~4,000
Bitcoin ATMs Targeted for Removal
#1
Per-Capita Bitcoin ATM Density Globally
350+
U.S. Operator Machines at Risk in Canada
0
Kiosk-Specific Rules Canada Tried First
What Ottawa Proposed — and What It Didn't
The ban proposal is currently a policy statement inside a budget document — not enacted law, not draft legislation, and not a regulation with a compliance deadline. That distinction matters. Bitcoin ATMs are not disappearing from Canadian convenience stores tomorrow, and operators remain able to function until the government converts the proposal into something binding. But the direction of travel is unambiguous. The Spring Economic Update labels bitcoin ATMs a primary conduit for fraud and money laundering, citing a 2023 analysis by FINTRAC — Canada's financial intelligence unit — which found the machines had become the main vehicle for fraudsters to collect money from Canadian scam victims. FINTRAC also identified activity involving money mules, falsified identities, high-risk exchanges, darknet markets, mixers, and transactions structured to avoid Know Your Customer thresholds. The proposal does not name specific operators, cite individual fraud cases, or single out any company for enforcement action. It is a blanket policy response that treats the entire product category as inherently high-risk. Canadians would still be able to buy cryptocurrency through licensed exchanges and remitters — just not through physical kiosks.Key Details Still Missing from the Proposal:
- No specific legislation has been introduced — the ban remains a policy statement in a budget document
- No implementation timeline or phase-out period established
- No enforcement mechanism or penalty structure detailed
- No transition provisions for existing licensed MSB operators
- No indication whether existing machines would be grandfathered or required to shut down immediately
The $704 Million Figure Needs Context
The Spring Economic Update cites $704 million in total fraud losses suffered by Canadians in 2025, as part of a broader $4 billion problem. That number deserves careful handling: it encompasses all scam types — romance fraud, investment schemes, phishing, tech-support scams — not just losses routed through bitcoin ATMs. The government did not break out what portion of the $704 million involved kiosks specifically.$704 Million in Context: The Spring Economic Update cites $704 million as total Canadian fraud losses in 2025, encompassing all scam types. The government does not attribute this figure to bitcoin ATMs alone. FINTRAC's 2023 analysis found bitcoin ATMs were the primary collection method for scam proceeds, but the dollar amount flowing through kiosks specifically has not been publicly disclosed.
TRM's Data Cuts Against a Blanket Ban
Canada's proposal doesn't exist in a vacuum, but the industry data points to a more precise conclusion than "bitcoin ATMs are mostly scam-related." Blockchain analytics firm TRM Labs published research in August 2024 showing that the cash-to-crypto industry — dominated by bitcoin ATMs — had processed at least $160 million in illicit volumes since 2019. In 2023, illicit volumes in the cash-to-crypto sector stood at 1.2% of total volume, double the 0.63% rate for the broader crypto ecosystem. That is a serious risk signal. It also means 98.8% of bitcoin ATM volume was not identified as illicit, a fact that matters before policymakers eliminate the channel entirely.1.2%
Illicit Volume Rate at Bitcoin ATMs (2023)
0.63%
Illicit Rate, Broader Crypto Ecosystem
79%
Cash-to-Crypto Illicit Volume Linked to Scams
$160M+
Illicit Volume Through Bitcoin ATMs Since 2019
Canada's Regulatory Vacuum Made This Predictable
What makes the Canadian proposal particularly striking is not the ban itself — it is the regulatory gap that preceded it. Despite hosting the world's densest network of bitcoin ATMs per capita, Canada had no bitcoin-ATM-specific regulations. Operators simply registered as money service businesses with FINTRAC and complied with general anti-money-laundering obligations — the same framework that applies to currency exchanges and wire transfer services. No daily transaction caps designed for kiosks. No mandatory identity verification thresholds beyond standard MSB rules. No fee limits. No scam-intervention protocols. No mandatory transaction holds. No real-time blockchain screening requirements. The 4,000 machines operated in a regulatory environment that was essentially identical to what existed before policymakers recognized bitcoin ATMs as a distinct fraud vector. Canada didn't fail at bitcoin ATM regulation. It never attempted it. And when fraud losses became politically untenable, the government reached for the only tool that doesn't require building a new compliance infrastructure: a ban. This is the cautionary tale for U.S. states that have yet to act. The longer a jurisdiction goes without kiosk-specific rules, the more political appeal a total ban accumulates. By the time policymakers are motivated enough to act, they may be too frustrated to pursue anything less than elimination.The Fraud Chain: Why Banning the Endpoint Isn't Enough
