Bitcoin ATM Scams: How Criminals Use Crypto Kiosks to Steal

A Bitcoin ATM looks reassuringly ordinary. It sits inside a familiar grocery store, convenience store, or gas station, and using it can feel almost as routine as withdrawing cash from a bank ATM. But the machine does something very different: it converts your cash into cryptocurrency and sends it to a digital wallet — and if the person directing you is a scammer, that wallet belongs to a criminal. Once the transaction confirms, the money is gone.

The scale is staggering. In 2025, the FBI’s Internet Crime Complaint Center (IC3) received over 13,460 complaints involving cryptocurrency kiosks, with reported losses exceeding $388 million — a 58% increase in losses from the year before. The FTC has called these machines a “payment portal for scammers,” and in August 2026 the Commodity Futures Trading Commission (CFTC) issued a consumer advisory warning that a request to pay through a crypto ATM is almost certainly a scam. People over 60 were more than three times as likely as younger adults to report losing money, and victims over 50 accounted for more than half of all reported kiosk losses.

This guide explains how the scam works step by step, why the payment is effectively irreversible, and the single rule that stops it: no government agency, bank, or legitimate business will ever tell you to protect your money by feeding cash into a Bitcoin ATM.

How a Bitcoin ATM Scam Works

The machine is only the final step. The scam starts with fear:

Step 1: The alarming contact. You get a call, text, email, or a pop-up warning on your computer. The message claims your bank account has been hacked, you owe money to the government, you missed jury duty and face arrest, or a virus has locked your computer. The caller may claim to be from a bank, a tech-support company, the Social Security Administration, the IRS — or even the FTC or FBI themselves. Caller ID is easily spoofed, so the number on your screen proves nothing.

Step 2: The manufactured emergency. The scammer creates urgency and isolation: your money is about to be seized, a warrant will be issued within the hour, your accounts will be frozen. They keep you on the phone for the entire scam, sometimes for hours, and instruct you not to tell family members, bank staff, or police — because anyone you tell would recognize the scam instantly.

Step 3: The “solution.” You are told to withdraw cash from your bank and take it to a nearby Bitcoin ATM to “protect” it, pay a fine, or settle a supposed debt. The scammer may look up the nearest kiosk for you and stay on the line while you drive there.

Step 4: The QR code. At the machine, the scammer sends you a QR code — by text or email — and walks you through scanning it. That QR code contains the scammer’s wallet address, which you cannot read by looking at it. The FTC has specifically warned that scammers use QR codes this way because a code cannot be spell-checked the way a link or address can.

Step 5: The deposit. You feed cash into the machine. It converts the cash to cryptocurrency and sends it directly to the criminal’s wallet. The scammer may coach you on what to say if a store employee or family member asks questions, and may direct you to split deposits across several kiosks to avoid drawing attention.

Step 6: The aftermath. Once the transaction is confirmed on the blockchain, it is immediate and irreversible. Unlike a credit or debit card payment, a crypto transfer carries none of the consumer protections that allow banks to reverse fraudulent charges. The scammer hangs up, and the money is gone.

Why Bitcoin ATMs Are So Dangerous in Scams

Three properties make crypto kiosks the perfect tool for fraud. First, speed and irreversibility: blockchain transactions settle in minutes and cannot be canceled by any bank. Second, anonymity: the money lands in a wallet the scammer controls, with no name attached that a victim can see. Third, familiarity: because the machine sits in an ordinary store and looks like a bank ATM, victims do not feel the danger they would feel wiring money to a stranger overseas. That false sense of normalcy is part of the trap.

Regulators have noticed. The CFTC’s August 2026 advisory, “Pause Before You Pay,” groups crypto kiosks with gift cards, QR-code payments, and cash couriers — all instructions that share one purpose: moving money quickly, outside the systems that can reverse a payment. Several states have responded with bans or strict limits: Indiana banned the kiosks in March 2026, Tennessee’s ban took effect July 1, Minnesota’s on August 1, and Arkansas’s Act 557 of 2025 caps transactions and fees while giving new customers a short refund window for fraudulent transactions.

Red Flags: The Bitcoin ATM Checklist

The warning sign is not the machine itself — it is an unsolicited, high-pressure request telling you to send cash or crypto through a kiosk before you have verified the claim:

An unexpected caller demands payment by Bitcoin ATM. Government agencies and legitimate businesses will never do this. Courts never demand payment over the phone.
You are told to keep the call secret. “Don’t tell your bank, don’t tell your family.” Secrecy is how the scammer keeps you from getting help.
You are kept on the phone the whole time. The scammer stays on the line while you withdraw cash and drive to the kiosk, coaching every step.
A QR code arrives by text or email. You are told to scan it at the machine. That code is the destination of your money — the scammer’s wallet.
You are told what to say if questioned. Coaching you to lie to bank tellers, store staff, or relatives is proof this is a crime in progress.
Threats of arrest, frozen accounts, or seized assets. Real law enforcement does not collect fines via crypto kiosk, and real banks do not ask you to “protect” money by converting it to crypto.
A pop-up “tech support” warning locks your screen. The FTC says crypto kiosks are most often used in government and business impersonation scams and tech-support scams — the pop-up is the opening move.
Requests to split deposits across multiple machines. This is designed to dodge transaction limits and attention, not to help you.

