Rules Meant to Stop Fraud Killed This $1.6B Company

On a Monday morning in May twenty twenty-six, every single Bitcoin Depot machine in North America went dark — at the same time. Nine thousand kiosks. Forty-seven states. One point six billion dollars of market value, gone.

You have seen these machines. The glowing orange-and-black boxes in gas stations and corner stores that turn your cash into Bitcoin. The biggest network of them in the United States belonged to one company. On May eighteenth, that company filed for bankruptcy in a federal courthouse in Houston, Texas — and switched off the lights on every machine it owned.

Its market value at the moment of the filing was roughly nine million dollars. A one-hundred-and-seventy-fold collapse in a single year.

And the thing that killed it was not a crash in Bitcoin. The price of Bitcoin during the collapse was higher than it had ever been.

The thing that killed Bitcoin Depot was the rules written to protect people from getting scammed.

This is the story of how the safeguards designed to defend victims became the exact force that took down a billion-dollar company — and how a ten-year-old empire of nine thousand machines went offline overnight.

Atlanta, Georgia. Twenty sixteen. A young entrepreneur named Brandon Mintz files paperwork to incorporate a holding company called Lux Vending LLC. He has spent the previous two years studying a strange piece of physical infrastructure that has begun appearing in gas stations and bodegas across the United States — the cryptocurrency kiosk.

The product is simple. A glowing box, roughly the size of a refrigerator, sits next to the cigarette display or the lottery machine at a convenience store. A customer walks up with a stack of cash. They scan a phone wallet QR code. They feed bills into the slot — twenty, fifty, sometimes thousands of dollars at a time. And in under three minutes, an equivalent amount of Bitcoin is delivered to the wallet on their phone.

The convenience is enormous. The fee is also enormous.

Bitcoin Depot charges roughly twenty percent on every transaction. A markup that no traditional money-transfer service has charged in fifty years. Western Union, at its worst, took about eight percent. Bitcoin Depot took more than double that — and the customer paid it. Because the alternative was opening a brokerage account, completing identity checks that took days, and waiting for a bank transfer to clear.

The kiosk delivered Bitcoin in three minutes. That was the entire product.

By twenty twenty, Bitcoin Depot has roughly two thousand machines deployed across the country. By twenty twenty-three the count crosses six thousand. The company launches a product called BDCheckout that lets shoppers buy Bitcoin at the cash register of a partner retailer, in thirty-one states, without ever touching one of the orange kiosks. The cashier rings the purchase like a gift card. The Bitcoin arrives in the customer's wallet before they leave the store.

The unit economics are extraordinary. A single kiosk that processes ten thousand dollars of cash per week, at a twenty-percent fee, recovers its hardware cost in months. The machine itself is the entire business — a vending machine selling digital currency at a markup so wide that even a quiet store location turns profitable.

By twenty twenty-three, Bitcoin Depot is ready to go public.

Twenty twenty-three. Bitcoin Depot completes a merger with a special-purpose acquisition vehicle — a SPAC. The mechanism bypasses the months of underwriter scrutiny and disclosure that a traditional initial public offering would require. The shares begin trading on the Nasdaq under the ticker BTM. Bitcoin Depot is now one of the only pure-play Bitcoin ATM operators on a major United States stock exchange.

The story Wall Street is sold is a beautiful one. Crypto adoption is accelerating. Bitcoin spot exchange-traded funds are about to be approved. A whole generation of Americans wants exposure to digital currency but does not trust banks, does not understand brokerages, and would rather hand cash to a machine in their corner store than navigate a smartphone app.

Bitcoin Depot owns the largest physical distribution channel for cryptocurrency in North America. That is the pitch.

By August twenty twenty-five, the market value of Bitcoin Depot reaches one point six billion dollars. The machine count crosses nine thousand. The company operates in forty-seven of the fifty states. It is the largest crypto-ATM operator on the continent by a wide margin.

In November twenty twenty-five, Bitcoin Depot announces a planned executive succession. Founder Brandon Mintz will move from chief executive to executive chairman, effective the first of January. The chief operating officer, Scott Buchanan, will be promoted to chief executive. Elizabeth Simer will become the new chief operating officer.

