That Bitcoin ATM at the Gas Station? It's a Scam Machine.

Your dad gets a call. It's from the IRS — or at least, the caller says so. He owes $3,200 in back taxes that somehow nobody told him about. There's an arrest warrant with his name on it. He has two hours to settle this or federal agents show up at the house.

But he can handle it right now. No lawyers, no embarrassment. There's a Bitcoin ATM at the Shell station down the road. He should drive there, feed in cash, and send the bitcoin to the wallet address the agent texts him. Once the payment clears, the warrant goes away.

This is how $388 million disappeared from American bank accounts in 2025. Not slowly, not digitally — in cash, by hand, at machines that look like weird bank ATMs in the corner of your gas station.

How a Bitcoin ATM scam works, start to finish

The structure is almost always the same. The pretext changes — IRS, Social Security, your bank's fraud department, FedEx with a package problem, Microsoft saying your computer is compromised — but the mechanic is identical every time.

Step 1: The urgency call. Someone reaches you by phone. They're calm and official-sounding, sometimes with your name and address already in hand. They tell you there's a problem that requires same-day resolution. The stakes are high: arrest, account freeze, lawsuit, deportation. Solve it now or something very bad happens.

Step 2: The isolation. They tell you not to hang up, not to tell your family, not to call your bank. "This is a legal matter under active investigation." The isolation is deliberate — a spouse or adult child who heard "go put cash in a Bitcoin ATM" would end the call in about five seconds. The scammer knows this.

Step 3: The ATM. You're directed to a specific machine at a gas station, grocery store, or pharmacy. You feed in cash. The machine converts it to bitcoin and sends it to a wallet address the scammer provides — sometimes a QR code you scan on your phone, sometimes a long string of characters you type manually. The whole thing takes less than ten minutes.

Step 4: The confirmation. The "agent" stays on the phone while you do this. They confirm they received it. Your problem is solved. And sometimes, a few weeks later, the second wave begins.

The second wave. A different caller contacts you — "from the Treasury Department" or a "victim recovery service" — and says they can help you get your money back. There's just a processing fee, or you need to return to the ATM to "freeze" the original transaction. Same scam. Different costume. The playbook goes deeper on people who already proved they'll comply.

Why this one is so hard to reverse

Most payment fraud has some recovery path. Credit card fraud gets disputed. Wire transfers can sometimes be recalled. Zelle payments are a pain, but there's at least a process.

Bitcoin transactions are different. The moment cash goes into a crypto ATM and bitcoin leaves for the scammer's wallet, it's effectively gone. There's no bank in the middle, no hold period, no fraud department to call. The blockchain records the transaction permanently — it just doesn't record anything that helps you get it back. The scammer drains the wallet and moves funds within minutes.

This irreversibility is exactly why scammers migrated from gift cards to Bitcoin ATMs. Gift cards work the same way — scratch the code, balance gone — but they have a paper trail at the register and a cashier who might notice someone buying $3,000 in Google Play cards. A Bitcoin ATM asks fewer questions, handles larger amounts, and runs 24 hours a day.

The numbers reflect this shift. The FTC reported in September 2024 that losses at Bitcoin ATMs had increased nearly tenfold from 2020 to 2023. In just the first half of 2024, Americans lost $65 million to Bitcoin ATM scams, according to the FTC's data spotlight on the topic. The full-year 2025 total came in at $388 million — a 58 percent increase from 2024 — per the FBI's Internet Crime Complaint Center, which issued a public service announcement in May 2026 specifically flagging this trend.

Crypto ATMs have functionally replaced gift cards as scammers' preferred cash-out mechanism. For how gift card scams operated under the older playbook, see gift card scams explained.

Who is getting hit

The FBI's 2025 data on crypto ATM fraud is specific about the demographics. More than half of all complaints involved people over 50. Adults 50 and older accounted for more than $302 million of the $388 million in total losses.

The FTC's earlier data — covering the first half of 2024 — is even more granular: adults 60 and over were more than three times as likely as younger adults to report losing money to Bitcoin ATM scams. The median reported loss across all ages was $10,000.

