The scam almost always follows the same script. A phone rings. The caller claims to be from the IRS, a bank’s fraud department, or a tech company. The voice is urgent: your accounts have been compromised, and you need to act now. The caller walks the victim to a Bitcoin ATM inside a gas station or convenience store, coaches them through feeding cash into the machine, and watches the money vanish into a crypto wallet controlled by a stranger halfway across the country or the world.
Last year, Americans over 60 lost $333 million this way, according to the FBI’s 2024 Elder Fraud Report. In one case cited in the D.C. Attorney General’s complaint against Athena Bitcoin, a 74-year-old District resident lost more than $16,000 in a single session after a caller posing as a government agent directed her to a kiosk and stayed on the line while she fed cash into the machine. The median victim age across that investigation was 71. On March 9, Indiana became the first state to ban Bitcoin ATMs outright, pulling the machines from every gas station, convenience store, and retail location in the state.
The federal numbers behind the crackdown
Warning signs were flashing well before the full-year totals landed. In September 2024, the Federal Trade Commission reported that consumers had already lost more than $65 million to Bitcoin ATM scams in just the first half of the year, based on complaints filed directly with the agency. Older adults bore a disproportionate share of those losses. The pattern was consistent: scammers posed as government agents or bank fraud investigators, kept victims on the phone, and directed them to specific kiosk locations where cash deposits were instantly converted to cryptocurrency and transferred beyond recovery.
The FBI’s Internet Crime Complaint Center, which collects reports through a separate pipeline, later put the full-year 2024 total for victims over 60 at $333 million. The two datasets have never been publicly reconciled, and because both rely on voluntary reporting, the actual scale of losses is almost certainly larger than either figure captures alone. Many victims never report the crime at all, whether out of embarrassment, confusion about where to file, or the belief that nothing can be done.
Enforcement actions in D.C. and Maine exposed operator-level problems
National statistics tell part of the story. Two state-level enforcement actions filled in details that aggregate numbers cannot.
In Washington, D.C., Attorney General Brian Schwalb sued Athena Bitcoin, alleging the company financially exploited District residents through its kiosks. The AG’s investigation went beyond victim complaints. Investigators conducted a deposit-level review of the company’s own transaction records and concluded that 93% of deposits at Athena Bitcoin machines were tied to fraud. The median age of victims was 71. Individual transactions were traced to known scam patterns, including government imposters, romance frauds, and fake tech-support schemes.
Those findings come from the AG’s complaint, not a court ruling, and Athena Bitcoin’s full response has not been detailed in publicly available enforcement records. Whether that 93% fraud rate holds for other operators or other cities is an open question, but the figure is striking because it was derived from the operator’s own data, not self-reported victim complaints.
In Maine, the Bureau of Consumer Credit Protection reached a settlement requiring Bitcoin Depot to pay $1.9 million to fund restitution for residents scammed through the company’s kiosks. The eligibility window covers transactions from 2022 through 2025, a span that suggests regulators found a sustained pattern rather than a single compliance failure. How many residents have filed claims and how the restitution money will be distributed has not yet been publicly disclosed.
Indiana’s ban and what it does differently
Indiana did not try to fix the problem with transaction caps, disclosure requirements, or operator licensing. The state removed the machines entirely. Indiana HB 1279, signed on March 9, prohibits Bitcoin ATMs from operating in convenience stores, gas stations, and other retail locations statewide. The exact date by which operators must have all machines removed may differ from the signing date; as of June 2026, the state has not published a detailed enforcement timeline.
State officials framed the decision as a consumer-protection measure aimed squarely at older residents, arguing that the speed and irreversibility of kiosk-based crypto transfers made them uniquely dangerous compared to other payment methods. A wire transfer can sometimes be recalled. A credit card charge can be disputed. Cash fed into a Bitcoin ATM and sent to a scammer’s wallet is gone.
The approach also sidesteps a practical headache. Supervising dozens of operators running thousands of machines scattered across a state requires ongoing audits, staffing, and rulemaking. A flat ban is simpler to enforce at the point of installation.
Major kiosk operators, including Bitcoin Depot and Athena Bitcoin, have not publicly commented on Indiana’s ban specifically. Neither company responded to the state’s legislative debate with on-the-record statements that appear in publicly available records as of June 2026.
But the ban is still new, and several questions remain unanswered. Indiana has not published enforcement data, and no state agency has announced plans to track whether scam losses simply migrate to kiosks in neighboring Ohio, Illinois, or Michigan. If operators relocate machines across the border, the ban could displace fraud rather than reduce it. That dynamic will take months of data to assess and may depend on whether surrounding states adopt restrictions of their own. As of June 2026, no other state has followed Indiana with a full prohibition.
The gaps regulators have not closed
For all the enforcement activity, the national picture remains incomplete. Roughly 30,000 Bitcoin ATMs operate across the United States, according to tracking data from Coin ATM Radar, though that number has fluctuated in recent years. No federal agency currently requires operators to report fraud rates or suspicious-transaction volumes at the machine level. The FTC and FBI collect complaints from victims, but neither has routine access to the kind of operator-side transaction data that the D.C. Attorney General obtained through its investigation.
That gap matters because Bitcoin ATM operators typically charge fees of 10% to 20% per transaction, meaning they profit from every deposit, including fraudulent ones. Without standardized reporting, there is no way to independently assess how much of the money flowing through these machines is legitimate and how much is stolen.
Industry groups, including some kiosk operators, have argued that the machines serve real purposes for people who lack traditional bank accounts or who need to send money quickly. Bitcoin Depot has said it cooperates with law enforcement and has implemented compliance measures. But those claims are difficult to evaluate without the kind of transaction-level transparency that regulators have only obtained through lawsuits and investigations, not voluntary disclosure.
At the federal level, no comprehensive legislation specifically targeting Bitcoin ATM fraud has been enacted as of June 2026. Several members of Congress have called for stricter oversight of crypto kiosks, but regulatory authority remains fragmented across the FTC, the FBI, the Financial Crimes Enforcement Network (FinCEN), and state-level agencies. The result is a patchwork: one state bans the machines, another sues an operator, a third negotiates a settlement, and the rest have done nothing at all.
How to spot the scam and where to report it
Every federal and state agency that has weighed in on this issue delivers the same message: any demand to resolve a problem by feeding cash into a Bitcoin ATM is a scam. No exceptions. Legitimate government offices, banks, and utility companies do not request payment through cryptocurrency kiosks. They do not call with urgent warnings that require an immediate trip to a gas station. If someone on the phone tells you to withdraw cash and deposit it into a Bitcoin machine, hang up.
People who suspect they have been targeted, or family members who notice a relative making unusual cash withdrawals, can file reports with the FTC at ReportFraud.ftc.gov, submit a complaint to the FBI’s Internet Crime Complaint Center at ic3.gov, or contact their state attorney general’s consumer protection division. Those reports are the raw material that allows regulators to spot patterns, bring enforcement actions, and, in some cases, recover money. The more people who file, the harder it becomes for operators and scammers to hide behind the gaps in the data.
