A 70-year-old retiree in Carlsbad, California, lost roughly $1.39 million after scammers directed the victim to deposit approximately $55,700 into Bitcoin ATMs and wire another $1.335 million to a San Marcos precious-metals business for bulk gold purchases. Federal prosecutors have now charged Xilin Sun in connection with the courier side of the scheme, which the U.S. Attorney’s Office for the Southern District of California tied to a broader $149 million fraud operation. The case, docketed as 24CR1007-BTM, offers a sharp look at how elder fraud rings blend cryptocurrency kiosks with physical gold to move stolen wealth beyond victims’ reach.
How a Carlsbad retiree lost $1.39 million through Bitcoin ATMs and gold bars
The scheme followed a pattern that federal agencies have flagged repeatedly. According to the federal charging documents, the victim was persuaded to feed cash into Bitcoin ATMs, totaling about $55,700, while separately wiring $1.335 million to a precious-metals dealer in San Marcos for gold bar purchases. Once the gold was in hand, a courier collected it from the victim, severing any remaining control over the assets. The dual-channel approach, crypto deposits paired with tangible bullion, made the funds harder to trace and recover than a simple bank transfer.
Investigators say the victim believed they were cooperating with authorities to protect their accounts from supposed criminal activity. Instead, the instructions all came from impostors. The FBI tested that pipeline directly: agents arranged a controlled delivery of a fake $100,000 package, which led to Sun’s arrest when he allegedly arrived to pick it up. Prosecutors describe Sun as one of the couriers responsible for physically moving gold and cash to higher-level conspirators, a critical link that allowed the broader fraud ring to operate at scale.
Carlsbad police have encountered the same courier-based tactic in other local cases involving cash and gold bullion. In public alerts, the department has emphasized that no legitimate government agency will ever send someone to your home to collect money, nor demand payment in gold or cryptocurrency. That warning echoes guidance from both the Federal Trade Commission and California’s Department of Financial Protection and Innovation, which has stated that legitimate organizations do not direct people to crypto ATMs for urgent payments. When those elements appear together-claims of law-enforcement involvement, threats of arrest, and instructions to use a Bitcoin kiosk-investigators say it is almost certainly a scam.
Federal and state enforcement actions targeting crypto kiosk fraud
Sun’s prosecution sits inside a wider enforcement push. The U.S. Attorney’s Office and FBI have recovered millions for elderly fraud victims across the Southern District of California, with the Sun matter listed among those cases. Nationally, regulators have grown increasingly vocal about the role of cryptocurrency kiosks in fraud schemes. FinCEN has issued a formal notice urging financial institutions to identify and report suspicious activity at convertible virtual currency kiosks under the Bank Secrecy Act, signaling that the federal government views these machines as a primary payment channel for scam operations.
At the state level, California’s DFPI ordered crypto kiosk operator Hermes Bitcoin, run by Anh Management, LLC, to cease operating in California. That shutdown targeted excessive fees and consumer protection violations, but it also removed machines that could serve as fraud on-ramps. State officials argue that tighter licensing, clearer disclosures, and active monitoring of kiosk operators can reduce the ease with which scammers steer victims to specific locations and QR codes.
Whether those enforcement actions are reducing losses remains an open question. Data from the FTC’s Consumer Sentinel Network show that fraud tied to Bitcoin ATMs has surged in recent years, with scammers frequently posing as government agencies or tech support and then directing victims to particular kiosks. In a recent data spotlight, the FTC reported that Bitcoin ATMs have become a favored payment portal for scammers because transactions are fast, irreversible, and difficult to trace once converted to cryptocurrency.
Consumer advocates say public education must move in tandem with prosecutions. The FTC has warned that if someone contacts you unexpectedly, claims there is an emergency, and then tells you to go to a kiosk and scan a code, it is not a legitimate transaction. In a recent alert, the agency stressed that being sent to a Bitcoin ATM on someone else’s instructions is itself a red flag, regardless of the story you are told. Law enforcement in San Diego County has echoed that message, urging families to talk with older relatives about these tactics before a scammer makes contact.
For the Carlsbad victim, recovery prospects remain uncertain. Once gold bars are handed to a courier or cash is converted into cryptocurrency and moved through multiple wallets, clawing back funds becomes difficult even when investigators identify suspects. Prosecutors say that is precisely why fraud rings favor Bitcoin ATMs and bulk precious-metals purchases: both channels exploit speed, anonymity, and victims’ limited familiarity with newer payment technologies. As the Sun case moves forward in federal court, authorities are using it to underscore a simple rule they hope will blunt future losses: no real official will ever demand that you protect your money by turning it into Bitcoin or gold and handing it to a stranger.
Free for readers: The free Retirement Shield newsletter sends plain-English help keeping more of your money in retirement — the scams to dodge, the benefits you’re owed, and what’s changing with Social Security and Medicare, a couple times a week. Get the free newsletter.
