How crypto ATM scams work and how to avoid losing money

A crypto ATM scam is a trick where a stranger gets you to feed cash into a Bitcoin machine that sends the money straight to their wallet. You think you are paying a fine, clearing a bill, or moving savings somewhere safe. You are not. The cash turns into crypto and leaves. No bank can reverse it.

These scams are now one of the fastest growing frauds aimed at ordinary people. Americans reported losing over $388 million at crypto kiosks in 2025 alone, according to the FBI, and older adults are hit hardest. This guide explains how the setup works, who it targets, the warning signs, and the simple steps that stop it before your money is gone.

What a crypto ATM is, and why scammers use it

A crypto ATM, also called a Bitcoin ATM or a kiosk, is a standing machine that lets a person buy cryptocurrency with cash. You insert bills, scan a wallet's QR code, and the machine sends Bitcoin or another coin to that wallet. Thousands of them sit in gas stations, corner shops, and malls across the country.

The machines are legal. The problem is not the technology. It is who is standing behind the victim, usually on the phone, telling them exactly what to type. Scammers like kiosks because cash is hard to trace and a crypto payment cannot be undone. The money can also move across borders in minutes.

Machine numbers have climbed fast. In the United States the count grew from about 4,250 in January 2020 to roughly 32,000 by June 2024, according to an industry tracker cited by the Federal Trade Commission. More machines mean more places a frightened person can be sent.

How a crypto ATM scam actually works

Almost every version follows the same script. Someone contacts you out of the blue, by phone, text, email, or a pop-up on your screen. They claim to be someone you would not argue with: a police officer, a tax agent, your bank's fraud team, or tech support from a well known company. They tell you your money is in danger or that you owe a penalty, and that you must act now.

According to the FTC, these reports are overwhelmingly about impersonation, and the story usually opens the same way: a warning about suspicious activity or an unauthorized charge on one of your accounts. The caller poses as someone with authority. Fear does the rest.

Next comes the pressure. The caller keeps you on the line and tells you not to hang up or speak to anyone else. Your accounts are frozen, they say, or your identity has been stolen. To fix it, you must move your cash into a safe wallet. That wallet is theirs.

Then they send you to a machine. The FBI says criminals give victims detailed instructions, walking them through taking cash out of the bank, finding a kiosk, and sending the money. They often supply a QR code to scan at the machine. That code points the Bitcoin straight at the scammer's wallet.

When the cash turns into crypto and leaves the kiosk, it is gone the way physical cash handed to a stranger is gone. There is no chargeback. No fraud team can claw it back. For the scammer, that final step is the whole point.

Who the scammers target

Older adults are the main target, and the numbers are stark. In the first half of 2024, people aged 60 and over were more than three times as likely as younger adults to report losing money at a Bitcoin ATM, the FTC found. That age group accounted for about $46 million in reported losses over those six months, or roughly 71 percent of the total. The median loss was $10,000.

The pattern held into 2025. In a public alert dated May 15, 2026, the FBI said people over 50 filed more than half of all kiosk complaints and lost over $302 million between them. Complaints rose 23 percent from the year before, and reported losses jumped 58 percent.

Over a longer window, the rise is steep. Reported losses at Bitcoin ATMs grew nearly tenfold between 2020 and 2023, the FTC found, then topped $65 million in just the first half of 2024. Emma Fletcher, who wrote the agency's data spotlight on these machines, warned that the figures capture only a fraction of the real harm.

Scammers aim at older people for plain reasons. They often hold more savings, and a call claiming to be the government or the bank lands harder. Age is not the only factor, though. Anyone caught at a bad moment can fall for it, because the scripts are built to trigger panic, and panic shuts down the questions you would normally ask.

Warning signs of a crypto ATM scam

A few signs give these scams away almost every time. The FBI lists several red flags worth knowing, whether the risk is to you or to someone you love.

Be suspicious of any unexpected call, message, or pop-up that demands payment in Bitcoin. Be careful with a QR code a stranger tells you to scan at a machine, one you did not create and cannot explain. Real alarm bells should ring if someone pushes you to withdraw a large amount of cash, fast, in big bills. The worst sign is a caller who insists you stay on the phone the whole time, even in the car on the way to the shop.

Other people can spot the signs too. Bank tellers and shop staff are often the last line of defense. The FBI tells them to watch for a customer making a first time or unusually large cash withdrawal in big bills, someone who seems confused or nervous about why, or a person at a kiosk who is on the phone and being talked through each step. A quiet question at the counter has stopped plenty of these in progress.

One line from the FBI is worth taping to the fridge. "No legitimate law enforcement or government official will call to demand payment via a cryptocurrency kiosk," the bureau wrote in its May 2026 alert. No real agency works that way. None.

How to protect yourself and your family

Your best defense is free and it is quick. Slow down. Scammers need speed, so the strongest move is to stop and check before you touch any cash.

Hang up and call the company or agency back on a number you find yourself, never one the caller gave you. No bank, court, or tax office will ask you to pay through a Bitcoin machine. If someone demands crypto, that alone tells you it is a scam. The same rule that guards a self-custody wallet applies here: if you would not hand a stranger your keys, do not let one choose where your money goes.

Never scan a QR code from a stranger to send money. If a kiosk or its operator shows a fraud warning while you are using it, stop at once. And talk to someone you trust before you act, a family member, a friend, your real bank. A genuine emergency survives a ten minute phone call. A scam rarely does.

If you care for an older relative, have the conversation now, before anything happens. Tell them plainly that the government does not take Bitcoin. Knowing how a crypto wallet works helps too, because the whole trick depends on people not realising that a transfer cannot be undone.

What to do if you have already paid

Moving quickly matters if you have already paid, even though the odds of recovery are low. Keep every receipt and the kiosk's printed record. Write down the machine's location, the wallet address, and any phone number, email, or name the scammer used.

Report it two ways. Call your local police, and file with the FBI at ic3.gov. Give them the transaction ID, the wallet address, and the kiosk location. Reporting rarely returns the cash, but it feeds the cases that catch these networks and, now and then, freezes funds before they move again.

Lawmakers are starting to respond. Several US states have moved to cap or ban crypto kiosks, and some now require operators to post fraud warnings or refund certain first time victims. The rules differ by state and keep changing, so check your own before you count on any protection.

One caveat on the figures. Both the FTC and the FBI say their totals are almost certainly too low, because most victims never report what happened. The FBI also notes that its kiosk number can include other kinds of payments, so read it as a measure of scale rather than an exact count.