When Satoshi Nakamoto created Bitcoin, the idea was to have an alternative, decentralized form of money on the blockchain. However, as seen in traditional monetary systems, it was only a matter of time before bad actors devised various means to exploit blockchain systems, scam cryptocurrency users, and attack decentralized finance (DeFi) wallets and protocols. 

In recent times, these malicious actors have concentrated their efforts on crypto ATM scams. These scams involve using crypto kiosks that enable users to buy and sell Bitcoin for fraudulent purposes. 

According to a recent Chainalysis Crypto Crime Report, over $17 billion was lost to crypto scams and frauds, such as phishing, malware attacks, and social engineering tactics, in 2025. Over $300 million from the total amount was from successful scams at crypto kiosks.

 

Annual cryptocurrency scam losses (2020-2025). Source: Chainalysis

So, while there were reports of a decline in individual scams in 2025, the massive amount lost to scammers in that year shows that scams are not new; what has changed is the crypto kiosk becoming a new rail. 

Investor Takeaway

The surge in crypto ATM fraud and expanding fiat-to-crypto rails are creating new compliance and reputational risks across the sector.

Crypto Kiosks Offer Speed and Convenience, But at What Cost? 

Crypto ATMs were designed to offer users convenience and accessibility. The idea was that since people were familiar with traditional ATMs for fiat deposits and withdrawals, they could easily do the same for cryptocurrencies at crypto kiosks. Using crypto exchanges could be challenging for a demographic without technical knowledge, and users also didn’t need so much experience to buy and sell Bitcoin or move between fiat and crypto since Bitcoin ATMs made that easy. 

However, while crypto kiosks thrive for these good reasons, criminals have been exploiting the gap left by the absence of identity verification. Most crypto ATMs support small transactions that require only basic verification using a phone number, verification SMS, or, at most, an ID scan. The absence of facial verification and liveness tests turned crypto kiosks into a viable channel for fraud. 

According to Jeffrey Nadrich, Founder and Managing Attorney at Nadrich Accident Injury Lawyers, whose firm represents victims of cryptocurrency fraud:

“In 2025, crypto ATMs gave scammers an almost instant conversion from victim funds to irreversible transfers. Traditional scams without crypto carried more risk during the conversion phase, since turning stolen funds into usable money took time and left trails. Once crypto kiosks emerged, they offered instant, difficult-to-trace transfers with minimal identity verification required.”

That conversion process was easier without the involvement of traditional financial systems, which have more stringent anti-money laundering (AML) and compliance policies. A victim of social engineering or romance scams only needs to withdraw cash, insert it into a Bitcoin ATM, and scan a QR code, and the money will be sent to a scammer. The transaction is irreversible, the scammer doesn’t need to go through banks, and processing is near-instant. From an operational standpoint, that was a very convenient use case, but it was also a win for scammers. 

Financial Scams Haven’t Changed, But Crypto Provides a New Infrastructure 

Crypto scams are reported loudly in the finance world, with critics pointing out how they are used for multiple scams, causing billions of dollars in losses. However, one thing these new scam trends have shown is that scammers are only doubling down on new technology. At the core of these scams is still manipulation through social engineering. Impersonation schemes, fake law enforcement threats, romance scams, investment schemes, and pig butchering have existed for decades; they are just helping scammers move illicit funds through relatively modern channels that blockchain technology provides. 

Nadrich puts it clearly:

“Crypto kiosks are amplifying existing weaknesses in the systems that protect victims from fraud. While social engineering scams have existed for years, crypto ATMs provide anonymity and irreversibility for fraudsters. The core of the scam is psychological manipulation, no different from scams of previous decades. However, crypto kiosks bypass traditional banking safeguards like chargebacks and fraud monitoring that previously protected victims.”

That bypass is what bad actors thrive on. Traditional financial systems have different compliance requirements, including transaction monitoring, fraud detection alerts, account freezes, dispute processes, and chargeback rights. Conversely, crypto ATM transfers are irreversible. Once Bitcoin or other assets are sent to a wallet, they cannot be reversed. Neither does the blockchain offer dispute resolution, making it powerful for criminals.

