Kiosk Crisis: FBI Reports 388M in Crypto ATM Losses as Three States Enact Total Bans

The FBI’s Internet Crime Complaint Center (IC3) has released a staggering supplement to its 2025 Annual Report, revealing that cryptocurrency kiosk scams cost Americans over 388 million last year—a 58% explosion in financial losses that has triggered an unprecedented regulatory domino effect. As of May 21, 2026, three U.S. states have moved to ban the machines entirely, while the nation’s largest operator, Bitcoin Depot, has collapsed into Chapter 11 bankruptcy under the weight of the crackdown.

By Elena Kowalski | May 21, 2026

The data, published on May 15, 2026, in Public Service Announcement PSA260515-2, paints a grim picture of how physical retail infrastructure has been weaponized by international criminal syndicates. With Bitcoin (BTC) currently trading at 77,259, the high-value nature of digital assets makes these kiosks—often found in convenience stores and gas stations—an ideal funnel for irreversible theft. The report documents more than 13,400 individual complaints related to kiosks in 2025 alone, representing a 23% increase in reports and a catastrophic 58% surge in total dollar volume lost compared to 2024.

1. The Exploit Mechanics

The “exploit” in a crypto kiosk scam is rarely technical; rather, it is a masterclass in social engineering that leverages the physical world to bypass digital security layers. Criminals typically initiate contact via phone, text, or social media, employing a sophisticated “playbook” designed to induce immediate panic. These tactics often involve impersonating government agencies like the IRS, bank fraud departments, or tech support from major firms.

The victim funnel follows a precise, high-pressure sequence:

• Impersonation and Urgency: Scammers convince the victim that their funds are at risk or that a legal warrant has been issued. They keep the victim on an active phone call to prevent them from consulting family or law enforcement.
• The Cash Pivot: Victims are instructed to withdraw physical cash from their traditional bank accounts. This step is critical, as it converts reversible bank credit into hard currency.
• The Kiosk Funnel: The scammer directs the victim to a specific cryptocurrency kiosk. Because these machines often have minimal KYC (Know Your Customer) requirements for smaller transactions, they serve as a perfect bridge to the blockchain.
• The QR Code Payload: The scammer provides a QR code representing a criminal-controlled wallet. Once the victim scans this code and feeds cash into the machine, the transaction is broadcast to the network. Given the nature of blockchain technology, these transfers are instant and irreversible.

While Ethereum (ETH) at 2,116.89 and Solana (SOL) at 85.7 offer lower transaction fees for scammers, Bitcoin remains the primary vehicle for these deposits due to its name recognition among non-technical users. The simplicity of the kiosk interface—cash in, crypto out—removes the friction that might otherwise give a victim time to reconsider the transaction.

2. Affected Systems

The “systems” affected by this crisis are not just the software running on the kiosks, but the vulnerable demographics and geographic regions that scammers have mapped with predatory precision. The FBI report highlights a disturbing concentration of victimhood among those least equipped to navigate the crypto landscape.

• The Senior Toll: Individuals over the age of 50 accounted for more than half of all complaints in 2025. Even more shocking, this demographic bore over 302 million of the total 388 million in losses, suggesting that older victims are being targeted for higher-value “whale” extractions.
• Geographic Concentration: Three states—Texas, Florida, and California—emerged as the primary battlegrounds, accounting for over 3,300 complaints and more than 112 million in losses. Texas alone reported a staggering 56 million in kiosk-related fraud.
• The 20B Backdrop: This kiosk-specific surge is part of a wider 20 billion cybercrime wave documented in the full 2025 IC3 report. Investment fraud remains the most financially damaging category, with crypto kiosks now acting as a primary “on-ramp” for these schemes.

The fallout has also decimated the industry’s operational systems. On May 18, 2026, Bitcoin Depot, formerly the world’s largest kiosk operator, filed for Chapter 11 bankruptcy. The company cited an “unsustainable” business model as state-level bans and mandatory identity verification requirements made their 9,000-unit network unviable. This collapse signifies a systemic failure of the retail crypto ATM model in its current, unregulated form.

3. The Mitigation Strategy

In the absence of a unified federal response, individual states have moved with aggressive legislative strikes to mitigate the damage. The spring of 2026 has seen a rapid-fire series of bans that have effectively shuttered the industry in several key jurisdictions.

• Indiana (March 2026): Governor Mike Braun signed House Enrolled Act 1116 on March 9, making Indiana the first state to implement a total ban on crypto kiosks. Law enforcement testimony during the bill’s markup suggested the machines served “no substantial legitimate purpose” in the state.
• Tennessee (April 2026): Governor Bill Lee followed suit in April, signing a bill that not only bans the machines but criminalizes their operation as a Class A misdemeanor, carrying potential jail time for hosts who refuse to remove them.
• Minnesota (May 2026): Early this month, the Minnesota legislature passed a similar ban, which was sent to Governor Tim Walz. The bill mandates the decommissioning of all kiosks by August 1, 2026.
• Hybrid Regulation: Other states, such as Wisconsin, have opted for a “regulatory leash” rather than an outright ban. Wisconsin’s new laws mandate 1,000 daily transaction limits and a 30-day “right of refund” for proven fraud victims—a measure that industry experts say is technically difficult for operators to implement.

The FBI recommends that individuals independently verify any high-pressure requests. No legitimate government official will ever demand payment via a DOGE (currently 0.1045) or XRP (currently 1.36) kiosk. The primary mitigation remains education and skepticism at the point of sale.

4. Lessons Learned

The crypto kiosk crisis of 2025-2026 offers several critical lessons for the broader industry. First, it highlights the asymmetry of risk in the “be your own bank” ethos. While decentralized assets like Cardano (ADA) (0.2474) and Polkadot (DOT) (1.25) provide financial freedom, they lack the consumer protections—such as the ability to “charge back” a fraudulent transaction—that define traditional banking.

Secondly, the scaling of retail crypto infrastructure outpaced the development of regulatory guardrails. The ease with which a scammer can move 50,000 through a gas station kiosk compared to a bank teller is a structural vulnerability that criminals have exploited to the tune of hundreds of millions. The irreversible nature of tokens like Chainlink (LINK) (9.58) or Avalanche (AVAX) (9.31) once they leave a kiosk means that the “patch” for this vulnerability must happen before the cash is inserted.

Finally, we have learned that demographics matter. The disproportionate impact on the over-50 population suggests that as crypto enters the mainstream, it must account for the social engineering vulnerabilities of non-native users who may not understand the finality of a blockchain transaction.

5. User Action Required

To protect yourself and your family from the ongoing kiosk scam epidemic, the FBI and security experts recommend the following mandatory precautions:

• Never Send Crypto to Strangers: No legitimate business or government agency will ask you to pay via a crypto ATM. If someone asks for a “QR code payment” at a kiosk, it is 100% a scam.
• Verify the Source: If you receive a call from your “bank” or the “FBI,” hang up. Find the official number for that entity yourself and call them back to verify the claim.
• Ignore the Urgency: Scammers use manufactured time pressure to stop you from thinking clearly. Take a breath and talk to a trusted friend or family member before making any large cash withdrawals.
• Watch for Warning Signs: Be wary of anyone who tells you to stay on the phone while you go to a kiosk or instructs you to lie to the machine’s operator or bank tellers.
• Report Immediately: If you have already fallen victim, file a report at www.ic3.gov. Include all wallet addresses, kiosk locations, and transaction receipts. While recovery is rare, your data helps law enforcement track and shut down these networks.

The cryptocurrency market remains highly volatile. This article is for informational purposes only and does not constitute financial advice.