Crypto ATM Scams: Warning Signs and What to Do (2026)

Crypto ATM scams work because they ask you to do one simple thing: put cash into a machine. Real businesses, banks and government agencies do not ask you to pay with a Bitcoin ATM. If anyone does, treat it as a scam and stop.

Note: this guide has no affiliate links. It is based on the FTC, the FBI and the news reports listed at the bottom, checked in October 2026. Education only, not financial, legal or tax advice. See our disclosures.

The short answer

  • Hang up or stop replying. Scam stories create urgency so you do not stop to think.
  • Never deposit cash into a crypto ATM because someone told you to. The FTC says anyone who asks you to use a Bitcoin ATM to protect your money or fix a problem is a scammer.
  • Crypto sent from a kiosk usually cannot be pulled back. Prevention matters far more than recovery.
  • Already sent money? Jump to what to do now.

How big are crypto ATM scams?

  • FBI, 2025: more than 13,400 complaints involving crypto kiosks, with over $388 million in reported losses. The FBI says that is a 58% increase in losses from 2024. More than half of the complaints came from people over 50, with losses of over $302 million in that group (per BleepingComputer’s report on the FBI data).
  • Top states, FBI 2025: Texas, Florida and California together accounted for over 3,300 complaints and over $112 million in estimated losses.
  • FTC, earlier data: reported Bitcoin ATM losses were above $110 million in 2023 and above $65 million in the first six months of 2024. The FTC reported a median loss of $10,000 in that period, and adults over 60 were more than three times as likely as younger adults to report losing money this way.

These are reported losses. Many victims never report, so real totals are likely higher.

How the scam works

Crypto ATMs (also called Bitcoin ATMs or crypto kiosks) look like ordinary ATMs and often sit in convenience stores and gas stations. Instead of giving you cash, they take your cash and buy cryptocurrency. The FTC describes a common pattern:

  1. A stranger contacts you by phone, text, email or a computer pop-up.
  2. They invent a problem and say you must act now.
  3. They tell you to withdraw cash and deposit it into a specific crypto ATM, often saying it will “protect” your money.
  4. They give you a QR code to scan at the machine. Once scanned, your cash goes straight into the scammer’s wallet.

Common scam stories

  • Government or law enforcement impersonation: “You are linked to money laundering or drug smuggling. Move your money to be safe.”
  • Fake account alerts: “Someone is using your bank or Amazon account. We will help you secure it.”
  • Tech support pop-ups: “Your computer is infected. Pay now to fix it.”
  • Business impersonation: someone pretends to be a company you deal with and demands payment.
  • Online relationships and investment pitches: a person you have only met online asks you to send crypto. The FBI advises caution about sending money to people you have only met online.

The FTC says most losses reported to it stemmed from government impersonation, business impersonation and tech support scams.

Warning signs

  • The contact was unexpected and urgent.
  • You are told to keep it secret or to ignore warnings from your bank or a store clerk.
  • You are told to withdraw cash and put it into a machine.
  • You are given a QR code or wallet address by someone you do not know in person.
  • A kiosk or its operator warns you about fraud, but the caller says to ignore it. The FBI advises stopping the transaction if an operator warns you about fraud.
Rule of thumb: no real agency, bank, utility or company takes payment through a crypto ATM. A request to use one is the warning sign.

What to do if you already sent money

  1. Stop sending more. Scammers often ask for a second payment.
  2. Contact the kiosk operator. The company’s name and phone number are usually on the machine and on your receipt. Ask what options they have. Success is not guaranteed.
  3. Report it to the FTC at ReportFraud.ftc.gov.
  4. Report it to the FBI at ic3.gov, and to your local police. Keep your receipts and any messages. The FBI advises keeping receipts for all crypto transactions.
  5. Protect your accounts. If you shared passwords or personal information, contact your bank and other providers using a phone number or website you know is real. Do not use contact details from the unexpected call or message.
  6. Tell someone you trust. These scams rely on shame and secrecy. You are not the first, and reporting helps investigators.

What the rules are changing in Florida

States have begun adding rules for kiosks. Florida’s HB 505 was reported signed in June 2026. According to AARP and CryptoSlate, most of it takes effect January 1, 2027, and it includes:

  • daily limits of $2,000 for new customers and $10,000 for other customers,
  • clear fraud warnings at the kiosk and a receipt,
  • registration of kiosk operators with the state’s Office of Financial Regulation,
  • a refund of a customer’s first kiosk transaction if fraud is reported within set deadlines.

Rules differ by state and details can change, so check your state regulator or the enacted law text before relying on them. Do not count on a refund. Treat any request to use a kiosk as a scam.

Frequently asked questions

Are crypto ATMs legal?

Operating one is generally legal where the operator meets that state’s rules. The problem is that scammers use them to collect payments from victims.

Can I get my money back?

Often not. Crypto transfers are generally not reversible, and the money moves to the scammer’s wallet quickly. Report right away, but the best protection is not sending it.

Is every crypto ATM user a scam victim?

No. Some people use kiosks to buy crypto for themselves. The warning here is about being told to use one by someone else, or sending crypto to a wallet you do not control.

Why do scammers choose crypto?

Payments are fast, hard to reverse and can be moved across wallets quickly. The FTC notes the cash goes directly into the scammer’s crypto account once the QR code is scanned.

Not sure yet? Our free 7-Minute Stablecoin Safety Checklist covers backups, test transfers and common scams. If you are building your own wallet, read What Is a Seed Phrase? How to Store It Safely.

Sources

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top