Do Bitcoin ATMs Require ID? The Honest Truth (And What to Do Instead)

Already put money into a Bitcoin ATM because a caller or a message told you to? Go straight to what to do if you already deposited money.

Short answer: yes, almost always. In 2026, nearly every Bitcoin ATM (BTM) operator in the US asks for at least a mobile phone number before you can buy anything, and a government photo ID kicks in fast, often above a few hundred dollars. Machines that ask for nothing at all are rare, shrinking, and usually have tiny floor limits. On top of that, BTMs charge 10–25% in combined fees and spread, and they are where many “send Bitcoin to fix your account” scams end: the FBI received 13,460 complaints involving crypto kiosks in 2025. If your goal was privacy and safety, the gas-station machine is the wrong tool. Below is the honest breakdown, then a cleaner path.

How Bitcoin ATM ID rules actually work in 2026

Most operators run a tiered KYC system. The tier you land in depends on the dollar amount and the operator’s own policy (which is shaped by federal and state money-transmitter rules). The tiers generally look like this:

• Phone-only floor. The lowest tier almost always requires your name, date of birth, and a mobile number that receives an SMS code. This is now close to universal — the “walk up and buy anonymously like an ATM cash withdrawal” experience essentially does not exist at the major chains anymore.
• Photo ID tier. Above a threshold, the machine’s camera scans a government-issued ID and takes a live selfie to match it.
• Enhanced tier. For larger amounts, expect a Social Security number, third-party identity verification, and sometimes a phone call to support before the transaction clears.

Here are the real-world thresholds for the operators people search for most. These shift over time and by state, so treat them as the current shape rather than a permanent promise:

Operator	Phone-only floor	When photo ID kicks in	Notes
CoinFlip	Name, DOB, phone for small buys	Government photo ID above a threshold that varies by location, often quoted at roughly $900	Highest tier also requires SSN, third-party verification (Veriff), and a call to support before completing.
Bitcoin Depot	Closed	Closed	Filed for Chapter 11 on May 18, 2026 to wind down, and took all its machines offline (SEC filing).
Athena Bitcoin	Phone-tier for small amounts (historically)	Photo ID above operator/state limits	Sued by the DC Attorney General in September 2025 over fee disclosure and scam-linked volume. Treat as high-scrutiny.
LibertyX	Phone/email registration	ID required above low limits	App-and-retail model (buy at participating stores). KYC applies; not an anonymous channel.

The direction of travel is one-way: tighter. US Bitcoin ATM operators are money services businesses under the Bank Secrecy Act and must register with FinCEN, the Treasury’s financial-crimes unit. On August 4, 2025, FinCEN published a notice on crypto kiosks (FIN-2025-NTC1, PDF): it warns that fraudsters often direct victims to these machines and asks banks and other financial institutions to watch for and report suspicious kiosk activity. Some states add their own rules on top. The notice gives California as an example: there, an operator may not accept or dispense more than $1,000 a day from or to one customer through a kiosk. So if you find a “no-ID” machine today, the limit will be small and the loophole is closing.

The pressure has already closed the biggest name. When Bitcoin Depot, which had over 9,000 kiosk locations, filed for Chapter 11 in May 2026, its chief executive said that “states have imposed increasingly stringent compliance obligations, including new transaction limits, and in some jurisdictions, outright restrictions or bans on BTM operations”, and that the company’s “current business model is unsustainable” (press release). If an old guide or a caller sends you to a Bitcoin Depot machine, it is no longer operating.

The two costs nobody warns you about

1. You will pay 10–25% to walk away with Bitcoin

A Bitcoin ATM’s price is not the market price. The total cost stacks up from a few layers: an operator fee on each purchase, an exchange-rate spread (the machine sells above the market price and builds the difference into the quote it displays), and a small on-chain network fee. Add it up and an all-in cost of 10–25% is normal, with premium or low-competition locations pushing past 20%. When California debated its 2023 kiosk law, consumer groups put kiosk fees at 12–25% of the purchase price, and industry stakeholders said fees can reach 30% (California Assembly Banking Committee analysis, PDF). The DC Attorney General alleges that Athena charged up to 26% per transaction without clearly disclosing it.

