Crypto ATM Scams: Why No Real Agency Asks You to Pay at a Bitcoin Machine

Picture this: you get a call from someone who says they're with the IRS, the FBI, or the U.S. Marshals. Your Social Security number has been flagged. There's a warrant out for your arrest. You can clear it right now, but you have to act fast. All you need to do is go to the Bitcoin ATM at the gas station down the road, feed in some cash, and scan a QR code they'll text you.

Everything about this call feels urgent. It also feels terrifyingly real.

It isn't. Every word of it is a script that scammers have refined to move fast, create panic, and get your money before you think to question any of it. And it's working. The FBI's Internet Crime Complaint Center (IC3) received 13,460 complaints about crypto kiosk fraud in 2025, with about $389 million in losses (the FBI notes totals can include other transaction types). That is up from 10,956 complaints and $246.7 million in 2024, according to the FBI's 2025 and 2024 IC3 annual reports. Adults 60 and older accounted for about 86% of kiosk losses reported with an age in 2024, and about three-quarters in 2025 ($257 million across 6,188 complaints), per the same reports.

No government agency will ask you to pay at a Bitcoin machine. Anyone who tells you otherwise is a scammer.

What is a crypto ATM?

A crypto ATM looks a lot like the regular ATM you'd use at a bank. The key difference is what it does with your cash. Instead of debiting your account, it converts your money into cryptocurrency, usually Bitcoin, and sends it to a digital wallet.

You don't need a bank account to use one. There's no waiting period. The funds transfer in minutes. That's exactly why legitimate ATMs have their place, and exactly why scammers love them.

In 2024, there were close to 32,000 Bitcoin ATMs across the United States, tucked into gas stations, convenience stores, grocery stores, and pharmacies, according to CNBC. They're easy to find and easy to use. Once cash goes in and crypto goes out, there's typically no chargeback and no reversal, and the FTC notes that cryptocurrency payments typically are not reversible. Some states have begun requiring refunds in limited cases, but you shouldn't count on one.

How the scam actually works

The setup varies, but the structure is almost always the same.

A caller reaches you, or you click something you shouldn't and a pop-up prompts you to call them. They claim to represent a government agency, the IRS, the Social Security Administration, the FBI, a local sheriff's office, or U.S. Marshals. Sometimes it's several of them, with multiple "officials" who hand you off between calls to make the whole thing feel procedural. A tech company like Microsoft or Apple is often thrown into the mix.

The story they tell usually includes one of the following:

• You owe back taxes and face arrest if you don't pay immediately.
• Your Social Security number was used in a crime and your accounts are at risk.
• There's an active warrant, but it can be "resolved" quickly with a fine.
• Your computer or bank account has been compromised and your money needs to be moved to a "safe account."

From there, they direct you to a nearby Bitcoin ATM. They stay on the phone the entire time, which accomplishes two things: it keeps the pressure up, and it stops you from talking to anyone who might pump the brakes. They send a QR code via text or email. You scan it at the machine, put in cash, and the money converts into Bitcoin and lands directly in their wallet.

The whole process can take 30 minutes. Recovery, if it's possible at all, can take years.

Why scammers specifically want Bitcoin ATMs

Cash handed to a stranger is at least trackable to a location. A wire transfer leaves a paper trail. Gift cards require a redemption step. Bitcoin ATMs combine the irreversibility of cash with the near-anonymity of cryptocurrency, which is why they've become the preferred exit ramp for fraud.

Once your money hits their wallet, scammers can fragment it across dozens of addresses, convert it to other coins, and move it to overseas exchanges within hours. The funds are typically gone for good, and the FTC notes that cryptocurrency payments typically are not reversible.

There's also a social engineering advantage. Most people have never used a Bitcoin ATM and have no framework for what a normal transaction looks like. That confusion is useful to a scammer who wants to walk you through the steps without triggering the pause that a bank teller would naturally create.

The agencies being impersonated, and what they actually do

The IRS, the FBI, the Social Security Administration, the U.S. Marshals Service, local courts, and local police are all regularly faked in these calls. Here's the short version of how each actually operates:

The IRS sends letters. If you owe taxes, the IRS says a letter or notice is the first way it will contact you, with limited exceptions. It does not demand immediate payment by phone, text, or email, and cryptocurrency isn't among its official payment options. You get time and options to respond or appeal.

