01How a Bitcoin ATM sale works
A Bitcoin ATM, or crypto kiosk, is a machine that takes cash and sends coins to an address you give it. Four steps:
- Identify yourself, as much as the machine asks: a phone number, a code by text, sometimes a scan of your ID and a photo.
- Show it a wallet address as a QR code. Here's the catch: the coins go to whoever controls that address. If someone else gave you the QR code, they get the coins.
- Feed in cash. The screen shows the rate and the fee.
- The operator sends the coins, and the machine prints a receipt.
There's no undo. A kiosk payment is a crypto payment, and those usually can't be reversed.
02What the law makes a kiosk ask, and when
Kiosk operators aren't vending machines. FinCEN says they are regulated money services businesses, with the same anti-money-laundering duties as any other. What a machine asks "can range from a phone number to a scan of a government-issued ID".
But three federal lines sit above every machine:
- $2,000: operators file a suspicious activity report on a transaction or pattern of at least this size that looks wrong.
- $3,000: operators keep records on each transfer of $3,000 or more, and verify the identity of walk-in senders who aren't established customers.
- Over $10,000: a currency transaction report, and one person's cash is added up across the business day.
So "no ID" on a kiosk really means "no ID for small amounts, at this operator, today".
03Daily limits: what your state allows
Many states have gone further than the federal rules, mostly to slow down scams. Here are the ones confirmed on each state's own site:
- California: no more than $1,000 a day from one customer.
- Arizona: $2,000 a day for new customers (under ten days) and $10,500 after that. A new customer tricked by fraud gets a full refund, fees included, if they report within 30 days.
- Colorado: from 1 January 2026, $2,000 a day for new customers (under seven days) and $10,500 after that, with a refund rule for some fraud reported within 60 days.
- Wisconsin: the regulator restricts operators to $2,000 of cash per customer per day.
- Minnesota: kiosks are banned from 1 August 2026 and must be removed by 31 December 2026.
Other states are passing rules too. Check your state's financial regulator before you rely on any number.
04The fee, in dollars
Here's the part the machines don't put on the poster. FinCEN puts kiosk fees at 7% to 20%. Wisconsin's regulator has seen 4% to more than 25%.
On $500, that's $35 to $100 gone before the coins arrive. Try your own number:
What would a kiosk cost you?
Type an amount and pick your state. Fees use FinCEN's published range. Nothing leaves this page.
Where
- Coins worth
- About $400 to $465 reach your wallet, before the market moves.
- Daily limit
- Limits vary by state and operator. Ask the operator before you feed in cash.
- Never
- Split cash across machines or days to slip under a limit or a report. Splitting to avoid federal reporting is structuring, a crime even with your own money, and FinCEN tells operators to flag it.
05Can a Bitcoin ATM purchase be traced?
Yes. Even a machine that asks for nothing but a phone number leaves four records:
The phone number is tied to a SIM card. The camera films you. The time and place are logged. And the coins land on a public blockchain, where FinCEN notes that analysis often connects scam payments made through kiosks.
For how the ledger side works, read can Bitcoin be traced?
06The kiosk scam, step by step
This is the single most important section in this guide. Here's a case FinCEN's notice cites, as charged by federal prosecutors in San Diego in April 2024.
- A pop-up. A 70-year-old retiree sees a warning on her computer.
- A fake support line. She calls the number it shows.
- A fake bank employee. She's told her savings are at risk and must be "secured".
- The kiosks. She feeds about $55,700 into Bitcoin kiosks in North County San Diego.
- The total. With gold bars handed over later, she loses about $1.335 million.
It's not rare. The FTC found that phone calls were the first contact in about 47% of kiosk fraud cases, and scammers call the machines "safety lockers". The FBI's rule is simple: no legitimate law enforcement or government official will call to demand payment through a crypto kiosk.
07Warning signs, and what to do if it already happened
- Someone you don't know sends you to a kiosk
A caller, a pop-up, a new "friend", an investment coach. Hang up. Every time.
- They give you the QR code
The coins go to whoever owns that address. It's their wallet, not yours.
- They tell you to split the cash
Across machines or days. FinCEN lists it as a red flag, and splitting to avoid reporting is a federal crime in its own right.
- They stay on the phone while you pay
The FBI describes scammers giving step-by-step instructions until the payment is completed.
- The machine warns you about fraud
Stop. The FBI says to stop if the operator warns you.
Report it to the FBI at ic3.gov and to the kiosk operator straight away. In Arizona and Colorado, some new customers who report fraud quickly are owed a refund. Ignore anyone who offers to "recover" the coins for a fee.
08Before you use one: a checklist
- Did you decide this yourself? If anyone else suggested the kiosk, stop here.
- Is the wallet yours? Make a fresh wallet on your own phone first, and use its address.
- Do you know the fee? Read the screen's rate and fee before you insert cash.
- Do you know your state's limit? If your amount is over it, the machine should refuse it. Don't try to get around it.
- Start small. Buy a small amount, check it arrived in your wallet, then decide.
- Keep the receipt. You'll want it for tax and for any complaint.
09After the first coin: changing it needs no kiosk
A kiosk solves one problem: turning cash into a first coin. You only have that problem once.
Once a coin is in your own wallet, turning it into another coin needs no cash, no machine and no phone number. That's door two from our main guide on buying crypto without KYC, and our swap with no ID does exactly that.
Keep reading
How we checked this
Written by the team that runs the SilentMule swap desk. Every rule is quoted from the federal regulation or the state law that sets it, and every figure from the government report that states it, linked where it appears. Limits change: check your state's regulator before you rely on one. Last checked . Spotted something wrong? Tell us and we fix it.
Sources
- FinCEN notice FIN-2025-NTC1 on crypto kiosks, 4 August 2025
- 31 CFR 1010.311: reports of currency transactions over $10,000
- 31 CFR 1010.313: aggregation of currency transactions
- 31 CFR 1022.320: suspicious activity reports by money services businesses
- 31 CFR 1010.410: records for funds transfers of $3,000 or more
- 31 U.S.C. 5324: structuring transactions to evade reporting
- Arizona Laws 2025, chapter 171 (A.R.S. 6-1236)
- Colorado SB25-079
- Wisconsin DFI: Bitcoin ATMs investor alert
- Minnesota Laws 2026, chapter 65
- FBI IC3, 15 May 2026: cryptocurrency kiosk complaint data
- FBI IC3, 4 November 2021: cryptocurrency ATMs and QR codes
- FTC data spotlight, 3 September 2024: Bitcoin ATMs