A proposed class action lawsuit accuses Bitcoin Depot of allowing a scammer to drain $76,000 from a single victim through its cryptocurrency ATMs, adding to a growing pile of state and federal enforcement actions against the kiosk operator. The filing lands the same day Bitcoin Depot published its annual report for fiscal year 2025 and just months after Maine regulators closed a two-year investigation with a $1.9 million settlement covering residents who lost money at the company’s machines between 2022 and 2025. Plaintiffs argue the operator profits from every transaction while failing to install safeguards that could stop obvious fraud patterns.
State probes and federal data behind the Bitcoin Depot allegations
The class action does not exist in a vacuum. The Maine Bureau of Consumer Credit Protection spent two years investigating Bitcoin Depot before reaching a consent agreement that requires the company to pay $1.9 million to support reimbursements for Maine residents victimized by kiosk scams. Eligible claimants include anyone who lost money at a Bitcoin Depot kiosk between 2022 and 2025, a window that overlaps with the period of sharply rising bitcoin-ATM fraud documented by federal agencies.
According to an FTC data spotlight on bitcoin ATM fraud, reported losses involving these machines grew sharply from 2020 through early 2024. Impersonation schemes, in which callers pose as government agents or tech-support staff and direct victims to deposit cash at a nearby kiosk, drive many of those cases. Scammers often claim there is an overdue tax bill, a frozen bank account, or a relative in urgent trouble, then insist that payment must be made immediately in cryptocurrency.
The FBI has likewise warned that crypto-enabled fraud now accounts for billions in annual losses nationwide. While the bureau’s alerts cover a wide array of digital-asset crimes, from investment swindles to romance scams, they consistently highlight the role of physical kiosks as an on-ramp for cash. The new lawsuit leans on this backdrop to argue that operators like Bitcoin Depot are not passive conduits but central infrastructure in schemes that regulators have been flagging for years.
Massachusetts Attorney General Andrea Joy Campbell separately sued Bitcoin Depot, alleging the company’s machines facilitate crypto scams against Massachusetts consumers. That complaint echoes the same core theory as the new class action: Bitcoin Depot collects a fee on every transaction, creating a financial reason to keep machines running at high volume even when transfer patterns match well-known scam profiles. Together with the Maine consent agreement, the state actions suggest a growing consensus among regulators that kiosk operators bear responsibility for policing fraud at their terminals.
Bitcoin Depot’s fee model and the incentive question
Bitcoin Depot’s annual report on Form 10-K, filed for the fiscal year ended December 31, 2025, discloses the company’s kiosk footprint, fee-based revenue structure, and regulatory risk factors. Each transaction at a Bitcoin Depot machine generates fee income for the company, typically as a percentage markup over the prevailing market price of bitcoin or other supported assets. Plaintiffs and regulators argue that this per-transaction model gives the operator little reason to slow down or block transfers, even repeated high-dollar deposits that fit patterns the FTC and FBI have cataloged for years.
The tension is straightforward. A kiosk operator that flags suspicious activity and pauses a transaction loses revenue in the short term, particularly when the customer is attempting to send several thousand dollars in rapid succession. Warning prompts, mandatory cooling-off periods, or hard caps on daily deposits could all reduce the volume of successful transfers. The lawsuit contends that Bitcoin Depot has underinvested in such safeguards, opting instead for basic disclaimers that scammers can easily talk victims into ignoring.
Regulators point to practical steps that might alter those incentives. Machines could display more specific, scenario-based warnings that mirror common scam scripts, such as threats of arrest over unpaid taxes or urgent demands to protect a bank account. Systems could automatically flag multiple high-value deposits from the same phone number or wallet address within a short window, triggering a hold or a manual review. Operators might also be required to share aggregate fraud data with state agencies, allowing patterns to be spotted across different regions and kiosk networks.
Bitcoin Depot, for its part, has emphasized in regulatory filings that it faces an evolving patchwork of state rules and that heightened compliance expectations could increase costs or constrain growth. The company notes that it does not control how customers use purchased cryptocurrency once a transaction is complete, framing itself as a service provider rather than a financial adviser. The new class action challenges that framing, arguing that when a business designs and profits from a system that predictably channels victims’ cash into scams, it assumes a duty to implement stronger protections.
As the Maine settlement rolls out and the Massachusetts case proceeds, the class action adds another venue in which courts will test how far that duty extends. The outcome could shape not only Bitcoin Depot’s future but the broader regulatory landscape for crypto kiosks, determining whether they are treated more like lightly supervised vending machines or like financial institutions expected to detect and disrupt fraud.
