On this page
Key takeaways
- Scams involving crypto kiosks drew more than 13,400 FBI complaints and about $389 million in reported losses in 2025, up 58% from 2024.
- The typical script is a fake bank, tech support or government caller who tells you to withdraw cash and deposit it into a crypto ATM using a QR code they send.
- Some states now cap kiosk transactions and Indiana and Minnesota have banned kiosks, but the safest rule is simple: never feed cash into a crypto ATM because someone told you to.
A crypto ATM, also called a bitcoin ATM or crypto kiosk, turns cash into cryptocurrency in minutes. Scammers have turned these machines into a favorite cash-out tool: they persuade people to withdraw savings and feed them into a kiosk, and the money lands in the scammer's wallet.
How big the problem is
The FBI's 2025 kiosk data shows more than 13,400 complaints involving crypto kiosks, with losses over $388 million. That is a 23% rise in complaints and a 58% rise in losses from 2024. People over 50 filed more than half of those complaints and reported more than $302 million of the losses.
The FTC saw the same trend earlier. Its 2024 data spotlight found reported losses at bitcoin ATMs grew nearly tenfold from 2020 to 2023. In the first half of 2024 the median reported loss was $10,000, and people 60 and over were more than three times as likely as younger adults to report a loss using one.
How the scam works
- A scary contact. A call, text or computer pop-up says your bank account was hacked, your identity was used in a crime, or you owe a fine. The caller may claim to be your bank, Microsoft or Apple, the FBI, the FTC or local police.
- A “solution.” They say moving your money into crypto will protect it, sometimes calling the kiosk a “safety locker” or “government vault.”
- Step-by-step coaching. The FBI says scammers often walk victims through withdrawing cash from the bank, finding a specific kiosk, and inserting the money, frequently while staying on the phone.
- A QR code. They text or email a QR code. When you scan it at the kiosk, your cash becomes crypto sent to their wallet.
- More demands. Victims are often told to repeat the process at different machines or on different days.
Warning signs
- Someone you have never met tells you to withdraw cash and keep the reason secret from bank staff.
- You were sent a QR code to scan at a machine.
- A caller wants you to stay on the line while you drive to the bank or kiosk.
- You are told your money is at risk and must be moved today.
- The request involves a crime, warrant, fine or jury duty that you have never heard about from an official letter.
If you are a family member or bank employee, the FBI notes signs such as unexplained large cash withdrawals, confusion about why the cash is needed, and someone on the phone while using a kiosk.
State laws limiting crypto kiosks
States have responded with very different approaches. As of October 2026, examples include:
- California: Since January 1, 2024, kiosk operators cannot accept or dispense more than $1,000 per customer per day, according to the state's financial regulator.
- Indiana: House Enrolled Act 1116, signed in March 2026, bans operating virtual currency kiosks in the state and lets the attorney general act against violators.
- Minnesota: A 2026 law bans crypto kiosks starting August 1, 2026, replacing the state's earlier $2,000 daily limit for new customers. The Minnesota Department of Commerce cited losses that fall disproportionately on seniors.
Many other states have proposed or passed daily limits, fraud warnings and refund rules, and the rules change often. Check with your state financial regulator or attorney general for current requirements. Our laws and regulations section tracks the wider picture.
What to do if you deposited money
- Stop. Do not make further deposits, even if the caller threatens you.
- Keep your receipts. They show the kiosk location, amount, wallet address and transaction ID.
- Call the kiosk operator immediately using the number on the machine or receipt, and ask whether the transaction can be stopped. Some state laws require refunds in certain fraud cases.
- Report it to local police and at ic3.gov, including the transaction ID, receiving wallet address, kiosk location and any phone numbers or names the scammer used.
- Warn your bank and ask it to flag your account against further large cash withdrawals.
For related schemes, read about impersonation scams or visit our security and scams hub.
Frequently asked questions
Are crypto ATMs illegal?
Not nationally. As of October 2026 they remain legal in most states, though rules vary: California caps daily transactions, and Indiana and Minnesota have passed statewide bans.
Can I get money back after depositing cash in a crypto ATM?
It is difficult, because the cash is converted to crypto and sent to the scammer's wallet. Contact the kiosk operator immediately with your receipt, report to the police and IC3, and check whether your state requires refunds for fraud victims.
Why would a scammer send me a QR code?
The QR code contains the scammer's wallet address. Scanning it at the kiosk sends your cash, converted into crypto, directly to them.
What if the kiosk operator calls to warn me?
Listen to them. The FBI advises that if the operator says your transaction looks like fraud and tells you to stop, you should stop or cancel.
Sources
- IC3 Cryptocurrency Kiosk Complaint Data By State — FBI Internet Crime Complaint Center
- Bitcoin ATMs: A payment portal for scammers — Federal Trade Commission
- Digital Financial Assets Law: Information for Kiosk Operators — California Department of Financial Protection and Innovation
- House Bill 1116: Virtual currency kiosks — Indiana General Assembly
- Minnesota moves to stop crypto kiosk scams costing seniors thousands — Minnesota Department of Commerce
- Scammers Impersonating Law Enforcement and Government Officials — FBI Internet Crime Complaint Center
Updated October 4, 2026 by The Crypto Guide editorial team. Educational content, not financial, legal or tax advice. Spot an error? Request a correction.