No single agency issues a license that says “Bitcoin ATM operator” and hangs it on the wall next to the machine. Instead, a patchwork of federal registration, state licensing, and local business rules covers these machines, and the layers don’t always overlap the way you’d expect. If you’re about to feed cash into one of these kiosks, it helps to know who is actually watching the company that runs it, and who isn’t.
The federal layer: registration, not approval
Bitcoin ATM operators in the United States are generally classified as money services businesses, and they register federally with FinCEN, the Treasury Department’s Financial Crimes Enforcement Network. This registration puts them under anti-money-laundering obligations: they’re expected to verify customer identity, watch for suspicious transaction patterns, and file reports when required.
What this registration does not do is vouch for the company’s fees, its customer service, or whether the machine will still be running next month. FinCEN registration is a compliance checkbox for federal law enforcement purposes. It is not a seal of approval, and it doesn’t mean anyone at the federal level is checking whether the exchange rate posted on the screen is fair or whether the company will answer the phone if your transaction goes wrong.
The state layer: money transmitter licensing, and it varies a lot
The more consequential oversight happens at the state level, through money transmitter licensing. This is administered state by state, and requirements differ substantially between states. A company running machines across a dozen states may need a dozen separate licenses, each with its own application, its own bonding requirements, and its own renewal cycle. A single operator running machines in many states may hold many separate licenses, and there’s no shortcut that lets one approval cover the whole country.
This matters for you as a customer in a practical way: the protections available to you can depend entirely on which state you’re standing in when you use the machine. We can’t tell you what your specific state requires, because that detail changes from state to state and even changes over time within the same state. What we can tell you is that the licensing exists, that it’s uneven, and that “this company is licensed somewhere” tells you very little about whether it’s licensed properly where you live. If a term on a receipt or a company disclosure confuses you, our site glossary breaks down the vocabulary these companies use without translating it for the average customer.
The local layer: the host business isn’t the licensed party
Bitcoin ATMs usually sit inside a convenience store, a gas station, a smoke shop, or some other host business. It’s worth being clear about who is actually responsible for the machine’s compliance: host businesses are generally not the licensed party. The operator is. The gas station owner who agreed to host the kiosk in exchange for a cut of the revenue typically has no money transmitter license, no FinCEN registration in their own name, and often limited ability to answer questions about how the machine’s fees are calculated or where a complaint should go.
That gap shows up when machines close down. Local business rules, like zoning and general commercial permitting, apply to the host location, but they say nothing about the financial product being sold from a machine bolted to the floor. A store can be a perfectly legitimate business while hosting a machine run by an operator that’s cutting corners, or one that’s simply gone dark. We verified 200 Bitcoin ATM listings and found that 41 of them, roughly one in five, no longer existed. The store was often still there. The machine, or the company that ran it, was not.
Why the layers don’t add up to a safety net
Even where all three layers are functioning, the combination doesn’t produce the kind of consumer protection people expect from banks or card networks. Bitcoin transactions are irreversible once confirmed, so there is no chargeback equivalent. If you send cash into a machine and the transaction later turns out to be a mistake, or the company disappears, there’s no dispute process that reverses the transfer the way a credit card company might reverse a fraudulent charge.
The fee structure compounds this. The Federal Reserve Bank of Kansas City reported in 2023 that the median fee for buying Bitcoin from a US Bitcoin ATM, self-reported by operators through Coin ATM Radar, is 16 percent of transaction value, with a median sell fee of 15 percent. Exchange rate costs add an estimated 5 to 7 percent on top of that, and the same report noted that total fees of 20 percent may not be uncommon. For context, the Kansas City Fed also estimated that the total cost of operating a Bitcoin ATM runs only 3 to 6 percent of revenue, which means the fees charged are far higher than what it costs to run the machine. And that 16 percent median is likely an undercount: it’s self-reported, and operators charging above-average rates commonly disable reporting, so the published figure is biased toward the low end of what people are actually paying.
None of the three regulatory layers, federal, state, or local, sets a ceiling on that fee. Licensing establishes who is allowed to operate the machine and requires certain anti-money-laundering procedures. It does not cap what they charge you for the transaction itself.
What happens when the whole structure fails at once
The limits of this layered system became obvious in May 2026, when Bitcoin Depot filed for Chapter 11 bankruptcy and more than 9,000 of its machines were deactivated. A company can hold federal registration and state licenses in multiple jurisdictions and still shut down suddenly, leaving machines dark and any pending transactions unresolved. Licensing tells you a company met a set of requirements to start operating. It says nothing about whether the company will still be solvent, or still answering support tickets, six months from now.
For someone standing in front of a kiosk, the practical questions are simpler than the regulatory map. Is this machine still active? Does the operator have a working support line? Is the fee disclosed clearly on screen before you commit cash you can’t take back? Regulation, at every level described here, is aimed at preventing money laundering and establishing which entity is legally accountable. It is not designed to answer any of those three questions for you.
Before you use a machine, check its current status in our verified Bitcoin ATM directory rather than relying on an old listing or a map pin that hasn’t been checked recently. If you find a machine that’s been shut off, removed, or moved to a different address, let us know through our closed or moved machine report page so the next person doesn’t drive out for nothing.
