The **FBI** has issued a public service announcement regarding the increasing prevalence of scams involving cryptocurrency kiosks, also known as crypto ATMs or Bitcoin ATMs. These kiosks, which resemble traditional bank ATMs, allow users to buy or sell crypto assets using cash or debit cards. They are often found in easily accessible locations like gas stations and convenience stores. **How the Scams Work** Cybercriminals instruct victims to deposit cash into these kiosks, which then transfer the funds to attacker-controlled crypto wallets. The **FBI** reports a significant increase in these scams, with losses totaling over $388 million in 2025. "In 2025, the **IC3** received more than 13,400 complaints reporting the use of cryptocurrency kiosks, with losses over $388 million — a 23% increase in complaints and a 58% increase in losses from 2024. More than half of the complaints involved individuals over 50, with losses over $302 million," the **FBI** stated. **Geographic Distribution** According to complaint data, Americans in Texas, Florida, and California filed over 3,300 crypto ATM scam complaints, reporting over $112 million in estimated losses. **Protecting Yourself** The **FBI** recommends the following measures to protect against crypto ATM scams: * Do not send money to people you only know online. * Never scan QR codes or follow payment instructions from unknown individuals. * Always verify phone calls directly. * Do not share any personal information over the phone. * Be wary of anyone claiming to be from the government or law enforcement demanding cryptocurrency payments. * Stop transactions if a kiosk operator warns you of fraud. * Always keep receipts for cryptocurrency transactions. The **FBI's** **2025 Internet Crime Report** highlights the broader landscape of cybercrime, with over 1 million complaints received through the Internet Crime Complaint Center (**IC3**) last year, linked to almost $21 billion in losses from cyber-enabled crimes.  ## The Validation Gap: Automated Pentesting Answers One Question. You Need Six. Automated pentesting tools deliver real value, but they were built to answer one question: can an attacker move through the network? They were not built to test whether your controls block threats, your detection rules fire, or your cloud configs hold. This guide covers the 6 surfaces you actually need to validate. [Download Now](https://hubs.li/Q048zztN0)