Bitcoin ATMs are legal, regulated kiosks, and the hardware itself is reasonably secure — but they are one of the riskier ways to buy cryptocurrency. Reported scam losses through these machines topped $110 million in 2023 and were on pace to exceed that in 2024, with a median individual loss of $10,000.1Federal Trade Commission. New FTC Data Shows Massive Increase in Losses to Bitcoin ATM Scams The danger isn’t that the machine will malfunction or steal your card. It’s that someone on the phone will talk you into feeding cash into one, and once that cash becomes Bitcoin in a stranger’s wallet, it is almost always gone for good.
The Real Risk Is the Scam, Not the Machine
Every Bitcoin ATM operator in the United States has to register with the Financial Crimes Enforcement Network as a money services business and follow anti-money laundering rules under the Bank Secrecy Act. FinCEN confirmed this in a 2025 notice stating that cryptocurrency kiosk operators “generally facilitate money transmission” and are therefore subject to those obligations.2FinCEN. FinCEN Notice FIN-2025-NTC1 – CVC Kiosk Operators Operators also generally need a money transmitter license in each state where they place machines. So the industry is not a legal gray zone.
What makes kiosks dangerous is the transaction itself. Every Bitcoin transfer is broadcast to a decentralized network and permanently recorded on the blockchain. Once confirmed, no operator, bank, or agency can reverse it. That’s the opposite of a credit card charge or a bank wire, where the institution can claw funds back in a dispute. Criminals prefer Bitcoin ATMs specifically because there is no fraud department to flag the transfer and no way to pull the money back once it’s sent.
The FTC’s data shows how fast the problem is growing. Reported losses from Bitcoin ATM scams rose nearly tenfold between 2020 and 2023, and reached $65 million in just the first half of 2024. People over 60 are more than three times as likely as younger adults to lose money this way.1Federal Trade Commission. New FTC Data Shows Massive Increase in Losses to Bitcoin ATM Scams
How the Scams Work
The most common scheme starts with a phone call or message claiming there’s suspicious activity on one of your accounts, or that your personal information has been linked to money laundering. The story escalates. The caller may hand you off to a supposed government agent, sometimes claiming to work for the FTC itself, who says your money is at risk and needs to be moved immediately. You’re told to withdraw cash from your bank and deposit it into a Bitcoin ATM, which the scammer describes as a “safety locker” or “secure federal wallet.” A QR code arrives by text. The moment you scan it at the machine and feed in the cash, the money goes straight to the scammer.3Federal Trade Commission. Bitcoin ATMs – A Payment Portal for Scammers
Other versions use romance, fake tech support, or impersonation of utility companies and law enforcement. The details change; the mechanics don’t. Create urgency, steer the victim to a kiosk, hand over a QR code. By the time the victim realizes what happened, the cryptocurrency has been moved through multiple wallets and is effectively untraceable.
How to Spot a Bitcoin ATM Scam
One rule catches almost every version of this fraud: no legitimate business, government agency, or law enforcement body will ever ask you to deposit cash into a Bitcoin ATM. If someone tells you to protect your money by moving it to a “safety locker,” “secure wallet,” or “government Bitcoin account,” they are a scammer.
Other reliable warning signs:
- Urgency. The caller insists you act immediately, often claiming your money or accounts will be frozen within hours.
- Secrecy. You’re told not to discuss the situation with family, friends, or your bank, often under the pretext that the investigation is confidential.
- QR codes from strangers. Any QR code texted or emailed to you for use at a Bitcoin ATM is directing your money to someone else’s wallet.
- Escalating authority. The caller transfers you between supposed agents, such as a bank representative and then a federal investigator, to make the story feel more real.
If any of that is happening, hang up. Call the organization back using a number from its official website, not one the caller gives you.
The Fees Are Steep, and Some Are Hidden
Bitcoin ATMs charge dramatically more than online cryptocurrency exchanges. The typical total cost of buying Bitcoin at a kiosk runs between 12% and 20% of your transaction, combining a usage fee with an unfavorable exchange rate that builds in an additional markup of roughly 5% to 7% over the market price.4Federal Reserve Bank of Kansas City. The Controversial Business of Cash-to-Crypto Bitcoin ATMs Selling Bitcoin back to cash carries a similar spread. Most online exchanges, by comparison, charge between 0.5% and 2%.
Depositing $500 at a kiosk could cost you $60 to $100 once fees and exchange-rate markup are combined. That cost is not always displayed transparently. Some machines show only the usage fee and bury the rest inside the quoted Bitcoin price. Before confirming any transaction, compare the Bitcoin price on the screen to the current market price on a site like CoinMarketCap. If the gap is more than a few percent, you’re paying a hidden premium on top of whatever fee the machine posts.
Your Money Is Not Insured
Cryptocurrency you buy at a Bitcoin ATM is not protected by any government insurance program. The FDIC does not insure crypto assets, and neither does the National Credit Union Share Insurance Fund.5Federal Trade Commission. Crypto Companies Touting FDIC Insurance? Not So Fast If the kiosk operator goes out of business, or your cryptocurrency is stolen from a connected wallet, the government has no obligation to make you whole.
The Consumer Financial Protection Bureau has warned that wallet providers may disclaim responsibility for stolen crypto even when the theft occurs on their platform, and that lost private keys mean lost funds — no one can recover them.6Consumer Financial Protection Bureau. Risks to Consumers Posed by Virtual Currencies A Bitcoin ATM transaction is closer to handing someone cash than to swiping a debit card. The convenience of the kiosk format can obscure how little safety net exists underneath it.
How to Check That a Kiosk Operator Is Legitimate
You can look up whether an operator is registered with FinCEN through the MSB Registrant Search on FinCEN’s website.7FinCEN. MSB Registrant Search Registration alone doesn’t guarantee the operator is trustworthy, but an unregistered operator is breaking the law and should be avoided entirely.6Consumer Financial Protection Bureau. Risks to Consumers Posed by Virtual Currencies Your state’s financial regulator can confirm the operator holds the required money transmitter license as well.
Look at the machine, too. Legitimate kiosks display the operator’s name, a customer service number, and fee disclosures. If there’s no branding, no posted fees, and no way to reach the operator, walk away. Established operators such as Bitcoin Depot, CoinFlip, and Coinme run thousands of machines and publish their fee schedules online, so you can compare before you visit.
A growing number of states now require operators to post prominent scam warnings on the machines, and some impose daily transaction caps for new customers, often around $1,000 to $2,000 per day until enhanced verification is completed. A few states also require operators to refund customers who report fraudulent transactions within a specified window. Coverage is uneven, so the protections that apply to you depend on where you live.
If You Already Sent Money, Act Fast
Cryptocurrency payments are almost never reversible. The FTC is blunt: you can only get your money back if the person you paid voluntarily sends it back, which scammers won’t do.8Federal Trade Commission. What To Do if You Were Scammed You should still act quickly.
Contact the Bitcoin ATM operator immediately and report the transaction as fraudulent. Some operators can freeze the receiving wallet if they move fast enough, and a few states require operators to issue refunds for promptly reported scam transactions. File a report with the FTC at ReportFraud.ftc.gov, and file complaints with your state attorney general and local law enforcement. Even when the money isn’t recoverable, these reports help investigators identify scam patterns and build cases against repeat offenders.8Federal Trade Commission. What To Do if You Were Scammed