Crypto ATM payment scams: when 'the government' sends you to a Bitcoin machine
A caller posing as a federal agent, your bank's fraud team, or tech support says the only way to pay a fine — or 'protect' your savings — is to feed cash into a Bitcoin ATM and scan their QR code. No real agency or business will ever say that. Here is the script, the numbers behind it, and the pause that beats it.
The story on the phone varies — a warrant with your name on it, a hacker inside your savings, a virus on your computer — but the ending is oddly physical. Withdraw cash from your bank, the caller says. Drive to the convenience store or gas station. Find the machine marked Bitcoin ATM. Feed in the bills, scan this QR code, and the problem is solved. The moment the machine takes your cash, it converts it to cryptocurrency and sends it to a wallet the scammer controls. Consumers reported losing more than $110 million to fraud at Bitcoin ATMs in 2023 — nearly ten times the 2020 figure — plus $65 million in just the first half of 2024, with a median loss of $10,000 (FTC Data Spotlight, September 2024). And it is still climbing: in 2025, the FBI logged more than 13,400 crypto-kiosk complaints with losses over $388 million, up 58 percent from 2024 (FBI IC3, May 2026).
One sentence beats all of it. The FBI’s warning: “No legitimate law enforcement or government official will call to demand payment via a cryptocurrency kiosk.” No real business will either. The machine in the demand is the scam.
Why the machine, of all things
A crypto ATM is the scammer’s dream teller. FinCEN’s 2025 notice to financial institutions spells out the appeal: once the victim completes the transfer at a kiosk, the scammer instantly owns the cryptocurrency and usually sweeps it into another wallet within moments — unlike a bank or wire transfer, which can sit pending for a day or two while someone asks questions. There is no fraud department on a blockchain, no dispute button, no chargeback. Kiosk transaction fees run high — 7 to 20 percent, per FinCEN — and scammers happily eat them, because what comes out the other side is fast, final, and anonymous. It is the same business logic behind gift card payment scams: the story can be anything, as long as the money rides a rail with no reverse gear. The difference is scale — a machine that accepts a grocery bag of cash can take a retirement account.
The script: cash out, drive, scan
Victims do not find these machines on their own; they are delivered to them. In complaint after complaint, the FBI describes criminals giving detailed instructions — how to withdraw cash from the bank, how to locate a kiosk, and how to deposit and send the funds (FBI IC3, 2026). The caller stays on the phone for the whole trip, FinCEN notes, providing step-by-step coaching until the payment is complete. The centerpiece is the QR code the scammer sends to your phone: it encodes their wallet address, so the machine cannot misdeliver. The FBI flagged this exact QR-code choreography back in 2021 (FBI IC3, November 2021), and it has only gotten more polished since: FinCEN reports that scammers now direct victims to split deposits into smaller transactions, or across several machines — the latter “a tactic known as ‘smurfing’” — to slip under limits and warnings, and sometimes steer victims to specific kiosks, even across state lines, to avoid operators with strong fraud controls. Scammers also come back for more: FinCEN warns they often extract repeated payments from the same victim, sometimes switching rails mid-scam — to wire transfers, or to handing cash or gold to a courier. If your instructions include which machine to use and what to do when the screen warns you about scams, you are not paying a fine. You are being operated.
Many costumes, one machine
What changes between victims is only the costume. The FTC found that most Bitcoin ATM losses trace to government impersonation, business impersonation, and tech support scams (FTC, 2024) — the same cast as everywhere else. The government imposter says a fine or “verification payment” will cancel the warrant. The tech support pop-up becomes a marathon call ending at a kiosk — the most common single typology, at 46 percent of kiosk-related complaints in 2023 (FBI IC3 data cited by FinCEN, 2025). The phantom hacker chains fake tech support to a fake banker to a fake federal agent, all steering your savings toward “safety” — one FinCEN case study describes a 70-year-old retiree who deposited roughly $55,700 into kiosks on a fake banker’s instructions, part of $1.335 million lost. Romance plots, lottery fees, family emergencies: same funnel, same machine.
Who gets hurt
This one hunts older savers. People 60 and over were more than three times as likely as younger adults to report losing money at a Bitcoin ATM, and more than two of every three dollars reported lost this way came from an older adult (FTC data, cited in FinCEN’s 2025 notice). The FBI’s 2025 numbers agree: more than half of crypto-kiosk complaints involved people over 50, who lost over $302 million (FBI IC3, 2026). The targeting is deliberate — the playbook works best on people with real savings and less reason to have ever touched crypto, which is why the caller explains everything so patiently.
The one-sentence defense
You do not need to understand cryptocurrency to be immune; you need The Pause on Money. The payment rail is the tell, and it never changes costume: the instant anyone who contacted you says Bitcoin ATM, the call is over. Hang up, breathe, and if any part of the story still worries you, look up the agency’s or bank’s real number yourself and ask. A genuine institution survives that pause every time. And never scan a payment QR code someone sent you — the FBI’s advice is flatly not to follow instructions from someone you have never met to scan one.
