A short, plain-English explainer for the adult child of an older parent. What a Bitcoin ATM scam is. How the call usually goes. And one rule that ends it before a single bill goes into the kiosk.
TL;DR. A Bitcoin ATM scam is an imposter phone call that ends with an older adult feeding cash into a crypto kiosk at a gas station. The caller poses as a bank, sheriff, or federal agency, builds urgency, and routes the target to a Bitcoin Depot or similar machine. The cash converts to crypto and moves to a scammer-controlled wallet. The defense is one family rule: if a Bitcoin ATM enters the story, the call is a scam.
Why did we write this guide?
This is for the daughter who is 47, lives in Boston, and whose mom lives in another state, near a Shell station with a Bitcoin Depot machine right inside the door. It is for the son who heard a rumor about a parent in another state losing forty thousand dollars to a gas station Bitcoin machine scam and went quiet for the rest of lunch.
The numbers caught up with the rumor this spring. In April 2026 the FBI IC3 released its 2025 Elder Fraud Report. It named crypto-kiosk scams as a top driver of losses to adults 60 and older, with adults 60-plus accounting for 86 percent of reported kiosk-scam losses (ic3.gov/AnnualReport/Reports).
So this article is for that. We will keep it short, about a seven minute read.
What is a Bitcoin ATM scam, exactly?
A Bitcoin ATM scam is a phone call that ends at a crypto kiosk. The kiosk itself is a real machine, often a Bitcoin Depot, CoinCloud, or similar brand, parked inside a gas station or convenience store. You feed cash in. The machine converts it to cryptocurrency. Then the crypto lands in whichever wallet address you scanned at the screen.
For a normal customer that is the whole product. However, for a criminal, it is a one-way money exit. Once cash becomes crypto and lands in the scammer's wallet, the transfer is final. The FTC says it plainly: crypto payments are not undoable, and any caller demanding crypto is a scammer (consumer.ftc.gov/articles/what-know-cryptocurrency-and-scams).
So the parent thinks they are following bank instructions. In fact, they are handing the criminal cash inside a metal box.
How does a Bitcoin ATM scam call usually go?
The pattern is consistent enough now to write down. The FBI and AARP have both published the same five-step sequence this year (ic3.gov/crimeinfo/elderfraud).
- An imposter calls.
First, the caller poses as the bank's fraud department, a sheriff's deputy, the SSA, or Microsoft tech support. The number often appears local because caller ID is trivial to spoof.
- The story has urgency built in.
Next, the caller says the target's identity is compromised or a warrant is being issued. So the parent's brain shifts into crisis mode.
- The "fix" is to move money to a federal wallet.
Then the caller explains the only way to protect the funds is to convert them into crypto held in a "secure government wallet." There is no such thing.
- The target is sent to a specific kiosk.
After that, the caller names a specific gas station with a Bitcoin Depot or similar machine. The caller stays on the phone the whole way, coaching the target past any clerk who tries to intervene.
- Cash in, crypto out, money gone.
Finally, the parent feeds bills into the kiosk and scans a QR code the caller texted them. The crypto lands in a scammer-controlled wallet within seconds.
Why is the crypto-ATM model collapsing in 2026?
The crypto kiosk fraud problem is having a very public bad year. In May 2026, Bitcoin Depot, the largest US crypto-ATM operator with roughly ten thousand kiosks, filed for Chapter 11 bankruptcy. AARP's coverage of the Bitcoin Depot scam exposure tied the collapse to mounting fraud losses and tightening state rules (aarp.org/advocacy/crypto-kiosk-operator-bankruptcy).
Indiana went further. In 2026 it became the first US state to ban crypto ATMs outright, citing the share of kiosk volume tied to fraud complaints from older residents (aarp.org/money/scams-fraud).
Then there is the federal data. The FBI IC3 reported roughly $388 million in crypto ATM scam losses in the 2025 Elder Fraud Report, with adults 60 and older making up about 86 percent of those losses (ic3.gov/AnnualReport/Reports). Moreover, the DOJ has begun naming kiosk-routed transfers in indictments tied to elder-fraud rings (justice.gov).
In short, regulators, courts, and operators are conceding what families have been saying for two years. However, the kiosks have not all come out yet. Until they do, the call still works.
What signals does this kind of call usually have?
Most Bitcoin kiosk scam calls share a small set of tells. Taken together, they are decisive.
First, the caller claims authority a parent already respects: the bank, the sheriff, the SSA, the IRS, or a "federal" agent. Next, the caller manufactures urgency: a warrant in the next hour, a wire about to clear, a grandchild in custody. Then the caller demands secrecy. Do not tell your spouse, the teller, or the gas-station clerk.
After that, the call mentions cryptocurrency. Bitcoin, USDT, a "digital wallet," or a "federal crypto account." Finally, the caller names a specific machine. Any call that reaches this last step is, with effectively no exceptions, a scam.
If a Bitcoin ATM enters the story, the call is a scam. There is no government program that routes payments through a gas-station kiosk.
What can I do this week to protect my parents?
This is the smallest possible intervention, and it works on day one of the conversation.
First, sit with your parent on Sunday and walk through the rule out loud. No real bank, sheriff, or federal agency will ever tell you to move money through a Bitcoin ATM. Not Bitcoin Depot. Not CoinCloud. If that phrase enters the call, the call ends.
Then write your family story together, the small private detail any real loved one would know. Put it on an index card on the fridge. Add the rule that any urgent money request on the phone has to include the story (consumer.ftc.gov/articles/what-do-if-you-were-scammed).
The five-minute conversation:
- Sit with your parent at the kitchen table.
- Agree the rule: no legitimate caller asks you to use a Bitcoin ATM, ever.
- Write a private family story on an index card and tape it to the fridge.
- Add the rule that any urgent money request on the phone must include the story.
- If the story is missing or the kiosk is mentioned, hang up and call back on a number already in your phone.
Common questions about Bitcoin ATM scams
Are Bitcoin ATMs themselves illegal?
Not federally, though that is shifting. Indiana became the first US state to ban crypto ATMs in 2026, and several other states are introducing per-transaction caps and mandatory scam-warning screens (aarp.org/money/scams-fraud).
Can a Bitcoin ATM transaction be reversed?
No. Once cash converts to crypto and the crypto lands in a scammer's wallet, the transfer is final. The kiosk operator cannot reverse it, the bank cannot claw it back, and law enforcement recovery rates are very low (consumer.ftc.gov/articles/what-know-cryptocurrency-and-scams).
What should I do if my parent already made a deposit?
Call the parent first, on a number you already have. Then call the bank's fraud line. After that, file at reportfraud.ftc.gov and ic3.gov. Keep the kiosk receipt, the wallet address shown on screen, and the caller's phone number.
Why do scammers prefer kiosks over wire transfers?
Three reasons. The funds settle in seconds, not hours, so the reversal window collapses. There is no teller asking what the money is for. And cash is anonymous on the way in, which keeps the criminal at arm's length from the deposit.
Do we need any technology to defend against this?
No. The defense is one sentence taped to the fridge and a phone call to a number you already have. An app on your mother's phone is the wrong shape. She will not have it ready in the five minutes between the caller's first instruction and the kiosk's first bill slot.
Where to go next
The Resources library has printables you can tape to the fridge. For the broader voice-cloning angle, the AI voice clone scam explainer sits alongside this one. If a call has already happened, the first-hour checklist is the right next page.
For more on the inside-story defense, read how to write your family story. The latest FTC read covers the wider fraud landscape, and the grandparent scam update covers the sibling tactic most likely to land on the same parent in the same week. The kit page has the full pricing.