Bitcoin ATM Scam: How It Works, Red Flags and What to Do
- What Is a Bitcoin ATM Scam?
- How Bitcoin ATM Scams Work, Step by Step
- Common Bitcoin ATM Scam Scripts
- Why Scammers Want Payment Through a Bitcoin ATM
- Bitcoin ATM Scam Statistics in 2025-2026
- Red Flags: "Someone Asked Me to Pay With a Bitcoin ATM"
- What to Do If You Sent Money Through a Bitcoin ATM
- Are Bitcoin ATMs Being Banned? Laws and Limits in 2026
- Safer Ways to Buy, Hold and Spend Crypto
- How to Protect Older Relatives From Bitcoin ATM Scams
- Final Thoughts
A bitcoin ATM scam uses a caller or message sender posing as a government agency, bank, or tech-support service to pressure someone into depositing cash at a crypto kiosk and sending Bitcoin to the criminal's wallet. Legitimate government agencies, banks, and police never ask for payment through a Bitcoin ATM. Once that transaction confirms on the blockchain, it is rarely reversible.
If you are on the phone with an "agent" right now: stop, hang up, and skip to the red-flag section below. The FBI's 2025 Internet Crime Report recorded 13,460 complaints involving cryptocurrency ATMs or kiosks and $389 million in reported losses, up 58% in losses from 2024.
What Is a Bitcoin ATM Scam?
A Bitcoin ATM, also called a BTM or crypto kiosk, exchanges cash for Bitcoin or other cryptocurrencies. Legitimate use is straightforward. The fraud begins when a scammer controls the destination wallet.
How a legitimate Bitcoin ATM works
You insert cash, scan a QR code for a wallet address you control, and the machine sends Bitcoin to that address. Kiosk fees can be far higher than exchange fees. Your public address receives funds; your private key authorizes spending.
Where the scam happens: the QR code isn't yours
The kiosk processes every transaction the same way. A scammer convinces you to scan their QR code, so the Bitcoin reaches their wallet instead of yours.
Scam call → cash withdrawal → kiosk → scammer's QR code → scammer's wallet
How Bitcoin ATM Scams Work, Step by Step
The FBI's 2025 IC3 report documents this pattern:
- Unexpected contact. You receive a call, text, pop-up alert, or direct message.
- Fear or urgency. The caller claims there is an arrest warrant, a hacked account, frozen benefits, or an infected computer.
- Isolation. They tell you to keep the payment secret and lie to a bank teller about the cash withdrawal.
- Cash withdrawal. You are instructed to take out a specific amount, sometimes thousands of dollars.
- Direction to a kiosk. The scammer sends you to a nearby machine.
- QR code delivery. You scan the code they provide and deposit the cash.
- Repeat demands. They ask for more money to clear your name or cover a fee.
Each step keeps you moving before doubt sets in.
Common Bitcoin ATM Scam Scripts
The FTC reported that about 86% of Bitcoin ATM loss reports in the first half of 2024 involved government or business impersonation and/or tech-support scams.
| Script | What they say | Red flag | Reality |
|---|---|---|---|
| Government / police impersonation | "There's a warrant for your arrest. Pay now to avoid jail." | Spoofed caller ID | No agency collects fines through a Bitcoin ATM |
| Fake bank fraud department | "Your account is compromised. Move your money to a safe account." | They know personal details | A bank will not direct you to a kiosk |
| Tech support / computer pop-up | "Your computer is infected. Call this number." | Locked screen and alarm | Microsoft and Apple do not cold-call customers |
| Utility / bill shut-off | "Pay now or your power is cut in two hours." | Extreme urgency | Utilities use standard payment channels |
| Romance or investment partner | "I need help moving funds." | Met online, never in person | Classic advance-fee or pig-butchering setup |
| Fake job, prize, or sextortion | "You won a prize." | Secrecy and an upfront payment | A legitimate prize does not require payment |
Government and police impersonation
Scammers spoof caller ID to appear to be the IRS, Social Security Administration, local police, or the FBI. Official-sounding language and case numbers make the demand feel credible.
Fake bank and tech support calls
"Your savings account has been accessed by a criminal" is a common opening. Some scams mimic a relative or bank employee's voice, making it harder to dismiss in the moment.
Romance and investment scams
These frauds can develop over weeks or months before a payment request. The Bitcoin ATM is presented as a quick way to send funds, and multiple payments may follow.
Why Scammers Want Payment Through a Bitcoin ATM
It comes down to speed and irreversibility.
- Cash becomes crypto in minutes, with no waiting period or fraud hold.
- Credit cards and bank transfers can offer chargeback or fraud-check options. Kiosk payments do not.
- The Bitcoin can move immediately after the transaction is broadcast.
A confirmed transaction is hard for the operator to reverse, and scammers exploit that fact.
Bitcoin ATM Scam Statistics in 2025-2026
People 60 and over account for the majority of reported kiosk losses.
FBI IC3 2025 data, crypto ATM/kiosk complaints by age group (as of October 2026):
| Age group | Complaints | Reported losses |
|---|---|---|
| Under 20 | 58 | $124,000 |
| 20-29 | 825 | $6.5 million |
| 30-39 | 1,275 | $10.9 million |
| 40-49 | 1,472 | $20.8 million |
| 50-59 | 1,524 | $44.6 million |
| 60+ | 6,188 | $257.5 million |
The FTC put the median individual loss at $10,000 in September 2024. It also reported more than $65 million in losses during the first half of 2024. Many victims never report fraud.