The strongest argument against an outright ban isn't that fraud doesn't exist at bitcoin ATMs — it clearly does. The argument is that a ban targets the wrong link in the chain and risks making the overall problem harder to detect. A kiosk-level policy framework circulating among U.S. regulators and industry stakeholders in April 2026 maps the typical scam as a five-stage fraud chain:The Five-Stage Fraud Chain:
- Stage 1 — Origination: Scammer obtains access to phone networks through a VoIP or telecom provider with weak customer due diligence
- Stage 2 — Transmission: Call travels through intermediate carriers, often with spoofed caller ID
- Stage 3 — Social engineering: Victim is pressured through impersonation, urgency, secrecy, or threats — the fraud happens psychologically before any payment method is selected
- Stage 4 — Bank or cash-out step: Victim withdraws cash at a bank, ATM, or other source
- Stage 5 — Financial endpoint: Victim sends value to scammer via bitcoin ATM, wire transfer, gift card, P2P app, or cash by mail
Where Scam Victims Go When Bitcoin ATMs Disappear:
- Gift cards — a major scam payment method with weaker traceability
- Cash by mail — virtually impossible to trace or recover
- Wire transfers — comparable or larger scam losses than bitcoin ATMs
- Peer-to-peer payment apps — less compliance infrastructure than regulated kiosks
- Money orders and mule accounts — minimal real-time intervention capability
- Unlicensed or offshore crypto channels — no KYC, no SAR filing, no camera, no audit trail
What Better Bitcoin ATM Policy Actually Looks Like
If Canada had pursued kiosk-specific controls before reaching for a ban, what would those controls have looked like? The virtual currency kiosk policy framework lays out a concrete alternative — and several U.S. states are already testing versions of it. The key components fall into six categories.1. Consumer Warnings and Wallet-Control Attestations
Every bitcoin ATM transaction should require the customer to pass through explicit scam-warning screens — not buried in terms of service, but displayed prominently before the transaction can proceed. The customer should be asked to attest that they control the destination wallet and are not being directed by someone else to make the transaction. These warnings don't stop sophisticated scammers, but they interrupt the urgency that is central to social engineering tactics and create a documented record that strengthens later enforcement.2. Risk-Based Transaction Controls
The policy framework explicitly warns against ultra-low daily transaction caps, arguing they can fragment transactions below the thresholds that trigger Suspicious Activity Reports and Currency Transaction Reports. The result: less financial intelligence for law enforcement, not more. The better approach: risk-based controls calibrated to customer history, identity verification level, jurisdiction, and real-time risk indicators. A first-time customer sending $5,000 to an unscreened wallet should face different controls than a verified repeat user making a routine purchase. Real-time holds for elderly or high-risk customers — triggered by behavioral indicators, transaction size, or frequency — give operators and law enforcement a window to intervene before irreversible transfers occur. This is broadly consistent with what New Hampshire has enacted ($2,000 daily caps with blockchain screening) and what Virginia has pursued through fee limits and a mandatory refund window.3. Stronger Operator Compliance and Enforcement
The most important regulatory tool may not be new legislation at all. State attorneys general have already demonstrated that existing unfair-and-deceptive-practices statutes, consumer-fraud acts, money-transmitter licensing laws, and elder-exploitation authorities can be used against operators that mislead consumers, conceal fees, ignore red flags, or fail to maintain meaningful risk-based safeguards. Iowa's enforcement action against CoinFlip — where investigators found 94.92% of transactions examined were scam-related — and Massachusetts' lawsuit against Bitcoin Depot alleging more than 80% of customers depositing $10,000 or more were scam victims demonstrate that enforcement tools already exist. The framework argues that the better approach is targeted enforcement: prosecute operators that don't protect consumers under laws already on the books, while preserving responsible operators that implement robust KYC, monitoring, warnings, holds, live intervention, SAR reporting, and law-enforcement cooperation.4. Elder-Fraud Safeguards
