When you visit an ATM, always type in a bad personal identification number (PIN) first. Doing so will ensure PIN validation and that the machine is really hooked up to the banking service.
I suggest a workaround for the owner of malicios ATM:
just give out "PIN is bad" always and when
cardholder comes up and says that his PIN doesn't work
say that ATM is out of service. And save the last
or repeated PIN into database.