 inches.1U.S. Department of Justice. 2010 ADA Standards for Accessible Design
Speech Output and Braille
The machine must be speech-enabled so users with vision impairments can complete transactions independently. Operating instructions, transaction prompts, input verification, error messages, and all displayed information must be available as audio output through a standard headphone jack or telephone handset. Users must be able to repeat, interrupt, and adjust the volume of the speech. Braille instructions for activating speech mode must appear on the machine.2U.S. Access Board. Chapter 7 – Communication Elements and Features
Penalties for Getting It Wrong
ADA violations can produce private lawsuits by affected individuals or enforcement actions by the Department of Justice. In a DOJ enforcement case, the court can impose civil penalties of up to $118,225 for a first violation and up to $236,451 for repeat violations, reflecting amounts effective for penalties assessed after July 3, 2025.3eCFR. 28 CFR Part 85 – Civil Monetary Penalties Inflation Adjustment Private suits can also force injunctive relief, meaning a court order to fix the problem or remove the machine.4U.S. Department of Justice. Americans with Disabilities Act Title III Regulations Keep documentation of your site layout, clearances, and accessibility features in case your compliance is ever challenged.
Surcharge Disclosure
Federal law requires two separate fee notices before a customer pays your surcharge. A physical sign has to be posted in a prominent, conspicuous spot on or at the machine stating that a fee will be imposed, or may be imposed if some transactions are free. The machine itself must then display the notice and the exact dollar amount on screen, or print it, before the customer is locked into paying. Only after the customer sees both notices and chooses to continue can you actually charge the fee.5eCFR. 12 CFR 205.16 – Disclosures at Automated Teller Machines
Operators get tripped up here more than they expect. A sticker that falls off, a screen prompt buried after PIN entry, or a notice that says “a fee applies” without showing the amount can all create liability. Your processor usually provides compliant screen prompts in the software. The physical sticker is on you. If you change the surcharge amount, update the on-screen disclosure the same day and replace the sticker.
Payment Network, Processor, and Data Security
You can’t plug in a machine and start dispensing cash. Every independent ATM needs a connection to an electronic funds transfer network such as Visa’s PLUS, Mastercard’s Cirrus, STAR, or NYCE. Most operators get that access through an Independent Sales Organization that holds a contract with a sponsoring bank, which is a member of those networks and registers the ISO for authorized ATM access. The ISO also contracts with an acquiring processor that routes each transaction to the right network.6FFIEC. Independent Automated Teller Machine Owners or Operators The ISO handles routing, settlement, and network compliance. You handle the machine, the location, and the cash. Compare fees, settlement timelines, and support before signing with any ISO.
One boundary worth knowing: if your machine only offers balance inquiries and cash withdrawals from customers’ existing bank accounts, FinCEN guidance concludes you are not operating as a currency dealer, exchanger, or money transmitter and don’t need to register as a Money Services Business.7FinCEN. Guidance on ATM Owner-Operators as Money Services Businesses
On data security, every ATM processing card transactions must comply with the Payment Card Industry Data Security Standard, currently version 4.0.1. Requirements previously labeled future-dated under PCI DSS 4.0 became mandatory on March 31, 2025. For ATM operators, the big-ticket item is the encrypting PIN pad: upgradable machines must run PCI PTS 5.x or newer EPPs, and machines that can’t be upgraded must be replaced. Data transmitted over wireless or internet connections must be encrypted in transit.8PCI Security Standards Council. ATM Security Guidelines Information Supplement Cellular modems are the common connectivity choice for independent operators and work from a compliance standpoint, but confirm with your processor that encryption meets current standards. Non-compliance can draw fines of up to $100,000 per month from payment processors, and your transactions can be declined or the machine taken offline.
EMV capability belongs in the same bucket. Major networks shifted counterfeit fraud liability to the ATM acquirer for non-chip-enabled terminals starting in 2016 and 2017. If someone uses a counterfeit magnetic stripe card cloned from a chip card at a non-EMV machine, you absorb the loss. Upgrading the card reader pays for itself the first time it prevents a chargeback, and newer machines ship EMV-ready.
Power, Connectivity, Insurance, and Cash
A standard 110V outlet handles the electrical load, but the circuit should be dedicated or at least surge-protected. The internal computer and cash dispenser are sensitive to voltage spikes. A cellular modem is the most flexible data option and avoids running Ethernet through someone else’s building. Hardwired Ethernet is faster and more stable where the host can provide it.
Position the machine in a visible, well-lit area near the entrance or checkout. An unobstructed path from the entrance is an ADA requirement and a practical one. Exterior and drive-up installations may be subject to state or local lighting rules specifying minimum illumination around the machine at night.
Standard commercial property insurance usually won’t cover cash inside an ATM at a third-party location, or the machine itself. Talk to a broker about coverage for the cash in the machine, cash in transit during replenishment, physical damage or theft of the unit, and general liability for injuries nearby.
Cash replenishment, often called vaulting, is the ongoing cost newer operators underestimate. Loading the machine yourself saves money and requires you to handle and transport cash on a schedule. Third-party vaulting services or armored carriers do it for monthly fees that vary with location, frequency, and cash amount. Spell out in the host agreement who provides the cash, how often the machine is refilled, and what security applies during loading.
The Placement Agreement With the Host
The placement agreement controls where the machine sits, how long it stays, and who gets paid. Vague contracts are the single most common source of disputes in this business.
Compensation usually runs one of two ways. The host receives a flat monthly fee for providing space, power, and internet, or earns a per-transaction commission on each successful withdrawal. Commission structures tie the host’s income to the machine’s performance, which tends to keep the unit visible and accessible. The agreement should also state who pays for electricity and connectivity. Those small costs cause outsized friction when left ambiguous.
Term length commonly runs three to five years, often with automatic renewal unless one party gives written notice. If you want an exit, negotiate a notice period, with 30 days being common, and specify what happens to the machine at termination: a removal timeframe for the operator and who bears any site restoration cost.
A few other provisions belong in writing: responsibility for maintenance and repairs, what happens if the machine is offline for an extended period, whether the host can install a competing ATM from another operator, and whether either party can assign the agreement. Signatures from authorized representatives on both sides protect everyone and prevent unauthorized relocation of the machine during the term.