There's a reason for this that has nothing to do with cognitive decline or being less sophisticated. Older adults are more likely to have savings worth stealing. They're more likely to answer unknown calls. They're more likely to feel genuine fear of government authority and shame around financial problems — which scammers use as leverage to keep victims silent and compliant. The "don't tell your family" instruction is the most powerful tool in the entire playbook, because a family member who heard this call would end it instantly.

If you have a parent or grandparent who might be vulnerable to this: have the conversation now, before it happens. The sentence to plant is simple: "No government agency or legitimate business will ever send you to a Bitcoin ATM." One sentence said once before a crisis can short-circuit the entire scam. See our guide on protecting older adults from fraud for a fuller conversation framework.

The machine is increasingly illegal

Regulators have been catching up.

Indiana banned cryptocurrency kiosks outright in March 2026. Tennessee followed with its own ban, effective July 1, 2026. Minnesota enacted a similar prohibition in 2026. These aren't transaction limits — they're full bans on operating the machines in those states.

Other states took the limit approach: California capped daily transactions at $1,000 starting July 1, 2025. Colorado set a $2,000 daily limit for new customers and a $10,500 limit for existing customers under a law signed in June 2025, and added mandatory fraud warnings and a refund provision for first-time users who report fraud within 30 days. Vermont has maintained a $1,000 daily limit alongside a moratorium on new machines.

The most consequential development came in May 2026, when Bitcoin Depot — which had operated more than 9,000 Bitcoin ATMs across the United States, making it the largest crypto ATM company in the country — filed for Chapter 11 bankruptcy. The company blamed "a hostile regulatory environment." At the time of its filing, Bitcoin Depot was facing lawsuits from the attorneys general of Massachusetts and Iowa over its alleged role in facilitating scams, its Connecticut money transmission license had been suspended, and it had previously settled with the state of Maine — paying $1.9 million in restitution to scam victims who had used its machines. A separate $3.7 million security breach had added to its problems.

The industry is contracting. The scam isn't going away.

Red flags — specific ones

Someone tells you to go to a specific ATM to solve a problem. No legitimate institution — not the IRS, not the Social Security Administration, not your bank, not a court, not a tech support company — will ever direct you to pay anything using a Bitcoin ATM. No exceptions. The IRS uses mail. Banks use their own transfer systems. Tech companies don't need your cash at a gas station.

The call involves an immediate arrest, account freeze, or lawsuit. Real government agencies send notices by mail. Real banks freeze your account and then call you through their official number to help you sort it out. They don't demand same-day cash payments at gas stations under threat of criminal charges. If you get a call like this, the pressure itself is the tell. For more on how government impersonation calls work, see fake law enforcement and government impersonation scams.

You're told not to tell your family. This instruction exists for one reason: your family would stop you. Any "official" who tells you to keep a legal or financial matter secret from your spouse or children is a scammer.

The caller stays on the phone while you drive. Legitimate government officials do not accompany you to ATMs by phone to make sure you complete the transaction. This is real-time coercion designed to prevent you from pausing and thinking.

Someone offers to help you recover money you already lost. This is almost always the second wave of the same operation, or a separate recovery-scam outfit that bought lists of prior victims. Recovery services that ask for upfront fees are scams. See our guide on recovery and refund scams for how these work.

If this already happened

File an IC3 complaint right away. Go to ic3.gov and file a complaint. Include the wallet address you sent funds to, the phone number that called you, the ATM location and operator name, the date and amount, and any texts or emails you received. The IC3 feeds into active investigations. Speed matters — the window for anything actionable is narrow.

Report to the FTC at reportfraud.ftc.gov. Your report goes into Consumer Sentinel, which law enforcement agencies access. It takes a few minutes.

Contact your state attorney general. Several states have active crypto ATM enforcement programs. If you're in California, Colorado, or the states that have passed bans, the AG's consumer protection division is worth calling.