The policy framework calls for specific protections for older adults — the demographic most frequently targeted through bitcoin ATM scams. Targeted elder-fraud measures include mandatory transaction holds above certain thresholds for customers identified as at-risk, live intervention by trained compliance staff when behavioral indicators suggest coercion, trusted-contact procedures modeled on financial advisor safeguards, and rapid coordination with adult protective services and law enforcement. The live-intervention requirement is particularly important. A machine that can detect a 72-year-old customer attempting a $5,000 transaction to an address flagged by blockchain analytics — and then connect that customer with a live compliance agent before the transaction broadcasts — is performing a function that no gift card or cash-by-mail channel can replicate. The technology exists. What's been missing in most jurisdictions, including Canada, is the legal mandate to use it.5. Pre-Broadcast Refunds — Not Post-Broadcast Mandates
This is one of the framework's most practical distinctions. A transaction placed on hold before cryptocurrency is transmitted on-chain can be refunded. The operator still has custody of both the cash and the crypto. But once a transaction broadcasts to the blockchain, the transfer is irreversible — no operator can "undo" it, regardless of what consumer protection law requires. Good policy distinguishes between these two situations. Mandating pre-broadcast holds and refund windows (as Virginia's 90-day refund window and New Hampshire's 14-day window do) gives operators both the legal obligation and the technical ability to protect victims. Mandating post-broadcast reimbursement creates an unfunded liability that could drive compliant operators out of business — which may be the point, but if so, lawmakers should call it a ban, not a consumer protection measure.6. Upstream Enforcement: Telecom Accountability
The framework makes a point that virtually no bitcoin ATM legislation in any jurisdiction has addressed: the telecom companies that originate and transmit scam calls face far less regulatory scrutiny than the kiosk operators who process the final payment.The Regulatory Asymmetry:
- Bitcoin ATM operators: Federal MSB registration, AML program, SAR filing, OFAC screening, state money transmitter licensing, surety bonds, potential federal felony for unlicensed operation
- VoIP/telecom providers that originate scam calls: No FinCEN MSB requirements, no SAR regime, no equivalent AML obligations, generally regulatory enforcement only
The Financial Inclusion Cost of Bans
The ban debate rarely addresses who else uses these machines. Bitcoin ATMs are not only used by speculators. For some consumers, they are one of the few regulated cash-to-digital access points available without a traditional bank account. Millions of U.S. and Canadian households remain unbanked or underbanked. Cash-only consumers cannot easily use online exchanges that require linked bank accounts, debit cards, or ACH rails. Bank branch closures are accelerating, particularly in rural areas. Unbanked rates are disproportionately high among Indigenous, Black, Hispanic, low-income, disabled, and less formally educated households. For these communities, bitcoin ATMs are one of the few regulated cash-to-digital access points that don't require a bank account. Removing them creates a disparate impact on the very populations that traditional banking has underserved. A responsible policy framework protects vulnerable consumers from scams while preserving lawful access — not forcing a choice between the two.Two Models, Diverging Fast
The global policy response to bitcoin ATM fraud is splitting into two camps, and the divide is widening with each passing month.The Policy Spectrum (April 2026):
- Elimination: Indiana (banned), Tennessee (banned effective July 1, 2026), Canada (proposed ban)
- Graduated Regulation: Virginia (18% fee cap, mandatory licensing, 90-day scam refund window), New Hampshire ($2,000 daily caps, 14-day scam refunds, mandatory blockchain screening)
- Targeted Enforcement: Iowa (AG lawsuit against CoinFlip, finding 94.92% of examined transactions were scam-related), Missouri (CIDs issued December 2025 to five major operators), Massachusetts (AG lawsuit against Bitcoin Depot)
- No Bitcoin ATM-Specific Rules: Majority of U.S. states and, until this proposal, Canada
A Timeline of Escalation
How Policy Responses Have Accelerated:
- 2023: FINTRAC identifies bitcoin ATMs as primary fraud collection vehicle in Canada; TRM Labs reports illicit volume rate at bitcoin ATMs is double the broader crypto industry
- 2024: Indiana becomes first U.S. state to ban bitcoin ATMs; TRM publishes data showing $160M+ in illicit bitcoin ATM volume since 2019
- Feb. 2025: Massachusetts AG sues Bitcoin Depot over scam facilitation
- Dec. 2025: Missouri AG issues civil investigative demands to five major operators
- Mar. 2026: Virginia enacts comprehensive regulatory framework with fee caps and refund windows
- Apr. 2026: New Hampshire passes bitcoin ATM bill with daily caps and blockchain screening
- Apr. 23, 2026: Tennessee Governor signs HB 2505, banning bitcoin ATMs effective July 1
