Bitcoin ATMs are spreading rapidly across the U.S., but their growing prevalence is raising serious concerns about cybersecurity.
These machines, which facilitate cryptocurrency transactions in a manner similar to traditional ATMs, are increasingly targeted by cybercriminals due to the high value and digital nature of the assets involved.
Timothy Bates, a cybersecurity professor at the University of Michigan, highlights that Bitcoin ATMs are susceptible to both physical and cyber threats, making them attractive targets for hackers. Vulnerabilities such as outdated software and unsecured network communications are prime entry points for attacks that can result in stolen private keys, manipulated transactions, or drained funds.
The rise in Bitcoin ATM-related scams is alarming. According to the Federal Trade Commission (FTC), there has been a dramatic increase in scams since 2020. The decentralized and unregulated nature of Bitcoin, while beneficial for transactions, also creates opportunities for fraud. Joe Dobson, principal analyst at Mandiant, points out that the lack of oversight allows for various fraudulent activities, including altering recipient wallet addresses at compromised ATMs.
Furthermore, Bitcoin ATMs often require personal information to comply with Know Your Customer (KYC) regulations, adding another layer of risk if the machines are breached. Sai Patel, who runs Middletown Food Mart, shared that Bitcoin ATMs, though not widely used, often attract vulnerable individuals, such as the elderly. Patel recounted an incident where an elderly woman nearly lost her savings due to a scam involving the machine.
The U.S. Securities and Exchange Commission (SEC) has filed emergency enforcement actions against First Liberty Building & Loan, LLC and its founder, Edwin Brant Frost IV, alleging they operated a $140 million Ponzi scheme that spanned more than a decade and defrauded around 300 investors.
A legal clash between Coin Center and the U.S. Treasury Department over sanctions imposed on Tornado Cash has officially come to an end, following a joint decision to dismiss the case.
A sophisticated cyberattack targeting Brazil’s central bank reserve accounts has resulted in the theft of over $140 million (R$800 million), much of which was swiftly funneled through cryptocurrency channels.
A malicious open-source project on GitHub disguised as a Solana trading bot has compromised user wallets, according to a July 2, 2025, report by cybersecurity firm SlowMist.