My Dad Just Deposited $5,000 at a Bitcoin ATM — What to Do in the Next Hour

By ZapScam Editorial Team · Last updated: April 2026 · Reviewed for accuracy

Older adults lost over $4.85 billion to fraud in 2024 — a 46% increase — and the FBI reported a 33% jump in losses tied to crypto ATMs specifically. Senate hearings in April 2026 are pushing for new safeguards on these kiosks.

Quick Answer

Call the Bitcoin ATM operator's fraud line (the brand is on the kiosk — Bitcoin Depot, Athena, CoinFlip, etc.) within the first hour to request a fraud reversal hold. Then call the police, file an FBI IC3 report, and call the bank that funded the cash withdrawal. Some kiosks can hold or recall a transaction during the brief window before the crypto leaves their wallet.

Think you've seen this scam?

Paste any suspicious text, email, or voicemail into our free checker — get a verdict in 5 seconds. Or get our free Scam Defense Playbook.

Run a Free Check → Get the Free Playbook

Free. No credit card. No signup required for the checker.

How the "Safety Locker" Scam Works

Your parent gets a phone call, voicemail, or pop-up alert from someone claiming to be a federal agent, a Microsoft technician, or their bank's fraud department. The caller says their accounts have been compromised by drug traffickers, hackers, or money launderers.

The caller tells them their savings are at risk and they must "move it to a federal safety locker" or "protected wallet" immediately. They are instructed to stay on the phone the entire time and to tell no one — including the bank teller and any family member.

Your parent withdraws cash from their bank, sometimes in multiple visits to stay under reporting thresholds. The caller may coach them on what to tell the teller (a kitchen remodel, a car, a vacation).

The caller sends a QR code by text or email and directs your parent to a Bitcoin ATM — often in a gas station, smoke shop, or grocery store. They feed the cash into the kiosk, scan the QR code, and the funds are converted to crypto and sent to the scammer's wallet.

The conversion is fast, but it is not instant. There is typically a 15–60 minute window between the deposit and when the operator settles and forwards the crypto. During that window, fraud teams at some operators can flag, hold, or unwind the transaction if they get a credible report.

First 60 Minutes — Step by Step

Get the receipt. Every Bitcoin ATM prints one. The operator name is at the top — Bitcoin Depot, Athena, CoinFlip, RockItCoin, Coinhub. Note the kiosk ID and the transaction ID.

Call the operator's fraud line directly. Bitcoin Depot fraud: 1-678-435-9604. Athena Bitcoin compliance: 1-312-690-4466. CoinFlip support: 1-773-800-0106. Tell them the transaction was fraud-induced and ask if they can hold the outbound transfer.

While someone is on the operator call, a second person should call the bank that funded the cash. Ask the bank to file a fraud claim and to flag the originating account so further withdrawals are reviewed.

Call local police non-emergency. They will not recover the money themselves, but the report is required for most operator fraud investigations and any insurance claim.

File a report at ic3.gov — the FBI Internet Crime Complaint Center. Include every phone number, transaction ID, kiosk ID, and wallet address from the receipt.

Call the AARP Fraud Watch Helpline at 877-908-3360. They are not law enforcement but they will help your parent process what happened and walk through next steps.

Bitcoin ATM Operator Fraud Numbers (Save These)

Bitcoin Depot fraud team — 1-678-435-9604 — the largest U.S. operator. Fraud claims must usually be filed within 24 hours.
Athena Bitcoin compliance — 1-312-690-4466 — ask for the compliance and AML team, not general support.
CoinFlip customer support — 1-773-800-0106 — ticket their fraud team directly through this line.
FBI IC3 — ic3.gov — required for any chance of federal recovery action.
AARP Fraud Watch Helpline — 877-908-3360 — free for anyone, AARP membership not required.

What Not to Do

⚠ Do not let your parent call the scammer back to "ask for the money back." They will be talked into another deposit.
⚠ Do not wait until morning. The crypto-conversion window is measured in minutes to hours, not days.
⚠ Do not assume the bank will block it on its own. Cash is gone from the bank's perspective the second it leaves the ATM.
⚠ Do not promise your parent the money is recoverable. In most cases it is not, and the emotional fallout of a second loss is worse than the first.
⚠ Do not skip the police report and IC3 filing. They are needed for any tax loss treatment under the new IRS guidance and for any future operator settlement.

What's Changing in 2026

The Senate Banking Subcommittee held hearings in April 2026 on elder fraud at crypto kiosks. Proposals on the table include hard daily transaction limits for new users, mandatory fraud-warning videos in English and Spanish, and a 24-hour recall window for first-time depositors over 65. Several states — Vermont, Connecticut, California — have already passed their own caps. None of this helps a victim today, but it is worth pushing your state legislator on.

Key Statistics

FBI reported a 33% increase in losses tied to Bitcoin ATM and crypto kiosk fraud in 2024. — FBI IC3 2025
Older adults lost over $4.85 billion to fraud in 2024, a 46% increase year over year. — FBI 2025
Adults 60 and over made up over 60% of reported Bitcoin ATM fraud victims by dollar value. — FBI IC3

Tools That Help

ZapScam earns a commission if you sign up through these links. No extra cost to you.

Aura Identity Protection

After a Bitcoin ATM scam, your parent's data is on a recovery-scam list and will be hit again. Aura monitors SSN, credit, accounts, and the dark web, and includes up to $1M in identity theft insurance.

Try Aura →

Frequently Asked Questions

Sometimes, if you reach the kiosk operator within the same day and before they settle the outbound transfer to the scammer's wallet. The recovery rate after 24 hours is in the low single digits. Speed is the only real lever.

Usually no. Cash withdrawals authorized by the account holder are not protected the way card fraud is. A few banks offer goodwill credits in extreme elder-fraud cases — ask, but do not count on it.

Yes. The police report is the single most useful piece of paper for any subsequent claim, IRS loss deduction, operator investigation, or potential civil case. Frame it for them as "helping the next person," which is true and is easier emotionally than "reporting your loss."

Set a verbal family safe word that any urgent money request must include. Add a daily ATM and wire withdrawal cap at the bank. Sign up for an identity-monitoring service — the same scammers usually try a follow-up "recovery" scam within 60 days, posing as a fraud investigator.

Has this scam reached your family?

Run a Free Check Get the Family Brief

Ready to protect yourself?

We've vetted the tools that actually work — VPN, threat protection, and identity monitoring.

See our recommended tools →

Get weekly scam alerts

One breakdown per week. Real threats. Zero fluff.

You're in! Check your inbox.