Crypto ATMs look harmless. They sit in gas stations and convenience stores, right next to the soda fridge. The problem is how fast they can turn your cash into crypto that’s gone for good. The FBI says people filed 13,400+ complaints tied to cryptocurrency kiosks in 2025, with losses over $388 million—up 58% year over year. More than half the complaints came from people over 50, with $302M+ in losses . If you understand the scammer’s playbook, you can stop it early—before the QR code, before the cash deposit, before the panic makes decisions for you.
Crypto ATMs: What They Are (and why scammers love them)
That “harmless” machine by the soda fridge is usually a cryptocurrency kiosk (also called a crypto ATM or Bitcoin ATM). It looks like a bank ATM, but it doesn’t give you cash. It does the opposite: it takes your cash (or debit card) and converts it into crypto, then sends that crypto to a wallet address.
What a crypto ATM actually does
In plain terms, a crypto ATM is a standalone electronic terminal that lets you buy or sell crypto assets. In the “buy” direction (the one scammers push), the flow is usually:
- You pick a cryptocurrency (often Bitcoin).
- You feed in cash (or pay with debit).
- The kiosk asks where to send the crypto.
- You enter a wallet address manually or scan a QR code.
- The crypto gets sent to that address.
These kiosks are common in gas stations, convenience stores, and other easy-access locations, which is part of why scams spread so fast.
Why scammers love crypto kiosks
Crypto ATM scams aren’t “high tech.” They’re high pressure, with one key advantage: finality.
When a scammer gets you to deposit cash at a crypto kiosk, the machine can transfer the value to an attacker-controlled crypto wallet. Once it’s sent, there’s no “chargeback” button like there is with a card purchase. You’re not handing money to a stranger in a parking lot, so it feels safer—yet the end result is the same.
Crypto kiosks also check boxes scammers care about:
- Speed: cash becomes crypto in minutes.
- Distance: the scammer can be anywhere while you do the running around.
- Less friction: some kiosks may or may not require identity checks (rules vary).
- Easy instructions: “Go to this store. Use this machine. Scan this code.” It’s simple enough to follow when you’re stressed.
And stress is the whole point. The FBI says “typical” complaints involve criminals giving detailed instructions on withdrawing cash, locating a kiosk, and depositing/sending funds through it. That’s the bridge from panic to payment—and it’s exactly what the next section breaks down step by step.
The scammer’s playbook: the step-by-step setup that gets people to the kiosk
The trick isn’t the machine. It’s the script.
The FBI says many crypto ATM scam complaints follow a repeat pattern: criminals give detailed, step-by-step instructions on how to pull out cash, find a cryptocurrency kiosk, and send funds through it . That “hand-holding” is the scam.
Step-by-step: what the setup often looks like
1) The hook (a reason you “must act now”)
They start with a story that creates instant fear or urgency. Common angles:
- Government or law enforcement impersonation (“there’s a warrant,” “your SSN is linked to a crime”)
- Account compromise (“your bank account is being drained”)
- Tech support (“your device is hacked”)
The goal is simple: get you scared enough to follow directions without stopping to verify.
2) The control move: keep you from fact-checking
They’ll push rules that isolate you:
- “Stay on the phone while you do this.”
- “Don’t tell the bank or store staff what you’re doing.”
- “If you hang up, you’ll be arrested / your money will be gone.”
That’s not accidental. It’s designed to block the one thing that breaks scams: an outside opinion.
3) Cash withdrawal, with coaching
Per the FBI, scammers commonly instruct victims how to withdraw cash from their bank . They may even tell you what to say if the teller asks questions, because tellers are trained to spot fraud.
4) “Go to a kiosk near you”
Next comes location. The scammer tells you how to locate a kiosk , often sending an address or pushing you to search “Bitcoin ATM near me.” They like this step because it moves you into a fast, public setting where you’ll feel pressure to “just finish it.”
5) Deposit cash and send it (usually with a QR code)
This is the point of no return. The FBI notes criminals guide victims on how to deposit and send funds using the kiosk .
And here’s the tell: they often provide the destination wallet as a QR code. You’re not “paying a bill.” You’re sending crypto straight where they want it, in one scan.
The pressure tactics to watch for (because they work)
Keep these phrases in your head, because they show up right before people lose money:
- “You need to secure your money in a safe wallet.”
- “This is a test transaction. We’ll refund it after.”
- “If anyone asks, say you’re buying crypto as an investment.”
- “Do it right now. Don’t sleep on it.”
The common thread: speed + secrecy + constant contact. Once you see that combo, you’re not dealing with a legitimate payment request—you’re being walked into a crypto ATM scam .
Red flags that matter in the moment (not just after you got scammed)
The scam only works if you stay “in motion.” Your job is to spot the moment it turns from a scary story into a payment request.
