Crypto ATM scams hit record $388M in losses, leading operator shuts down amid regulatory crackdown

Show summary Hide summary

• 🔥 Quick Facts
• The Scale of Crypto ATM Fraud: A Growing Crisis
• Bitcoin Depot’s Collapse and Industry Implications
• Breakdown of Fraud Mechanisms and Victim Demographics
• Regulatory Response and State-Level Crackdowns
• What Comes Next: Recovery and Prevention
• Will the Crypto ATM Industry Survive This Crisis?
  • Sources

Americans lost $388 million to cryptocurrency ATM scams in 2025, marking a record year for kiosk-based fraud. The FBI’s Internet Crime Complaint Center (IC3) documented 13,400 complaints connected to these losses, prompting emergency regulatory action across multiple states. This crisis culminated with Bitcoin Depot, North America’s largest crypto ATM operator, filing for Chapter 11 bankruptcy on May 18, 2026, and immediately shutting down its network of 9,000+ machines nationwide.

The Scale of Crypto ATM Fraud: A Growing Crisis

Cryptocurrency ATMs, also called crypto kiosks, allow customers to exchange cash for digital coins like Bitcoin. Unlike traditional ATMs, they operate with minimal identity verification and transaction oversight. According to FBI data released May 20, 2026, these machines have become primary conduits for scammer-directed money transfers, with all $388 million in 2025 losses representing a 58% increase in total losses compared to the previous year.

The Texas and Florida regions reported the highest concentrations of losses, reflecting both population density and the prevalence of crypto ATM locations in these states. Research from the Massachusetts Attorney General’s office indicated that Bitcoin Depot machines in Massachusetts alone processed approximately $19,000 daily in fraudulent transactions before the shutdown.

Bitcoin Depot’s Collapse and Industry Implications

Bitcoin Depot operated the largest network of cryptocurrency kiosks in North America, generating substantial franchise revenue from machine operators. The company’s demise reveals structural weaknesses in oversight mechanisms. CEO Alex Holmes stated in the bankruptcy filing that increasingly stringent compliance obligations and mounting litigation made the business model “unsustainable.”

Before its closure, Bitcoin Depot faced legal pressure from multiple state attorneys general. Massachusetts sued Bitcoin Depot on February 3, 2026, alleging the operator knowingly facilitated cryptocurrency scams by removing fraud-prevention safeguards from its machines. The state claimed the company understood that most revenue derived from fraudulent activity yet continued operations. Iowa’s attorney general filed similar allegations shortly thereafter.

Breakdown of Fraud Mechanisms and Victim Demographics

Fraud Metric	Data
Average loss per victim	$28,910 median transaction
Primary scam type	Tech support/impersonation fraud (IRS, romance, inheritance)
Highest risk age group	Age 60+ (seniors represent 70% of losses)
Typical transaction pattern	First-time users exploited with $2,000+ transfers
Processing irreversibility	Cryptocurrency transfers cannot be reversed once completed

Analysis reveals a distinct victim pattern. Scammers typically contact targets via phone or email, impersonating government agencies, tech support representatives, or romantic interests. They create artificial time pressure and emotional manipulation, directing victims to nearby cryptocurrency ATMs to execute transfers. Since Bitcoin transfers are irreversible, once money enters the digital wallet, recovery becomes virtually impossible.

“Despite Bitcoin Depot knowing about the high level of scam activity on its platform, the company removed safeguards against fraud by not implementing basic verification measures that could have protected consumers. Most of the company’s revenue was derived from crypto scams.”

— Massachusetts Attorney General’s Office, Civil Complaint, February 3, 2026

Regulatory Response and State-Level Crackdowns

The crisis catalyzed rapid regulatory intervention across multiple jurisdictions. Florida passed House Bill 505 in March 2026, establishing comprehensive oversight of cryptocurrency kiosks. The legislation requires operators to implement a $2,000 daily transaction limit for first-time users, mandate 72-hour refund windows for cancelled transactions, and display prominent fraud warnings at kiosk locations.

Texas enacted SB 1705, authorizing authorities to seize virtual currency machines operated by companies failing to meet compliance requirements. Other states including Iowa, Vermont, and New York introduced similar regulatory frameworks, effectively raising the operational burden for ATM operators and triggering industry consolidation. Multiple smaller operators ceased U.S. operations citing regulatory costs exceeding revenue projections.

What Comes Next: Recovery and Prevention

With Bitcoin Depot’s closure, approximately 9,700 cryptocurrency ATM machines were removed from commercial locations nationwide. This represents roughly 40% of the total crypto ATM network in North America. Surviving operators face heightened compliance obligations, mandatory fraud detection systems, and customer verification protocols that fundamentally reshape their business models.

Consumer recovery options remain severely limited. The Federal Trade Commission (FTC) estimates that less than 5% of cryptocurrency fraud losses are recovered. Victims must file reports with both IC3 and their state attorneys general, though prosecution timelines typically exceed 18-24 months. Massachusetts’ attorney general indicated investigation of potential asset recovery from Bitcoin Depot’s bankruptcy proceedings, though shareholder claims take priority over consumer restitution in Chapter 11 reorganization procedures.

Will the Crypto ATM Industry Survive This Crisis?

The industry faces fundamental questions about sustainability. Remaining operators are restructuring toward institutional clients rather than retail consumers, implementing stricter customer vetting, and seeking partnerships with licensed financial institutions. Some explore relocating to states with lighter regulatory frameworks, though federal Money Services Business regulations increasingly establish baseline standards regardless of state jurisdiction.

Technology provides partial solutions: biometric verification, real-time fraud detection algorithms, and blockchain-based transaction review systems reduce scam velocity. However, these tools add operational costs precisely when operators face margin compression from regulatory requirements.

Sources

• FBI Internet Crime Complaint Center (IC3) — Cryptocurrency ATM fraud complaint data and loss statistics, May 2026
• Massachusetts Attorney General’s Office — Civil complaint against Bitcoin Depot regarding fraud facilitation, February 3, 2026
• Bloomberg News — Bitcoin Depot bankruptcy filing analysis, May 18, 2026
• Banking Dive — CEO statement and Chapter 11 details, May 20, 2026
• Florida House Bill 505 — Virtual currency kiosk regulatory framework, March 27, 2026
• The International Consortium of Investigative Journalists (ICIJ) — Industry oversight investigation, May 2026