Executive summary: certik report reveals surging crypto ATM fraud
The latest findings from blockchain security firm CertiK document a dramatic rise in crypto ATM scams across the United States. In 2025, crooks are estimated to have stolen roughly $333.5 million through cash-to-crypto kiosks, underscoring a trend that authorities say is evolving faster than traditional crypto fraud schemes.
While the headlines often focus on digital token price moves, the security blind spots around crypto ATMs have moved to the forefront of risk assessments for 2026. The CertiK analysis points to a market where convenience stores, gas stations, and malls host hundreds of machines that quietly enable rapid transfers from cash to digital assets in minutes, often with minimal identity checks. This speed and simplicity are part of what makes these kiosks so attractive to criminals—and so difficult for victims to unwind after the fact.
Where the losses are happening
At the core, the U.S. now dominates the global footprint of crypto ATMs. CertiK notes that roughly 78% of the world’s estimated 45,000 crypto ATMs are located in the United States, making the country the largest market for this technology and the focal point for most fraud incidents. The sheer density of machines means more everyday users encounter prompts to buy or sell crypto in passing, often without realizing they are entering a fraud funnel.
Regulatory and enforcement data corroborate the volume trend. FBI field offices reported more than 12,000 complaints related to crypto ATM scams from January through November 2025, a rise of about 33% from the previous year. The surge in complaints tracks a broader uptick in social-engineering schemes targeting financial products and services during the same period.
How crypto ATMs work—and why they’re vulnerable
Crypto ATMs are designed for speed. A user deposits cash, selects a cryptocurrency, and the equivalent digital asset appears in a wallet in under five minutes. The CertiK report highlights a structural issue: many transactions move funds from operator-controlled hot wallets rather than directly from a customer’s wallet. That creates what security researchers call an “attribution gap,” where blockchain traces show operators as the originators of transfers rather than the victims who initiated the purchases. This makes tracing stolen funds far more complex and time-consuming for investigators.
Criminals often employ social engineering to coax victims into making deposits under false pretenses. The combination of a user-friendly front end and a backend that relies on centralized wallets creates a pathway for rapid, hard-to-reverse transfers. In many cases, fraud is not just a one-time scam but part of a broader network that can pivot quickly to new techniques as law enforcement closes off other routes.
Demographics and the human angle
The CertiK analysis points to an outsized impact on older adults. Preliminary data suggests that roughly 86% of crypto ATM losses involve older victims, with a recent Maryland case highlighting how a senior citizen deposited funds that the machine converted into cryptocurrency and then vanished from sight. While not all jurisdictions publish age-specific figures, the trend aligns with existing research indicating seniors are more likely to fall for social-engineering tactics that accompany kiosk-based fraud.
Law enforcement and consumer advocates say the problem is twofold: sophisticated criminal networks exploiting the speed of these machines, and a public not fully aware of the risks that come with cash-to-crypto conversions. As one federal investigator noted, the increasingly transactional nature of crypto ATMs makes it easy for offenders to create a convincing narrative that delays investor doubt until it’s too late.
Regulatory and industry responses
State regulators have begun to scrutinize operators more closely, focusing on KYC (Know Your Customer) procedures and the transparency of operator wallets. Several agencies are exploring standardized disclosure for crypto ATM operators, including transaction limits, identity verification thresholds, and readily accessible incident reporting. The CertiK report adds urgency to these discussions, arguing that the current architecture permits rapid, high-volume transfers with relatively modest verification hurdles.
Industry representatives caution that over-regulation could curb legitimate use cases and drive users toward less-regulated channels. Yet the data is clear: a credible, scalable fraud problem in crypto ATMs requires a coordinated response—from better kiosk design to stronger customer education and tighter enforcement against social engineering schemes. As one security director involved in the CertiK research put it, "We’re at a crossroads where technology enables fast transfers, but policy must keep pace to protect consumers."
What consumers can do now
- Always verify the operator and the ATM network before attempting a cash-to-crypto transaction. Look for official signage and QR codes that match the operator’s registered branding.
- Be cautious of unsolicited prompts to buy crypto in public spaces. If something feels off, walk away and verify through official channels.
- Limit transaction size and enable any available anti-fraud features offered by the operator, such as enhanced identity checks or transaction alerts.
- Keep receipts and transaction IDs; if a transfer seems delayed or missing, contact the operator and your wallet provider immediately.
- Educate older family members about the common social-engineering playbooks used to entice deposits via crypto ATMs.
Longer-term implications for the crypto market
The certik report reveals surging fraud patterns that could weigh on mainstream adoption of crypto cash-out solutions. If consumers begin to perceive crypto ATMs as riskier, usage could slow, particularly among less tech-savvy populations and vulnerable groups. That would likely push more users toward regulated, bank-like onramps where stronger identity checks and consumer protections are in place. Policymakers may respond with targeted compliance requirements for operators, potentially tempering the speed advantage that makes ATMs appealing to legitimate users and scammers alike.
Bottom line
The CertiK findings illuminate a clear trend: crypto ATM fraud is no longer a fringe risk but a material threat that aligns with wider concerns about crypto security, fraud rings, and consumer protection. The $333.5 million loss tally for 2025 is a stark reminder that the digital asset ecosystem remains a high-stakes battleground where speed, trust, and safeguards must align.
For investors and everyday users, the message is simple: treat crypto ATMs as a potential risk vector and insist on strong verification, clear operator disclosures, and ongoing education. As the market debates how to balance convenience with security, the certik report reveals surging fraud patterns that demand immediate attention from regulators, operators, and consumers alike.
Discussion