How to Trace a Crypto-ATM Scammer
A crypto-ATM scam usually ends the same way: a stranger on the phone walks you to a Bitcoin kiosk, has you feed in cash, and tells you to scan a QR code that sends every dollar straight to their wallet. The moment that transaction confirms, it is irreversible. But irreversible is not the same as untraceable. This guide explains exactly how the kiosk con works, why no real agency or bank will ever ask you to pay through a crypto ATM, how the wallet, the kiosk operator, and the person on the other end of the call actually get traced, and where to report so your case feeds a real investigation instead of sitting in silence.
The Short Version
If a caller told you to put cash into a Bitcoin ATM and scan a QR code, you were scammed, and the transfer cannot be reversed. Move in this order: stop all contact but save everything first, especially the kiosk receipt, the kiosk identification number and address, the transaction hash, the QR code or wallet address, and the phone number, text, or email the scammer used. Then report fast and to all of these: the FBI Internet Crime Complaint Center, the Federal Trade Commission, your bank, and the company that operates the kiosk, whose name and support line are printed on the receipt and the machine. Cryptocurrency is traceable because every transfer is recorded permanently on a public ledger, so a fast, detailed report gives investigators a real chance to follow the funds. Recovery is never guaranteed, and most crypto-kiosk losses are not recovered, but reporting is far from pointless. People Locator Skip Tracing works the side most services ignore: lawfully identifying the real person behind the number, email, or account used to script you. And never pay an upfront fee to anyone who promises to get your crypto back. That is the second scam.
Watch: Tracing a Crypto-ATM Scammer
How the kiosk con works, and the lawful path to tracing it.
Watch Overview
How the Crypto-ATM Con Actually Works
The kiosk is the cash-out window. The real machinery is the script that gets you there.
A crypto ATM, also called a cryptocurrency kiosk, is a standalone machine that takes paper cash and converts it into Bitcoin or another cryptocurrency, then sends that crypto to whatever wallet address it is given. The machines sit in convenience stores, gas stations, and smoke shops, and most accept cash with very light identity checks. None of that is illegal on its own. The fraud is in how a scammer uses the machine as an irreversible, hard-to-claw-back way to receive your money while pretending it is something else entirely.
The con almost always starts with a call, a text, or a pop-up that manufactures fear and urgency. A caller claims to be from your bank’s fraud department, a government agency, a utility about to cut your power, a sheriff threatening arrest over a missed jury summons, or a tech-support line warning your accounts are hacked. The story changes, the pressure does not: you must act right now, in secret, or something terrible happens. You are told that to “protect” your money or “clear” the problem, you must withdraw cash and deposit it into a specific crypto ATM the caller names. They frequently stay on the phone the entire time, coaching you through the withdrawal, the drive, and every button on the kiosk so you never stop to think or ask anyone nearby.
The final move is the QR code. Rather than have you type a long wallet address, the scammer texts or emails you a QR code and tells you to scan it at the kiosk. Scanning it loads their wallet as the destination, and the cash you feed in is converted and routed straight to them. As of 2025, federal investigators reported that QR-code scanning had become the dominant transfer method in these cases precisely because it is fast, looks official, and hides the destination from the victim. Once you press confirm, the blockchain records the transfer permanently and it cannot be undone. The same lawful research that helps people identify a person who scammed them is what turns that dead end into a starting point.
Why No Real Agency Asks for a Crypto ATM
This single rule defeats the entire scam. If you remember nothing else, remember this.
Here is the line that exposes every version of this fraud: no legitimate government agency, court, bank, utility, or company will ever direct you to pay through a Bitcoin ATM or any cryptocurrency. The IRS does not take Bitcoin to settle a tax bill. A sheriff’s office does not clear a warrant through a crypto kiosk. Your bank will never tell you to “safeguard” your savings by moving them into cryptocurrency. Social Security, Medicare, the electric company, Amazon, and Microsoft do not collect payments this way. The instant anyone on a phone or screen tells you to put cash into a crypto ATM, the call is a scam, full stop, no matter how official the caller ID looks or how much they already seem to know about you.