The fast red-flag checklist (use it like a stop sign)
If any of these happen, treat it as a crypto ATM scam and pause everything:
- They tell you to pay with crypto for something “official.” The FBI warns to be wary when anyone claiming to be from the government or law enforcement demands cryptocurrency payments
- They give you a QR code or payment steps you didn’t create. FBI guidance calls out never scanning QR codes or following payment instructions from unknown individuals
- The kiosk operator or store staff warns you. The FBI explicitly recommends stopping the transaction if a kiosk operator warns you of fraud
- They tell you to keep it secret. “Don’t tell anyone” isn’t a security measure. It’s a trap.
- They want personal info over the phone. The FBI also advises not sharing personal information over the phone
What to do right then (before you rationalize it)
1) Break the contact
Hang up. Stop texting. Silence the panic soundtrack.
The FBI’s advice includes always verifying phone calls directly . You can’t verify a call while the same person is talking you through the “verification.”
2) Verify the claim the boring way
- Find the official number yourself (bank website, back of your card, a government site).
- Call back from a fresh start.
- Ask one clear question: “Did you contact me and tell me to buy crypto at a kiosk?”
If the answer is anything except a clean “yes” with normal account validation, you’re done.
3) Keep proof even if you stopped in time
If you already interacted with the kiosk or got partway through:
- Save every text/email.
- Screenshot the instructions and QR code (if shown).
- Keep receipts. The FBI recommends always keeping receipts for cryptocurrency transactions
A simple rule that catches most of it
If the “solution” is paying through a crypto ATM and you’re being rushed, you’re not solving a problem. You’re funding someone else’s wallet.
Where it’s hitting hardest + what states are doing about kiosks
Once you know the red flags, the next question is practical: is this just “out there,” or is it happening close to home? The FBI’s complaint data gives a pretty blunt answer.
The hotspot states (based on complaints + estimated losses)
According to FBI complaint data and adjusted loss estimates, Texas, Florida, and California together accounted for:
- 3,300+ crypto ATM scam complaints
- $112M+ in estimated losses
Those are just three states. The important takeaway isn’t “scams only happen there.” It’s that in big, high-traffic markets, crypto kiosk scams scale—fast.
Why location matters (even if you don’t live in those states)
Crypto ATMs (cryptocurrency kiosks) are often placed in easy-access retail spots, so scammers can tell victims to go somewhere nearby and complete the payment quickly.
That makes these scams “portable.” The criminal can run the same script across state lines. Your local gas station becomes the payment rail.
What states are doing about crypto kiosks
Regulators are starting to treat kiosks as a repeat-fraud channel.
The same reporting notes:
- Minnesota recently banned cryptocurrency kiosks statewide
- After similar moves in Indiana (March) and Tennessee (April)
This isn’t a guarantee you’re protected in those states (scammers adapt), and it doesn’t mean kiosks disappear everywhere else. It’s a signal that policymakers see a pattern: crypto ATM scams keep showing up, and the damage is consistent enough that some states are opting for hard limits.
If your state hasn’t acted, assume the kiosks are still part of the scammer’s toolkit—and that the safest move is catching the setup before you ever step into the store.
A practical protection plan: stop the scam early, document it, report it
State bans and warnings help, but the real win is personal: catching the scam before your cash becomes crypto, and acting fast if you already interacted with a kiosk.
1) Stop it early (a short checklist you can actually use)
These come straight from FBI guidance on crypto kiosk scams:
- Refuse “official” crypto payments. Be wary anytime someone claiming to be government or law enforcement demands cryptocurrency.
- Don’t scan a QR code you didn’t generate. The FBI specifically warns against scanning QR codes or following payment instructions from unknown individuals.
- If staff warns you, stop. If a kiosk operator flags fraud, the FBI says to stop the transaction.
- Don’t share personal info on the phone. Another FBI callout: don’t share personal information over the phone.
- Verify phone calls directly. Don’t “confirm” anything through the person who contacted you. The FBI advises always verifying phone calls directly.
2) Document what happened (even if you only went halfway)
If you already got pulled into the process, proof matters.
Save:
- Receipts from the cryptocurrency kiosk (the FBI recommends keeping them)
- Screenshots of texts, emails, wallet addresses, QR codes, and any “instructions”
- The kiosk location (store name/address), date/time, and the amount
This isn’t busywork. It’s how you give investigators something actionable.
3) Report it quickly (so it’s on record)
The FBI routes cyber-enabled crime reports through the Internet Crime Complaint Center (IC3).
If you lost money or came close, file a report as soon as you can while details are fresh.
4) Cut down scam exposure with one privacy habit
A lot of these scams start with a call or message that never should’ve reached you.
If you’re doing high-risk stuff like posting listings, signing up for sketchy “trial” offers, or putting your number into random forms, use masked contact info. Cloaked is useful here in a non-glamorous way: it lets you create separate phone numbers and emails you can shut off if they start attracting scam calls—so your real number doesn’t turn into the forever-target.
.jpg)
