Finality
A wire can occasionally be recalled. A card payment can be disputed. A check can be stopped. Once a kiosk broadcasts crypto to an address, nothing in the financial system can reverse it.
Consumer protection · The most important page here
Crypto ATM scams in Los Angeles: the script, the numbers, the defense
Crypto kiosks are not the scam. They are the last step in one — the point where a stranger's phone call turns into money nobody can get back. The FBI logged over $388 million in kiosk-related losses in a single year. This page sets out exactly how the pattern works, because recognizing it takes about ninety seconds and it is the only defense that reliably holds.
- US losses, one year
- $388M
- Complaints filed
- 13,400+
- Lost by people 60+
- $257M
- CA crypto losses
- $2.1B
FBI IC3 dataCalifornia DFPI guidanceShare this with your parents
If you are reading this right now with someone on the phone
Hang up. Do not go to the machine. Do not send anything. Nobody legitimate will ever ask you to fix a problem with cryptocurrency.
$388M
US kiosk-related losses, one year
FBI IC3, +58% year over year
13,400+
Kiosk complaints filed
A 23% increase year over year
$257M
Losses reported by people 60+
From 6,188 complaints
$2.099B
California crypto losses, all types
The highest of any state
The evidence
What the data actually shows
It is tempting to treat crypto kiosk fraud as an occasional story rather than a systemic problem. The reporting numbers make that position hard to hold. The FBI's Internet Crime Complaint Center received more than 13,400 complaints involving cryptocurrency kiosks in a single year — a 23% increase in complaints and a 58% jump in losses, which exceeded $388 million.
The age distribution is stark. People aged 60 and over filed 6,188 of those complaints and reported more than $257 million in losses. More than half of all complaints came from people over 50, accounting for over $302 million. And geographically, California, Texas and Florida together produced over 3,300 kiosk complaints and more than $112 million in losses — with California leading every state in total crypto-related losses at roughly $2.099 billion.
Those are reported figures, which means they are floors rather than estimates. Fraud of this kind is systematically under-reported because victims are embarrassed, because many do not know where to report, and because a meaningful share never understand that they were defrauded at all.
We want to be precise about what these numbers mean, because the framing matters. They do not show that kiosk operators are stealing from customers. The major operators in Los Angeles are regulated businesses subject to DFPI licensing, location reporting, statutory transaction and fee caps and receipt requirements. What the numbers show is that criminals have found a settlement layer that works for them — fast, final, and operated by the victim's own hands.
Mechanics of the crime
Why fraudsters choose kiosks over everything else
The victim performs the transaction
Every fraud control a bank would apply — the teller who asks questions, the transfer limit, the delay on new payees — is bypassed, because the person moving the money is the account holder acting voluntarily.
Speed
From phone call to irreversible settlement can be under an hour. That window is deliberately too short for a family member to intervene or for second thoughts to form.
Plausible physicality
A machine in a shop looks like infrastructure. It has a screen, a receipt printer and a brand. That physical legitimacy does a great deal of persuasive work that a website could not.
Cash removes the trail
Withdrawing cash first breaks the link between the victim's bank and the destination, which is why the script almost always includes a trip to a teller before the trip to the kiosk.
Isolation
Staying on the phone throughout is not incidental — it is the core technique. It prevents the victim from consulting anyone and keeps the manufactured urgency running until settlement.
Recognise it
The script, stage by stage
The California DFPI describes a consistent sequence. Once you have seen it laid out, it becomes very hard to fall for — which is the entire reason we publish it in this much detail.
- 01
Contact from an authority you cannot verify
A phone call, text, email, pop-up or social message from a government agency, a bank fraud team, a utility, a tech support line, a courier, a court. Caller ID may be spoofed to display a real number. Employee names and case numbers are supplied freely, because they cost nothing to invent.
- 02
A crisis with a countdown
A warrant. A compromised account. A suspended benefit. A tax debt. An imminent shutoff. The specific story varies; the structure never does — something terrible is about to happen and only immediate action prevents it. Urgency exists to stop you thinking, and it is the single most reliable indicator of fraud.
- 03
Isolation
You are told not to discuss it. It is a confidential investigation. Bank staff may be "involved". Your family will be "implicated". This stage is doing the heaviest lifting in the whole script, because one conversation with anyone else usually ends it.
- 04
Cash withdrawal, with a cover story
You are directed to a branch and coached on what to say if asked — a car purchase, home repairs, a family gift. That coaching exists specifically to defeat the teller intervention that would otherwise stop this. Being told what to tell your bank is, on its own, conclusive.
