News

The $388M fraud number is real. So is the missing context.

According to Google News , reporting from finance.biggo.com puts crypto ATM fraud losses at $388 million, a rise of 58 percent, and links the trend t...

The $388M fraud number is real. So is the missing context.

According to Google News, reporting from finance.biggo.com puts crypto ATM fraud losses at $388 million, a rise of 58 percent, and links the trend to states tightening rules on the machines. The summary we have is thin beyond that headline figure: no breakdown by state, no methodology, no split between elderly-targeted scams and other fraud types. We are not in a position to verify the $388 million number ourselves, and we would treat it as the outlet’s reported figure rather than an established fact until a primary source, such as FinCEN or FTC data, confirms it.

Why this matters for people using cash machines

A headline fraud total is only half the picture for someone standing in front of a kiosk deciding whether to feed cash into it. The mechanics that make Bitcoin ATMs attractive to scammers are the same mechanics that make them expensive for everyone else: a Bitcoin transaction confirms and it is done, full stop, with no bank to call and no chargeback to file. That irreversibility is the entire business model for the “walk to the machine and send it” scam script, and it is also why the machines carry fees that would be unthinkable at a bank counter. In building our own directory we found the cost structure murkier than most users assume, which lines up with the Kansas City Fed’s 2023 finding that a self-reported median fee of 16 percent for buying Bitcoin, plus a 5 to 7 percent spread, pushes plenty of transactions to an all-in cost near 20 percent, and that operators charging more than that tend to simply stop reporting. A fraud victim and a legitimate customer often pay through the same toll booth; the difference is who is on the other end of the transfer.

Our view

State crackdowns are overdue, not premature, and we say that as a site that exists to help people find legitimate machines rather than avoid the category entirely. Money transmitter licensing has been handled state by state for years while fraud losses climbed, and a patchwork of rules was never going to keep pace with an industry that installs kiosks faster than regulators can inspect them. We would also push back on any framing that treats a 58 percent jump as a story about crypto being uniquely dangerous: the underlying fraud tactics, primarily impersonation and romance-style scams that end with a victim being walked through a kiosk transaction, would work against gift cards or wire transfers too. The crypto ATM is the delivery mechanism, not the root cause, but it is a delivery mechanism with essentially no undo button, which is exactly why it gets chosen. Where we think the industry itself deserves blame is opacity: our own build-out found that roughly one in five listed machines we checked no longer existed, and an industry that cannot keep its own location data accurate is not one that inspires confidence in its fraud controls either. Bitcoin Depot’s Chapter 11 filing and the deactivation of more than 9,000 of its machines this year is a reminder that operator instability, not just criminal misuse, is thinning out the honest side of this market at the same time fraud is rising on the dishonest side.

What to watch

Watch which states move from warnings to hard transaction caps or mandatory cooling-off periods for first-time users at a kiosk, since that is the lever regulators actually control and the one most likely to dent fraud totals in the next reporting cycle. Watch also whether any follow-up reporting breaks the $388 million figure down by operator or by scam type, because a number that big deserves a source citation, not just a headline, and readers should be skeptical of any outlet, including this one, that repeats a statistic without one. Finally, watch the compliance side: as more states tighten money transmitter rules, expect further operator consolidation or exits, which will keep changing which machines on any directory, including ours, are still live.

Entities