Bitcoin ATM Scam UK: How Criminals Trick You at Cash Machines
Criminals are using Bitcoin ATMs as money laundries—and they're tricking ordinary people into doing the work for them.
What is this scam?
A Bitcoin ATM scam in the UK typically begins with a fake contact—usually a phone call, email, or text—claiming to be from your bank, HMRC, or a tech support team. The scammer creates urgency by claiming fraudulent activity on your account, a tax issue, or a computer security problem. They convince you to visit a Bitcoin ATM (increasingly common in UK supermarkets, petrol stations, and shopping centres) and withdraw cash. You're then instructed to deposit this cash into the Bitcoin ATM to 'secure' your money or 'verify' your identity. Once the Bitcoin is sent to the scammer's digital wallet, it's gone forever. These machines are real, but scammers abuse them because Bitcoin transactions cannot be reversed. The victim is left with no money and no recourse. Unlike bank transfers, which have some protection, Bitcoin is completely anonymous and untraceable once sent.
Warning signs to look for
- You receive an unexpected call or message claiming to be from your bank, HMRC, or Apple/Microsoft support with an urgent problem.
- The contact creates artificial time pressure: 'Act now or your account will be frozen' or 'Your tax refund will be cancelled.'
- You're asked to leave the call/message active and go to a Bitcoin ATM while they 'monitor' the transaction remotely.
- The 'representative' asks you to keep the transaction secret or not tell your bank—genuine organisations never ask this.
- They provide a Bitcoin wallet address or QR code to scan, claiming it's a 'secure holding account' or 'verification process.'
- Your bank or HMRC would never ask you to buy cryptocurrency to resolve an issue—this is a massive red flag.
- The caller has poor knowledge of how your bank actually works, or uses generic script language rather than specific account details.
How this scam works step by step
The scam typically unfolds over 15 to 45 minutes. First, the scammer calls or texts, impersonating a trusted organisation—usually claiming to be from your bank's fraud department, HMRC, or tech support. They reference a fake problem: unauthorised transactions, a tax discrepancy, or malware on your device. To establish credibility, they may quote your real name, partial account number, or postcode (harvested from data breaches or publicly available sources). They then demand immediate action: visit a Bitcoin ATM to 'secure' your money or 'verify' your identity. The victim is kept on the phone or video call throughout. At the ATM, they're guided through withdrawing cash (often £500–£5,000) and inserting it into the Bitcoin machine. The scammer provides a QR code or wallet address to scan, claiming it's a temporary holding account. The victim completes the transaction, watching their Bitcoin disappear instantly. Only after the money is gone does the scammer hang up or the victim realise no resolution has occurred. By then, the cryptocurrency is in an untraceable wallet abroad, and recovery is virtually impossible.
How to verify if it is genuine
If you receive a call claiming to be from your bank or a government agency, hang up immediately and call them back using the official number on their website or the back of your card—never use a number the caller provides. Genuine banks will never ask you to buy cryptocurrency or withdraw cash to 'secure' your account. Check your actual bank app or online banking to see if there are real alerts or issues reported—scammers rely on you not verifying independently. If HMRC contacts you, use gov.uk to verify the claim, not contact details from the call. For tech support claims, ask for a ticket number and contact the company directly through official channels. A key test: ask the caller to send you a secure message or letter—scammers cannot do this. Visit our guide on /guides/is-this-website-a-scam/ for additional verification steps. Legitimate organisations never ask you to use Bitcoin ATMs, keep transactions secret, or act in extreme haste. Trust your instinct: if something feels off, it probably is.
What to do if you have already interacted
If you've sent cryptocurrency to a scammer, act immediately. First, stop all contact with the scammer—do not send any additional money or personal information. Second, contact your bank or the payment service you used to withdraw the cash and explain you've been scammed; while they may not reverse the Bitcoin transaction itself, they can flag the account and help prevent further fraud. Third, if you used a Bitcoin ATM, contact the operator or the venue where it was located—they may have CCTV footage or records that help. Fourth, report the incident to Action Fraud (0300 123 2040) or online at actionfraud.police.uk; provide all details including the phone number used, any emails, Bitcoin wallet address, and timestamps. Fifth, check your credit file using Clearscore or Equifax to monitor for identity theft—scammers often collect personal data. Sixth, contact the organisation the scammer impersonated (your bank, HMRC, etc.) to alert them and ensure no further fraudulent activity occurs on your accounts. Recovery of Bitcoin is extremely difficult, but reporting creates a record and helps law enforcement.
Reporting this scam in the UK
Report Bitcoin ATM scams to Action Fraud, the UK's official fraud reporting service, either by calling 0300 123 2040 or reporting online at actionfraud.police.uk. Provide all details: dates, times, phone numbers, emails, and the Bitcoin wallet address. If the scammer contacted you by email, also report it to the NCSC Suspicious Email Reporting Service at report@phishing.gov.uk—this helps them track organised phishing campaigns. If you received a fraudulent text or were asked to reply to one, forward it to 7726 (free, SPAM); this alerts your mobile network to the scam number. Contact Citizens Advice consumer helpline on 0808 223 1133 for guidance on consumer rights and next steps. Inform your bank's fraud team directly—they can monitor your account for unusual activity and may offer additional protections. If the scammer impersonated HMRC, also report it to HMRC's Suspicious Email Reporting Service at phishing@hmrc.gov.uk. Do not be embarrassed to report; these scams are sophisticated and target millions of people. Reporting helps law enforcement build cases against criminal networks and prevents others from being victimised.
Frequently asked questions
Is Bitcoin itself a scam, or are these just scammers abusing it?
Bitcoin is a legitimate cryptocurrency, but it is also the preferred tool of scammers because transactions are permanent and anonymous—no bank can reverse them. Bitcoin itself is not a scam, but the way criminals use it makes it dangerous. If someone is pressuring you to buy Bitcoin via an ATM or threatening action, that is always a scam—genuine organisations never operate this way.
I sent £2,000 in Bitcoin to a scammer yesterday. Can I get my money back?
Unfortunately, Bitcoin transactions are irreversible—once sent to a wallet address, the money is extremely difficult to recover. However, contact your bank immediately to report the scam and freeze your account; they may be able to block the cash withdrawal if it hasn't yet been processed. Report the incident to Action Fraud (0300 123 2040) with the Bitcoin wallet address—whilst recovery is unlikely, law enforcement can track the wallet and build cases against networks. Consider consulting a specialist cryptocurrency recovery company, though be cautious of 'recovery scams' that charge fees upfront promising to retrieve your funds.
The scammer knew my name and part of my account number. Does that mean they really work for my bank?
No. Scammers obtain this information from data breaches, public records, or by calling your bank and posing as you. Knowing your name and partial account details creates false credibility but proves nothing. Your bank will never call you and ask you to buy Bitcoin, visit an ATM, or keep the call secret. If you're unsure, hang up, and call your bank directly using the number on your card or their official website.
How do I report a Bitcoin ATM scam if I've already lost money?
Report to Action Fraud by calling 0300 123 2040 or visiting actionfraud.police.uk—have your Bitcoin wallet address, the scammer's phone number or email, and timestamps ready. If contacted by email, also report to the NCSC at report@phishing.gov.uk. Inform your bank's fraud team and Citizens Advice on 0808 223 1133. Reporting creates an official record, helps law enforcement track scam networks, and ensures your account is flagged for protection.