Massachusetts Attorney General Andrea Joy Campbell filed a lawsuit against Bitcoin Depot, alleging the crypto ATM operator let scammers drain $76,000 from a single consumer through deceptive practices, overcharges, and refused refunds. The complaint accuses the company of knowingly facilitating fraud while misleading its own investors about the scale of scam activity on its kiosk network. The case arrives as federal data show bitcoin ATM losses have exploded in recent years, and as Bitcoin Depot faces enforcement actions in multiple states.
State lawsuits and federal data collide for Bitcoin Depot
The Massachusetts complaint lays out a pattern: a consumer was directed by scammers to feed cash into Bitcoin Depot kiosks, converting dollars into cryptocurrency that flowed immediately to external wallets via QR codes. The state alleges Bitcoin Depot profited from inflated transaction fees while failing to stop transfers that carried clear warning signs. According to the Massachusetts Attorney General, the company also engaged in deceptive sales tactics and refused to return funds even after the fraud became apparent.
Federal numbers frame the scale of the problem. Reported losses involving bitcoin ATMs grew nearly tenfold from 2020 to 2023, and topped $65 million in just the first half of 2024, according to the Federal Trade Commission data spotlight on crypto ATM fraud. The FTC describes a common mechanic: scammers instruct victims to visit a bitcoin ATM, scan a QR code, and deposit cash that converts instantly into cryptocurrency sent to the scammer’s wallet. Once the transfer completes, the money is effectively gone.
Bitcoin Depot is not just facing scrutiny in Massachusetts. Maine’s Bureau of Consumer Credit Protection reached a settlement requiring the company to pay $1.9 million to compensate Maine consumers who lost money in scams at its kiosks between 2022 and 2025. Under that agreement, Bitcoin Depot’s Maine license runs through December 31, 2026, with operational and compliance conditions attached. The company’s own annual report filed with the SEC for fiscal year 2025 lists fraud exposure and anti-money-laundering compliance among its key business risks.
Kiosk expansion versus scam prevention at Bitcoin Depot
The central tension across these cases is whether Bitcoin Depot’s growth has outpaced its ability, or willingness, to screen transactions and block suspicious transfers. The Massachusetts complaint alleges the company knew scams were occurring on its machines and still processed the transactions. The Maine settlement covered consumer losses spanning three years, suggesting the problem persisted well beyond any initial discovery period. Each state action has produced financial penalties, but neither has forced the company to shut down operations in that jurisdiction.
Bitcoin Depot’s SEC filing acknowledges the regulatory and legal risks tied to fraud on its network, warning that increased enforcement or costly compliance measures could materially affect its business. Yet the company has continued to promote rapid expansion of its kiosk footprint, emphasizing convenience and access to digital assets. Regulators in Massachusetts and Maine, by contrast, focus on the vulnerabilities that come with that convenience: anonymous or pseudonymous transactions, irreversible transfers, and customers who often have little prior experience with cryptocurrency.
In the Massachusetts case, Campbell’s office argues that Bitcoin Depot should have implemented stronger safeguards for high-risk transactions. The complaint points to the size and pattern of the victim’s deposits, as well as real-time indicators that the funds were being routed to external wallets associated with known scam typologies. State officials say the company’s failure to pause or review those transfers, even after the consumer raised concerns, shows a disregard for basic consumer protection obligations.
Bitcoin Depot has not, in the materials cited by regulators, admitted wrongdoing. In Maine, the company agreed to compensate affected consumers and accept heightened oversight while maintaining its license. The settlement there underscores a regulatory strategy that seeks to keep crypto ATMs operating, but under tighter rules and with clearer avenues for restitution when fraud occurs. The Massachusetts lawsuit, by contrast, asks a court to impose civil penalties and mandate changes in how the company markets and runs its kiosks.
Consumer advocates say the cases illustrate a broader gap in protections for people using crypto ATMs. Traditional banks and money transmitters face detailed requirements around transaction monitoring, fraud detection, and customer redress. Crypto kiosk operators often occupy a gray area where disclosures are sparse, fee structures are opaque, and liability for fraud is hotly contested. The FTC’s data suggest scammers have learned to exploit that gap, steering victims to bitcoin ATMs precisely because the transfers are fast, final, and difficult to trace.
For Bitcoin Depot, the legal challenges arrive at a delicate moment. Its public filings highlight the need to maintain relationships with regulators and banking partners while managing reputational risks associated with fraud. Any finding that the company misled investors about scam levels on its network could invite additional scrutiny from securities regulators and private litigants. At the same time, aggressive enforcement that significantly curtails kiosk availability could push some consumers toward less regulated channels.
How the Massachusetts lawsuit is resolved may influence the next phase of crypto ATM oversight. A strong ruling for the state could spur other attorneys general to revisit their own consumer complaints and negotiate tougher settlements. A narrower outcome might leave the current patchwork in place, with protections varying widely by state. For now, the message from both state and federal authorities is clear: as bitcoin ATMs become a favored tool for scammers, operators like Bitcoin Depot will be judged not just on growth, but on how effectively they prevent their machines from becoming conduits for fraud.
