Secure Cardless Withdrawal In Atm

Abstract

Card-based ATM Authentication Has Been A Primary Target For Skimming, Cloning, And PIN Theft Attacks, Resulting In Billions Of Dollars In Losses For Account Holders And Financial Institutions Every Year. This Paper Presents A Secure Cardless Withdrawal System That Eliminates The Physical Card And Routes Every Transaction Through A Two-step Authentication Process Based On User Type. Local Citizens Authenticate Using Their Face, Captured Live By The ATM Webcam, Along With A Six-digit One-time Password Sent To Their Registered Mobile Number Via The Twilio SMS Gateway. Foreign Visitors Undergo The Same Face Capture And Mobile OTP Steps, Along With An Additional Verification Of Their Passport Number. This Matches The Submitted Document Identifier Against The Credentials Stored In The Bank Database At The Time Of Registration, Providing Foreign Users With A Stronger Three-factor Authentication Path That Meets Their Higher Identity Assurance Needs. Both Branches Merge At A Decision Engine That Allows A Transaction Only When All Required Checks Are Completed. A Gemini-powered Conversational Assistant Included In The Interface Supports Tamil, Hindi, Telugu, Kannada, Malayalam, And English, Making The Platform Easier To Use For Individuals Who Struggle With English-only Terminals. The System Uses A Python-Flask Backend, An SQLite Database, And An HTML/CSS Frontend, Demonstrating That It Is Possible To Develop A Secure, User-friendly, And Fully Cardless ATM Authentication Platform Using Common Web Technologies.

Keywords