Initial Reporting: A Practical Guide for Law Enforcement
- Jan 21
- 4 min read
Bitcoin ATM scams have become one of the most common cryptocurrency-related crimes encountered by law enforcement. These cases often involve victims who have never used cryptocurrency before, are under extreme emotional stress, and believe they are acting under the direction of a trusted authority.
For law enforcement, the response to a Bitcoin ATM scam must be fast, deliberate, and victim-focused. The first actions taken can determine whether stolen funds can be traced, frozen, or recovered — or whether they disappear permanently. The same methodology should be translated across all cryptocurrency scams – with a prioritization on speed.
Understanding the Bitcoin ATM Scam
In a typical Bitcoin ATM scam, the victim is pressured into converting cash into Bitcoin at a cryptocurrency ATM by deception. The scammer may pose as tech support, a bank employee, law enforcement, or a government agency. The victim is instructed to deposit cash and send Bitcoin to a wallet address controlled by the scammer.
The key element is urgency. Victims are told their money is at risk, their account is compromised, or they face legal consequences if they do not act immediately. By the time law enforcement becomes involved, the transaction may have already occurred — but not all opportunities for recovery are lost.
The Initial Law Enforcement Response
When officers respond to a suspected Bitcoin ATM scam, the first priority is stopping further loss. Victims are often still in contact with the scammer and may be instructed to send additional funds.
Officers should:
Immediately advise the victim to cease all communication with the scammer
Ensure no additional transactions are made
Reassure the victim that they are not in trouble
This moment is critical. Victims are frequently embarrassed or fearful, and a calm, supportive approach helps preserve cooperation and accurate reporting. Gas station clerks or cashiers at these locations are critical to stop future losses – build a relationship with them and bring awareness to these scams. They may be the last line of defense and contact local police if they believe someone is being victimized.
Documenting the Transaction
Bitcoin ATM scams leave behind important digital evidence. Even if the funds are gone, proper documentation can support tracing and recovery efforts. Most of the time, a victim receives a receipt once the transaction had been completed. By retrieving that receipt and providing it to a trained investigator, the funds can be traced quickly.
Law enforcement should collect:
The Bitcoin ATM location and operator
Date and time of the transaction
Amount of cash deposited
Wallet address or QR code used
Any receipts, text messages, emails, or screenshots
Many Bitcoin ATMs generate receipts with transaction IDs or wallet addresses. These details are essential for blockchain analysis and should be documented carefully. Just keep in mind that some information on the receipt may only be for internal use, and further contact with the operator may be necessary.
Why Speed Is Critical After a Bitcoin ATM Scam
Bitcoin transactions are permanent, but they are also traceable. The earlier law enforcement acts, the greater the chance that funds can be identified before they are fully laundered.
Rapid follow-up may allow investigators to:
Contact the Bitcoin ATM operator
Identify the exchange receiving the funds
Submit emergency preservation or freeze requests
Coordinate with federal partners or crypto tracing units
Delays can allow funds to be split, mixed, or moved through multiple exchanges, significantly reducing recovery options.
Working With Bitcoin ATM Operators and Exchanges
Bitcoin ATM operators are regulated entities that often maintain transaction logs, surveillance footage, and customer information. Early contact can preserve critical evidence.
Investigators should:
Identify the ATM operator immediately
Request transaction records if necessary
Determine where the Bitcoin was sent after the ATM transaction
Identify any exchanges involved in the transaction path
Many exchanges can temporarily restrict accounts when notified promptly of suspected fraud. This step is time-sensitive and often requires accurate wallet and transaction details.
Transactional Fees at the ATM
Bitcoin ATM operators incur large transactional fees for each transaction. On average, these machines can charge between 17%-30% of the transaction. Meaning, if the victim is transacting $15,000, the fees alone might be $5,000. Those fees are retained by the operator and not transacted on the blockchain.
Investigators should:
Identify the ATM operator immediately
Start a dialogue with the ATM operator to inquire about transactional fee reimbursement
Each operator has their own process, and not all cooperate with law enforcement requests for reimbursement
For the operators that allow victim reimbursement for transactional fees, they will either refund the victim a flat fee or allow for a large percentage of the fees to be returned. If your department does not assign these cases, you are effectively leaving a potential 30% of the victim’s funds on the table.
Supporting the Victim During the Investigation
Victims of Bitcoin ATM scams are often emotionally distressed and confused by the technology involved. Clear communication is essential.
Law enforcement should explain:
What happened and why the scam worked
Why cryptocurrency transactions are not able to be reversed
What recovery steps are being attempted
What actions the victim should avoid going forward
Victims should be warned about recovery scams, where criminals claim they can retrieve lost cryptocurrency for a fee. These scams frequently target individuals who have already lost funds.
A Shift in Success Metrics
In Bitcoin ATM scam cases, success may not always mean an arrest. It may mean:
Preventing additional losses
Freezing funds before they disappear
Helping victims understand and recover emotionally
These outcomes matter and reflect effective modern policing in the digital financial landscape. By shifting your focus from a justice mindset, towards a mindset about recovering funds, each one of these cases has an opportunity for success.
Cryptocurrency scams are designed to exploit fear, urgency, and unfamiliar technology. Law enforcement response must be equally deliberate and informed.
By acting quickly, focusing on fund tracing, and supporting victims, officers and investigators can improve outcomes — even in cases where the funds cannot be fully recovered.
As cryptocurrency continues to intersect with everyday policing, understanding what information to gather up front can effectively help investigators so there is no time wasted. Collect the receipt information up front, and provide that urgently to your assigned investigator for tracing.
Comments