A Bitcoin ATM scam gets you to feed cash into a crypto kiosk and send the bitcoin to an address the scammer controls. Once the payment is made, no bank or network can reverse it. An AML check can describe the receiving address afterwards, but it cannot bring the money back, so the only reliable defence is not to pay.
How the scam works
The FTC describes the usual pattern. Someone contacts you and says there is a problem with your money. They tell you to withdraw cash and take it to a Bitcoin ATM. At the machine you scan a QR code they gave you, and your cash goes straight into their crypto account.[1]
The story changes, but the roles repeat. The FTC says most losses through Bitcoin ATMs come from three kinds of scam:[1]
- Government impersonation. A caller poses as the police, a tax office or another agency.
- Business impersonation. A caller poses as your bank or a well-known company.
- Tech support. A pop-up or caller says your computer or account has a problem that needs fixing.
There are other versions too. Bitcoin.org warns about "free giveaways" that ask you to send a small amount of bitcoin first to register.[2] The amount is small; the loss is the same.
The FTC's advice is blunt. Real businesses and government agencies will never tell you to pay at a Bitcoin ATM, and anyone who asks is a scammer.[1]
What the numbers show
The FTC published these figures in September 2024:[1]
| Measure | FTC figure |
|---|---|
| Reported losses in 2023 | Over $110 million, nearly ten times the 2020 level |
| Reported losses, first half of 2024 | Over $65 million |
| Median loss, first half of 2024 | $10,000 |
| People over 60 | More than three times as likely as younger adults to report a loss |
These figures count only losses that people reported to the FTC.
Why the payment cannot be undone
A card payment can be disputed. A Bitcoin payment cannot. Bitcoin.org puts it simply: a Bitcoin transaction cannot be reversed, only refunded by the person who received it.[3] A scammer will not send a refund.
That is why the machine is the scammer's tool of choice. Cash goes in, and seconds later the coins sit at an address only the scammer can spend from.
What an AML check can and cannot do
The Bitcoin ledger is public. Anyone can see the balance and all transactions of any address.[4] An AML checker reads that public history and matches addresses against known services, sanctions lists and reported scams.
After a scam, that has some use:
- It can show where the coins went next, for example to a known exchange.
- It can show whether the address already appears in scam reports.
- It gives you something concrete to hand to the police or your bank.
But it has hard limits:
- It does not move coins. A report is information, not a recall.
- A new address often has no history. "No data" means unknown, not safe.
- Before paying, it is a weak shield. The scammer chooses the address you see. The red flag is the request to pay at an ATM, not the score.
Freezes on Bitcoin happen at services, not on the chain. If coins reach a U.S. service and must be blocked under sanctions rules, OFAC says the holder has to deny all parties access to them and report to OFAC within 10 business days.[5] That duty covers sanctioned persons. It is not a fraud-refund process, and a scam victim cannot count on it.
You can follow the coins yourself. On mempool.space you paste an address or transaction ID into the search box at the top right.[6] For a fuller picture, see our Bitcoin AML checks page.
What to do if you have already paid
- Stop paying. Do not send more, even if you are told it will "release" or "return" the first payment.
- Save the evidence. Keep the ATM receipt, the QR code or address, the transaction ID, phone numbers and messages.
- Report it. Contact your bank and the police. In the U.S., the FTC collects fraud reports; its ATM figures come from them.
- Check the receiving address. Note where the coins moved. If they reached an exchange, tell the police which one.
- Ignore recovery offers. The FBI warns that fake recovery firms charge an upfront fee and then disappear, and that law enforcement does not charge victims a fee.[7]
Anyone who tells you to pay at a Bitcoin ATM, by phone or in a pop-up, is running a scam. Hang up and call your bank on the number printed on your card.
Checklist
- No real agency, bank or tech firm will send you to a Bitcoin ATM.
- Never scan a QR code that someone else sent you.
- If someone says "do not tell your bank", tell your bank.
- After a loss, save records first, then report.
- Never pay anyone to "recover" crypto. Fake AML and recovery tools are common; see how fake AML checkers work.
General information, not legal or financial advice. Rules differ by country and change; check the linked sources.
Sources
- U.S. Federal Trade Commission — New FTC Data Shows Massive Increase in Losses to Bitcoin ATM Scams (3 Sept 2024). Checked 4 Nov 2026.
- Bitcoin.org — Avoid scams. Checked 4 Nov 2026.
- Bitcoin.org — Some things you need to know. Checked 4 Nov 2026.
- Bitcoin.org — Protect your privacy. Checked 4 Nov 2026.
- U.S. Treasury, Office of Foreign Assets Control — OFAC FAQ 646: How do I block digital currency? (15 Oct 2021). Checked 4 Nov 2026.
- mempool.space — mempool.space FAQ. Checked 4 Nov 2026.
- FBI IC3 — Increase in companies falsely claiming an ability to recover funds lost in cryptocurrency investment scams (11 Aug 2023). Checked 4 Nov 2026.