Put concretely: hand a machine $200 and you may walk away with around $150–$180 worth of Bitcoin. That is a brutal price for “convenience,” and most of it is hidden — the screen shows you a number, not the markup behind it.

2. Scammers send their victims to these machines

This is the part that matters most for a first-time buyer, because the same friction-free design that feels convenient is exactly what scammers exploit. The data is not subtle:

• The FBI’s Internet Crime Complaint Center (IC3) received 13,460 complaints involving crypto kiosks in 2025, with $389 million in reported losses: 23% more complaints and 58% more losses than in 2024 (IC3 2025 Internet Crime Report, PDF, p. 53). These figures count only complaints filed with the IC3, and the FBI notes that a complaint may also include other kinds of payment besides the kiosk (IC3 alert I-051526-PSA).
• People aged 60 and over filed 6,188 of those complaints and reported $257.5 million of the losses: about two of every three dollars lost at kiosks. Every age group shows up in the same table, from under-20s up (same report, p. 53).
• On September 8, 2025, the DC Attorney General sued Athena Bitcoin, alleging that in its first five months in the District, 93% of the deposits at its machines were the direct result of scams, with a median victim age of 71 and a median loss of $8,000 per scam transaction (DC Attorney General). These are allegations in a lawsuit, not a court ruling.

The usual pattern: someone gets a call or text — a fake “fraud department,” a fake government agency, a fake tech-support alert — and is told to “protect your money” by feeding cash into a Bitcoin ATM at a nearby store. The FBI says the scammers give detailed instructions: how to withdraw the cash from the bank, how to find a kiosk, and how to deposit and send the money (I-051526-PSA, May 15, 2026). The machine asks few questions, the payout is irreversible, and the money is gone. No legitimate institution will ever ask you to pay a bill, a fine, or a “verification fee” at a Bitcoin ATM. If that is why you are at a machine right now, stop and walk away. If you already paid, see what to do now.

Four warning signs

• Hurry and secrecy. You are told to act right now, to stay on the phone while you go, or not to tell your family or your bank. The FBI lists all three as tactics of impostor scams (IC3 alert I-091726-PSA, Sep 17, 2026).
• “Go to a Bitcoin ATM.” Someone you have never met in person tells you to take cash to a kiosk. The FBI’s advice: do not follow instructions from someone you have never met to scan a QR code and pay through a kiosk, and no real police officer or government official will call to demand payment at one (I-051526-PSA).
• A “government agent” or a “fraud department”. Police and government officials never ask for payment in cryptocurrency, by prepaid card or by courier (I-091726-PSA).
• A QR code they sent you. You are asked to scan a QR code you did not make yourself and send money to it. That code holds the scammer’s address (I-051526-PSA).

If anyone tells you to stop sending money, stop. The FBI says that if the kiosk company calls to warn that your transaction looks like fraud, you should stop or cancel it (I-051526-PSA).

If you already deposited money

If someone told you to put cash into a Bitcoin ATM and you now think it was a scam, you are far from alone: the FBI received 13,460 complaints like it in 2025. Here is what the FBI and other US agencies advise, in order, plus two free non-government services (steps 6 and 7). Every step below is free. If someone offers to get the money back for a fee, read the second scam first.

