FBI: AMERICANS LOST $388M TO CRYPTO ATM SCAMS IN 2025
SECURITY DESK■ 1 MIN READ
TUE, MAY 19, 2026■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
The FBI reports that Americans lost over $388 million to scams involving cryptocurrency ATMs in 2025. The losses highlight growing fraud risks as crypto kiosks become more prevalent across the country.
Cryptocurrency ATMs, also called Bitcoin ATMs or crypto kiosks, have become targets for scammers seeking to exploit users unfamiliar with digital asset transactions.
The 2025 figure represents a significant financial impact on victims, many of whom are directed to these machines by scammers posing as legitimate businesses or government agencies.
Common tactics include romance scams, investment fraud, and impersonation schemes that pressure victims into purchasing cryptocurrency at physical kiosks. Once funds are transferred to a crypto wallet, transactions are typically irreversible.
The FBI advises consumers to verify requests for cryptocurrency payments through independent channels and avoid sending digital assets to unknown parties. Users should be particularly cautious of unsolicited contact claiming to represent government agencies or established companies.
As crypto ATM networks expand, law enforcement agencies continue tracking these fraud patterns and working with operators to improve security measures and user protections.
■ MORE FROM THE SECURITY DESK
Cybercriminals have transformed DDoS attacks into a polished, commercialized service complete with pricing tiers, customer support, and reseller programs. The DDoS-as-a-Service market has evolved from basic tools into sophisticated attack platforms.
11H AGO— Industry Desk
Microsoft faced backlash after threatening a security researcher with criminal investigation, reigniting debate over software vulnerability disclosure practices and corporate responsibility.
11H AGO— Security Desk
Google is deploying Device Bound Session Credentials (DBSC) to all Chrome users, a security feature designed to prevent account takeovers by protecting session cookies from theft.
11H AGO— Industry Desk
Dutch authorities have dismantled a major botnet comprising 17 million infected devices and seized over 200 servers hosting the operation at a local provider.
11H AGO— Security Desk