Stopping the $12.5 Billion Fraud Crisis — At Every Layer

The vast majority of fraud attributed to crypto ATMs originates from unregulated telephone calls. Scammers use VoIP services — available for as little as $100 with only ineffective identity screening that is easily bypassed — to impersonate government agencies, law enforcement, and financial institutions. The phone call is the weapon; the ATM is merely one of many payment methods the scammer directs the victim to use. Bank wires, gift cards, and cash-by-mail are equally common endpoints.

Byte Federal employs a five-layer fraud prevention system: (1) Full KYC identity verification with liveness detection, (2) Trained BSA officers and compliance staff who monitor for signs of duress or coaching, (3) Mandatory on-screen scam warnings tailored by age, (4) Anti-fraud Terms of Service requiring customers to confirm they are not being directed by a third party, and (5) Proactive outreach calls to customers aged 60+, which alone prevent 84% of potential elder fraud cases.*

A scammer calls the victim using a spoofed caller ID that appears to be from the IRS, Social Security Administration, or local police. The victim is told they owe money, face arrest, or have had their identity stolen. Under duress, they are instructed to withdraw cash from their bank and deposit it at a Bitcoin ATM, wire it, or purchase gift cards. The scam originates and succeeds because of the phone call — the ATM is simply the last step in a chain that starts with unregulated telecom access.

Banning Bitcoin ATMs would punish 24.6 million unbanked Americans — disproportionately Native American, Black, and Hispanic households — who rely on these machines for financial access. It would also have minimal impact on fraud: criminals would simply redirect victims to wire transfers, gift cards, or cash-by-mail, which collectively account for far more fraud losses. The data shows that only 1.5% of total internet crime losses involve crypto ATMs. Banning them addresses a symptom while leaving the root cause — unregulated telecom — completely untouched.

Regulators should focus on the origination point of fraud: the telecom infrastructure. Specific recommendations include: (1) Extend Bank Secrecy Act KYC/AML requirements to VoIP providers, (2) Mandate real-time content attestation beyond STIR/SHAKEN caller ID verification, (3) Fund the FCC to actually collect the $208M in levied fines (current collection rate: 0.003%), (4) Adopt the UK's Confirmation of Payee system to catch authorized push payment fraud, and (5) Hold telecom carriers liable when they knowingly transmit fraudulent traffic.

Byte Federal's 84% elder fraud prevention rate* through proactive outreach calls is among the highest in the industry. While many operators rely solely on passive warnings, Byte Federal actively contacts customers aged 60+ when transactions are flagged, intervening before the fraud completes. Combined with trained BSA officer monitoring, mandatory scam education, and strict KYC, Byte Federal's multi-layered approach goes well beyond regulatory minimums. The industry-wide legitimate transaction rate for crypto ATMs is 98.8%*.

98.8% of all crypto ATM transactions are legitimate. The narrative that Bitcoin ATMs are primarily tools for fraud is contradicted by the data. Crypto ATMs serve millions of Americans for lawful purposes: purchasing cryptocurrency, sending remittances, accessing financial services without a traditional bank account, and converting between cash and digital assets. The 1.2% fraud rate is comparable to or lower than fraud rates for credit cards, wire transfers, and other mainstream payment methods.

VoIP providers fall under FCC jurisdiction, not FinCEN, and are classified as telecommunications carriers rather than financial services. This means they have zero obligations under the Bank Secrecy Act: no anti-money laundering programs, no suspicious activity reporting, and no state licensing requirements. While some VoIP providers perform basic identity checks, these are ineffective and trivially bypassed. While VoIP providers face far lighter regulatory burdens than crypto ATM operators — no FinCEN registration, no AML program, no state money transmitter licensing — they do face revenue-based federal obligations including USF contributions and CALEA compliance. The contrast in compliance burden is stark, but the core problem remains: a scammer can stand up a fraud operation with minimal friction, using a fake name and prepaid card, with fines that go largely uncollected. In banking, that onboarding would be a federal crime. This regulatory gap is the single largest enabler of consumer fraud in the United States.