According to a brief item from Google News, aggregating a Coin Gabbar report, the CFTC is flagging rising scam losses tied to crypto ATMs heading into 2026. The summary we have is thin: no figures, no case examples, no detail on which scam typologies the agency thinks are growing. We treat this as a signal worth noting rather than a story we can add texture to, since we haven’t read the underlying CFTC material.
Why this matters for people using cash machines
Crypto ATM fraud warnings tend to follow a familiar script: an urgent phone call from someone claiming to be law enforcement, a utility company, or a relative in trouble, followed by instructions to feed cash into a nearby machine and scan a QR code. Once that transaction confirms on the blockchain, it is final. There is no bank to call, no chargeback, no reversal. That single fact is what makes these machines a preferred rail for scammers targeting older adults in particular, and it’s why regulators keep circling back to this corner of the crypto industry even as trading volumes on exchanges dwarf what moves through a kiosk.
What rarely gets mentioned alongside the fraud warnings is the cost structure that sits underneath every legitimate transaction too. Federal Reserve Bank of Kansas City research from 2023 put the median self-reported fee for buying Bitcoin at a US machine at 16 percent, with selling close behind, and noted that exchange-rate spreads can add another 5 to 7 percent on top, meaning all-in costs of 20 percent are not unusual. That figure is self-reported and likely understates reality, since operators charging the most aggressively are also the ones least likely to participate in a voluntary survey. A victim who gets scammed loses everything they put in. A regular user who isn’t scammed still loses a fifth of their money to the machine itself. Both problems deserve attention, but only one of them shows up in a fraud alert.
Our view
We think the CFTC is right to keep flagging this, but a warning about “rising scam losses” without specifics is close to useless for the person standing in front of a kiosk deciding whether to trust it. Fraud alerts of this kind tend to name a trend without naming a machine, an operator, or a location, which leaves consumers no more equipped to protect themselves than before they read it. Meanwhile the industry’s own churn problem gets far less regulatory attention than it should. In building our own directory we checked 200 previously listed machines and found 41 no longer existed, roughly one in five gone dark, and Bitcoin Depot’s Chapter 11 filing this year took more than 9,000 machines offline in one stroke. A sector where a fifth of listed locations vanish and a major operator can deactivate thousands of machines overnight is a sector where “fraud warning” should really be read alongside “basic infrastructure instability.” Both point to the same underlying issue: this is a lightly supervised cash-to-crypto layer operating at consumer scale, and oversight is catching up slowly.
What to watch
Watch whether the CFTC’s eventual full statement, or any follow-up from FinCEN or state money transmitter regulators, names specific operators or transaction patterns rather than speaking in industry-wide generalities. Money transmitter licensing is handled state by state in the US, so enforcement teeth will likely show up first at that level, not federally. Also worth tracking: whether elevated scam-loss data prompts any operator to add friction, such as transaction caps or delayed settlement for first-time users, since that would be a more meaningful consumer protection signal than another advisory. Until then, the practical advice hasn’t changed. Nobody legitimate asks you to resolve a legal or billing problem by feeding cash into a Bitcoin ATM, and if you’re using one for an ordinary purchase, check the fee schedule on the screen before you commit, because at typical published rates the machine itself is already taking a bite that rivals what a scam might take in one bad afternoon.
