Cryptocurrency ATMs in everyday retail stores are becoming magnets for fraud

Last year, Mellissa McKie wired Isanti County Sheriff’s Sgt. Tom Leatham as much money as she could get her hands on in a day.

She thought paying $2,000 through cryptocurrency kiosks, in a gas station and at a currency exchange, would satisfy two arrest warrants issued for failing to appear in court as a juror in a federal murder trial, sparing her a three-week jail stint.

But it turned out there was no case against her. No warrant. No Sgt. Leatham. It was all a scam, designed to play on her fears to coerce her into depositing thousands of dollars into a cryptocurrency ATM — money she would never see again.

The crypto ATM is fast becoming the hottest tech tool in elaborate fraud schemes that many local police departments are unequipped to solve. The machines resemble traditional ATMs, but instead of dispensing cash, most only allow users to put cash in for the purpose of buying cryptocurrency, like Bitcoin, on an exchange.

The machines, often placed in gas stations, liquor stores and supermarkets, allow fraudsters to persuade people like McKie to deposit cash into internet-based cryptocurrency accounts outside traditional banks, making the money nearly impossible to trace or recover.

Desperate to stop eye-watering financial losses, which topped $200 million nationwide last year, state and local officials have taken steps to regulate or even ban the cryptocurrency kiosks.

The Legislature adopted new requirements for the machines last year. Brooklyn Park, Forest Lake, St. Paul and Stillwater are among the cities where patterns of fraud are prompting leaders to consider regulating cryptocurrency kiosks at the local level.

Skeptical government officials question the need for cryptocurrency kiosks, given that savvy users can buy cryptocurrency through cheaper, more convenient means, like on a smartphone app or a home computer.

“I’ve yet to find anybody that’s made a legitimate investment in crypto via a kiosk at a gas station or a liquor store,” said Stillwater Mayor Ted Kozlowski, adding that no one other than the kiosk operators stepped up in defense of the machines before the city’s April ban.

Operators say fraud accounts for a small number of transactions at their kiosks, and they work to prevent it through education, on-screen warnings, identification verification and other controls.

Attorneys general in Iowa and Washington, D.C., recently sued three large operators — Bitcoin Depot, CoinFlip and Athena Bitcoin — alleging more than 90% of their transactions are fraud-based. The companies dispute that estimate.

Despite the concerns, reported use of cryptocurrency kiosks is growing rapidly.

The Federal Trade Commission likewise found a skyrocketing increase last year in the use of the ATMs to fund fraud, based on an analysis of consumer reports. And the U.S. Treasury’s Financial Crimes Enforcement Network warned in August of cryptocurrency kiosks being used in scams as well as money laundering for major drug cartels.

In Minnesota, state lawmakers enacted requirements last year, including a $2,000 transaction cap for new customers, a pathway for defrauded consumers to get full refunds, and updated regulatory oversight by the Department of Commerce.

Criminals, though, routinely outfox those safeguards, according to police and city officials. A loophole in Minnesota’s law also allows cryptocurrency kiosk companies to deny fraud victims refunds.

Meanwhile, most of the state’s cryptocurrency kiosks are run by companies that have failed to abide by Minnesota’s latest operating regulations.

The state Commerce Department this year fined eight cryptocurrency operators — the amounts ranged from $5,168 to $10,337 — for transmitting money without a proper license in violation of state law. The steepest fine went to Bitcoin Depot, which appears to own roughly 25% of Minnesota’s machines.

Stillwater’s ban on the machines came after detectives admitted they were “getting smoked” on investigations involving cryptocurrency kiosks, said Police Chief Brian Mueller.

One fraud was so convincing, police officers had trouble stopping a 75-year-old woman from putting large sums of money into a machine.

“We had to physically stand there between her and the machine,” Mueller said.

In 2021, Stillwater police recorded a single cryptocurrency kiosk scam with a $760 loss. By 2024, the annual loss grew to $90,940. The machines played a central role in 70% of the city’s cryptocurrency-related cases.

“It was staggering,” said Kozlowski, the city’s mayor.

Forest Lake, which recorded about $300,000 in cryptocurrency kiosk-related fraud between 2023 and 2024, decided in April to add a $2,000 annual registration fee for hosting the machines.

Police conduct regular compliance checks, and machines must remain under constant video surveillance. Host businesses might lose the privilege to keep a cryptocurrency kiosk on site if multiple substantiated instances of fraud unfold at the same location, the regulation says.

Forest Lake Police Det. Nathan Olstad said his town has seen no new cases since the fee took effect. Business owners chose to turn the machines off or get rid of them.

In one of the last Forest Lake fraud cases in December, a man deposited $19,500 into a Bitcoin Depot ATM at a Holiday gas station. He received a partial refund but was denied a full one sought under the state’s “new customer” rule, according to a police report.

An Edina man lost $14,900 to an imposter scam, where a person posed as an Apple support employee, and could not get a full refund from Bitcoin Depot, which defeated his claim in court.

McKie thought the process for reclaiming her lost money was too much to handle. A friend at work helped her set up an online fundraiser last year to raise the $2,000 she lost.

Though state law establishes that a Minnesotan considered a “new customer” is entitled to a full refund when swindled at a cryptocurrency kiosk, local authorities who spoke to the Minnesota Star Tribune said cryptocurrency kiosk operators are exploiting a loophole to avoid paying refunds. Because scammers typically send victims information, like a QR code, to access a scammers’ account directly, many victims do not set up accounts and are therefore not considered “new customers.”

One Minnesotan, who spoke to the Star Tribune on the condition of anonymity for fear of becoming a scam victim again, received refunds from Athena Bitcoin and another operator called RockItCoin. He said Athena Bitcoin at first told him he was out of luck but later made him whole. Meticulous record keeping likely helped his case, he said.

Some authorities allege cryptocurrency operators intentionally make their fees difficult to understand. Earlier this year, Iowa Attorney General Brenna Bird sued Bitcoin Depot and CoinFlip, accusing the companies of introducing several confusing steps a customer needs to follow to learn how much a kiosk operator charges.

For example, to calculate Bitcoin Depot’s take, a user needs to multiply the market price of Bitcoin by the amount of cryptocurrency sent to determine its cash value; subtract that figure from the total amount of cash put into the machine; and figure in a nominal $3 flat fee. In the case of an $8,800 transaction, the Iowa attorney general calculated a $2,038.27 fee.

She felt like she was being manipulated and “held captive” emotionally when she dealt with the man she thought worked for the Isanti County Sheriff’s Office. The con was designed to isolate her and exploit her fear of being locked in a jail cell, away from her husband and kids. Having never been in trouble with the law, she said, it all seemed real enough to her.

It took McKie calling her father to ask for more money — with the scammer listening on the line through a three-way call, monitoring to ensure McKie complied with a fake judge’s “gag order” — before she got help. Worried for her safety, her dad arranged for police to meet her at a gas station.

McKie said the fraudster stayed on the line and pretended to be in law enforcement even as a squad car pulled up next to her.