Every atm has a camera... So they could just check that.

Also, that means the person had the PIN too? That becomes harder to defend