News

$388M in ATM Scam Losses Is a Fee Story, Not Just a Fraud One

According to a report covered by Google News (bloomingbit) , the CFTC says US losses tied to crypto ATM scams jumped to $388 million last year. The s...

$388M in ATM Scam Losses Is a Fee Story, Not Just a Fraud One

According to a report covered by Google News (bloomingbit), the CFTC says US losses tied to crypto ATM scams jumped to $388 million last year. The summary we have is thin: a single figure, a single agency, no breakdown of scam type, machine count, or which operators were involved. Everything below is our reading of what a number like that implies for the physical cash-to-crypto layer we track directly.

Why this matters for people using cash machines

A crypto ATM is not really a Bitcoin machine, it is a cash conversion counter with a screen on it, and the fraud almost never originates at the terminal. It originates on a phone call, a text, or a fake tech-support pop-up that tells someone to walk to the nearest kiosk and feed in bills. The machine is the last honest link in a chain of lies, which is also why it is the easiest part of the chain to blame and the hardest part to actually fix. When a headline figure like $388 million lands, the instinct is to treat it as an indictment of the machines themselves. It is more accurately an indictment of how little friction exists between “a stranger told me to do this” and “cash is now irreversible crypto.”

That irreversibility is the whole mechanism. Once a transaction confirms, there is no bank to call and no chargeback to file. Combine that with fee structures that are already steep under normal, non-scam use, and the same 15 to 20 percent all-in costs regulators have flagged before, and every scam transaction is a double loss: the principal plus the machine’s own markup on the way out.

Our view

We think a headline number like this, without breakdown, invites the wrong conclusion twice over. It is tempting for regulators to use a total-loss figure to justify blunt restrictions on the whole machine category, and it is just as tempting for the industry to wave the figure off as unrepresentative because it is aggregated and self-reported. Both reactions dodge the actual problem, which is that the current compliance regime, state-by-state money transmitter licensing plus federal anti-money-laundering rules for operators as money services businesses, was not built with elder-targeted scam scripts in mind. Licensing checks whether an operator is legitimate. It does nothing to stop a legitimate, fully licensed machine from being used, transaction by transaction, to move a retiree’s savings to a scammer’s wallet address. Those are two different problems, and regulators keep conflating them in press releases.

We also think the fee environment deserves more scrutiny alongside the fraud figure, not instead of it. If all-in costs of 20 percent are “not uncommon,” as the Kansas City Fed found, and that number is itself biased low because high-fee operators tend to stop self-reporting, then the same conditions that make scam losses so large per transaction are baked into normal, non-fraudulent daily use of these machines. A directory that only checks whether a listing is real, which is the minimum bar, is doing something. It is not doing enough on its own to protect the person standing at the kiosk.

What to watch

Watch for whether the CFTC or any state regulator follows this figure with operator-level or state-level detail. A national total is close to useless for enforcement; a breakdown by state, by operator, or by scam type is what would let anyone act on it, whether that is a regulator drafting a rule, an operator adjusting transaction limits, or a directory like ours flagging specific locations. Also watch transaction limit and cooling-off period rules at the state level, since several states have already moved toward daily caps or delayed transactions for first-time users specifically to blunt this exact scam pattern, and a $388 million figure will likely accelerate that trend elsewhere. Finally, watch whether operators start publishing their own fraud-prevention numbers voluntarily. An industry that wants to keep operating with light-touch state licensing has an obvious incentive to show it is catching these transactions before they clear, rather than waiting for the next aggregated loss total to do the talking for it.

Entities