According to Google News, a man lost $30,000 into a crypto ATM after calling a fake Microsoft support number, and New Hampshire is now moving to add new safeguards for machines in the state. The feed summary does not detail what those safeguards look like, how the scam unfolded step by step, or which operator’s machine took the deposit. What is clear enough from the headline alone is the pattern: a tech-support scare, a phone number, and a walk to a machine that turned cash into an irreversible transaction.
Why this matters for people using cash machines
This is the scam that keeps showing up at Bitcoin ATMs across the country, and it works the same way almost every time. Someone gets a pop-up or a call warning that their computer is compromised, “support” walks them through fixing it, and the fix always ends with a trip to a kiosk to feed in cash. The victim thinks they are paying a vendor or securing an account. They are actually buying Bitcoin and sending it to a wallet controlled by the scammer. Once that transaction confirms there is no bank to call, no chargeback, no clawback. Bitcoin’s finality, which is a feature for legitimate users, is exactly what makes it the preferred rail for this style of fraud.
It is also worth remembering that even a clean, non-fraudulent transaction at one of these machines is not cheap. The Kansas City Fed found a median self-reported buy fee of 16 percent, with spreads adding another 5 to 7 percent on top, and all-in costs near 20 percent are not unusual. That number is self-reported and likely biased low, since operators charging well above average tend to stop reporting at all. A victim moving $30,000 through a kiosk is not just losing the principal to a scammer’s wallet; depending on the machine, a meaningful slice may have gone to fees before the fraud even mattered.
Our view
New Hampshire is late to this, not early. Bitcoin ATM fraud tied to tech-support and impersonation scams has been documented by consumer protection agencies for years, and the fact that a state is only now “adding new safeguards” says more about the pace of state-level oversight than about any sudden spike in scam sophistication. Money transmitter licensing in the US is handled state by state, which means the strength of any friction a scammer’s target encounters at a machine depends entirely on which state that machine sits in. That is a bad design for a fraud vector that does not respect state lines. We also think it is a mistake to treat this as purely a scam-awareness problem. Operators and site hosts have leaned on high transaction limits and minimal in-person friction because that is what keeps volume up, and volume is the business model. Real safeguards mean lower daily limits for first-time or cash-heavy transactions, mandatory cooling-off periods for large amounts, and clear on-screen warnings about impersonation scams before a transaction is finalized, not after. If a rule does not change what happens at the moment someone is standing in front of the machine with cash in hand, it is not going to stop the next $30,000 loss.
We would also push back gently on the framing that this is a story about crypto being dangerous in the abstract. The mechanism here is old-fashioned impersonation fraud; Bitcoin is just the settlement layer the scammers picked because it is fast and irreversible. Cash wired to a fraudulent bank account is also gone. The specific policy question is whether the physical kiosks that sit between cash and crypto are doing enough to slow down an obviously distressed person mid-scam, and on the evidence of stories like this one, most are not.
What to watch
Watch what New Hampshire’s actual rule text says once it is published, specifically whether it imposes hard transaction caps, mandatory delay periods, or scam-specific warning screens, versus just requiring signage that most victims will not read while on the phone with a scammer. Also worth tracking is whether other states follow with matching rules or whether this becomes another patchwork where the safeguard depends on which side of a state line the kiosk sits on. Given how thin some operators’ compliance has been in the past, including a major bankruptcy that pulled thousands of machines offline this year, it is also worth watching whether state regulators start naming specific host locations or operators rather than issuing general warnings.
