Older Americans are losing roughly $10,000 each to scams run through Bitcoin ATM kiosks, and the total damage hit $388 million in the first half of 2024 alone. People aged 60 and older were more than three times as likely as younger adults to report handing cash to a fraudster at one of these machines. While losses climb, the largest kiosk operator in the country faces enforcement actions in at least two states over allegations that it failed to protect consumers or clearly disclose fees.
Why $388 million in Bitcoin ATM losses hit older adults hardest
The scale of the problem comes into focus through Federal Trade Commission complaint data. Reported losses to Bitcoin ATM scams rose sharply, with the median individual loss reaching $10,000 during the first half of 2024. Adults over 60 bore a disproportionate share: they were more than three times as likely to report losing money at a crypto kiosk compared with younger age groups. The typical scam follows a pattern in which a caller posing as a government agent, tech-support worker, or bank fraud investigator pressures the victim to withdraw cash and feed it into a Bitcoin ATM, converting dollars into cryptocurrency that is then routed to a wallet the scammer controls. Once the transaction clears, the money is effectively gone.
Older adults are especially vulnerable because the scams often play on fear and urgency. Fraudsters claim that a Social Security number has been compromised, that a grandchild is in jail, or that a bank account will be frozen unless “verification” payments are made immediately. Many targets are unfamiliar with how cryptocurrency works and may believe they are sending funds to a safe government account rather than to an anonymous digital wallet. The physical presence of a kiosk inside a grocery store or pharmacy can lend an air of legitimacy that online-only crypto schemes lack.
The central tension is straightforward. Crypto ATM networks continue to expand across gas stations, convenience stores, and shopping centers, yet the machines operate with minimal real-time safeguards to detect when a customer is acting under coercion. A state-by-state patchwork of rules means that some jurisdictions have begun imposing transaction caps or identity-verification requirements while others have not. If states that adopt real-time identity checks and dollar limits on crypto ATM transactions see a measurable decline in per-capita losses among residents over 60 within two reporting cycles, that would offer the clearest evidence yet that regulation, not just consumer education, can reduce harm. No published dataset currently tracks losses at that granular level, which itself is part of the problem.
FTC data, SEC filings, and FBI reports trace the damage
Three separate federal evidence streams document the growth of crypto ATM fraud. The FTC’s Consumer Sentinel Network, which collects unverified consumer complaints rather than confirmed transaction records, is the source of the $388 million figure and the $10,000 median loss. The agency’s Sentinel data book for 2024 explains that these reports are filed directly by consumers and have not been independently verified against operator or bank records. That distinction matters: the true total could be higher if many victims never file a complaint, or the per-incident figure could shift if some reports contain errors.
Even with those caveats, the complaint data offers a rare national snapshot. It shows not only the dollar amounts involved but also the narratives victims describe when they seek help: fake government investigations, bogus tech support, romance scams, and impostors claiming to be from a victim’s bank. In many of these stories, the Bitcoin ATM is the last step in a chain of manipulation, the point at which victims convert traceable cash into hard-to-recover cryptocurrency.
On the corporate side, Bitcoin Depot Inc., the largest publicly traded crypto kiosk operator in the United States, disclosed ongoing legal exposure in a recent SEC filing. That document references litigation brought by the Massachusetts Attorney General, which alleges deceptive fee disclosures and insufficient safeguards against scams at Bitcoin Depot machines. The same filing discloses a settlement with the Maine Bureau of Consumer Credit Protection. Neither the Massachusetts case outcome nor any victim restitution figures from the Maine settlement appear in the public filing, leaving the financial consequences for affected consumers unclear.
The enforcement actions highlight a tension between business models and consumer protection. Kiosk operators earn revenue from transaction fees and exchange-rate spreads, which increase with the volume and size of transactions. Stronger safeguards-such as tighter daily limits, additional on-screen warnings, or manual review of suspicious transfers-could reduce both fraud and revenue. Without clear rules or industry-wide standards, each company decides for itself how far to go in stopping questionable transactions.
The FBI’s Internet Crime Complaint Center has separately tracked the broader rise of cryptocurrency fraud. Its annual reports describe crypto schemes as among the most common and costly categories of complaints received by IC3, with victims reporting everything from investment cons to extortion. The bureau’s summaries underscore that criminals favor cryptocurrency because it can be moved quickly across borders and laundered through exchanges and mixers, making recovery difficult. However, these reports address crypto fraud in general and do not isolate losses by specific kiosk company or machine location, leaving Bitcoin ATM scams as a subset that is visible in outline but not in detail.
What regulators and victims still cannot see
Several gaps in the public record limit what anyone can say with confidence about the full scope of Bitcoin ATM fraud. No federal agency publishes a breakdown of losses by specific kiosk operator, machine location, or state. That means consumers, regulators, and researchers cannot compare the fraud rates at Bitcoin Depot machines against those at competing networks. Without that data, enforcement actions against individual companies remain isolated events rather than parts of a systematic accountability framework.
The FTC’s reliance on unverified consumer reports also creates a blind spot. Sentinel data captures what people say happened, not what transaction logs confirm. Kiosk operators and their payment processors hold the records that could corroborate or challenge those reports, but no federal rule currently compels them to share that information with the public or with the FTC. The FBI collects its own complaint data through IC3, but the two systems do not appear to cross-reference individual cases, raising the possibility of both double-counting and undercounting. Without a unified dataset, policymakers are left to extrapolate from incomplete evidence.
Recovery prospects for victims remain grim. No primary source in the public record tracks whether people who lost money at Bitcoin ATMs ever received restitution through chargebacks, law enforcement seizures, or company settlements. Once cash is converted to cryptocurrency and sent to a scammer’s wallet, it can be dispersed through multiple addresses or exchanged for other assets in minutes. For older adults living on fixed incomes, the loss of $10,000 or more can mean delayed medical care, missed rent, or the need to rely on family members for basic expenses, with little realistic chance of getting the money back.
Advocates argue that relatively modest changes could make a difference. Clearer on-screen warnings tailored to common scam scripts, mandatory cooling-off periods for large first-time transactions, and real-time flags when a customer appears to be on the phone at the machine are among the measures some regulators have begun to explore. Yet without transparent, operator-level data on where and how scams occur, it will remain difficult to know which safeguards work and whether they are reaching the older Americans who are currently paying the highest price.
More from Morning Overview
*This article was researched with the help of AI, with human editors creating the final content.