1. Stop all contact. Hang up, stop replying, and send nothing more (I-091726-PSA). That includes any “fee” to “release” or recover what you sent: the CFTC says the same gang, or a different one, often comes back with exactly that offer (CFTC).
2. Call your bank. Use the number printed on your card or statement, never a number the caller gave you. Tell them you were scammed so they can help protect your accounts. If any money also left by card or bank transfer, ask right away whether it can be stopped or recalled: the FBI says that with fraudulent transfers, “time is of the essence” (IC3 2025 report, p. 17).
3. Keep the evidence. Throw nothing away and delete nothing. The FBI asks for these details (I-051526-PSA):
   • the ATM receipt (take a photo of it too);
   • where the machine is: the store’s name and address;
   • the bitcoin address the money went to (look on the receipt, and in any QR code or message the scammer sent you);
   • the transaction ID, often shown as “TXID”, if you have it;
   • the phone numbers, email addresses, names and websites the scammers used;
   • their texts, emails and chat messages: keep them, and keep any other payment records (I-091726-PSA).
4. Report it to your local police and to the FBI’s IC3. Type www.ic3.gov into the address bar yourself; do not search for it or click ads. The FBI warns that fake IC3 sites exist and that “sponsored” search results are usually imitators; the real address ends in .gov (IC3 alert I-072026-PSA, Jul 20, 2026). File even if the amount seems small: “Regardless of the amount lost, file a complaint” (IC3 2025 report, p. 17). Afterwards, the IC3 itself will not phone, email or message you; if more information is needed, the FBI says a local field office or police officer gets in touch (I-072026-PSA). To check that a caller is real, phone the agency yourself on its official number (I-091726-PSA).
5. If you are 60 or over, or you are helping someone who is, you can get help with the report. The Justice Department’s National Elder Fraud Hotline is free: 833-372-8311 (833-FRAUD-11), Monday to Friday, 10 a.m. to 6 p.m. Eastern, in English, Spanish and other languages (Office for Victims of Crime). Call the number yourself; the hotline warns that scammers also pretend to be its staff.
6. Talk it through with someone. The AARP Fraud Watch Network Helpline is at 877-908-3360, Monday to Friday, 8 a.m. to 8 p.m. Eastern. AARP says it offers guidance and support for your situation, not investigation or recovery (aarp.org).
7. Look up and report the address. On Chainabuse you can search the bitcoin address the money went to, see whether others have reported it, and add your own report to warn others. Chainabuse itself says reporting there warns the community and that your local authorities are the ones who can investigate, so it adds to the police and IC3 reports rather than replacing them.

Outside the US, the same order applies: stop contact, call your bank, keep the evidence, and report to your local police and your country’s official fraud-reporting service.

Watch for the second scam: “we can get your money back”

After a scam, many people are contacted by someone who offers to recover the money for a fee: a “law firm”, an “asset-recovery” company, or even someone posing as the FBI or the IC3. The CFTC explains why this works: recovering money lost to fraud is rare, and harder once it has been turned into bitcoin, and the criminals know it. It calls these offers a form of advance-fee fraud: “you’re told your stolen money has been recovered, or it can be found, if you first pay a tax, fee, or retainer” (CFTC). In 2025 the IC3 counted 10,516 complaints about fake recovery services, with $1.4 billion in reported losses; the FBI notes that this figure can include money lost in the earlier scam (IC3 2025 report, p. 53).

The FBI’s alert on fake law firms (I-081325-PSA, Aug 13, 2025) lists the signs. They ask to be paid in cryptocurrency or gift cards. They say they are “authorized partners” of government agencies, and no law firm is. They seem to know the exact amounts and dates of your earlier payments. They say you are on an official list of victims. Separately, the FBI says the IC3 never asks for payment to recover funds and never sends anyone to a company that does (I-072026-PSA).

Why a fee cannot unlock it: a bitcoin payment cannot be reversed, and coins sent to a scammer’s address are controlled by the scammer’s keys. Freezing or seizing stolen funds is work for law enforcement, and that is why your IC3 report matters. That is different from a legitimate service that helps you open your own wallet after you forget a password: there, the coins are still in a wallet you own. Even then, never type your seed words into a website or read them to anyone who contacts you.

Quick check: a caller says he is with the IC3 and can return your money for a $500 fee. What do you do?

Hang up and pay nothing. The IC3 does not phone victims and never charges to recover money. If you want to add details to a report, type www.ic3.gov yourself.

Sources for the scam warnings and the steps above

All checked on November 3, 2026, except the Bitcoin Depot filing, checked on November 7, 2026:

