Systems and methods for financial operations performed at a contactless ATM

1 . An automated teller machine (ATM), the ATM comprising:

a network interface circuit enabling the ATM to exchange information over a network;

an input/output device configured to exchange data with a mobile wallet circuit on a device associated with a user; and

a processing circuit communicably engaged to the network interface circuit and the input/output device and comprising a processor and a memory, the memory structured to store instructions that are executable by the processor and cause the processing circuit to:

receive, by the input/output device, a token and a cryptogram from the mobile wallet circuit as part of a first transaction request, the token being assigned to the mobile wallet circuit based on the device being registered with a financial institution (FI) associated with the user, the token having a permission that limits the token to transactions performed using the device associated with the user, the cryptogram containing an authentication code associated with the user and being encrypted via a unique key provisioned and assigned to the device associated with the user;

generate a second transaction request including the received token and the cryptogram, the second transaction request simulating a point-of-sale transaction and being for a zero or negligible monetary value;

transmit the second transaction request to a card network computing system;

receive, by the network interface circuit, a response to the second transaction request from the card network computing system, wherein the response indicates a validity of the first transaction request based on the card network computing system confirming that the cryptogram was created with the unique key provisioned and assigned to the device by utilizing a token provisioning circuit to decrypt and unpack the cryptogram using a master encryption key that is cryptographically related to the unique key provisioned and assigned to the device to reveal the authentication code and confirming that the authentication code of the cryptogram matches an authentication code stored by the FI associated with the user;

determine whether the token is associated with an FI associated with the ATM;

transmit, in response to the card network computing system determining that the first transaction request is valid and the determination by the ATM that the token is not associated with the FI, the token to a third party computing system such that the ATM is enabled to conduct the first transaction request without detokenizing the token;

receive an indication that the token has been validated by the third party computing system, the token being validated by the third party computing system based on the first transaction request being received from the mobile wallet circuit and the permission of the token; and

complete, based on the token being validated by the third party computing system, the first transaction request by dispensing cash to the user via a cash dispenser.

2 . The ATM of claim 1 , wherein the third party computing system is the card network computing system.

3 . The ATM of claim 2 , wherein the token is transmitted to the card network computing system for detokenization.

4 . The ATM of claim 1 , wherein the input/output device includes a near-field communication (NFC) device, and wherein the instructions further cause the processing circuit to:

establish, by the NFC device, an NFC session with the device; and

receive the token from the mobile wallet circuit via the NFC session.

5 . The ATM of claim 1 , wherein the instructions cause the processing circuit to receive, by the input/output device, user authentication information.

6 . The ATM of claim 1 , wherein the instructions cause the processing circuit to receive, by the network interface circuit, a determination of whether an account associated with a user has sufficient funds for an ATM transaction and an authorization to dispense cash to the user.

7 . The ATM of claim 1 , wherein the instructions cause the processing circuit to store a plurality of tokens in a token database, each of the plurality of tokens associated with a user account held at the FI.

8 . A method of completing transactions at an automated teller machine (ATM), the method comprising:

receiving, by an input/output device of the ATM, a token and a cryptogram from a mobile wallet circuit on a device associated with a user as part of a first transaction request, the token being assigned to the mobile wallet circuit based on the device being registered with a financial institution (FI) associated with the user, the token having a permission that limits the token to transactions performed using the device associated with the user, the cryptogram containing an authentication code associated with the user and being encrypted via a unique key provisioned and assigned to the device associated with the user;

generating, by a processing circuit of the ATM, a second transaction request including the received token and the cryptogram, the second transaction request simulating a point-of-sale transaction and being for a zero or negligible monetary value;

transmitting, by the processing circuit, the second transaction request to a card network computing system;

receiving, by a network interface circuit of the ATM, a response to the second transaction request from the card network computing system, wherein the response indicates a validity of the first transaction request based on the card network computing system confirming that the cryptogram was created with the unique key provisioned and assigned to the device by utilizing a token provisioning circuit to decrypt and unpack the cryptogram using a master encryption key that is cryptographically related to the unique key provisioned and assigned to the device to reveal the authentication code and confirming that the authentication code of the cryptogram matches an authentication code stored by the FI associated with the user;

