The phone rings, and the person on the other end says they’re from the Social Security Administration, or the IRS, or the power company, or Microsoft support. They say there’s a warrant out, or your account has been compromised, or your service is about to be shut off. They sound calm and official. They tell you the only way to fix this today is to withdraw cash and take it to a Bitcoin ATM. If you’ve never heard this script before, it can sound plausible for the ten minutes it takes to drain a bank account. If you have heard it, you’ll recognize every beat before the caller finishes the second sentence.
The setup: a crisis that can’t wait
Every version of this fraud starts with urgency and a claim of authority. The caller says they’re calling from a government agency, a utility, or a tech company, and that something bad is about to happen unless the victim acts within the hour. This is a recurring pattern that fraud investigators and consumer agencies have documented repeatedly: a caller impersonating a government agency, utility, or tech support directs the victim to deposit cash at a Bitcoin ATM. No legitimate government agency or utility demands payment in cryptocurrency, ever, for any reason. Not the IRS, not your electric company, not Social Security. If a call includes that instruction, the call is fraudulent, full stop.
The urgency is the mechanism. Scammers know that a victim who has time to call their bank, ask a family member, or search online will likely discover the fraud before sending money. So the script is built to prevent that pause. Victims are told not to hang up, not to tell anyone, and to drive to a specific location immediately.
The middle: cash, and a very specific machine
Once the victim is convinced, the caller gives directions to a particular Bitcoin ATM, sometimes naming the exact machine and address. This isn’t incidental. Bitcoin ATMs accept cash and convert it to cryptocurrency in a single transaction, with no bank in the loop to flag anything unusual and no teller to ask a question the victim can’t answer. It’s also worth understanding the economics of these machines, because the numbers explain why scammers favor them beyond just convenience. The Federal Reserve Bank of Kansas City reported in 2023 that the median self-reported fee for buying Bitcoin from a US Bitcoin ATM is 16 percent of the transaction, with exchange rate costs adding an estimated 5 to 7 percent on top. Total fees of 20 percent may not be uncommon. Operating one of these machines costs an estimated 3 to 6 percent of revenue, according to the same report, which gives a sense of the margin built into every transaction, scam or not.
There’s a further wrinkle: that 16 percent figure is self-reported through Coin ATM Radar, and operators charging above-average rates commonly disable reporting altogether. The published median is very likely biased low. In practice, a victim depositing $3,000 in cash at one of these machines could easily lose several hundred dollars to fees before the scam has even taken the rest.
The tell: who supplies the QR code
This is the detail that separates a real transaction from a theft, and it’s the single most useful thing to know if you want to recognize this happening to a parent, spouse, or friend. At a Bitcoin ATM, the machine displays a QR code representing the wallet address the cash will be sent to. In a normal transaction, that address belongs to the person using the machine, an account they opened and control themselves.
In the scam version, the caller supplies the QR code. They’ll say something like “I’m sending you a code to scan” or “hold your phone up so I can see the screen” or simply walk the victim through scanning a code they’ve texted or emailed ahead of time. Scammers commonly supply the QR code for the destination wallet, which means the funds go directly to them and never touch any account the victim controls. There is no account to check later, no statement, nothing to dispute. The moment that code is scanned and the cash is fed into the machine, the transaction is final.
If you are ever standing at a Bitcoin ATM and someone on the phone is telling you which code to scan, stop. That single fact, a caller directing which wallet address to use, is the clearest sign of fraud there is. A legitimate transaction never requires someone else to hand you the destination address for your own money.
Why there’s no getting it back
Once the machine confirms the transaction, the Bitcoin moves on a public ledger and that transfer cannot be reversed. Bitcoin transactions are irreversible once confirmed, so there is no chargeback route the way there is with a credit card dispute. Banks can sometimes claw back a wire transfer if it’s caught fast enough. A Bitcoin ATM transaction offers no equivalent. Once the cash goes in and the code is scanned, the money belongs to whoever controlled that wallet address, and that’s typically the last anyone hears of it.
It’s also worth knowing that Bitcoin ATM operators in the US are classified as money services businesses, which means they carry federal anti-money-laundering obligations and need money transmitter licenses administered state by state. That regulatory structure exists to catch large-scale laundering patterns, not to protect an individual walking up to feed cash into a machine on a stranger’s instructions. Licensing and compliance don’t stop a scam call from working.
Checking the machine itself, and what else can go wrong
Separately from the phone-script fraud, there’s a more mundane problem worth knowing about: the machines themselves don’t always exist where directories say they do. USA Crypto Reports verified 200 Bitcoin ATM listings and found that 41 of them, roughly one in five, no longer existed at the listed location. Operators go out of business or pull machines with little notice. Bitcoin Depot, one of the larger operators, filed for Chapter 11 bankruptcy in May 2026, and more than 9,000 of its machines were deactivated as a result. A scammer directing someone to “the Bitcoin ATM at [address]” may be sending them to a location that’s been dark for months, or the victim may find a working machine from a different operator nearby and use that instead. Either way, the instructions rarely come from someone who has actually verified the machine is there.
If you want to check whether a specific machine is active before believing anyone’s directions, USA Crypto Reports keeps a verified Bitcoin ATM directory that’s checked against real locations rather than operator claims alone. If you find one that’s moved or shut down, you can report a machine that has closed or moved so the listing gets corrected for the next person. And if terms like “wallet address” or “confirmed transaction” are unfamiliar, the site’s crypto glossary explains them in plain language, which is worth doing before you’re standing in front of a machine with someone on the phone telling you what to do next.
If a relative calls you sounding rattled and mentions cash, a government agency, and a machine down the street, call them back on a number you already have and ask them to wait for you before they do anything else.