ATM Scams Hit $333M in 2025, But That's Less Than 3%

Americans lost $11.4 billion to cryptocurrency-related fraud in 2025, according to the FBI's latest Internet Crime Report — and Bitcoin ATM scams accounted for $333 million of that total. The numbers put the Bitcoin ATM industry's fraud problem in sharper and more honest perspective: it's real, it's accelerating, and it disproportionately harms the elderly. But it represents less than 3% of the broader crypto fraud epidemic that spans exchanges, peer-to-peer transfers, DeFi protocols, and every other on-ramp to digital assets. That distinction matters because the policy debate around Bitcoin ATMs has sometimes treated kiosks as if they're the primary vector for crypto fraud. They're not. The primary vector is scammers — and the $11.4 billion total proves that shutting down every Bitcoin ATM in America tomorrow would leave more than 97% of crypto fraud completely untouched. The real question is whether operators can be held to a standard of care that reduces the $333 million without destroying the channel entirely — and whether lawmakers are focusing on scam awareness and prevention rather than eliminating one payment rail while criminals migrate to the other 33 available.

$11.4B

Total Crypto Fraud Losses (2025 FBI)

$333M

Bitcoin ATM Fraud Losses (2025)

2.9%

ATM Share of Total Crypto Fraud

~40%

Crypto Losses Borne by Adults 60+

Putting $333 Million in Context

The $333 million in Bitcoin ATM fraud is real, growing, and devastating to individual victims — but the FBI's broader data demands perspective. The $11.4 billion total means that for every dollar lost at a Bitcoin ATM, roughly $33 was lost through other crypto channels: centralized exchanges, peer-to-peer transfers, DeFi protocols, fraudulent investment platforms, and social engineering scams that never touch a kiosk. Investment scams — not Bitcoin ATM fraud — drove the vast majority of losses. "Pig butchering" romance-investment schemes, fake trading platforms, and fraudulent DeFi yield promises typically involve victims sending cryptocurrency from their own wallets or exchange accounts directly to scammer-controlled addresses, with no Bitcoin ATM involved at all.

The Scale Problem — Bitcoin ATM Fraud vs. Total Crypto Fraud:

Supporting source image for gray david mclaughlin. — Gray David McLaughlin Source: sec.gov

$11.4 billion: Total cryptocurrency fraud losses reported to FBI IC3 in 2025
$333 million: Bitcoin ATM-specific fraud losses — 2.9% of total
~$11.1 billion: Crypto fraud that occurred through channels other than Bitcoin ATMs
Implication: Banning all Bitcoin ATMs would leave 97%+ of crypto fraud untouched

Within the Bitcoin ATM channel, the trajectory is concerning. Losses rose from $114 million (2023) to $250 million (2024) to $333 million (2025) — a 33% year-over-year increase. The IC3 logged more than 10,000 Bitcoin ATM-related complaints in 2025, and the FBI described the trend as a "clear and constant rise" that is "not slowing down." But the acceleration tells us something important: scammers are choosing Bitcoin ATMs as a preferred cash-out method for certain victim demographics, particularly the elderly. The $11.4 billion total also surged year-over-year, confirming that scammers are scaling across every channel simultaneously. Bitcoin ATMs aren't uniquely broken — they're one node in a fraud ecosystem overwhelming law enforcement across the board. The problem originates with the scam, not with the machine.

The Real Enemy: Scammers Targeting Older Americans

What the FBI data makes painfully clear is that the core problem is social engineering — not any particular payment channel. Adults 60 and over accounted for nearly 40% of all reported crypto fraud losses in 2025, with a median loss of $10,000 per Bitcoin ATM transaction. The median age of victims across the DC, Iowa, and Massachusetts attorney general investigations ranges from 71 to 72 years old. The reason Bitcoin ATMs feature prominently in elder fraud is straightforward: kiosks accept cash, which elderly victims can access without the friction of online exchanges or cryptocurrency wallets. A scammer posing as a government agent, utility company, or tech support representative can walk a victim through a gas station Bitcoin ATM transaction over the phone in real time. The cash goes in, the cryptocurrency goes out to the scammer's wallet, and the transaction is irreversible within minutes. But these victims aren't confused about Bitcoin ATMs specifically. They're being manipulated by sophisticated criminals who tell the victim exactly which payment method to use. If a Bitcoin ATM isn't available, the scammer pivots to wire transfers, gift cards, or direct exchange deposits — all of which are well-represented in the other $11.1 billion in crypto losses. The FTC has documented this substitution effect for years. This is why scam awareness and prevention matter far more than platform-specific bans. Indiana signed a statewide Bitcoin ATM ban into law in March 2026. Whether that reduces fraud losses or simply redistributes them to other channels is a question the FBI data can't yet answer — but the $11.4 billion total suggests scammers have no shortage of alternatives.