determining, by the processing circuit, whether the token is associated with an FI associated with the ATM;

transmitting, by the processing circuit in response to the card network computing system determining that the first transaction request is valid and the determination by the ATM that the token is not associated with the FI, the token to a third party computing system such that the ATM is enabled to conduct the first transaction request without detokenizing the token;

receiving, by the processing circuit, an indication that the token has been validated by the third party computing system, the token being validated by the third party computing system based on the first transaction request being received from the mobile wallet circuit and the permission of the token; and

completing, by the processing circuit based on the token being validated by the third party computing system, the first transaction request by dispensing cash to the user via a cash dispenser.

9 . The method of claim 8 , wherein the third party computing system is the card network computing system.

10 . The method of claim 9 , wherein the token is transmitted to the card network computing system for detokenization.

11 . The method of claim 8 , wherein the input/output device includes a near-field communication (NFC) device, wherein the method further comprises establishing, by the NFC device, an NFC session with the device, and wherein receiving the token comprises receiving, by the NFC device, the token from the mobile wallet circuit via the NFC session.

12 . The method of claim 8 , further comprising receiving, by the input/output device, user authentication information, the user authentication information including at least one of a personal identification number (PIN) or a biometric of a user.

13 . The method of claim 8 , further comprising receiving, by the network interface circuit, a determination of whether an account associated with a user has sufficient funds for an ATM transaction and an authorization to dispense cash to the user.

14 . The method of claim 8 , further comprising storing, by the processing circuit, a plurality of tokens in a token database, each of the plurality of tokens associated with a user account held at the FI.

15 . An automated teller machine (ATM), the ATM comprising:

a network interface circuit enabling the ATM to exchange information over a network;

an input/output device configured to exchange data with a mobile wallet circuit on a device associated with a user; and

a processing circuit communicably engaged to the network interface circuit and the input/output device and comprising a processor and a memory, the memory structured to store instructions that are executable by the processor and cause the processing circuit to:

receive, by the input/output device, a token and a cryptogram from the mobile wallet circuit as part of a first transaction request, the token being assigned to the mobile wallet circuit based on the device being registered with a financial institution (FI) associated with the user, the token having a permission that limits the token to transactions performed using the device associated with the user, the cryptogram containing an authentication code associated with the user and being encrypted via a unique key provisioned and assigned to the device associated with the user;

generate a second transaction request including the received token and the cryptogram, the second transaction request simulating a point-of-sale transaction and being for a zero monetary value;

transmit the second transaction request to a card network computing system;

receive a response to the second transaction request from the card network computing system, wherein the response indicates a validity of the first transaction request based on the card network computing system confirming that the cryptogram was created with the unique key provisioned and assigned to the device by utilizing a token provisioning circuit to decrypt and unpack the cryptogram using a master encryption key that is cryptographically related to the unique key provisioned and assigned to the device to reveal the authentication code and confirming that the authentication code of the cryptogram matches an authentication code stored by the FI associated with the user;

determine whether the token is associated with an FI associated with the ATM; and

subsequent to the card network computing system determining that the first transaction request is valid, perform one of:

in response to determining that the token is associated with the FI:

process an ATM transaction request using an account associated with the user, the account identified by detokenizing the token, wherein processing the ATM transaction request includes dispensing cash to the user via a cash dispenser; or

in response to determining that the token is not associated with the FI:

transmit the token to a third party computing system such that the ATM is enabled to conduct the first transaction request without detokenizing the token;

receive an indication that the token has been validated by the third party computing system, the token being validated by the third party computing system based on the first transaction request being received from the mobile wallet circuit and the permission of the token; and

complete, based on the token being validated by the third party computing system, the first transaction request by dispensing cash to the user via a cash dispenser.

16 . The ATM of claim 15 , wherein the third party computing system is the card network computing system or an interbank network computing system.