Crypto ATM and Bitcoin ATM Scams: Warning Signs (2026)

How a crypto ATM scam works

The FTC describes the typical script. It starts with a call or message about suspicious activity or unauthorized charges, or a fake security warning on a computer, often impersonating Microsoft or Apple. The story escalates: your money is at risk, or your information is tied to money laundering or drug smuggling. A fake government agent may join the call. You are told that depositing cash into a Bitcoin ATM will protect your money, and the machines are called “safety lockers”.

Then comes the coaching. You are told to withdraw cash from your bank, go to a specific nearby machine, and scan a QR code the scammer texts you. Once you scan it, the cash goes into the scammer’s wallet. The FTC says some scammers stay on the phone throughout.

The numbers are large. In an FTC data spotlight, Bitcoin ATM fraud losses rose nearly tenfold from 2020 to 2023 and topped $65 million in the first half of 2024, with a median reported loss of $10,000. About 86% of those reports involved government impersonation, business impersonation, or tech support scams. The FBI’s Internet Crime Complaint Center reported more than 13,400 crypto kiosk complaints and over $388 million in losses for 2025, and notes that its data may include other transaction types. It says more than half of complaints involved people over 50.

Eight warning signs

1. An unexpected call about fraud, money laundering, or a frozen account. The FTC says these scams start with a call or message about suspicious activity, a fake security pop-up, or claims that your information is tied to crime.
2. A request to withdraw cash. The FTC says never withdraw cash in response to an unexpected call or message. The FBI lists large first-time cash withdrawals as a warning sign.
3. A claim that depositing cash will “protect” your money. The FTC says scammers call Bitcoin ATMs “safety lockers”. Real businesses and agencies never tell you to use a Bitcoin ATM to protect money or fix a problem.
4. A specific machine and a QR code. The FTC says scammers direct you to a nearby machine and text a QR code. Scanning it sends your cash to the scammer’s wallet. See QR code scams.
5. The caller stays on the line while you use the machine. The FTC and FBI both note that scammers coach victims by phone, step by step. A call during a kiosk transaction is a warning sign.
6. A government or police demand for crypto. The FBI says law enforcement and government officials will not demand payment through a cryptocurrency kiosk. See government impersonation scams.
7. A romance or investment contact asking you to deposit cash. The FTC warns never to mix online dating and investment advice, and that only scammers guarantee profits. See romance scams and investment scams.
8. A warning from the kiosk operator that you ignore. The FBI says that if a kiosk operator warns that your transaction looks like fraud, you should stop or cancel it.

How to stop a crypto ATM request in two minutes

1. Do not withdraw cash because of an unexpected call, message, or pop-up. Hang up or close the window.
2. Look up the real number of the company or agency yourself, as the FTC advises, and call it directly.
3. Never scan a QR code from someone you do not know, as the FBI advises.
4. Talk to a family member, friend, or your bank before you move any money. Scammers want you to stay alone and rushed.
5. If your bank or the kiosk operator warns you, believe them and stop.

If you already put cash into a machine

Move fast, but be realistic. The FTC says crypto payments usually cannot be reversed, so reports matter most for speed and for stopping the next victim.

1. Call the kiosk operator. The name and support number are on the machine and on your receipt. Report the fraud and ask whether the transaction can be stopped or flagged.
2. Collect the details. Keep the receipt, the transaction ID, the wallet address, the kiosk location, and the scammer’s phone numbers, emails, or domains. The FBI asks for these.
3. File a police report with your local police, then a complaint at ic3.gov.
4. Report to the FTC at ReportFraud.ftc.gov.
5. Tell your bank if you gave account details or the caller has remote access to your device. Change passwords from a clean device.
6. Do not pay a “recovery” service. People who say they can recover crypto for a fee are often running a second scam. See recovery scams.

Where to report

• United States: your local police, ic3.gov (FBI Internet Crime Complaint Center), ReportFraud.ftc.gov (FTC), and the kiosk operator. The FTC also lists the CFTC and SEC for crypto fraud.
• United Kingdom: Report Fraud, or 0300 123 2040. In Scotland, call Police Scotland on 101.
• Australia: Scamwatch, and ReportCyber for cybercrime.
• Canada: the Canadian Anti-Fraud Centre, 1-888-495-8501.

More help from official sources

• FTC Data Spotlight: Bitcoin ATMs, a payment portal for scammers
• FBI IC3: Cryptocurrency kiosk scams (PSA260515-2)
• FTC: What to know about cryptocurrency and scams

Scambaba is an independent educational project. Reporting and recovery options depend on where you live. How these guides are researched is on the editorial policy.

Frequently asked questions