Scammers lean on a few reliable pressure tactics to override that instinct. They invent a ticking clock, they insist on secrecy and tell you not to discuss it with family or bank staff, and they impersonate an authority your gut tells you to obey. They often “verify” themselves with a real-looking badge number, a spoofed caller ID, or a few pieces of personal data pulled from a breach. None of that makes the request real. The understanding of how exposed personal details get weaponized is the same reason people learn how a fraud is investigated from the ground up rather than reacting in the moment.
Signs It Was a Crypto-ATM Scam
If several of these fit your situation, treat it as fraud and report it.
A Caller Named the Machine
Someone on the phone told you exactly which crypto ATM to use and stayed on the line as you drove there and used it.
You Scanned a QR Code
Instead of a wallet address, they sent a QR code to scan at the kiosk. That code routed the funds to their wallet.
Urgency and Secrecy
You were told to act immediately and not to tell your bank, your family, or the store clerk what you were doing.
An Authority Story
The caller claimed to be a bank, the IRS, law enforcement, a utility, or tech support warning of arrest, fines, or a hacked account.
Cash From the Bank First
You were coached to withdraw a large amount of cash and were given a reason to tell the teller if asked.
The Contact Went Cold
Once the deposit confirmed, the number stopped answering or the “agent” vanished, and no money came back.
The First Steps After You Realize
Speed and complete evidence are what give a report any traction.
Crypto-kiosk transfers cannot be reversed, so this is not about undoing the transaction. It is about preserving evidence and reporting fast enough that investigators can follow the funds before they are cashed out and scattered. File with the FBI Internet Crime Complaint Center and report the fraud to the Federal Trade Commission, and do it in parallel with calling your bank and the kiosk operator, not one after the other.
Stop Contact, Save Everything
Do not respond again or warn the caller. First photograph the kiosk receipt, note the machine’s ID number and store address, and save the QR code, wallet address, transaction hash, every text and call record, and the amount and time.
Call Your Bank
Report the withdrawal and the fraud to your bank’s fraud department in writing. They can flag your accounts, watch for follow-on attempts, and document the cash trail leaving your accounts.
Report to the Kiosk Operator
The operator’s name and support line are on the receipt and the machine. They keep transaction and compliance records and may flag the destination wallet for law enforcement.
File With IC3 and the FTC
Submit detailed complaints at ic3.gov and reportfraud.ftc.gov, including the wallet address, transaction hash, kiosk ID, and the scammer’s contact details. Then lock down your identity.
What to Gather Before You File
A crypto-ATM case leaves a paper trail most victims do not realize they have. Pull it together first.
The difference between a complaint that sits and one that feeds an investigation is detail, and crypto-kiosk fraud actually leaves more physical evidence than most online scams. On the kiosk side, the machine prints a receipt: keep it, and record the kiosk’s identification number, the operator’s name and support line, and the exact store address where it sits. That receipt typically shows the date, the amount, the cryptocurrency purchased, and often the destination wallet address. On the blockchain side, save the destination wallet address and the transaction hash, which is the long unique code identifying your specific transfer on the public ledger. On the contact side, preserve the phone number, the text thread, the email, any caller-ID details, the QR code image itself, and notes on exactly what was said, when, and what story the caller told. Keep one clean, dated folder, because you will reuse it for every agency, your bank, the operator, and any attorney. The more precisely the kiosk, the wallet, and the contact are documented, the better the odds that analysts can connect your loss to a wallet cluster or a phone number already tied to other victims.
