State and federal investigators have concluded that fraud now accounts for the majority of dollars flowing through certain cryptocurrency kiosks, a finding that has triggered lawsuits, settlements, and the collapse of the largest operator in the United States. In Massachusetts alone, regulators allege that nearly 60 percent of Bitcoin Depot’s revenue in the state came from scam transactions. The company has since filed for Chapter 11 bankruptcy and surrendered its Georgia license, while the FBI reports that crypto kiosk complaints surged past 13,400 in 2025 with losses exceeding $388 million.
Why the fraud share at crypto kiosks forced regulators to act
The scale of the problem is no longer theoretical. The FBI’s Internet Crime Complaint Center recorded more than 13,400 complaints tied to crypto kiosks in 2025, with reported losses topping $388 million, according to a recent public service announcement. Those figures represent sharp year-over-year increases, underscoring how quickly scammers have adopted kiosks as a preferred cash-out tool. The Federal Trade Commission had already flagged the trend, reporting that bitcoin-ATM-linked fraud losses exceeded $65 million in just the first half of 2024 based on a data analysis using Consumer Sentinel Network records.
These numbers help explain why multiple state regulators moved against Bitcoin Depot, the country’s largest kiosk operator, in rapid succession. Washington State’s Department of Financial Institutions filed a statement of charges alleging the company charged customers up to 42 percent more than market price and failed to monitor for suspicious activity, according to a detailed enforcement notice. Massachusetts Attorney General Andrea Joy Campbell filed a lawsuit alleging the company knowingly facilitated scams, used deceptive pricing, refused refunds, and misled investors. Maine’s Bureau of Consumer Credit Protection reached a settlement after a two-year investigation. Missouri’s attorney general issued Civil Investigative Demands to crypto kiosk companies. Georgia’s banking regulator confirmed the company voluntarily surrendered its state license.
Regulators describe a pattern in which kiosks became a frictionless bridge between victims’ bank accounts and anonymous wallets. Unlike traditional money transmitters, many kiosks allow customers to feed in thousands of dollars in cash with limited identity verification, then send that value to any wallet address. For scammers running romance schemes, tech-support hoaxes, or government impersonation cons, this setup offers speed, irreversibility, and a veneer of legitimacy-victims often believe they are “paying a bill” or “clearing a warrant” at a machine in a grocery store, not wiring funds to a criminal overseas.
The hypothesis that states with enforcement actions will see kiosk-related complaints drop within 12 months of Bitcoin Depot’s exit is testable but not yet provable. If the company’s machines accounted for most of the complaint volume in those states, removal should produce a measurable decline. But states without prior enforcement could see flat or rising fraud if other operators fill the gap without stronger compliance standards. The IC3’s state-level data, updated annually, will be the first reliable signal, and regulators are likely to compare complaint trends before and after enforcement to gauge whether targeting a single operator meaningfully reduces harm.
How Massachusetts built its case that most kiosk revenue was fraud
The Massachusetts complaint contains the most specific allegation in any state action: nearly 60 percent of Bitcoin Depot’s Massachusetts-based revenue during the relevant period came from transactions tied to scams. That figure means a majority of the money customers fed into the company’s machines in the state ended up in the hands of criminals, not in legitimate cryptocurrency purchases. For a financial services business, regulators argue, a fraud share that high is not incidental-it is the business.
According to the lawsuit, investigators reconstructed transaction flows using consumer complaints, bank records, and blockchain analysis. They identified clusters of payments from different victims flowing into the same destination wallets, many of which were associated with well-known scam typologies. In some cases, victims reportedly made multiple trips to kiosks over days or weeks, each time sending thousands of dollars to the same QR code, even after family members or bank employees raised concerns. The complaint alleges that Bitcoin Depot had visibility into these patterns but failed to intervene.
The complaint also describes a business model in which the company profited on both ends. Customers paid inflated fees, sometimes as high as 42 percent above market price according to the Washington State charges, while the company allegedly did little to stop the fraud that drove those transactions. The FBI first warned in 2021 that scammers routinely direct victims to cryptocurrency ATMs and instruct them to deposit cash using QR codes linked to wallets the scammers control, issuing an alert about kiosk-based payment schemes. That playbook has not changed. What changed is the enforcement response, as states now argue that operators had years of notice that their machines were being weaponized and should have adopted more aggressive safeguards.
Bitcoin Depot’s own SEC filing confirms the company initiated a voluntary Chapter 11 process to wind down operations and facilitate an asset sale, telling investors it would seek to maximize value while resolving mounting regulatory pressures. The Georgia Department of Banking and Finance separately confirmed the company voluntarily surrendered its Georgia license and directed consumers to file claims in bankruptcy court. The Maine settlement, reached after a two-year investigation by the Bureau of Consumer Credit Protection, documented specific scam mechanics including the use of “unhosted wallets” controlled by fraudsters and the lack of effective transaction monitoring to identify repeat victimization.
Unanswered questions about victim recovery and industry-wide fraud rates
The Massachusetts 60 percent figure is the strongest single data point in the public record, but it applies to one company in one state during a defined period. No federal agency has published a comparable calculation for the entire crypto kiosk industry. The IC3 complaint totals and FTC loss figures show the problem is national, yet they do not reveal what share of all kiosk transactions are fraudulent versus legitimate. Without that denominator, policymakers cannot easily compare kiosk fraud to other payment channels like wire transfers, gift cards, or traditional money transmitters.
Victim recovery is another unresolved issue. In many cases, funds sent through kiosks are converted to cryptocurrency and moved through multiple wallets within minutes, making clawbacks difficult. State complaints and settlements so far have focused on civil penalties, compliance overhauls, and, in some instances, restitution funds. But those remedies often come years after the underlying scams, and bankruptcy proceedings can further complicate payouts. Consumers who used Bitcoin Depot kiosks and believe they were defrauded now face a maze of claims processes: state restitution programs where available, bankruptcy court filings, and separate reports to law enforcement.
For remaining kiosk operators, the enforcement wave raises existential questions. If regulators view a high fraud share as evidence that a business model is fundamentally unsafe, companies may be pushed to adopt strict limits on transaction sizes, enhanced identity verification, real-time monitoring for known scam patterns, and proactive outreach to customers flagged as potential victims. Those steps could reduce fraud but also cut into revenue, particularly if, as Massachusetts alleges, a large portion of volume has been driven by scams.
Industry groups are likely to argue that kiosks provide valuable access to digital assets for unbanked and underbanked consumers and that fraud should be addressed through education and targeted enforcement against scammers themselves. Regulators, armed with data showing hundreds of millions of dollars in losses routed through machines, appear increasingly skeptical that education alone can solve the problem. The next phase of policy debates will turn on whether kiosk operators are treated more like banks and money transmitters-with corresponding obligations-or like vending machines that merely dispense a product.
What happens in the wake of Bitcoin Depot’s collapse will shape that debate. If complaint volumes fall sharply in states that pushed the company out, regulators may see that as validation of aggressive enforcement and move quickly against other large operators. If fraud simply migrates to different brands or to online exchanges, pressure may build for federal standards that apply across the ecosystem. For now, the numbers from Massachusetts and the FBI point in the same direction: without structural changes, crypto kiosks will remain one of scammers’ most profitable tools, and the majority of dollars flowing through some machines will continue to belong not to investors, but to victims.
More from Morning Overview
*This article was researched with the help of AI, with human editors creating the final content.