The Social Security Administration does not suspend Social Security numbers, and it will not threaten arrest or demand immediate payment, the agency says. A call claiming your number was used in a crime or that your benefits will be frozen unless you act now is a scam.

The FBI and U.S. Marshals do not call to threaten arrest or demand money. The FBI says federal agencies won't ask for wire transfers or gift cards, and the Marshals Service says it will never make Bitcoin deposits for any purpose.

Courts do not call to demand payment, and no court or marshal accepts payment at a Bitcoin ATM. The FTC says courts never ask you to pay over the phone. If you think you missed jury duty, contact the court directly using a number from its official website.

The pattern is consistent: any call that combines urgency, a government name, a threat of arrest, and a request for cryptocurrency is a scam. You don't need to verify the details to know that, because the combination itself is the tell.

Who's most at risk, and why

Consumers over 60 are more than three times as likely as younger adults to report losing money to Bitcoin ATM scams, according to FTC data. That's not because older people are naive. It's because the scripts are built for them.

Many grew up in an era when a call from a government official meant something serious was happening, and you took it seriously. Scammers study this. They lean into formal language, badge numbers, case IDs, and official-sounding procedures to exploit the instinct to cooperate with authority. They also tend to call during hours when adult children or friends aren't around to serve as a sounding board.

One Indiana woman, 76, lost $31,500 to a team of scammers posing as Apple tech support, a bank representative, and two government officials, according to CNBC. The call began with what looked like a security alert on her iPad. By the time she realized what had happened, the money was gone.

In 2024, adults 60 and older accounted for about 86% of crypto kiosk losses reported with an age, according to the FBI's IC3 report. In 2025, that share was about three-quarters, or $257 million across 6,188 complaints. In a lawsuit against one operator, the DC Attorney General said the median age of that operator's DC victims was 71. For someone on a fixed income, a loss in the tens of thousands of dollars isn't a minor inconvenience. It can be life-altering.

What to do if it happens to you

If you get a call like this, the single most protective thing you can do is hang up. Don't press a button. Don't ask questions. Don't try to figure out if it's real. Just hang up.

If you've already made a payment, move quickly:

1. Report it to the FTC at reportfraud.ftc.gov and to the FBI's IC3 at ic3.gov. Even if recovery isn't possible, your report helps investigators build cases.
2. Contact the Bitcoin ATM operator. Do it right away. The kiosk receipt should have a phone number, so keep it, and note the transaction ID, wallet address, and kiosk location. Some operators have fraud response teams that can flag suspicious transactions, though they usually can't reverse a completed one.
3. Tell your bank or credit union. If any part of the scam touched a bank account, they need to know. You can also file a police report and, if the victim is an older adult, contact Adult Protective Services or your state attorney general.
4. Talk to someone you trust. Shame keeps these losses private and scammers bank on that. The more these incidents are reported and discussed, the harder they become to pull off.

If you're unsure whether a call you received is real, hang up and call the agency back using a number you find yourself at their official website. Never call back the number that called you.

How to protect yourself going forward

The best protection is knowing the rule before the call comes: no real agency will ask you to pay at a Bitcoin machine. Not the IRS. Not the FBI. Not a court. Not Social Security.

A few other things worth keeping in mind:

• Urgency is a tactic, not a fact. Legitimate legal or financial matters have days or weeks of process behind them. Real agencies give you time.
• Anyone who coaches you through a kiosk transaction by phone is a scammer. If someone won't let you hang up, that's the scam at work.
• QR codes from strangers are the scammer's delivery mechanism. Never scan a code sent by someone you don't know and didn't initiate contact with.
• Spoofed caller ID is easy to fake. A number that looks like it's from the IRS or your local sheriff's office is not proof of anything.

Scammers are patient, persistent, and practiced. But this one has clear tells, once you know what it looks like.

Conclusion

Crypto ATM scams succeed because they turn urgency into action: a convincing caller, an official-sounding threat, and a machine that makes the payment hard to undo. You can break the pattern at any point. Hang up, look up the agency's official number yourself, and talk to someone you trust before you move a dollar. If you have already paid, contact the ATM operator right away and report it to the FTC and the FBI's IC3.

Guardio doesn't monitor phone calls or Bitcoin machines, but it covers a related risk. Many of these scams start with a link, a pop-up, or a text. Browsing protection on your computer and phone blocks phishing and scam sites before they open and explains why, and Email Security flags phishing emails that get past the Gmail spam filter. No tool catches everything.

Get a free security scan with Guardio today and stay protected from scams.