Where to Report Every Channel
File with all of these. Each one does something the others cannot.
| Where | What It Does | How to Reach |
|---|---|---|
| FBI IC3 | The central federal intake for internet and crypto fraud. Feeds investigations and asset-seizure efforts across jurisdictions. | ic3.gov |
| FTC | Logs the fraud in the Consumer Sentinel network for enforcement and gives you an identity-theft recovery plan. | reportfraud.ftc.gov |
| Kiosk Operator | Holds transaction and compliance records and may freeze or flag the destination wallet under a law-enforcement request. | Support line on the receipt and machine |
| Your Bank | Documents the cash trail leaving your accounts and guards against follow-on attempts. | Fraud department, in writing |
| Local Police | Creates a local report that banks, the operator, and prosecutors can reference, and ties the kiosk to a physical location. | Non-emergency line or in person |
| State Attorney General | Adds your case to state-level fraud and consumer-protection actions, including kiosk-operator oversight. | consumer.ftc.gov for state links |
Do not skip a channel because you assume nothing will come of it. Investigations and victim repayments are built from large numbers of detailed complaints that let analysts connect one wallet, one phone number, or one kiosk to many victims. Your report may be the one that links a cluster of stolen funds to an account that law enforcement can actually reach.
How the Wallet and the Person Get Traced
Two separate trails. Most services only chase one.
The money trail. Because blockchains are public ledgers, the destination wallet from your kiosk receipt is a permanent, traceable record. From that address, analysts and law enforcement can follow the funds as the crew launders them, splitting amounts across many wallets, swapping between coins, and finally consolidating at a deposit address on an exchange that cashes out. When funds reach an exchange that verifies customer identity, investigators can subpoena account records and, in the right cases, move to freeze or seize the balance. That blockchain forensic work is what federal agencies and specialized analysts do, which is why reporting fast and in full detail matters so much. Our role on this side is supportive: organizing the wallet address, transaction hash, kiosk identifiers, and timeline into a report investigators can act on, the same documentation discipline behind learning how hidden assets are located.
The human trail. This is the lane almost no recovery service works, and it is where People Locator Skip Tracing fits. Behind the anonymous wallet are real people with real footprints: the person who registered the phone number that called you, the owner of the email that sent the QR code, the local money mule whose bank account fed the cash-out, or the individual tied to the handle used to script you. Those identifiers can be researched lawfully through public records and skip-tracing techniques to surface a real name, address, and associates. That is the same work behind identifying a scammer from their phone number and tracing the person behind a fraudulent contact. A named, located individual changes everything: it strengthens your IC3 and FTC reports, gives a prosecutor or an attorney something concrete, and opens the door to a civil claim that blockchain data alone cannot support. We do this strictly for lawful, permissible purposes, and we never confront anyone on your behalf or encourage you to.
What Recovery Realistically Looks Like
Honest odds, and the legitimate paths that exist.
It would be dishonest to promise your cash back, and anyone who guarantees it is lying. Federal consumer regulators estimate that only a small fraction of cryptocurrency-fraud losses are ever recovered, and crypto-kiosk transfers are among the hardest because the cash is gone the instant the machine confirms. That is the honest baseline. It is also not the same as hopeless. The most common legitimate path is government seizure and victim repayment: when authorities seize cryptocurrency or accounts tied to a fraud network, identified victims can petition for remission or restoration of those funds, sometimes many months later and sometimes without realizing the seizure was connected to their loss. Your detailed report is what links you to that record if it happens.
A second path is a civil claim against an identified perpetrator, mule, or facilitator, which depends entirely on being able to name and locate a real person and any assets in their name. That is where lawful skip tracing does the heavy lifting, and where work like finding the person who scammed you turns an anonymous wallet into a defendant. A third avenue, worth raising with a tax professional, is a theft-loss deduction, which in certain fraud situations can offset part of the financial blow even when the cash itself cannot be recovered. None of these is guaranteed, all of them improve with speed and documentation, and several can run at the same time.
Don’t Get Hit Twice
The recovery scam targets people who already lost money to a crypto ATM. Watch for these.
An Upfront Fee
Any “recovery” service that wants payment before it returns a cent is a scam. Legitimate help is not pay-to-unlock.
A Guarantee
“We will get all of it back” is impossible to promise. Real outcomes depend on seizures and the law, never on a promise.
They Found You
Unsolicited contact from a “recovery agent,” especially one who already knows you used a crypto ATM, is a major red flag.
Wallet Keys or Remote Access
No legitimate firm needs your seed phrase, private keys, or remote control of your device. Ever.
