Quick Read
- Bitcoin Depot has introduced mandatory identity verification for every transaction across its 9,000-plus global crypto kiosks.
- Crypto ATM-related fraud losses reached over $333 million by the end of 2025, according to FBI and Treasury data.
- Federal and state regulators are now classifying crypto ATM operators as Money Services Businesses, imposing stricter reporting and transaction limits.
Major crypto kiosk operator Bitcoin Depot has implemented a new, mandatory identity verification policy for every transaction across its North American network. This shift, which began rolling out in February 2026, marks a significant departure from previous industry standards that typically only required user verification during initial account onboarding. The move comes as federal officials and state lawmakers scramble to address a massive surge in financial fraud linked to digital asset kiosks.
Rising Fraud Strains the Crypto Kiosk Sector
The urgency behind these new security measures follows a sobering report from the U.S. Department of the Treasury. According to data cited by the Treasury, crypto ATM fraud resulted in losses exceeding $333 million by the end of 2025, a sharp increase from the $246.7 million reported in 2024. Law enforcement agencies have identified these kiosks as primary targets for scammers who coerce victims—often seniors—into depositing life savings into machines under the guise of legal or financial emergencies.
Because these transactions bypass the traditional friction of standard banking, such as real-time fraud alerts or human intervention, funds are often moved into irreversible digital wallets within minutes. In response, federal authorities are now enforcing the GENIUS Act, which reclassifies crypto ATM operators as Money Services Businesses. This designation mandates that operators file Suspicious Activity Reports (SARs) and adopt more rigorous monitoring, similar to the requirements placed on traditional financial institutions.
Legislative Pressure and Regional Responses
Beyond federal mandates, state-level legislative action is intensifying. In Kentucky, lawmakers recently advanced HB 380, a bill that would impose a $2,000 daily transaction cap on kiosks and introduce mandatory waiting periods for first-time users. This proposal reflects a broader trend; according to the AARP, at least 17 states have already passed laws to strengthen consumer protections around these devices, with some jurisdictions considering total bans on the kiosks entirely.
Scott Buchanan, CEO of Bitcoin Depot, stated that the company is taking a proactive stance to maintain regulatory trust. By requiring identification for every single transaction, the company aims to enable real-time detection of irregular behavior, such as attempts to bypass limits or suspicious patterns consistent with known scam tactics. The industry is currently watching to see if competitors will adopt similar per-transaction verification protocols as the regulatory environment continues to harden.
The Balance of Innovation and Security
The implementation of these measures highlights the ongoing tension between financial inclusion and consumer safety. While the industry was originally designed to provide access for the unbanked, the prevalence of sophisticated scams has forced a pivot toward stricter authentication. Treasury Secretary Scott Bessent has emphasized the need for new tools, including AI-driven pattern monitoring and blockchain analytics, to track and tag illicit funds before they can be cashed out by bad actors.
The widespread shift toward mandatory verification signifies that the era of anonymous, high-volume transactions at crypto kiosks is effectively ending, as operators prioritize regulatory compliance to avoid the threat of state-level bans and federal enforcement actions.