Also have two accounts:

- Account #1: salaries and deposits go here, no ATM

- Account #2: gets regular transfers from account #1, whatever you spend each week on your ATM, has an ATM, blocked on overdraft

If ATM is compromised the only money at risk is whatever is left in Account #2

This minimizes your exposure