There is actually a very simple solution that a bank could use to mitigate this issue - just send a SMS everytime there is an ATM withdrawal.<p>I believe the bank I've just moved to (<a href="http://www.kotak.com/" rel="nofollow">http://www.kotak.com/</a>) does do this. It sends me an SMS for every transaction done so far (I haven't used the ATM yet).