ATM Explosions Show Banks Can’t Ignore Physical Security

A cash machine is supposed to be one of the least dramatic parts of the financial system: a metal box, a short transaction and a receipt. Yet explosive ATM attacks are exposing an uncomfortable weakness in banking’s physical distribution network.

The documented pattern is not as simple as “ATM crime is rising.” Europol has reported a sharp increase in ATM explosions, while industry reporting has distinguished that increase from the broader category of physical ATM attacks, which declined in one comparison. The important point is not that every kind of attack is growing. It is that explosive attacks have become a more prominent threat.

The real weakness is the machine’s physical presence

An ATM is a physical access point connected to a valuable network and positioned where customers need money. That makes its vulnerability different from a purely digital breach. The machine’s location, construction and surroundings become part of the security equation.

The financial impact is not limited to the cash taken. The European Association for Secure Transactions reported total losses of €200 million from successful explosive ATM attacks in one published comparison. In our view, that figure is a reminder that ATM security should be measured against the full cost of an incident, not just the amount stolen.

Because ATMs can be located near homes and businesses, an explosive attack could create risks beyond the cash inside the machine. That possibility does not mean every attack produces the same consequences, but it does make location a strategic question rather than a simple real-estate decision.

The distinction matters. A single incident cannot establish a continent-wide trend. A sustained pattern, however, can reveal whether banks have treated the physical layer of their distribution network as a secondary concern.

A smaller role for cash would not erase the security problem

The lazy response is to assume that changes in payment habits make ATM security less important. That does not follow. A service can be used less often and still matter when people depend on it, especially when digital alternatives are unavailable, inconvenient or unsuitable for a particular customer.

The available documentation points to a more complicated relationship between cash and cards. A 2025 study examined 275 explosive ATM attacks and analyzed how households respond when they shift from cash to card payments. That research does not prove that cash use is declining everywhere, nor does it settle the future of cash. It does show that ATM violence and payment choice are connected subjects rather than separate debates.

This creates a strategic trap for banks. If an ATM appears less central, it may attract less investment while remaining a concentrated physical risk. The answer is not necessarily to preserve every machine in every location. It is to make deliberate decisions about which access points are safe, supervised and worth maintaining—and to provide credible alternatives where they are not.

Security spending should follow the threat, not the headline

The documentation refers to gas and solid explosives, but it does not establish that one method dominates in every market or location today. That uncertainty argues against theatrical, one-size-fits-all responses. Banks need a broader assessment of location, building design, cash loading, monitoring and response procedures.

In our view, ATM protection should also be treated as a shared planning problem when machines operate near other properties and public spaces. Banks, police, property owners and local governments may have different responsibilities, but isolated measures designed machine by machine are unlikely to address every risk created by location.

The commercial question is uncomfortable: who pays for resilience when the service is used by customers but an attack could affect the surrounding area? If institutions want to preserve cash access, they must account for that wider risk. If they want to reduce the network, they must explain how customers will obtain cash safely and conveniently instead.

The winners will redesign access, not simply abandon it

The worst response would be to use ATM explosions as a convenient argument for pushing customers toward digital payments without addressing the underlying security problem. Cash access remains part of financial resilience, even if its role changes over time. Removing machines may reduce exposure in some locations, but it can also concentrate demand and create access gaps.

Our verdict is straightforward: ATM explosions should trigger a security review, not a simplistic argument about the death of cash. The strategic winners will be banks that combine fewer, better-protected access points with credible alternatives and transparent local planning. The losers will be institutions that treat attacks on financial infrastructure as isolated crimes—and discover too late that the vulnerable asset was not only the cash machine, but trust in the network around it.