Bitcoin ATM & Crypto Kiosk Scams
Scammers running impersonation, tech-support, or romance cons steer victims to feed cash into a Bitcoin ATM and scan a QR code — sending an instant, irreversible payment straight to the fraudster's wallet.
Last reviewed: 24 July 2026
What this scam is
A Bitcoin ATM or crypto kiosk scam is not a standalone story but the payment stage of another con. Whatever the setup — a government or police officer warning your identity is compromised, a tech-support agent who found "fraud" on your account, a bank investigator asking you to protect a "safe account", or a romance or investment partner needing help — the demand converges on the same instruction: withdraw cash and take it to a Bitcoin ATM, one of the standalone crypto kiosks found in shops, petrol stations, and shopping centres. There the victim buys cryptocurrency and sends it by scanning a QR code the scammer supplies, which is simply the scammer's wallet address. The distinction that matters most is this: the machine is real, licensed, and works exactly as designed — nothing malfunctions and nobody hacks it. The fraud lives entirely in why the victim is standing there. Once cash becomes crypto and the QR code is scanned, the transfer is near-instant and effectively irreversible, with no bank, chargeback, or recall to undo it. Older adults are disproportionately targeted.
How it works
Contact arrives through whichever con carries it — a spoofed call from a "fraud department" or government line, a pop-up warning with a support number, a text about a suspicious charge, or a relationship built over weeks. The script manufactures a crisis that only immediate payment resolves: your accounts are being drained, a warrant is pending, your money must be "secured" before it vanishes. The victim is kept on the phone continuously and told to stay silent — that bank staff, family, or store clerks may be "in on it" or must not be alerted. They are directed to withdraw cash, sometimes across several visits to stay under limits, and guided to a specific Bitcoin ATM, occasionally with the scammer navigating them there step by step. At the kiosk they are talked through inserting the cash and scanning a QR code sent to their phone, which routes the crypto to the scammer's wallet. Amounts are often split across multiple deposits and machines. Because the victim believes they are protecting their money or cooperating with authorities, they act calmly and deliberately, which defeats the alarms a panicked withdrawal might trigger. After the funds move, the line goes dead.
Why this scam works
The con borrows authority the victim already respects — police, tax authorities, their own bank, a trusted partner — so the instructions feel like compliance, not risk. Continuous phone contact isolates the target from exactly the people who would interrupt them, and the "don't tell anyone, they may be involved" framing turns a clerk's or relative's concern into apparent proof of the threat. Crypto kiosks are ideal for the fraudster: they convert cash to an untraceable, borderless transfer in minutes, the payment cannot be reversed, and the victim performs every action themselves, so it never looks like a stranger taking their money. Fear and urgency suppress the pause that verification requires, and because the machine genuinely works, nothing in the transaction feels broken until it is far too late.
Common red flags
- Any request to pay, or 'protect' your money, through a Bitcoin ATM or crypto kiosk
- A caller who keeps you on the phone continuously and tells you to speak to no one
- Pressure to withdraw cash urgently and drive to a specific machine
- Being told bank staff, shop clerks, or family may be involved or must not be told
- A QR code or wallet address sent to your phone to scan at the kiosk
- Threats of arrest, frozen accounts, or lost savings unless you act immediately
- Instructions to split cash into several deposits or across multiple machines
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
This is Officer [Name], badge #[number]. Your identity is linked to a fraud case and your accounts will be frozen tonight unless you move your funds to a secure federal wallet. Stay on the line and do not speak to anyone at the bank.
We've detected unauthorised access on your account. To protect your balance, withdraw the cash and deposit it at the crypto terminal we'll direct you to. Our system will hold it safely until the investigation clears.
Don't tell the cashier what this is for — they may be part of the ring we're investigating. Just scan the QR code I'm sending you now and insert the notes.
Darling, I only need help this once — send it through the Bitcoin machine and scan the code I gave you, and I'll pay you back the moment my transfer clears.
How to verify before you act
Anchor to one rule that resolves nearly every version: no legitimate government agency, court, bank, utility, tech company, or law-enforcement body will ever ask you to pay, "secure" money, or resolve an investigation through a Bitcoin ATM or crypto kiosk. That request alone identifies a scam, regardless of how the call opened or how convincing the caller sounds. So hang up and stop — do not verify through any number, link, or QR code the other party gave you, because those route back to the scammer. Independently reach the organisation using a number from its official website, your card, or a printed statement, and ask whether the demand is real; it never will be. Tell your bank before withdrawing large cash, and let a family member or the shop staff know what you have been asked to do. A genuine caller never forbids you from checking with your bank or your family — only a scammer needs you kept on the line and silent.
Payment methods used
- Bitcoin ATM
- Cryptocurrency
- Cash
Who is usually targeted
- Older adults
- Bank and tech-support call victims
- Romance and investment targets
- People fearing legal or account trouble
What to do immediately
- Stop paying immediately and end all contact — do not send another deposit however the story escalates
- Contact your bank and the crypto-kiosk operator (named on the machine or receipt) right away; speed gives the only slim chance of intervention
- Report to your national fraud service and the police, and note the machine's location and any transaction receipt
- Preserve the wallet address, QR code, transaction hash, and every message and call record
- Change passwords and secure any accounts the scammer referenced, and watch for follow-up 'recovery' scammers
- Tell a trusted family member or friend — support matters, and they can help you spot repeat approaches
How to prevent it
- Treat any instruction to pay via a Bitcoin ATM or crypto kiosk as proof of a scam — no legitimate body uses them for payments
- Hang up on urgent calls claiming to be police, government, your bank, or tech support, and call back on a number you found independently
- Never scan a QR code or wallet address that someone sent you to receive a payment or 'secure' funds
- Refuse any demand that you stay on the phone, keep the matter secret, or distrust bank staff and family
- Tell your bank before making a large or unusual cash withdrawal, and say what it is for
- Talk to a trusted person before acting on any unexpected, high-pressure money request
Evidence to preserve
- The Bitcoin ATM receipt, machine location, and operator name
- The wallet address, QR code, and transaction hash sent to your phone
- All calls, texts, emails, and voicemails, including the numbers used
- Bank withdrawal records showing the cash amounts and dates
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
Can I get my money back after sending crypto through a Bitcoin ATM?
Usually not. Once cash is converted and the QR code scanned, the crypto moves to the scammer's wallet almost instantly, and blockchain transfers cannot be reversed the way a card charge or bank transfer sometimes can. There is no chargeback and no central authority to recall it. Your only slim chance is speed: contact the kiosk operator and your bank within minutes, and report to police and your national fraud service. Recovery is rare, which is exactly why prevention matters so much.
Aren't Bitcoin ATMs illegal or fake if they're used in scams?
No — most crypto kiosks are legitimate, licensed machines that work exactly as designed. Nothing about the machine is hacked or broken in these scams. The fraud is entirely in why you were sent there: a scammer impersonating your bank, the police, or a loved one manufactured a crisis to make you feed in cash and scan their wallet's QR code. The kiosk is just the fastest way to turn your cash into an untraceable, irreversible payment. The machine isn't the scam; the caller is.
Why would the police or my bank ever ask me to use a crypto machine?
They never would — and that is the single clearest test. No real government agency, court, tax authority, bank, or tech company will ever ask you to withdraw cash and pay through a Bitcoin ATM, 'secure' your savings in a crypto wallet, or resolve an investigation this way. Genuine institutions do not move your money to protect it, do not demand secrecy from your own bank, and do not forbid you from calling back. The request itself proves the caller is a fraudster, no matter how official they sound.