- Apr. 2026: Canada proposes nationwide ban on all ~4,000 bitcoin ATMs; virtual currency kiosk policy framework circulates advocating targeted controls over prohibition
U.S. Operators Face a Forced Canadian Exit
The ban would hit American companies directly — and at a moment when they can least afford it. Bitcoin Depot (NASDAQ: BTM), headquartered in Atlanta, operates over 200 bitcoin ATMs across Canadian cities. The company is already navigating a difficult regulatory environment at home — three NMLS adverse actions, the Massachusetts Attorney General's consumer protection lawsuit alleging more than 80% of customers depositing $10,000 or more were scam victims, and a March 2026 cyberattack that resulted in the theft of 50.9 BTC ($3.7 million) from corporate settlement accounts. Losing 200-plus Canadian kiosks by government order would mean both a revenue hit and a narrative problem: machines removed in two countries simultaneously. Illinois-based CoinFlip expanded into Canada in 2024 and operates at least 150 machines there. CoinFlip is simultaneously the subject of the Iowa Attorney General's lawsuit, which found 94.92% of CoinFlip transactions examined in that state were scam-related. A forced Canadian exit would compound the reputational and operational damage. Together, these two operators alone account for at least 350 machines that would need to be decommissioned. Dozens of smaller Canadian operators — including Toronto-based Localcoin, which has reportedly been cooperating with the RCMP and Ontario Provincial Police on fraud investigations — would face an existential threat, their entire business model eliminated by federal policy. Neither Bitcoin Depot nor CoinFlip has publicly detailed the financial impact a Canadian ban would have on their revenue.What This Means for Canadian Bitcoin ATM Users
If you use bitcoin ATMs in Canada:
- Machines aren't disappearing tomorrow. The ban is a policy proposal with no implementation timeline. Bitcoin ATMs remain operational until legislation or regulation is finalized and an effective date is set.
- You still have alternatives. The government explicitly stated that Canadians can continue buying crypto through licensed exchanges and money service businesses.
- If someone has directed you to a bitcoin ATM and told you to deposit cash urgently — stop. No legitimate government agency, bank, or law enforcement body asks for payment via bitcoin ATM. This is almost certainly a scam. Contact the Canadian Anti-Fraud Centre at 1-888-495-8501.
- Watch for scammers exploiting the ban announcement itself. Fraudsters may create urgency — "buy now before machines are gone" — as a social engineering tactic.
- If you depend on bitcoin ATMs because you are unbanked or underbanked, investigate licensed Canadian exchanges that accept cash deposits or in-person verification. The ban, if enacted, will not eliminate your ability to buy cryptocurrency — but it will eliminate the most convenient cash-to-crypto channel.
- Document your transactions. If machines are eventually removed, you may need records for tax reporting or dispute resolution.
- Review our consumer protection resources for guidance on identifying bitcoin ATM scams.
What This Means for Operators
Canada's proposal crystallizes the existential risk facing the bitcoin ATM industry — but it also illuminates what the alternative looks like if operators are willing to embrace it. The failure mode is regulatory neglect, not inevitability. Canada didn't ban bitcoin ATMs because regulation was tried and failed. It banned them because regulation was never tried. Every state and country that currently has no kiosk-specific fraud controls is on the same trajectory. The lesson is not that bans are inevitable; it's that bans become politically inevitable in the absence of a credible regulatory alternative. The policy framework provides the playbook. Operators who want to survive the next two years should be advocating — loudly and publicly — for the specific controls outlined in the virtual currency kiosk framework: mandatory KYC, real-time transaction holds for high-risk customers, wallet-control attestations, blockchain screening, live human intervention, and rapid SAR filing. Every machine operated without those controls is a data point for the next ban proposal.Concrete Controls the Industry Should Be Implementing Now:
- Scam-warning screens with wallet-control attestations before every transaction
- Pre-broadcast transaction holds for elderly or high-risk customers, with live agent review
- Real-time blockchain analytics screening against known scam and sanctions addresses
- Risk-based transaction limits calibrated by customer history and verification level — not just a flat dollar cap
- Rapid SAR filing and direct law enforcement cooperation channels
- Coordination with adult protective services for elder-fraud intervention
- Voluntary public disclosure of fraud ratios and intervention statistics