Where Operator Accountability Fits

None of this lets Bitcoin ATM operators off the hook for their piece of the problem. The FBI's $333 million provides third-party federal validation for what state attorneys general have been arguing in court: that a meaningful volume of fraud is flowing through Bitcoin ATM kiosks, and operators with access to transaction data have a responsibility to do something about it. Unlike online exchanges, kiosks are located in public spaces where real-time intervention is theoretically possible. On-screen warnings could be more prominent. Transaction limits could be tighter for first-time users. ID verification could be — and now increasingly is — mandatory. The attorney general investigations aren't alleging that Bitcoin ATMs exist. They're alleging that specific operators failed to implement these basic prevention measures while extracting enormous fees from transactions they had reason to believe were fraudulent. The Massachusetts AG's lawsuit — filed February 3, 2025 — alleged that 83% of Bitcoin Depot customers making transactions over $10,000 were scam victims, generating $10.6 million in scam-derived revenue. That statistic is what turns a platform-agnostic fraud problem into an operator-specific liability. If an operator's own data reveals that the overwhelming majority of its high-value customers are being defrauded — and it continues processing those transactions while collecting 23% fees — that's not a channel problem. That's a business model question.

Active Enforcement Actions Against Bitcoin Depot:

Massachusetts AG (filed Feb. 3, 2025): Consumer protection and securities fraud lawsuit; 83% of $10K+ customers alleged to be scam victims
Iowa AG (filed Feb. 26, 2025): Consumer protection lawsuit; majority of victims aged 60+
Minnesota Dept. of Commerce (June 2024): Charges pending
Maine (resolved): Consent agreement with Bureau of Consumer Credit Protection
Connecticut: License suspended
3 NMLS adverse actions on record

Major Bitcoin ATM operators charge transaction fees ranging from 21% to 26% — Bitcoin Depot at roughly 23%, CoinFlip at 21%, and Athena at up to 26%. When a scam victim feeds $10,000 into a kiosk, the operator collects $2,100 to $2,600 in fees on that single transaction and retains those fees even after the fraud is reported. State AGs argue this creates a structural disincentive to implement prevention measures. Bitcoin Depot didn't begin rolling out mandatory ID verification until February 2026 — years after the fraud trend became statistically undeniable and one year after the Massachusetts AG filed suit.

The Insider Filings

Against this backdrop, multiple Bitcoin Depot insiders disposed of Class A Common Shares in late March and early April 2026, according to a cluster of SEC Form 4 filings dated through April 3, 2026.

Filing Type: SEC Form 4 — Statement of Changes in Beneficial Ownership

Issuer: Bitcoin Depot Inc. (CIK: 0001901799)

Filing Date: April 3, 2026

Named Insider: David McLaughlin Gray (CIK: 0002084303), among others

Legal Basis: Section 16(a), Securities Exchange Act of 1934

The filings specify that the shares represent "Class A Common Shares withheld, pursuant to Issuer policy, to satisfy tax withholding obligations upon the settlement of vested Restricted Stock Units." This is an important distinction: RSU tax withholdings are not open-market sales. Insiders don't choose the timing — it's triggered automatically when restricted stock units vest. Companies routinely withhold shares to cover the tax bill, and the SEC requires insiders to report these transactions within two business days. The volume of at least six filings in roughly a week reflects a batch of RSUs vesting on a common schedule, standard for annual grant cycles. It's routine corporate mechanics — not a signal that insiders are heading for the exits. But the context is impossible to ignore. In the same week, Bitcoin Depot filed an S-1 registration statement that may signal a secondary offering, and announced its acquisition of Instant Coin Bank to expand into Texas and Oklahoma. The company reported a $24.9 million loss in Q4, faces lawsuits in at least three states, and its most recent Maine settlement claims deadline passed on April 1. Expanding while under this level of legal and regulatory pressure is a bold strategic bet.

Recent Bitcoin Depot Timeline:

Feb. 3, 2025: Massachusetts AG files consumer protection lawsuit
Feb. 26, 2025: Iowa AG files consumer protection lawsuit
Feb. 2026: Bitcoin Depot rolls out mandatory ID verification
March 2026: Indiana signs statewide Bitcoin ATM ban into law
April 1, 2026: Maine scam settlement claims deadline passes
April 2, 2026: Bitcoin Depot files S-1 registration statement
April 3, 2026: Cluster of insider Form 4 filings
April 6, 2026: Bitcoin Depot announces acquisition of Instant Coin Bank (Texas/Oklahoma expansion)

The Real Fight: Scam Prevention vs. Channel Elimination

The $11.4 billion total puts policymakers at a crossroads. Indiana chose channel elimination — banning Bitcoin ATMs entirely in March 2026. But that approach addresses less than 3% of the crypto fraud problem while eliminating a legitimate financial service used by unbanked and underbanked populations. The alternative is scam prevention at scale: mandatory ID verification, real-time transaction monitoring, required warning screens, lower transaction limits for first-time users, and mandatory refund policies when operators fail to flag obvious fraud patterns. Several of these measures are now being implemented — voluntarily or under legal duress — by major operators.