How to Protect Yourself: 8 Steps

Memorize the rule. No government agency, legitimate bank, or reputable company will ever instruct you to move money using a crypto ATM, gift cards, or a courier. Any such instruction is a scam, full stop.
Hang up and verify independently. End the call. Look up the agency or company yourself — from its official website or a number you already trust — and ask whether the claim is real.
Do not scan QR codes from strangers. A QR code is a destination you cannot read. Never scan one at a payment machine on someone else’s instructions.
Tell someone. Call a family member, a friend, or your bank and describe what is happening. The scam depends on your isolation; one conversation breaks it.
Never let a caller keep you on the phone. If someone insists you stay on the line while handling money, hang up. That insistence is the tell.
Do not feed cash into a kiosk for anyone else. If you are already at the machine and something feels wrong, walk away. A store employee or bystander can help — one Kansas cashier intervened and stopped a woman from transferring $22,800 in a bank-impersonation scam.
Talk to older relatives about this scam. People over 50 account for the majority of reported losses. A five-minute conversation with a parent or grandparent is genuine prevention.
Report the attempt even if you did not pay. Your report helps investigators track the operation. See below.

What to Do If You Already Paid

Act immediately — speed is the only thing that can help:

Contact the kiosk operator and the crypto exchange at once. Recovery is difficult, but the operator may be able to flag the receiving wallet.
Keep every receipt and transaction detail. The FBI specifically advises victims to preserve kiosk receipts, the machine’s location, the recipient’s wallet address if known, and the caller’s details.
Report to local police and the FBI’s IC3 at ic3.gov. Include the kiosk location, the time of the transaction, and any phone numbers or messages from the scammer.
Report to the FTC at ReportFraud.ftc.gov.
Contact your bank if the cash came from a withdrawal the scammer directed — the bank’s fraud team should know the full story.
Watch for follow-up scams. Criminals sometimes re-contact victims posing as “recovery agents” who promise to get the money back for a fee. That is a second scam.

How to Report a Bitcoin ATM Scam

FBI Internet Crime Complaint Center: File at ic3.gov. Include the kiosk location, receipts, wallet address, and caller details.
FTC: Report at ReportFraud.ftc.gov.
Local police: File a report — it supports the federal complaint and may be required by the kiosk operator.
Your state attorney general: Several states now regulate or ban these kiosks; your AG’s consumer protection office tracks complaints.

The Bottom Line on Bitcoin ATM Scams

A Bitcoin ATM scam is not really about the machine — it is about the phone call that sends you to it. The fear is manufactured, the authority is impersonated, and the QR code you are told to scan is simply the address where your money disappears. Cash you feed into one of these machines on a stranger’s instructions is gone for good. Remember the one rule that defeats every version of this scam: if anyone tells you to pay through a Bitcoin ATM, hang up — it is a scam.

Sources

Gadgets360, “Crypto ATM Scams Resulted in $388 Million Losses, CFTC Warns” — https://www.gadgets360.com/cryptocurrency/news/crypto-atm-scams-resulted-in-usd-388-million-losses-cftc-warns-crypto-frauds-scams-losses-regulations-11966986
Better Business Bureau of the Mid-South (via Commercial Appeal), “Cryptocurrency kiosks facilitate fraud” (September 2026) — https://www.commercialappeal.com/story/opinion/columnists/2026/09/17/better-business-bureau-of-the-mid-south-cryptocurrency-kiosks-facilitate-fraud/91774120007/
SavingAdvice, “Cash You Feed Into a Bitcoin ATM Is Gone for Good — The FTC Warning Seniors Keep Missing” (September 2026) — https://www.savingadvice.com/articles/2026/09/24/10747863_cash-you-feed-into-a-bitcoin-atm-is-gone-for-good-the-ftc-warning-seniors-keep-missing.html
Crypto-Economy, “CFTC Warns Crypto ATM Payments Are ‘Probably a Scam’ After $388M in Losses” — https://crypto-economy.com/cftc-warns-crypto-atm-payments-are-probably-a-scam-after-388m-in-losses/
Mountain Home Observer, “Baxter County to consider one-year ban on crypto ATMs as scam losses climb” — http://mhobserver.com/baxter-county-to-consider-one-year-ban-on-crypto-atms-as-scam-losses-climb/

Last reviewed: October 2026

This article is for education only and is not financial or legal advice.