Red Flags: "Someone Asked Me to Pay With a Bitcoin ATM"
If any of these match your situation, stop and hang up.
- Unexpected contact: you did not initiate the call, text, or message.
- Threats or secrecy: an arrest, frozen account, or instruction to lie to your bank.
- Cash and a specific kiosk: a stranger directs you to withdraw cash and use one machine.
- Their QR code: the destination address came from someone else.
- Pressure to stay on the phone: they do not want you to pause and think.
- Repeat demands: "just one more payment" is a scam.
- Official-looking caller ID: spoofing is easy and cheap.
The FTC's guidance is direct: never withdraw cash in response to an unexpected call or message.
What to Do If You Sent Money Through a Bitcoin ATM
Act fast. The window to stop or flag a transaction is short.
- Stop paying and end contact. Block the number.
- Preserve everything. Keep the kiosk receipt, QR-code and wallet-address screenshots, and call logs.
- Call the kiosk operator's fraud line. The number is on the machine or receipt. Ask whether your state provides a refund window.
- Report the fraud. In the US, file at ic3.gov and ReportFraud.ftc.gov, then contact local police and your bank.
- Ignore recovery offers. Fake firms often target people who have already reported a loss. Do not pay anyone who promises to retrieve the funds.
Outside the US, use Report Fraud in England, Wales, and Northern Ireland; Scamwatch and cyber.gov.au in Australia; or the Canadian Anti-Fraud Centre in Canada.
Are Bitcoin ATMs Being Banned? Laws and Limits in 2026
Rules are changing quickly. Nearly 30 US states had introduced or passed kiosk bills as of April 2026, so check your state regulator for current rules.
| Jurisdiction | Rule |
|---|---|
| Indiana | Statewide ban |
| Tennessee | Statewide ban |
| Minnesota | Statewide ban |
| Wisconsin | Limits and refund requirements |
| Spokane, WA | Citywide ban |
| Australia | A$5,000 cash cap and scam warnings |
| New Zealand | Ban announced, not yet in force |
As of October 2026.
Safer Ways to Buy, Hold and Spend Crypto
If you want to buy Bitcoin, use a wallet address you created and control. Verify the address before you send funds. Self-custody keeps your private keys off someone else's server. A Tangem hardware wallet generates keys inside its secure element, and transaction signatures happen on the hardware. Its default setup uses two or three backup cards instead of a seed phrase. No wallet can prevent a scammer from talking you into sending money. Your own wallet ensures that only you can authorize a transaction.
Tangem Pay is a Visa (virtual & physical) card inside the non-custodial Tangem Wallet app for eligible residents in supported regions. It uses USDC funding on Polygon for payments through the Visa network.
How to Protect Older Relatives From Bitcoin ATM Scams
People aged 60 and over reported about $257.5 million in kiosk losses in 2025. A short conversation before a crisis can help.
- Explain the script: a government agency will not demand kiosk payment.
- Agree on a family code word in case a caller mimics a relative's voice.
- Set bank alerts for large cash withdrawals.
- Save independently verified numbers for the bank and local police.
- Use the hang-up-and-call-back rule when a call feels urgent.
- Share the AARP Fraud Watch Network Helpline: 877-908-3360, Monday-Friday, 8 a.m.-8 p.m. ET.
Final Thoughts
No legitimate agency, bank, or company will ask you to pay through a bitcoin ATM scam or any crypto kiosk. Stop a suspected payment, preserve the evidence, and report it quickly. If you hold crypto, keep it in a wallet you control and verify every destination address before you send.
This article is for general information only and is not financial or legal advice. If you've been targeted, report it to the FBI at ic3.gov and the FTC at ReportFraud.ftc.gov, or your local police and national fraud reporting center.
คำถามที่พบบ่อย
-
Rarely. Once Bitcoin receives blockchain confirmation, the operator typically cannot reverse the transaction. Call the operator immediately anyway, then report the fraud to the FBI, FTC, and local police.
-
No. Government agencies, law enforcement, banks, and legitimate companies do not demand kiosk payment or ask a customer to withdraw cash to protect it. Hang up and use a number from the organization's official website to call back.
-
Cash and crypto make the payment fast and difficult to reverse. Once Bitcoin reaches the scammer's wallet, there is no chargeback mechanism for the victim.
-
The FBI's 2025 IC3 report recorded $389 million in reported losses from crypto ATM and kiosk complaints, up 58% from 2024. The FTC's 2024 data put the median individual loss at $10,000.
-
A kiosk can be used legitimately. The risk starts when someone else supplies the QR code or wallet address. Buy only to an address you generated and control.
-
Stop and end the conversation. If you already paid, call the kiosk operator's fraud line, report to ic3.gov and ReportFraud.ftc.gov, contact local police, and preserve the receipt and screenshots.
-
There is no nationwide US ban as of October 2026. Indiana, Tennessee, and Minnesota have statewide bans, and state and local rules continue to change.