• FBI IC3, 2025 Internet Crime Report (PDF), pp. 17 and 53.
• FBI IC3 alerts: I-051526-PSA (crypto kiosk complaints, May 15, 2026), I-072026-PSA (scammers impersonating the IC3, Jul 20, 2026), I-091726-PSA (impersonation of law enforcement and officials, Sep 17, 2026), I-081325-PSA (fictitious law firms offering recovery, Aug 13, 2025).
• FinCEN, Notice on the Use of Convertible Virtual Currency Kiosks for Scam Payments and Other Illicit Activity, FIN-2025-NTC1 (PDF), Aug 4, 2025.
• Office of the Attorney General for the District of Columbia, Attorney General Schwalb Sues Crypto ATM Operator for Financially Exploiting District Residents, Sep 8, 2025.
• CFTC, Fraud in Three Acts: Relationship Cons, Recovery Scams, & Money Laundering.
• US Department of Justice, Office for Victims of Crime, National Elder Fraud Hotline.
• AARP, Fraud Watch Network Helpline.
• Chainabuse.
• Bitcoin Depot, press release on its Chapter 11 filing (exhibit 99.1 to its Form 8-K, SEC), May 18, 2026.

Privacy reality check: a “no-ID” ATM is not anonymous

Here is the trap in the original question. Even if you found a machine that asks for no ID, it is not giving you privacy. Consider what it captures anyway:

• Your phone number, tied to your real identity through your carrier.
• Camera footage — the kiosk has a camera, and so does the store it sits in. Your face is on record next to the timestamp of the buy.
• A clustered on-chain payout. The operator sends your coins from their wallets, and chain-analysis firms tag those addresses. Your “anonymous” coins arrive pre-labeled as “came from a known BTM operator,” which is the opposite of private.

So the convenience-store machine fails on every axis at once: it is expensive, scammers steer their victims to it, and it is not even anonymous. If privacy is what you actually wanted, you need a different approach. For the full picture of what privacy does and doesn’t mean when acquiring Bitcoin, see our guide to KYC vs non-KYC Bitcoin privacy.

The better path: non-KYC peer-to-peer over Lightning

If you wanted to buy a small amount privately and safely, the grown-up version of what you were chasing is non-KYC peer-to-peer (P2P) trading: buying directly from another person. Where to start depends on whether you already own some bitcoin.

If you don’t, start with Bisq Easy or HodlHodl, because neither asks you for a deposit. On Bisq Easy, in the Bisq 2 app, there is no trading fee, but you send your money first and rely on the seller’s reputation, so keep it small and pick a seller with a strong record. On HodlHodl the seller locks the bitcoin in escrow before you pay, for a 0.75% fee, and you sign up with an email address. Our lesson on buying bitcoin without KYC walks through a first 20-euro purchase.

Once you hold some sats, RoboSats matches buyers and sellers over the Lightning Network, with bonds and an escrow on both sides, so neither side can run off with the money; you do trust the coordinator that runs the trade while it settles. What it asks for: no email, no phone number, no ID. You generate a random robot identity, lock a small Lightning bond (3% of the trade by default), and trade. What it costs: a small coordinator fee plus the seller’s premium — typically a few percent all-in, a fraction of a BTM’s 10–25%. What it protects: there is no central database with your face and SSN, and you pay a real human at a real price instead of a kiosk markup.

The tradeoff is honesty: P2P has a learning curve, and you pay using a method you and the seller agree on (bank transfer, Wise, Revolut, cash by mail, etc.), so it is not as point-and-click as a machine. But you trade ten minutes of learning for far better privacy, far lower cost, and no exposure to the BTM scam channel. Our step-by-step RoboSats tutorial walks through a first trade, and the broader guide to buying non-KYC Bitcoin covers the alternatives. If you specifically want the beginner framing, start with how to buy Bitcoin without ID verification.

Whatever you buy, move it to your own wallet immediately

This step is what turns “I bought some Bitcoin” into “I own some Bitcoin,” and it applies no matter where you bought — ATM, P2P, or anywhere else. Bitcoin sitting on a machine operator’s payout or an exchange balance is a promise; Bitcoin in a wallet whose keys only you hold is yours.

• Starting small? A reputable self-custodial Lightning/on-chain wallet on your phone is the right first home — you control the keys, and it pairs naturally with a P2P Lightning purchase. See our Phoenix Wallet review for a beginner-friendly self-custodial option.
• Growing your stack? Graduate to a hardware wallet for cold storage as the amount becomes meaningful. The self-custody checklist covers the move step by step.

