Cryptocurrency ATM fraud has exploded into a multi-hundred-million-dollar crisis, with losses reaching $333 million in just the first eleven months of 2025. As regulators crack down and lawsuits mount, understanding how to protect yourself when using these machines has never been more critical.
The Threat Landscape
The numbers paint a stark picture. The FBI received nearly 11,000 fraud complaints involving crypto ATMs in 2024 alone, a staggering 99% increase from the previous year, representing approximately $247 million in alleged losses. By 2025, the situation worsened dramatically, with around $333 million lost to crypto ATM fraud between January and November.
Massachusetts Attorney General Andrea Joy Campbell filed a lawsuit against Bitcoin Depot, one of the world’s largest crypto ATM operators, alleging the company facilitated scams that robbed state consumers of more than $10 million. The complaint revealed that over half of all money flowing through Bitcoin Depot kiosks in Massachusetts between August 2023 and January 2025 was scam-related.
Core Principles
The fundamental scam pattern works as follows: criminals contact victims pretending to be a trusted authority — a government agency, tech support, or law enforcement — and instruct them to withdraw cash and deposit it into a crypto ATM using a QR code provided by the scammer. The money is instantly converted to cryptocurrency and sent to the criminal’s wallet, making recovery virtually impossible.
Internal documents from Bitcoin Depot revealed that the company’s own due diligence team concluded in 2021 that 90% of customers they interacted with were scam victims. One employee warned a top executive that its kiosks were facilitating money laundering at an extreme volume. Despite these warnings, the company allegedly made some compliance measures less effective over time.
Tooling and Setup
Protecting yourself starts with recognizing the warning signs. No legitimate government agency, utility company, or tech support service will ever ask you to send cryptocurrency through an ATM. If someone instructs you to deposit cash into a crypto ATM, hang up immediately — it is a scam. Use only registered and regulated exchanges with proper KYC procedures for purchasing cryptocurrency.
For those who must use crypto ATMs, verify the operator is registered with FinCEN and check for state-specific licenses. Be aware of the fees — Bitcoin Depot was found to charge between 15% and 50% of deposits. Compare this to typical online exchange fees of 1-2% and the markup becomes clear.
Ongoing Vigilance
Bitcoin traded at approximately $67,450 on February 26, 2026, making crypto an attractive target for criminals. The industry is responding with increased scrutiny — Missouri, Iowa, and the District of Columbia have all launched investigations or lawsuits against crypto ATM operators. Bitcoin Depot announced it would require identity verification for every transaction, a step that should have been standard practice from the beginning.
States are considering tighter regulations, including mandatory scam warnings on machines, transaction limits, and cooling-off periods for large deposits. If you encounter a crypto ATM scam, report it immediately to the FTC, your state attorney general, and local law enforcement. Every report contributes to the data that drives regulatory action.
Final Takeaway
The crypto ATM industry’s growth has outpaced its security measures, creating an environment where scammers thrive. The responsibility falls on both operators and users to demand better safeguards. Until meaningful regulation takes hold, the safest approach is to avoid crypto ATMs entirely and use established exchanges for all cryptocurrency purchases.
Disclaimer: This article is for informational purposes only and does not constitute financial or legal advice. If you believe you have been a victim of fraud, contact your local law enforcement immediately.
$333M in 11 months and over half of Bitcoin Depot Massachusetts flow was scam-related. That is a staggering failure of compliance. These operators are making money off victims.
The Massachusetts lawsuit might actually set a precedent. If Bitcoin Depot is held liable for facilitating scams, other operators will have to implement real transaction monitoring.
over 50% scam volume and they kept operating as normal. that tells you everything about where their incentives are
they keep operating because the fees are 15-20%. scam volume IS their revenue model
15-20% fees on top of scam volume being their actual business model. its not a bug its the whole revenue strategy
11k FBI complaints and counting. at some point regulators are just gonna ban these machines entirely and honestly? might be the right call
banning the machines punishes legitimate users. mandatory transaction delays and limits would solve most of it
mandatory delays would kill the legitimate use case though. people use atms for speed. a 24h hold defeats the purpose