My local ATM does not scan my hand or ask for any government ID. I strongly suspect, however, that they do take photos.
There was a riot in my area some years ago and the police used sophisticated software to match people in the riot photographs with accounts on Facebook, in order to identify and arrest people. If the ATM is storing images of its' users then the Police or the Government can cross compare that information with Facebook to find out who is a crypto currency user and/or has not paid their capital gains' tax.
I don't think this kind of evidence would really hold up in court. This kind of technology is not accurate enough if this is the only evidence against you.