This is the peak. The moment of maximum confidence in the public story.

It is also the last moment before the unraveling.

Twenty twenty-five. While Bitcoin Depot's stock price climbs and its executives plan a smooth succession, a different chart is climbing in parallel. The Federal Bureau of Investigation's Internet Crime Complaint Center records thirteen thousand four hundred and sixty separate complaints about cryptocurrency kiosks in a single calendar year.

The reported losses total three hundred and eighty-nine million dollars. A fifty-eight percent jump over the prior year.

And of that figure, approximately two hundred and fifty-seven point five million dollars was lost by Americans aged sixty and older.

The pattern of the scam is almost always the same. A retiree receives a phone call. The caller identifies themselves as an officer of the Social Security Administration, the Internal Revenue Service, or a technology company's fraud-prevention department. The caller informs the retiree that their bank account has been compromised — and that the only safe place for their savings is a special, government-controlled cryptocurrency wallet.

The retiree is instructed to withdraw cash from their bank — thousands of dollars, sometimes tens of thousands. They are told to drive to a specific cryptocurrency kiosk. Bitcoin Depot kiosks, because of their density, are very often the closest. They are told to feed every bill into the slot. They are given a QR code over the phone. They scan it.

The cash becomes Bitcoin. The Bitcoin arrives in a wallet controlled by the scammer, often within minutes, sometimes routed through three different countries before the retiree even leaves the store.

The transaction is irreversible. By the time the retiree calls the police, by the time the police call the FBI, the funds are gone.

What makes this story strange — and what makes the collapse of Bitcoin Depot so distinct from a normal corporate failure — is that the technology to stop this fraud already existed inside the company.

In November twenty twenty-two, Bitcoin Depot acquired a majority stake in a Canadian company called BitAccess. BitAccess was founded in twenty thirteen in Ottawa. It built the software that runs cryptocurrency kiosks for operators in more than fifteen countries — identity verification, transaction limits, sanctions screening, fraud monitoring. It held SOC 1 and SOC 2 compliance certifications, the same certifications used by banks.

Bitcoin Depot owned the compliance stack. The technology to detect and stop fraud existed inside its own balance sheet.

It was not enough.

March twenty twenty-six. The state of Indiana passes legislation banning cryptocurrency kiosks outright. Operating one inside Indiana state lines becomes illegal. It is the first complete statewide ban in the United States.

Tennessee passes a parallel law. Operating a crypto kiosk is now a Class A misdemeanor in the state — a criminal charge, not a civil violation. Minnesota schedules its own ban to take effect within the year.

In March, Connecticut's banking regulator suspends Bitcoin Depot's money transmitter license. The order cites specific instances in which Bitcoin Depot facilitated transactions that the company knew, or should have known, were the product of fraud against elderly victims.

In February twenty twenty-six, the attorney general of Massachusetts, Andrea Campbell, files a civil lawsuit in state court. Her complaint alleges that Bitcoin Depot built a business model that knowingly profited from elder fraud — that the company saw the patterns, had the technology to intervene, and chose not to.

The attorney general of Iowa follows weeks later with a parallel case. The Iowa complaint alleges deceptive pricing, refund policies that exploited victims, and the processing of transactions the company knew or should have known were scams.

Other states do not ban the kiosks outright. They impose new safety rules. Daily transaction limits drop from fifteen thousand dollars per customer to two thousand. Identity verification tightens. A mandatory video warning, narrated by a state attorney general, plays before every transaction. Refund windows expand from twenty-four hours to seventy-two.

Each rule, taken on its own, is reasonable. Each rule, on its own, makes a kiosk safer for the next person who walks up to it with a stack of cash and a phone call in their pocket.

And each rule, on its own, strips a piece of the high-fee, high-volume cash-throughput economics that the entire Bitcoin Depot business model is built on.

The kiosks are still legal in most states. They simply no longer make money.

First quarter twenty twenty-six. Bitcoin Depot reports a year-over-year revenue collapse of forty-nine point two percent. Eighty point seven million dollars of revenue vanishes from the comparison. Gross profit falls eighty-five point five percent. Net loss for the quarter is approximately nine and a half million dollars.