Bitcoin ATM Fraud Trajectory (FBI IC3 Data):

2023: $114 million in reported losses
2024: $250 million in reported losses (+119% YOY)
2025: $333 million in reported losses (+33% YOY)
Context: Deceleration in growth rate (119% → 33%) may indicate early impact of regulatory pressure, or simply a maturing fraud channel
Unreported losses: FTC has noted the "vast majority of frauds" go unreported, meaning all figures are likely floors

There's a nuance in the trajectory worth noting: while losses are still rising, the year-over-year growth rate decelerated sharply from 119% (2023–2024) to 33% (2024–2025). It's too early to credit any specific compliance measure, but the slowdown at least suggests the problem isn't growing exponentially. Whether that's due to operator reforms, heightened public awareness, or scammers migrating to other channels is an open question the FBI data can't answer.

What This Means for Consumers

The scammer is the threat, not the technology — protect yourself across all channels:

No legitimate entity — not the IRS, not your bank, not law enforcement — will ever ask you to pay via a Bitcoin ATM, a wire transfer, a gift card, or any cryptocurrency
Bitcoin ATMs accounted for $333M of $11.4B in crypto fraud. If you avoided kiosks but sent crypto through an exchange or app at someone's direction, you may still be a scam victim
The $11.4B figure is almost certainly a floor. If you've been scammed through any channel, file a complaint at ic3.gov — reporting helps law enforcement track these networks
Adults 60+ are disproportionately targeted — the median victim age is 71–72 in documented cases, with a median loss of $10,000
Transaction fees at Bitcoin ATMs often exceed 20%, and once cryptocurrency is sent through any method, it is generally unrecoverable
Visit our consumer protection resources for state-by-state reporting guidance

If you have elderly family members, the conversation shouldn't be limited to Bitcoin ATMs. It should cover every scenario where a stranger creates urgency and directs a payment. The $11.4 billion total makes clear that scammers will use whatever channel is available. The danger isn't a specific machine in a gas station — it's the social engineering phone call, text message, or popup that precedes it. Awareness and prevention — not banning one payment method — are the most effective defenses.

What This Means for Operators

The FBI's $11.4 billion crypto fraud total is both a weapon and a wound for the Bitcoin ATM industry. The weapon: Bitcoin ATM fraud is less than 3% of total crypto fraud, undermining the narrative that kiosks are the primary scam vector. The wound: $333 million is still $333 million, it's accelerating, and the victims are overwhelmingly elderly — a fact that makes every legislative hearing and courtroom proceeding harder.

The operator argument that now has data behind it:

Bitcoin ATMs represent 2.9% of total crypto fraud losses — targeting them alone is disproportionate
The year-over-year growth rate in ATM fraud decelerated from 119% to 33%, potentially reflecting compliance improvements
Operators who can demonstrate measurable fraud reduction have the strongest defense against bans

But the defense only works if operators actually prevent fraud:

ID verification is now table stakes. Bitcoin Depot waited until February 2026 to mandate it. Operators who haven't implemented it yet are inviting enforcement.
Fee structures are under scrutiny. AGs are framing 20%+ fees on fraudulent transactions as unjust enrichment. Refunding fees on confirmed fraud cases is the single most impactful policy change operators can make.
State bans are spreading. Indiana's March 2026 ban won't be the last. The $333M figure will appear in every future legislative hearing.
The 83% statistic from Massachusetts is fatal if other states find similar ratios. Operators must demonstrate their high-value transaction profiles don't look like Bitcoin Depot's allegedly did.
Proactive scam prevention is a competitive advantage. Operators who invest in on-screen warnings, real-time monitoring, and elderly-customer flagging systems can differentiate themselves from the operators who are in court.

The operators best positioned to survive this environment are the ones who can walk into a legislative hearing with data showing fraud rates declined after implementing specific controls — and who can point to the $11.4 billion total and say, "We're 2.9% of the problem and we're actively reducing our share." The operators who ignore the data and keep cashing checks on 72-year-old scam victims will face more lawsuits, more license suspensions, and more state bans.

What to Watch

Bitcoin Depot's next quarterly filing will be the first to reflect a full quarter under its enhanced ID verification policy. Whether fraud-related complaints decline at Bitcoin Depot kiosks — and whether the company discloses that data — will be the sharpest test of whether compliance reforms are real or cosmetic. More broadly, the $11.4 billion total should reframe the policy debate. Legislators considering Bitcoin ATM bans need to answer a basic question: if you eliminate the channel responsible for 2.9% of crypto fraud losses, what happens to the other 97.1%? The FBI data suggests the scammers simply move. The real fight is upstream — at the point where a 72-year-old picks up the phone and a stranger says, "Your Social Security number has been compromised." No amount of kiosk regulation fixes that. Scam awareness and prevention, applied across every payment channel, remain the only interventions that address the root cause.

FBI: Bitcoin ATM Scams Hit $333M in 2025, But That's Less Than 3% of the $11.4 Billion Crypto Fraud Total