As IoT technology grows, several different payment methods are available now. NFC (Near Field Communication) as a short-range communication technology has been applied in many fields, such as contactless payment and electronic tickets. ATM (Auto Teller Machine) also benefits from NFC technology as one way of cardless cash withdrawal. However, there are many security problems, and convenience problems exist. In security, certain kinds of attacks, such as man-in-the-middle, replay, and brute-force attacks, must be considered. These attacks may influence user privacy. Furthermore, considering user experience, existing methods may not make users feel enough convenience when using. To enhance security and user experience, we proposed a secure NFC cardless cash withdrawal system using time stamps and nonce to reduce the risk of attack and design more effortless operations for users to enhance user experience.