Bitcoin ATM Scams: Why Scammers Ask You to Pay at a Crypto Machine

The call sounds urgent and official. Someone from “your bank’s fraud department,” “the Social Security Administration” or “Microsoft support” says your accounts are under attack. To protect your savings, you must withdraw cash right now, drive to a gas station or convenience store and feed it into a Bitcoin ATM. They’ll stay on the line the whole time.

Every part of that story is a lie. And the final step, the Bitcoin ATM, is how you can tell for certain. Here’s why scammers keep sending people to these kiosks, how the scripts work, and what to do if you or someone you love has already paid.

The short answer: a kiosk payment request is the scam

Bitcoin ATMs (also called crypto kiosks or BTMs) are legal machines. You put in cash, scan a QR code for a crypto wallet, and the machine sends cryptocurrency to that wallet. Plenty of people use them for ordinary crypto purchases.

The problem is who controls the wallet. In a scam, the QR code belongs to the criminal. The moment the transaction confirms, the money is in their hands.

The Federal Trade Commission puts it plainly: no legitimate business will demand that you send cryptocurrency in advance, and no real government agency will message you asking for money. That makes the rule simple:

Key takeaway: If someone you didn’t contact first tells you to deposit cash into a Bitcoin ATM, stop. There is no real situation where your bank, the IRS, the police, a utility or a tech company needs that.

How big the problem has become

Kiosk scams have grown fast, and older adults lose the most.

• FBI data for 2025: In a May 2026 public service announcement, the FBI’s Internet Crime Complaint Center (IC3) said it received more than 13,400 complaints involving cryptocurrency kiosks in 2025, with reported losses over $388 million. That was a 23% rise in complaints and a 58% rise in losses from 2024.
• Older victims: People 60 and older filed about 46% of those complaints but accounted for about 66% of the money lost.
• FTC data: The FTC’s 2024 data spotlight on Bitcoin ATMs found losses rose nearly tenfold from 2020 to 2023 and that people 60 and over were more than 3 times as likely as younger adults to report losing money through one. The median reported loss in the first half of 2024 was $10,000.

Both agencies note that most fraud goes unreported, so the real numbers are higher.

Why scammers love crypto kiosks

From a criminal’s point of view, a Bitcoin ATM solves 4 problems at once.

Compare that with a bank wire, where a teller might ask questions, or a credit card, which comes with dispute rights. A kiosk has neither. Many machines display scam warnings and note that transactions can’t be reversed, but a caller coaching you on the phone will tell you to ignore them.

The scripts that end at a Bitcoin ATM

According to the FTC, most reported kiosk losses come from 3 kinds of impersonation scams. Knowing the scripts makes them much easier to spot.

“Your bank account has been hacked”

A caller claims to be from your bank’s fraud team, sometimes with a spoofed caller ID showing the bank’s real number. They say criminals are draining your account and you need to move your money somewhere “safe.” The safe place turns out to be a crypto wallet they control. Our guide to bank impersonation scam calls walks through how these calls sound.

“You owe a fine or there’s a warrant”

Someone posing as the IRS, Social Security, a sheriff’s office or a court says you’ll be arrested unless you pay today. They insist on a kiosk because “it’s the only way to clear the warrant in time.” Real agencies send letters, and no court takes bail through a Bitcoin machine.

“Your computer is infected”

A pop-up locks your screen and gives a number for “Microsoft” or “Apple” support. The fake technician finds “hackers” in your bank account and talks you into withdrawing cash to protect it. See what to do about tech support scam pop-ups if one appears on your screen.

Other versions include romance scammers asking for help with an emergency, fake investment platforms, and callers using an AI-cloned voice of a grandchild in trouble. A family safe word helps with that last one.

Red flags that should stop you

Treat any one of these as a reason to hang up:

• You’re told to withdraw cash and take it to a store, gas station or kiosk.
• The caller won’t let you hang up or tells you to stay on the line while you drive.
• You’re told not to tell bank staff, family or police why you’re withdrawing money.
• You’re sent a QR code by text or email to scan at the machine.
• You’re told to split deposits across several kiosks or several days.
• The person says a kiosk deposit is how your money gets “protected” or “verified.”

If you’re unsure, hang up and call your bank using the number on the back of your card. A real fraud department will never be upset that you checked.