Contact the ATM operator directly. Following legal and regulatory pressure, some operators have created victim restitution processes. Call the number on the machine or look up the operator (the company name is usually on the machine) and ask specifically about their fraud process. The Maine settlement with Bitcoin Depot shows this path isn't always closed, even if it's not easy.

Don't hire a recovery service. Anyone who contacts you — or whom you find online — promising to recover your crypto ATM losses in exchange for a fee is running a follow-on scam targeting people who already proved they'll pay under pressure.

For a full post-incident checklist — changing passwords, monitoring accounts, what to watch for in the weeks after — see what to do after clicking a scam link, which covers the broader account-security steps that apply here too.

FAQ

Can I get my money back if I was scammed at a Bitcoin ATM?

Recovery is hard but not categorically impossible. File immediately with the FBI at ic3.gov and the FTC at reportfraud.ftc.gov — speed matters. Contact the ATM operator directly and ask about their fraud process; some have victim funds following regulatory pressure (Bitcoin Depot paid $1.9 million to Maine victims after a state settlement). Contact your state attorney general. The odds of recovering funds are genuinely low, but these steps are necessary for any real chance and contribute to enforcement actions that have succeeded.

Does any legitimate business or government agency use crypto ATMs for payments?

No. Full stop. The IRS, Social Security Administration, FBI, courts, banks, utility companies, and tech support companies do not collect payments through Bitcoin ATMs. This is a zero-exception rule. If anyone instructs you to pay a government entity or resolve any account problem using a Bitcoin ATM, hang up.

How do I talk to my parents about this scam before it happens?

One sentence planted in advance does most of the work: "No government agency or bank will ever send you to a Bitcoin ATM to fix a problem." Add to it: "If anyone tells you not to talk to me about it, that's exactly why you should." The isolation instruction is the scammer's most powerful tool. Giving your parent permission to break it — before there's a crisis — neutralizes it.

Someone is telling me right now to go to a Bitcoin ATM. What should I do?

Hang up. Then call someone you trust — a family member, your bank at the number on your card, or the actual IRS at 1-800-829-1040 — and describe the call. If the caller was who they claimed to be, a callback through official channels will confirm it. No legitimate agent will be upset that you hung up and called back. The fact that they need you to stay on the line and not tell anyone is the tell.

Why are Bitcoin ATMs still legal if they enable this much fraud?

Three states — Indiana, Tennessee, and Minnesota — have banned them outright as of 2026. Others have imposed daily limits. The challenge is that federal oversight of crypto ATMs has lagged behind the fraud, and the machines occupy a regulatory gray zone between traditional ATMs and money transmission services. The legislative trend is moving toward restriction; Bitcoin Depot's May 2026 bankruptcy following state enforcement is one signal that the regulatory pressure is working, even if slowly.

What happened to Bitcoin Depot?

Bitcoin Depot, formerly the largest Bitcoin ATM operator in the US with more than 9,000 machines, filed for Chapter 11 bankruptcy in May 2026. The company cited new state transaction limits and bans as making its business model unsustainable. At the time, it was facing lawsuits from the Massachusetts and Iowa attorneys general, a suspended money transmission license in Connecticut, and a previous settlement requiring it to pay $1.9 million to Maine fraud victims. Its machines are offline. It is not the only operator — other companies still run machines in states where they remain legal.

---

Scammers didn't invent the Bitcoin ATM. They just got there first.

---

Sources: FTC Data Spotlight, "Bitcoin ATMs: A payment portal for scammers" (September 2024), ftc.gov{:target="_blank"}; FTC press release, "New FTC data shows massive increase in losses to Bitcoin ATM scams" (September 2024), ftc.gov{:target="_blank"}; FBI Internet Crime Complaint Center, Public Service Announcement PSA260515-2, "Cryptocurrency Kiosk Scams Continue to Rise" (May 2026), ic3.gov{:target="_blank"}; Colorado SB25-079 (signed June 2, 2025); CoinDesk, "Bitcoin Depot, Once North America's Largest Bitcoin ATM Operator, Files for Bankruptcy" (May 2026).