If the cash already went in
Move now, in this order: keep the machine’s receipt — it carries the wallet address and transaction details investigators need — and photograph it. Report to the FBI at IC3.gov immediately, and to the FTC at ReportFraud.ftc.gov. Call the kiosk operator on the number printed on the machine to report the destination wallet as fraud. Tell your bank what happened, especially after a coached withdrawal. Recovery odds are poor — that is why this machine was chosen — but reports are what let investigators cluster wallets and, sometimes, freeze what is still moving. Whatever you do, do not pay anyone who promises to get your crypto back; that is the recovery scam, round two of the same con.
For the full library of free defenses, browse our defense moves — or test your eye with the 60-second quiz.
- Whoever contacted you — a 'federal agent,' your 'bank,' 'tech support' — says the fix for the emergency is to deposit cash into a Bitcoin ATM, and sends you a QR code to scan at the machine.
- You get step-by-step handling: how much cash to withdraw, which store has the kiosk, what to do at the screen — with the caller staying on the phone the entire trip.
- The deposit is framed as protection, not payment: your money will be 'secured,' held in a 'federal locker,' or 'converted to keep it safe from the hackers.' Moving your own money to protect it is the scam itself.
- Memorize the FBI's sentence: no legitimate law enforcement or government official will call to demand payment via a cryptocurrency kiosk. No real business will either — a Bitcoin ATM demand is the scam identifying itself.
- The moment any caller routes you toward cash and a machine, hang up and pause. Then verify the story yourself: call the agency, bank, or company back on a number you looked up, never one the caller gave you.
- Never scan a QR code someone sent you in order to pay. The code is the scammer's wallet address — the FBI's advice is not to follow instructions from someone you have never met to scan one.
- If a kiosk's on-screen warning or a store employee questions the transaction, stop. Scammers coach victims past exactly those interruptions, sometimes splitting the deposit across machines to dodge them.
What separates this scam from every other imposter play is the labor it outsources to you. The victim does everything — drives to the bank, withdraws the cash, finds the gas station, feeds in the bills — while the scammer just talks. I think that's why it works on careful people: every step feels like something you are doing, with your own hands, to your own money. The machine doesn't know it's a crime scene, and the caller is counting on you not to look up from the phone long enough to ask why the IRS banks at a convenience store.
Sources
- FTC Data Spotlight — Bitcoin ATMs: A payment portal for scammers (September 2024)
- FBI IC3 — IC3 Cryptocurrency Kiosk Complaint Data By State (PSA, May 2026)
- FinCEN — Notice on the Use of Convertible Virtual Currency Kiosks for Scam Payments and Other Illicit Activity (FIN-2025-NTC1, August 2025)
- FBI IC3 — The FBI Warns of Fraudulent Schemes Leveraging Cryptocurrency ATMs and QR Codes to Facilitate Payment (PSA, November 2021)
Frequently asked
The 'federal agent' said depositing my cash into a Bitcoin ATM would protect it while they investigate. Could that ever be real?
No. There is no government crypto account, no federal locker, and no investigation that runs through a gas-station kiosk. The FBI's warning is categorical: no legitimate law enforcement or government official will call to demand payment via a cryptocurrency kiosk (FBI IC3, 2026). The QR code you are told to scan is the address of a wallet the scammer controls — the machine converts your cash to crypto and sends it there in one step. FinCEN's 2025 notice describes exactly this play, including a case where a retiree was told to 'secure' her assets and deposited about $55,700 into crypto kiosks at the direction of a fake bank employee. The word 'protect' is doing the stealing.
Why do scammers send people to Bitcoin ATMs instead of asking for gift cards or a wire?
Speed, finality, and size. FinCEN's 2025 notice explains that once a victim makes the transfer at a kiosk, the recipient instantly owns the cryptocurrency and typically moves it on immediately — unlike a bank or wire transfer, which can stay pending for a day or two, there is usually no one who can reverse it. The machines also take large amounts of cash: the median reported loss at a Bitcoin ATM was $10,000 in the first half of 2024 (FTC, 2024), roughly ten times the $1,000 median gift card scam loss (FTC Data Spotlight, 2021). Kiosk fees of 7 to 20 percent do not deter the scammers, FinCEN notes, because the money arrives fast and clean. Same logic as gift cards — but at savings scale.
I already fed cash into the machine. Is there any way to get it back?
Be honest with yourself: recovery is hard, which is exactly why the scammer chose this rail — but act anyway, immediately. Keep the transaction receipt (it carries the wallet address and transaction details investigators need) and photograph it. Report the scam to the FBI at IC3.gov right away and to the FTC at ReportFraud.ftc.gov, and call the kiosk operator using the number printed on the machine — operators can sometimes flag a wallet or, rarely, interrupt an unconfirmed transaction. Notify your bank too, especially if you were coached through a large withdrawal. Then read our guide to [getting your money back by payment method](/get-your-money-back-by-payment-method) — and treat anyone who later offers to recover your crypto for a fee as the [recovery scam](/recovery-scam-paying-to-get-money-back) it is.