- 05
A specific machine, and a QR code
You are sent to a named kiosk, often several miles away, and kept on the phone throughout. A QR code arrives by text or is read out. That code is the criminal's wallet address. Scanning it sends your money directly to them with no intermediary who could intervene.
- 06
Escalation until you stop
If the first transaction completes, there is another. And another. The daily statutory cap of $1,000 per operator means the script often involves multiple machines, multiple operators or multiple days — which is also the point at which a family member sometimes notices.
Six flavours, one structure
The variants we see most in Los Angeles
The opener changes to fit the target. The structure — authority, urgency, isolation, cash, kiosk — does not.
| Variant | How it opens | The hook | The tell |
|---|---|---|---|
| Government impersonation | A caller says they are from the IRS, Social Security, a sheriff's department or a federal court | An arrest warrant, unpaid taxes, a suspended Social Security number | No agency in the United States accepts cryptocurrency, and none threatens arrest by phone |
| Bank fraud department | A caller claims your account is compromised and funds must be "moved to a secure wallet" | Your money is about to be stolen and only immediate action saves it | No bank has a crypto wallet for your protection. Hang up and call the number on your card |
| Tech support | A pop-up or call warns of a virus, a hacked router or an expiring subscription refund | Remote access to your computer, then a "refund" that overpays and must be returned | Real software companies do not phone you, and refunds never require crypto |
| Romance and long-con | Weeks or months of contact on an app, then a crisis or an investment opportunity | Emotional investment first, financial request second — often a "guaranteed" trading platform | Anyone you have never met in person who needs crypto is not who they say they are |
| Fake investment adviser | A polished pitch, a professional-looking dashboard, small withdrawals that work at first | Returns that look real on screen, with pressure to add more before a "window closes" | Check registration on Investor.gov before you send anything. Unregistered means unaccountable |
| Employment and utility | A job offer requiring you to buy equipment, or a utility threatening same-day shutoff | Urgency plus a plausible institution plus a small enough sum to seem reasonable | No employer and no utility in California collects payment in cryptocurrency |
Patterns consistent with California DFPI consumer guidance and FBI IC3 complaint categories. Openers evolve constantly; the structural sequence has been stable for years.
The whole defense
One sentence that stops every version of this
Memorise this
No government agency, bank, employer, utility or law-enforcement body in the United States will ever ask you to pay, verify, protect or resolve anything using cryptocurrency.
There are no exceptions, no special circumstances and no departments that work differently. Any request of that shape is fraud, regardless of how much the caller knows about you, what the caller ID shows, or how plausible the paperwork looks. You do not need to identify which variant you are facing. You only need this one rule.
Practical
Protecting someone in your family
If you have a parent or grandparent in Los Angeles, this section is the reason this page exists.
Agree a verification rule now
Any unexpected request involving money gets checked with one named family member before anything happens. No exceptions, no matter who is calling or how urgent it sounds.
Say the sentence out loud together
Not "be careful of scams" — the specific rule. No agency, bank, employer or utility accepts crypto. Abstract warnings do not survive a convincing phone call; a concrete rule does.
Normalise hanging up
Many older people were raised to treat ending a call as rude. Give explicit permission: hanging up on an unverified caller is correct behavior, always, with no need to explain.
Tell them nobody will be angry
Shame is what delays reporting, and delay is what makes recovery impossible. Say in advance that if it ever happens, the only reaction will be help.
Watch for the withdrawal, not the crypto
The observable step is an unusual cash withdrawal with a vague explanation. That is the moment to ask questions — by then the kiosk trip is minutes away.
Ask their bank about alerts
Many California banks and credit unions can flag unusual withdrawal patterns to a trusted contact. It takes one branch visit and it has stopped real losses.
If it already happened
What to do in the next two hours
First: this was a crime committed against you by professionals who do this full time. The shame that arrives with it is the fraud's last defense mechanism, because it delays reporting, and delay is the only thing that reliably makes recovery impossible. Move fast and skip the self-recrimination.
- 1
Preserve everything, delete nothing
The kiosk receipt, the transaction hash, every phone number, text, email and screenshot. Photograph the receipt immediately — thermal paper fades. However embarrassing the messages are, they are evidence.
- 2
Report to the FBI's IC3
File at ic3.gov with the transaction details and the wallet address if you have it. Blockchain flows are traceable, and reporting within hours rather than days materially improves the chance of intervention at an exchange downstream.
- 3
Report to the FTC
File at reportfraud.ftc.gov. This feeds enforcement and consumer-protection work even where individual recovery is unlikely, and it is quick.
