The FBI says Americans lost more than $388 million last year to scams using cryptocurrency kiosks, also known as crypto ATMs or Bitcoin ATMs.
Cryptocurrency kiosks are portable, independent electronic terminals (which may or may not require identity verification to prevent illegal withdrawals) similar to bank ATMs and allow users to buy or sell crypto assets using cash or debit cards.
They are often found near gas stations, convenience stores, and other easily accessible locations. Cybercriminals ask potential victims to deposit their money at crypto kiosks and then transfer the money to crypto wallets controlled by the attackers.
Earlier this month, Minnesota lawmakers banned cryptocurrency kiosks across the country, following similar moves from Indiana in March and Tennessee in April.
In a public service announcement published on Friday, the bureau warned of a nearly 60% increase in reported losses from crypto ATM scams compared to last year.
“In 2025, IC3 received more than 13,400 complaints reporting the use of cryptocurrency kiosks, with losses of more than 388 million dollars – an increase of 23% in complaints and an increase of 58% in losses since 2024. More than half of the complaints involved more than 50 people, with losses of more than 302 million for the FBI,” said the FBI.
“In common IC3 complaints involving cryptocurrency kiosks, criminals provide detailed instructions to individuals, including how to withdraw cash from their bank, how to find a kiosk, and how to deposit and send funds using the kiosk.”
According to complaint and adjusted loss data shared by the FBI, Americans from Texas, Florida, and California filed more than 3,300 crypto ATM scam complaints and reported more than $112 million in estimated losses.
The FBI also shared some steps anyone can take to protect themselves from becoming a victim of this scam, including never sending money to people you only know online, never scanning QR codes or following payment instructions from strangers, always verifying calls directly, and never sharing any personal information over the phone.
It also recommended caution when anyone claiming to be from the government or law enforcement seeks cryptocurrency payments, stop transactions if a kiosk operator warns you of fraud, and always keep receipts for cryptocurrency purchases.
The FBI’s 2025 Internet Crime Report states that law enforcement received more than one million complaints through the Internet Crime Complaint Center (IC3) last year, linked to losses of approximately $21 billion to Internet-enabled crimes such as investment scams, technical support fraud, and business email compromises.
Automated testing tools deliver real value, but they’re designed to answer one question: can an attacker deploy on a network? They are not designed to check that your controls block threats, your firewall detection, or your cloud configs.
This guide covers the 6 areas you really need to verify.
Download Now