The Securities and Exchange Commission filing on May twelfth includes two phrases that mark the end of a public company. Going concern. Material weakness — specifically, in the reconciliation of cash in transit between kiosks in the field and the corporate operating accounts. The auditor cannot tell, with certainty, how much money is actually in the network.

In April, hackers breach Bitcoin Depot's operational Bitcoin wallets and steal three point six million dollars. The funds are never recovered.

On March twenty-third twenty twenty-six, Alex Holmes — the former chief executive of the money-transfer giant MoneyGram, who had joined the Bitcoin Depot board the previous August — is appointed chairman and chief executive. He is the company's third chief executive in three months.

On April eighth, a new chief compliance officer is hired. Anthony Gagliardi the Third — a veteran of OKX, Paxos, and Coinbase. The hire is, by any honest reading, a last-ditch attempt to satisfy the state regulators who are closing in. He has roughly five weeks before the company files.

On May twelfth, Bitcoin Depot misses the deadline to file its first-quarter ten-Q report with the Securities and Exchange Commission. The going-concern flag is now visible in the filings.

On May eighteenth twenty twenty-six, Bitcoin Depot files a voluntary Chapter Eleven petition in the United States Bankruptcy Court for the Southern District of Texas.

The numbers on the petition cover sheet:

Total assets — eleven point three million dollars. Total liabilities — twenty-six point nine million dollars. Net deficit, roughly fifteen million dollars. Market capitalization — approximately nine million dollars.

The press release issued by the company describes the proceeding as an orderly wind-down. The plan, the filing states, is an asset-by-asset sale. There will be no going-concern buyer.

Every kiosk in the network is powered off the same day the petition is filed. Across forty-seven states, in tens of thousands of gas stations and convenience stores, nine thousand orange-and-black boxes go dark in unison.

On May nineteenth, the Ontario Superior Court of Justice in Canada issues a recognition order under the Companies' Creditors Arrangement Act — extending Chapter Eleven protection to the Canadian subsidiaries.

On May twenty-sixth, the Nasdaq stock exchange suspends trading in BTM common stock and warrants. The exchange cites both the bankruptcy filing and the missed ten-Q.

Roughly four thousand five hundred consultants, technicians, and operations staff are notified of termination under the federal WARN Act, with sixty days of statutory notice. The executive separations are scheduled for July seventeenth.

The only asset with serious outside buyer interest is BitAccess — the Canadian compliance-software subsidiary. The technology Bitcoin Depot bought in twenty twenty-two, to scale faster, to integrate hardware and software, to build the very identity-verification stack the regulators were asking for. It is now the one piece of the empire worth selling.

And here is the detail that lingers when the dust clears.

The day Bitcoin Depot died, the price of Bitcoin was higher than it had ever been.

The global count of cryptocurrency kiosks did not fall in twenty twenty-five. It rose — from thirty-seven thousand seven hundred and twenty-two, to thirty-nine thousand one hundred and fifty-eight. The industry kept growing. The leader did not survive.

What killed Bitcoin Depot was not a fall in crypto, and not a failure of technology. The compliance stack was already in the building. The hardware was already in forty-seven states.

What killed Bitcoin Depot was the gap between two reasonable goals. The goal of letting a retiree walk into a corner store and buy a small amount of Bitcoin without a brokerage account. And the goal of stopping the same retiree from walking into the same store with their entire life savings and feeding it into the same machine, on the instructions of a stranger on the phone.

The rules written to close that gap — daily limits, video warnings, identity checks, refund windows — were not unreasonable. They were the safeguards a country writes when its own Federal Bureau of Investigation logs thirteen thousand four hundred and sixty separate complaints in a single year.

They were also, taken together, the exact set of rules that made a kiosk business uneconomical.

Nine thousand machines. Forty-seven states. One billion six hundred million dollars of public-market value. Switched off overnight.

The party — the boom in physical cryptocurrency infrastructure that began in twenty thirteen and ran for thirteen years — is over.