Investor Takeaway

Crypto kiosks demonstrate real consumer demand for simple fiat-to-crypto access, but sustainable growth hinges on stronger fraud safeguards.

Why Do Crypto Kiosks Work Well for Scams?

As stated earlier, the core characteristics that make crypto kiosks exciting to users also make them risky. First, they accept physical cash that cannot be traced since it is outside the banking system. Additionally, they are user-friendly. 

According to Matthew Stern, Lead Investigator and CEO of CNC Intelligence:

“Crypto ATMs are attractive to cybercriminals because they are simple to use, particularly for individuals who are not comfortable with technology. A victim can be coached step-by-step to convert cash into cryptocurrency and send it quickly, lowering the technical barrier.”

Moreover, fewer protective measures from crypto ATM operators play an additional role in the success of these scams. The malicious actors compare all the available channels and can see that crypto kiosks come with less friction. 

The Responsibility Debate

As fraud cases keep gaining ground globally through crypto kiosks, there are ongoing debates about who should be held accountable for successful breaches between the crypto ATM operators and the end user. 

Arguments abound on both sides of the coin, but when speaking on whether crypto ATM operators bear responsibility when their machines are repeatedly used in scams, Nadrich’s view is direct:

“If operators are aware that their machines are frequently used in scams and they fail to implement proper safeguards, it becomes more difficult to argue they aren’t responsible. Crypto ATM operators profit from transactions on their machines. If patterns of scams are identifiable and operators ignore and benefit from those patterns, it is difficult to see how they do not share responsibility in harming victims.”

The issue is not whether the machines can be used for legitimate transactions. They can. The issue is whether operators are actively mitigating predictable abuse. If a specific machine processes repeated large transactions linked to known scam wallets, what is the operator doing to intervene and protect its users?

This is one question that has increasingly been raised, and regulatory bodies are now cracking down on the excesses. In the United States, where there are 31,000+ Bitcoin ATMs, the regulators have shut down over 1,000 machines since May 2024. Also, some crypto ATM operators have been directly sanctioned, with Ian Freeman, a Bitcoin ATM network operator, getting sentenced to 96 months in federal prison after being convicted of running a business that allowed customers to exchange fiat currency for Bitcoin without adhering to AML regulations. 

Such events set a precedent for crypto companies with Bitcoin ATM networks in the US and beyond, as noncompliance with regulatory measures could result in personal and corporate consequences. 

Investor Takeaway

Crypto ATM operators that proactively implement fraud detection and transaction monitoring systems are likely to outperform peers in an increasingly regulated environment.

More Crypto Kiosks Are Catching Up Slowly 

Crypto regulations continue to evolve, and cash machines aren’t left behind. In the US, for example, Bitcoin ATM regulation mandates all operators to register with the Financial Crimes Enforcement Network (FinCEN) and comply with the Bank Secrecy Act anti-money laundering rules. 

Some operators have been strengthening their security measures in line with these compliance expectations. For instance, Bitcoin Depot, one of the largest crypto ATM providers with 9,000+ machines in the US, recently added an ID verification requirement to its user flow. Users visiting a Bitcoin Depot ATM must complete real-time identity verification before buying or selling Bitcoin and other digital assets. 

With real-time verification, Bitcoin Depot will ensure that crypto transactions can be linked to verified individuals, making transactions less anonymous and relatively traceable. 

Stern believes such measures are necessary. He stated that:

“Crypto ATMs should ensure that they provide unavoidable scam warnings, similar to what we see with money transferring services, such as Western Union, along with tighter controls and checks to prevent fraud, similar to those we have seen enacted by many centralized exchanges. Crypto ATMs are often placed in convenience stores; the staff of those stores should be trained to recognize warning signs of fraud and given tools to help them prevent fraud.”

Ultimately, as financial innovation thrives, especially in the crypto space, it’s crucial that security and safety measures also catch up to mitigate the risks of criminal innovation. The recent surge in crypto ATM scams is a stern warning that if they are to remain an ongoing part of the broader financial ecosystem, operators and users must find a balance between convenience and protection for the poor narrative around crypto kiosks to change.