If you do use an ATM, do not leave the coins parked at the operator — send them to your own wallet address as the final step of the transaction. Before confirming, check the whole address, character by character, against the one your own wallet shows: attackers can create addresses that end in the same characters as yours. Electrum’s developers documented two such cases in October 2026, where the fake address ended in the same four characters as the real one.

Decision guide: when a BTM is the least-bad option

A Bitcoin ATM is rarely the smart choice, but it is not never the right one. It can make sense when all of these are true:

• The amount is small (you can absorb a double-digit fee on, say, $50–$100 without it mattering).
• You need it now and have no time to set up P2P.
• You are paying with cash you want to convert and have no bank-linked alternative handy.
• Crucially: nobody on a phone told you to be there. A self-directed small buy is fine; a buy you were instructed to make is a scam in progress.

If you do go ahead: read the fee disclosure on screen before inserting cash, send the coins straight to your own wallet, keep the receipt, and never exceed an amount you would be uncomfortable losing to the spread.

FAQ

Which Bitcoin ATMs don’t require ID?

In 2026, genuinely no-ID machines are rare and getting rarer. Almost every major operator requires at least a phone number for the smallest transactions, and Bitcoin Depot, which had over 9,000 kiosk locations, took its whole network offline when it filed for Chapter 11 in May 2026. Any machine still operating without ID will have a very low limit, captures your phone and camera footage anyway, and is not actually anonymous. If real privacy is the goal, non-KYC peer-to-peer trading is the better tool: Bisq Easy or HodlHodl for a first purchase, RoboSats over Lightning once you hold some sats.

Do CoinFlip ATMs require ID?

CoinFlip uses a tiered system. The lowest tier requires your name, date of birth, and a phone number. A government-issued photo ID is required above a threshold that varies by location (often quoted at roughly $900), and the highest tier also requires a Social Security number, third-party identity verification, and a call to support before the transaction completes. So small buys are phone-only, but anything substantial requires full ID.

Are Bitcoin ATMs traceable?

Yes. The operator records your phone number, the kiosk and store cameras record your face and the timestamp, and the coins are paid out from the operator’s known wallets, which chain-analysis firms label. A Bitcoin ATM purchase is one of the least private ways to buy Bitcoin, not one of the most. Treating an ATM buy as anonymous is the most common and costly misconception.

Can the IRS see Bitcoin ATM purchases?

This is general information, not tax advice. US Bitcoin ATM operators are registered Money Services Businesses subject to anti-money-laundering and reporting obligations, and the KYC data they collect (ID, sometimes SSN) can be shared with authorities. In the US, disposing of Bitcoin (selling or spending) is generally a taxable event you are responsible for reporting regardless of where you bought. Assume an ATM purchase is on the record and keep your own records.

What’s the cheapest way to buy Bitcoin without ID?

Non-KYC peer-to-peer trading is both the cheapest and most private route. Bisq Easy charges no trading fee, HodlHodl 0.75% per side and RoboSats a small coordinator fee, and on top sellers charge a premium of a few percent over the exchange price: a few percent in all, versus the 10–25% a Bitcoin ATM charges. None of them asks for a phone number or ID (HodlHodl asks for an email address). If you own no bitcoin yet, start with Bisq Easy or HodlHodl; RoboSats needs some sats for its bond. The tradeoff is a short learning curve and arranging payment with a real counterparty. Whatever you choose, move the coins to a wallet you control immediately.

What should I do if I already put money into a Bitcoin ATM for a scammer?

Stop all contact and send nothing more. Call your bank using the number on your card or statement. Keep the receipt, the machine’s location, the bitcoin address the money went to and the transaction ID. Report it to your local police and to the FBI at www.ic3.gov, typing the address yourself instead of clicking search results or ads. If you are 60 or over, the Justice Department’s National Elder Fraud Hotline (833-372-8311) can help with the report.

Can a recovery company get my bitcoin back if I pay a fee first?

Treat that offer as a second scam. A bitcoin payment cannot be reversed, and the FBI warns that fake recovery firms ask for payment in cryptocurrency or gift cards, claim to be partners of government agencies, and know details of your earlier losses. The IC3 never asks for payment to recover funds and never refers victims to a company that does. Freezing or seizing stolen funds is work for law enforcement, which is why reporting to the IC3 matters.