Loading article…
FTC reports crypto ATM scams up 1,000% since 2020 and $388 M lost in 2025, prompting bans in Indiana, Tennessee and Minnesota.
A FTC report shows cryptocurrency ATM fraud losses jumped 1,000 % from 2020 to 2023 and reached $388 million in 2025, a 58 % rise over the prior year, underscoring a rapid escalation of crypto‑related scams【2】.
| At a glance | |
|---|---|
| Scam loss increase | 1,000 % (2020‑2023) |
| 2025 loss amount | $388 million |
| Year‑over‑year rise | 58 % (2025 vs 2024) |
| Avg loss for victims 60+ | $10,000 per person |
Crypto ATMs look like traditional machines but dispense cryptocurrency instead of cash. Their anonymity and instant transfer capability make them attractive to fraudsters who pose as law‑enforcement officers, government officials, or tech‑support agents. Victims are pressured to withdraw cash, scan a QR code, and deposit the funds into a wallet controlled by the scammer under the pretense of “protecting” the money or paying for a bogus service【2】. Because crypto transfers are irreversible, once the victim sends the cash the funds disappear.
The FTC labeled crypto ATMs a “payment portal for scammers” in a 2024 report, prompting several states to act. Indiana became the first state to ban crypto ATMs in March 2026, followed by Tennessee (effective July 1 2026) and Minnesota (effective August 1 2026)【2】. Meanwhile, Massachusetts sued Bitcoin Depot after an investigation found that more than half of the transactions through its ATMs between August 2023 and January 2025 were linked to scams【2】. Other states such as South Dakota, Arizona, Colorado, Arkansas, and Virginia have imposed restrictions without outright bans.
Beyond ATM fraud, scammers routinely use scripts that create urgency, trust, and promised rewards. Common tactics include fake investment offers promising rapid returns, romance scams that evolve into crypto‑trading pleas, and impersonations of government agencies demanding crypto payments to “resolve” alleged tax or security issues【1】. Victims are often lured by convincing screenshots of profits or small early withdrawals, only to lose larger sums once the scammer cuts off contact. The irreversibility of crypto transactions and the general public’s limited understanding of blockchain mechanics amplify these risks.
The surge in crypto ATM scams highlights how quickly criminal actors can weaponize emerging financial infrastructure, raising questions about the balance between innovation and consumer protection in the digital asset ecosystem.
Coverage is mostly measured — 216 of 218 reports stay neutral.
Every Monday — the token unlocks, Fed dates & catalysts set to move crypto and markets this week. So you’re never blindsided.
Free · 3-min read · one-click unsubscribe
AI-assisted synthesis by the TrendWatcher Editorial Desk · sourced from 2 outlets · Jul 5, 2026 · How we report
As of 14 September 2026, the Peru Ministry of Economy and Finance reported that its official X account was compromised by attackers who used the platform to promote a fraudulent token called $HYLO. The ministry confirmed the posts were unauthorized and stated that no financial losses were reported in connection with the incident.
The Revolut data disclosure, reported in September 2026, involved the release of customer full names, birth dates, occupations, postal addresses, email addresses, and telephone numbers. Additionally, the impersonator obtained copies of passports or driving licenses, verification selfies, IBANs, and complete Bitcoin transaction histories.
MetaMask utilizes AI-powered security partners like Blockaid to analyze websites, social feeds, and on-chain bytecode to identify phishing and malicious behavior in real time. The wallet also employs Added Protection, a feature that automatically reverts transactions that do not match their previews, and provides warnings for lookalike addresses and first-time recipients.
Scammers exploit government accounts because these platforms command high levels of public trust, which can be used to legitimize fraudulent schemes. By posting on official channels, perpetrators can more effectively use urgency—such as fake token launch dates—to bypass the critical thinking of potential victims.