- 4
File a local police report
Contact your LAPD division or LA County sheriff's station. A report number is frequently required before banks or operators will engage with you at all.
- 5
Contact the kiosk operator
Use the receipt reference. Operators have compliance obligations under state and federal law and may be able to provide information to investigators.
- 6
Notify your bank
If the cash came out of an account, tell them. They cannot reverse the crypto leg, but they can watch for follow-on attempts — and repeat targeting of the same victim is extremely common.
- 7
Refuse every recovery offer
Within days you may be contacted by someone promising to recover the funds for a fee, sometimes posing as a law firm or a blockchain analytics company. This is a second fraud that specifically targets victims of the first. No legitimate recovery service works this way.
A different risk
Physical safety at the machine
Everything above is about fraud. There is a separate and more mundane risk in standing at a kiosk with cash in your hand, and it deserves a paragraph of its own because the advice is simple and people ignore it.
Judge the venue rather than the neighborhood. A machine in a supermarket lobby at two in the afternoon is a fundamentally different proposition from one in an unlit forecourt at one in the morning, even with the same operator, the same software and the same fees. Prefer indoor, staffed, well-lit locations during normal business hours. Take only the amount you intend to convert. Do not count notes in the doorway. Do not narrate what you are doing on the phone. And if a stranger takes an interest in your transaction, stop and leave — the money is still yours at that point, which is not true thirty seconds later.
Questions we actually get
Safety questions from LA readers
How common are Bitcoin ATM scams in Los Angeles?
Common enough that they are the dominant crypto fraud pattern in the state. The FBI's Internet Crime Complaint Center received more than 13,400 complaints involving cryptocurrency kiosks in a single year, with reported losses above $388 million — a 58% jump. Californians, Texans and Floridians together accounted for over 3,300 complaints and more than $112 million. California led all states with roughly $2.099 billion in total crypto-related losses.
Why do scammers use Bitcoin ATMs specifically?
Because kiosk transactions are irreversible, fast, and completed by the victim in person. A wire can sometimes be recalled; a card payment can be disputed. Once a kiosk broadcasts crypto to an address, no operator, bank or law enforcement agency can pull it back. Having the victim physically perform the transaction also removes every fraud control a bank would otherwise apply.
Can a Bitcoin ATM transaction be reversed or refunded?
No. Once broadcast to the network, the transfer is final. There is no chargeback mechanism, no dispute process and no insurance covering it. Some operators may assist with investigation, and reporting quickly gives law enforcement a better chance of tracing the flow, but you should not plan on recovery. This finality is precisely why the scam works.
Who is most at risk from crypto kiosk scams?
People aged 60 and over are disproportionately affected — 6,188 complaints and more than $257 million in reported losses in a single year, with over half of all complaints coming from people over 50. But the pattern is not about technical naivety. It relies on manufactured authority and urgency, which work on competent people of any age. Recent immigrants and anyone in an unfamiliar administrative situation are also heavily targeted.
What should I do if I already sent crypto to a scammer?
Act immediately, because speed is the only variable that ever helps. Keep every receipt, screenshot and phone number. Report to the FBI's IC3 and the FTC, file a police report with your local LAPD or sheriff's station, contact the kiosk operator with the transaction reference, and notify your bank if cash was withdrawn from an account. Then be alert for "recovery" services contacting you — they are a second fraud targeting victims of the first.
Are the kiosk operators themselves legitimate?
The major operators in Los Angeles are regulated businesses. Since 1 July 2026, California requires them to hold a license from the Department of Financial Protection and Innovation or have a complete application on file, report machine locations, cap transactions at $1,000 per customer per day, cap fees at the greater of $5 or 15%, and provide detailed receipts. The fraud problem is not operators stealing from customers — it is criminals using legitimate machines as a settlement layer.
Next in this series
Related Los Angeles guides
ATMs
Bitcoin ATM guide and finder
How kiosks work, what the statutory caps are, and the pre-trip checklist.
Read the guide RulesCalifornia crypto regulation
The DFAL provisions written specifically to reduce kiosk-enabled harm.
Read the guide LocationsATM locations by neighborhood
Judging a venue, not a postcode — where the safer machines tend to be.
Read the guide CustodyCrypto wallets for LA users
Never let a machine or a caller supply your wallet address. Set up your own.
Read the guide ExchangesBest crypto exchanges, scored
License transparency is 25% of our score, and this is why.
Read the guide FrameworkHow and where to buy crypto in LA
The legitimate routes, priced honestly, with no manufactured urgency.
Read the guide