← Back to Blog

Web3 Security · 7 min read · October 16, 2026

How to Spot and Avoid Crypto ATM Scams in 2026

Crypto ATMs are one of the fastest-growing ways to lose money to a scam. In 2025 the FBI logged more than 13,400 complaints involving crypto kiosks and over $388 million in losses — a 58% jump in a single year. The rule that protects you is simple: if anyone tells you to deposit cash into a crypto ATM, it is a scam.

What Is a Crypto ATM Scam?

A crypto ATM scam is fraud in which a criminal talks a victim into feeding cash into a cryptocurrency kiosk — a Bitcoin ATM — that converts the cash into crypto and sends it straight to a wallet the scammer controls. The machine is real. The story that justifies the deposit is not.

These kiosks look like ordinary ATMs and sit in convenience stores, gas stations, laundromats and shopping centres. Instead of dispensing cash they take cash and send bitcoin or another token to an address. That one-way, irreversible conversion is exactly what makes them a favourite payment rail for fraud.

Why Scammers Prefer Crypto ATMs

Crypto kiosks combine nearly every property a scammer wants. Transactions settle in minutes, cannot be reversed or charged back, and land in a self-custody wallet that needs no bank account and no identity to open. There are also a lot of them: self-reported US installations grew from roughly 4,250 in January 2020 to about 32,000 by mid-2024.

The fees help the scam, too. Kiosk operators commonly charge 10–20% per transaction, so the headline amount barely matters to the victim — a large slice vanishes before the money has even moved on-chain.

The 2025–2026 Numbers

In its 2025 Internet Crime Report, the FBI’s IC3 logged more than 13,400 complaints involving cryptocurrency kiosks and reported losses above $388 million — a 23% rise in complaints and a 58% jump in losses over 2024. AARP’s reading of the same data puts 2025 above $389 million, with victims aged 60 and older accounting for 76% of losses where age was recorded.

The FTC’s reporting shows the trend line: reported losses at Bitcoin ATMs rose nearly tenfold from 2020 to 2023, and the median reported loss in the first half of 2024 was $10,000 — far above the $447 median for fraud generally. Roughly 86% of kiosk loss reports involved government impersonation, business impersonation or tech-support scams.

Chainalysis’s 2026 Crypto Crime Report found overall scam inflows hit a record $17 billion in 2025, with the average scam payment climbing 253% to $2,764. It singles out crypto ATMs as a key on-ramp for elder-focused fraud, with funds flowing into Southeast Asia-linked laundering networks.

How the Scam Runs: Five Steps

1. Contact. An unsolicited call, text, email or pop-up. Phone calls are the most common opener, followed by online ads and pop-ups that imitate security warnings.
2. Impersonation. The caller claims to be your bank’s fraud team, a government agency, a tech-support agent, a delivery company — or a romantic interest built up over weeks.
3. Urgency. Something is wrong right now: your account is frozen, your identity is linked to money laundering, a warrant is coming, or a refund must be unlocked. One invented emergency, no time to think.
4. Cash withdrawal. You are told to take cash out of your bank — and often what to tell the teller if they ask questions.
5. The kiosk instruction. The scammer names a specific machine, stays on the phone while you deposit, and sends a QR code. Scan it and the cash goes to their wallet, not yours.

Red Flags: If Any of These Are True, It Is a Scam

• Someone told you to use a crypto ATM. No legitimate agency, bank or company ever asks you to pay this way.
• You are on the phone with them while standing at the machine.
• You scanned a QR code that someone sent you.
• You were told to withdraw cash, or to lie to your bank about why.
• There is a deadline, a threat or a secret.
• The machine’s own warning screen says transactions cannot be reversed. It is telling you the truth.

The single reliable rule: real businesses and real government agencies never demand payment in crypto, never tell you to move money to “protect” it, and never need a Bitcoin ATM.

What to Do If You Already Deposited

Speed decides whether anything is recoverable, so act within minutes rather than days.

• Call the kiosk operator immediately. Some operators can hold or reverse a transaction inside a short window, and several states now require them to act on fraud reports.
• Report to IC3 (ic3.gov) and the FTC (reportfraud.ftc.gov), and file a local police report.
• Preserve the evidence: the deposit receipt, the wallet address you sent to, the QR code, phone numbers and screenshots.
• Warn your bank and ask it to flag the account, in case the cash-out was recent enough to intervene.
• Expect a second wave. Within days, “recovery agents” will offer to get the money back for a fee. That is a second scam, not a rescue.

Regulation Is Catching Up — But It Will Not Save You

Thirty-one states have passed laws restricting kiosk transactions, and several cap daily deposits — California and Wisconsin at $1,000 per person per day, others at $2,000 for new customers and $5,000 for existing ones — while requiring receipts, fraud warnings, customer identification and licensing.

Enforcement is following. Maine regulators secured a $1.9 million settlement with Bitcoin Depot to reimburse consumers defrauded between 2022 and 2025, and Iowa’s attorney general sued two operators after an investigation found that at least 95% of transactions at their machines were fraudulent. Limits help, but a determined victim can still walk to a second kiosk — which is why awareness remains the real control.

Crypto ATM Scam Prevention Checklist

• Treat any instruction to use a crypto ATM as proof of fraud: hang up, do not deposit.
• Never scan a QR code sent by someone you have not independently verified.
• Hang up and call the organisation back on a number you look up yourself.
• Talk to someone you trust before moving money — scammers count on isolation.
• Turn on bank alerts and a withdrawal limit so a large cash-out gets noticed.
• If you see a distressed caller at a kiosk, speak up or alert store staff.