What to do if you already paid

Speed matters. Recovery is rare, but the first hours give you the best chance.

1. End all contact. Hang up, stop replying and don’t send anything more, even if they promise a refund after “one more payment.”
2. Call the kiosk operator immediately. The company name and support number are on the machine and your receipt. Give them the transaction ID, wallet address, time and location. Operators can sometimes flag a wallet, and some offer refunds in limited cases.
3. Keep every receipt and record. Photograph kiosk receipts and save texts, call logs, screenshots, QR codes and wallet addresses.
4. Report it to the FBI at ic3.gov. Include the wallet addresses and transaction IDs, which help investigators trace funds.
5. Report it to the FTC at ReportFraud.ftc.gov and to your state attorney general or financial regulator.
6. Call your bank. Tell them you were scammed, especially if the scammer saw account details or you installed remote-access software. Ask about new account numbers and alerts.
7. Clean your devices if you let anyone connect remotely, and change your banking and email passwords from a device the scammer never touched.

For a broader checklist, see what to do if you got scammed and how to report a scam.

Watch out for the second scam

After a loss, victims often hear from “recovery” services, fake law firms or even people posing as government agents who promise to get the crypto back for a fee. The FBI has warned about fictitious law firms that target crypto scam victims this way. Legitimate law enforcement won’t charge you to investigate. Anyone asking for an upfront fee to recover crypto is almost certainly running a follow-up scam.

What the law does (and doesn’t) do yet

Rules for crypto kiosks vary by state, and they’re changing quickly.

• California caps kiosk transactions at $1,000 per customer per day under its Digital Financial Assets Law, effective January 1, 2024. The state’s Department of Financial Protection and Innovation (DFPI) has fined several operators for going over that limit.
• Other states have passed or proposed their own daily limits, scam warnings, receipt requirements and, in some cases, refund rules for new customers. Check your state’s financial regulator or attorney general for current rules.
• Federal level: FinCEN, the Treasury’s anti-money-laundering bureau, issued a notice in August 2025 warning financial institutions about scams and illicit activity at kiosks. A federal bill, the Crypto ATM Fraud Prevention Act introduced by Sen. Dick Durbin, would limit new customers’ daily spending and require refunds for some reported fraud, but as of October 2026 it has not become law.

For the bigger picture of who oversees crypto, see our guide to crypto regulation in the US. This is not legal advice.

Where to start: protect yourself and your family this week

You don’t need technical skills to block this scam. You need a plan made before the phone rings.

1. Agree on the rule out loud: “No one legitimate ever asks for a Bitcoin ATM payment.” Say it to parents, grandparents and anyone who handles money for the household.
2. Set a pause rule: any request to move money urgently gets a 24-hour wait and a call to a trusted family member.
3. Turn on bank alerts for large cash withdrawals so you or a trusted contact see unusual activity fast. Our guide to protecting aging parents from financial fraud covers trusted contacts and view-only access.
4. Save your bank’s real number in your phone so you can call it directly instead of trusting caller ID.
5. Learn the wider crypto scam patterns in our guide on how to avoid crypto scams.

The bottom line

Bitcoin ATMs aren’t illegal, but a request to use one is one of the clearest scam signals there is. The caller’s story will change, from bank fraud to arrest warrants to computer viruses, but the ending is always the same: cash into a kiosk, crypto to a wallet you’ll never see again. Hang up, call someone you trust, and if money has already gone, contact the operator and report it within hours.

Sources

• FBI IC3: Cryptocurrency kiosk public service announcement (PSA260515-2) — 2025 kiosk complaint and loss figures, share of losses for people 60 and older
• FTC: New data shows massive increase in losses to Bitcoin ATM scams — tenfold rise 2020–2023, older adults’ risk, common scam types
• FTC: What to know about cryptocurrency and scams — no legitimate business demands crypto, crypto payments usually can’t be reversed, where to report
• California DFPI: Digital Financial Assets Law information for kiosk operators — $1,000 daily limit effective January 1, 2024
• Sen. Dick Durbin: Crypto ATM Fraud Prevention Act section-by-section summary — proposed federal limits and refund requirements
• FBI: Fictitious law firms targeting cryptocurrency scam victims — recovery scam warning