Fake Government Ties
Claims of being “approved by” or “working with” a federal agency to recover funds for a fee are not how agencies operate.
Back to the Kiosk
Being told to send more crypto to “release” or “convert” your funds is the original scam, repeated.
How People Locator Skip Tracing Helps
We trace the people behind the wallets and the calls, lawfully, so your case has teeth.
Scam Victims
Identify the person behind the call
Attorneys
Locate an identified mule or facilitator
Families
Help an older relative who was targeted
Investigators
Add public-records depth to a case
Fraud Teams
Tie a wallet or number to a real person
Anyone Owed
Find a person before pursuing them
Crypto-ATM fraud runs on the same rails as other phone and impersonation scams, so the people behind it surface through the same lawful research that powers our work tracing a phone-scam caller and our full-spectrum skip tracing. Send us what you have, even if it feels like nothing: a phone number, an email, a username, a wallet address, a name they used, or the account a mule wire went to. We work strictly for lawful, permissible purposes, we never promise a recovery we cannot control, and we tell you honestly what the records can and cannot show. For a legitimate matter, an initial locate typically comes back within 24 hours.
Our Commitment
We do not sell false hope or “guaranteed recovery.” We do the lawful research most services skip: tracing the real people behind the wallets, numbers, and accounts, so your reports and any civil action carry weight. Honest, permissible-purpose skip tracing since 2004.
Frequently Asked Questions
Can a crypto-ATM transaction be reversed?
No. Once a crypto ATM converts your cash and the transfer confirms on the blockchain, it is permanent and cannot be undone, which is exactly why scammers use these machines. Reversal is not the goal. Preserving evidence and reporting fast so investigators can trace the funds is.
Can the scammer’s wallet really be traced?
Yes. Blockchains are permanent public ledgers, so the destination wallet on your kiosk receipt is traceable. Analysts and law enforcement can follow the funds through laundering steps to an exchange where customer identity is known. A fast, detailed report with the wallet address and transaction hash is what makes that possible.
Why would an agency or bank ever ask me to use a Bitcoin ATM?
They never would. No legitimate government agency, court, bank, utility, or company collects payment through a crypto ATM or cryptocurrency. Any caller who tells you to do so is running a scam, regardless of how official the caller ID or badge number looks.
Where exactly should I report a crypto-ATM scam?
File with the FBI Internet Crime Complaint Center at ic3.gov and report the fraud to the Federal Trade Commission at reportfraud.ftc.gov. Also notify your bank, the company that operates the kiosk, and your local police. Each channel does something the others cannot.
The caller used a fake name. Can anyone still be identified?
Often, yes. Even a fake identity leaves traceable footprints: the phone number that called you, the email that sent the QR code, the destination wallet, and the real people who open the bank and exchange accounts used to cash out. Those can be researched lawfully through public records and skip tracing to surface a real name and location.
A company offered to recover my crypto for a fee. Is that legitimate?
Treat it as a second scam. Recovery operations that demand an upfront fee, guarantee results, contact you out of the blue, ask for your wallet keys, or want more crypto are preying on victims. Legitimate help does not require pay-to-unlock, and recovery is never guaranteed.
What does People Locator Skip Tracing actually do on a case like this?
We work the human trail, not the blockchain. Using lawful public-records research and skip tracing, we help identify and locate the real people behind the wallets, numbers, and accounts used in the scam, producing a named, located individual that strengthens your report and any civil claim. We do not take custody of funds, promise recovery, or confront anyone.
Is it too late if it happened weeks ago?
Not necessarily. Reporting is still worthwhile because seizures and victim repayments can occur long after the loss, and identifying a perpetrator can support a civil claim or an active investigation. Acting sooner is always better, but an older case is far from worthless.
Related Guides
More ways our investigation team can help.
Lost Money at a Crypto ATM? Start Tracing.
We trace the real people behind the wallets and the calls, lawfully, so your reports and any civil case carry weight, typically with an initial locate inside a day. Contact us to get started.
Start Your Request →
