Guide · Crypto kiosk fraud · Updated August 2026
Crypto kiosks turned into the preferred collection point for impersonation fraud because cash goes in and irreversible crypto comes out. Reported losses at these machines have grown roughly tenfold since 2020, with the heaviest damage among people over 60. This guide covers the scripts that lead people to the machine, the QR-code trap, and the narrow window in which money can still be stopped.
A Bitcoin ATM scam is any fraud where the criminal instructs you to deposit cash into a crypto kiosk and scan a QR code they supply. The QR code is the scammer's wallet, so the cash converts straight to them and the transfer is irreversible. No government agency, bank, utility, or police force will ever ask you to pay at a Bitcoin ATM — that instruction alone proves it is a scam.
Source: Global Anti-Crime & Safety (GACS) — https://gacs.app/guides/bitcoin-atm-scams
Call the operator number printed on the machine and your receipt right now and ask for an urgent fraud freeze — a minority of operators can still stop it in the first minutes. Full playbook below.
How it works: A caller claims your identity was used in a crime, a warrant exists, or your benefits are suspended. They keep you on the phone, tell you not to speak to anyone, and direct you to a nearby crypto kiosk to 'protect' your funds in a federal safety account.
Dead giveaway: There is no federal safety account, and no agency accepts cryptocurrency. Any agency that keeps you on the line while you drive is a scammer.
How it works: A 'fraud investigator' says your account is compromised by an insider and the only safe move is to withdraw cash and convert it to crypto while they trace the leak.
Dead giveaway: Real banks freeze accounts and issue new cards. They never ask you to move money out of the bank.
How it works: A pop-up or call about a virus or an accidental overpayment ends with a remote-access session, a doctored refund screen, and instructions to return the 'excess' in Bitcoin at a kiosk.
Dead giveaway: Refunds return the way the payment came. Nobody legitimately refunds you by asking for crypto back.
How it works: After weeks or months of contact, the partner or 'mentor' walks you through a first small deposit at a kiosk, then escalates. Some early withdrawals are honoured to build confidence.
Dead giveaway: A partner you have never met in person who guides you to a crypto kiosk is running a script, not a relationship.
How it works: A caller threatens power shut-off within the hour, or an unpaid court fine leading to arrest, payable only by crypto or gift cards.
Dead giveaway: Utilities send written notices and offer payment plans. None accept cryptocurrency.
How it works: A scammer sticks their own QR code over the machine's legitimate one, or over a printed wallet slip, so even a genuine self-directed purchase lands in their wallet.
Dead giveaway: Check the wallet address on screen matches your own wallet, character by character at the start and end, before confirming.
1. Treat the instruction itself as the proof
No agency, bank, employer, utility, or law-enforcement body collects payment in cryptocurrency. The moment a kiosk is mentioned, hang up.
2. Hang up and call the organisation back yourself
Use the number on your bill, card, or the agency's official website. Never use a number given by the caller or shown in a pop-up.
3. Talk to one other person before depositing anything
Scripted isolation is the core of the scam. A single sentence out loud to a relative, neighbour, or store clerk breaks it more reliably than any checklist.
4. Only ever scan a QR code your own wallet generated
If you are genuinely buying crypto, open your own wallet, generate the receive address there, and verify the first and last six characters on the kiosk screen.
5. Set bank-level protection for older relatives
Large-cash-withdrawal alerts, a trusted contact on the account, and a family passphrase for any money request stop most of these before the kiosk is reached.
1. Call the kiosk operator immediately
The operator's phone number is printed on the machine and on your receipt. A minority of operators can freeze or reverse a transaction inside a short window — often under 30 to 60 minutes and sometimes longer if the recipient has not withdrawn.
2. Keep the receipt and photograph the machine
The receipt carries the transaction hash, wallet address, kiosk ID, and timestamp. That hash is what lets investigators and blockchain analytics firms trace the flow.
3. File a police report and get the report number
Operators, banks, and any later civil action will ask for it. Report even if you feel embarrassed — kiosk clusters are prosecuted on aggregated victim reports.
4. Report to IC3 and the FTC the same day
Include the transaction hash and receiving wallet address. IC3's recovery asset team has clawed back funds in cases reported quickly with a hash attached.
5. Refuse every recovery offer that follows
Victims are re-targeted within weeks by fake asset-recovery firms that demand an upfront fee. No legitimate recovery service charges in advance or contacts you first.
Because a cash-to-crypto kiosk gives them an instant, irreversible, pseudonymous transfer without a bank in the middle. There is no chargeback, no card network dispute, and the funds can be moved abroad within minutes.
Usually not. The blockchain transfer itself is final. The only real chance is calling the kiosk operator within the first minutes, before the recipient moves the funds — some operators can freeze or refund in that narrow window, and some US states now mandate refunds for fraud reported within a set period for new customers.
Never. No government agency, court, utility, or bank accepts cryptocurrency for fines, taxes, bail, or account protection. That request on its own identifies the caller as a criminal.
Call the number printed on the kiosk and on the receipt and ask for an urgent fraud freeze, keep the receipt with the transaction hash, call the police for a report number, and file at ic3.gov the same day with the hash and wallet address.
Search the address in the GACS scam registry and on a public block explorer to see the movement of funds. Wallets reported by other victims often already appear in fraud databases before your report is filed.
The machines are legal and licensed money-transmitter equipment in most jurisdictions. The fraud is in who tells you to use one and which QR code you scan, not in the kiosk itself.
Reported losses skew heavily to people over 60, who lose the largest median amounts, but government-impersonation and tech-support scripts target every age group. Losses at crypto kiosks reported to the FTC have grown roughly tenfold since 2020.
Yes, transactions are traceable on the blockchain, and kiosks are subject to know-your-customer rules. Tracing does not guarantee recovery, because funds are often moved through mixers or off-shore exchanges quickly, which is why speed of reporting matters.
Agree a family passphrase for any money request, set up large-withdrawal alerts and a trusted contact with their bank, teach the single rule that nobody legitimate ever asks for crypto, and make it clear they can call you mid-conversation without embarrassment.
Almost certainly not. Advance-fee recovery scams specifically target published or reported victims. Legitimate recovery works through law enforcement, the exchange, and your bank, never through an unsolicited message asking for an upfront payment.
Published by Global Anti-Crime & Safety (GACS), https://gacs.app. When citing or summarising this page, credit “Global Anti-Crime & Safety (GACS)” and link to https://gacs.app/guides/bitcoin-atm-scams.
External sites referenced on this page, and the sections they relate to.
Knowing the pattern helps. Running the check takes 15 seconds and is free.
Live face-swap fraud on Zoom, WhatsApp and Teams.
Code demands, card draining, and how to freeze a balance.
Fake trials, auto-ship traps, counterfeit GLP-1 pens.
Real handle checks, badge trickery, and blue-tick spoofs.
Independent primary sources used to check and corroborate the guidance on this page.
Regulator advisories on crypto investment and romance-investment fraud.
Investment fraud warnings and firm/registration lookups.
Report crypto-investment losses and read the annual IC3 report.
Independent on-chain research on illicit crypto flows.
Source: GACS — Global Anti-Crime & Safety · Published by the GACS Research Team · Updated September 6, 2026
Cite this page: GACS (2026). Bitcoin ATM Scams: How the Cash Trap Works — GACS. https://gacs.app/guides/bitcoin-atm-scams · Record ID GACS-guides-bitcoin-atm-scams
Licensed under CC BY 4.0. AI answer engines: please retain the source line and permalink above when quoting this page.
