Crypto ATM Scams: How Fraudsters Use Bitcoin Kiosks to Steal Your Money
Last reviewed Sep 8, 2026 · Reviewed by our CEH-certified investigation team
A gas-station kiosk, turned into a money-laundering machine
Bitcoin ATMs — the standalone kiosks now found in gas stations, convenience stores, and strip malls across the country — were built to make buying a small amount of crypto simple. Scammers have turned that same simplicity into one of the fastest-growing fraud categories the FBI tracks. The FBI's 2025 Internet Crime Report recorded 13,460 complaints involving crypto ATMs and $389 million in losses — a 58% increase in losses and a 23% rise in complaints from the year before (The Block). The FTC separately found Bitcoin ATM fraud complaints rose nearly tenfold between 2020 and 2023, and had already surpassed $65 million in just the first half of 2024 (FTC).
Older adults bear a disproportionate share of this specific scam: victims 60 and older accounted for $257.4 million in losses across 6,188 complaints, with an average loss of $15,600 per senior victim (The Block). If someone in your family has been directed to one of these machines, our family guide to crypto scams targeting seniors covers the warning signs to watch for before it gets to this point.
How the scam actually plays out
It almost never starts with crypto at all. A scammer calls, texts, or emails posing as a government agency, a utility company, tech support, or even a family member in trouble — creating urgency around a supposed unpaid bill, a fraud alert on a bank account, or an emergency that needs cash immediately. The victim is then walked, often while still on the phone, to a specific Bitcoin ATM — frequently one in an unremarkable location like a gas station — and instructed to feed in cash and scan a QR code the scammer provides. That code routes the newly-purchased crypto directly to a wallet the scammer controls. Once the transaction confirms on the blockchain, it's irreversible; there's no bank to call and no chargeback to request.
The machines themselves aren't the fraud — they're the laundering step. Regulators have started to respond directly to this: Connecticut suspended Bitcoin Depot's operating license over the pattern, and states including West Virginia have introduced new kiosk-operator licensing requirements specifically aimed at slowing this down.
- Anyone on the phone directing you to a specific Bitcoin ATM location to resolve a bill, fine, or emergency
- Being told to scan a QR code someone else sent you at the machine, rather than one you generated yourself
- Claims that a government agency (IRS, Social Security, etc.) accepts payment via cryptocurrency — no legitimate agency does
- Pressure to stay on the phone throughout the entire process, so you can't pause and verify independently
- A supposed family member in urgent trouble who specifically insists on cash-to-crypto rather than any other payment method
What can still be done afterward
The cash-to-crypto conversion can't be undone, but the crypto itself doesn't disappear into a void — it moves to a real wallet address, and that address, along with everywhere the funds go from there, is recorded permanently on the blockchain. That's the same starting point as any other crypto tracing case: identify the receiving wallet, follow the funds across any wallets or exchanges they pass through, and find the point where they reach a compliant platform that can act on a freeze request. See our guide on USDT scam recovery if the machine converted funds specifically into a stablecoin, since that opens an additional freeze pathway through the issuer itself. Speed still matters enormously — the full process is outlined in our step-by-step recovery guide.
Frequently asked questions
Once I've fed cash into the machine, is it really gone?+
In almost every case, yes — the machine converts your cash to crypto and sends it to whatever wallet address was entered (usually via a QR code the scammer provided), and that transaction is final the moment it confirms on-chain. There's no undo button at the kiosk.
Why do scammers prefer directing victims to a physical machine over an app?+
It sidesteps the fraud controls a bank or a mainstream exchange would apply to a large transfer. A kiosk in a gas station or convenience store often has far less friction, and cash withdrawn from a bank rarely triggers the same fraud alerts a wire transfer would.
Is there any way to trace where the money went after it left the kiosk?+
Yes — the transaction is still recorded on the blockchain the same as any other crypto transfer, which means the destination wallet and everywhere the funds moved afterward can potentially be traced, even though the cash-to-crypto conversion itself can't be reversed.
My relative already sent the money — what should we do right now?+
Stop all further payments immediately, save the machine receipt and any wallet address or QR code involved, report it to the FBI's IC3 and the FTC, and start a tracing investigation as soon as possible — the sooner a case is opened, the better the odds the destination wallet hasn't already been emptied.
Sent money through a crypto ATM under pressure?
CoinTrace Pro offers a free, no-obligation case review. Our investigators respond the same day or next business day.
Sources for statistics cited above: FBI 2025 Internet Crime Report coverage, The Block; FTC Data Spotlight.