Crypto Scams in Pennsylvania: What Is Actually Happening

The Pennsylvania numbers

From the FBI's 2025 Internet Crime Report and Pennsylvania consumer protection data:

Nationally in 2025, cryptocurrency fraud complaints to IC3 numbered 181,565 with more than $11 billion in reported losses, up roughly 22% year over year. Crypto investment fraud alone accounted for around $7.2 billion.

The kiosk-specific numbers are the ones that matter most here. Crypto ATM and kiosk fraud complaints reached 13,460 in 2025 with $389 million in reported losses — a 58% increase in losses and a 23% rise in complaints over the previous year. Older Americans accounted for $257.4 million of that across 6,188 complaints. Adults over 60 lost $4.4 billion to crypto fraud overall, close to 40% of all crypto fraud losses, leading every age group.

Pennsylvania's own Bureau of Consumer Protection reported 90 cryptocurrency fraud complaints totalling $12.3 million in losses, of which 85% of victims were aged 60 or over. And in testimony supporting kiosk legislation, lawmakers cited over 31,000 Pennsylvanians losing $538 million, with an increasing share of those victims losing money specifically after withdrawing cash and depositing it into scammers' wallets at kiosks around the state.

Why kiosks became the settlement channel of choice

Scammers used to ask for wire transfers, then gift cards, then prepaid cards. Each of those channels tightened up — banks trained staff to intervene on suspicious wires, retailers put warning signage on gift card racks, card networks built fraud controls.

Crypto kiosks currently sit in the gap. They accept cash, they are open around the clock, they require no bank involvement, transactions are irreversible by design, and until recently many machines had no human oversight at all. From a fraud operation's perspective, that is close to ideal.

The industry has responded partially — several major operators now display fraud warnings on screen, require ID verification on every transaction, and run blockchain analytics against known scam addresses. But warnings only work when a victim is in a position to read them, and a victim being coached through the process by a caller on the phone is not.

This is why the proposed Pennsylvania legislation focuses so heavily on the kiosk layer specifically, and why the single most effective personal defence is a rule about phone calls rather than anything technical.

The scripts circulating in Pennsylvania

Every one of these ends the same way: the victim is directed to a specific crypto kiosk, kept on the phone throughout, and coached through scanning a QR code that belongs to the scammer.

Regional variants across the Commonwealth

Scripts are localised, because a caller naming a utility you actually use is more convincing.

Southeastern Pennsylvania — PECO disconnection threats dominate. Philadelphia Parking Authority impersonation appears in the city. In Upper Darby and other diverse communities, immigration-status threats target newer arrivals, and in Media the Delaware County courthouse variant is common.

Lehigh Valley and Berks — PPL Electric and Met-Ed are the utility names used. Reading and Allentown see heavy immigration-threat activity aimed at Latino communities, and remittance-adjacent fraud where a "transfer agent" requests crypto.

Northeastern Pennsylvania — the highest per-capita exposure in the state, driven by an older population. PPL and UGI utility threats, Luzerne and Lackawanna County courthouse warrants, and the grandparent script all circulate heavily. See our Scranton and Wilkes-Barre guides.

Western and central Pennsylvania — Duquesne Light and Penelec are the utility names. In lower-density areas like Cambria County and Lawrence County, scammers send victims on long drives to reach a machine — which perversely creates an intervention window for family members who notice.

York and manufacturing counties — the employment cheque scam is prominent, targeting warehouse and manufacturing workers with fake remote job offers. See our York guide.

Online investment fraud

The kiosk scripts target older Pennsylvanians. Online investment fraud targets everyone, and it accounts for the largest share of dollars lost nationally — around $7.2 billion in 2025.

The relationship investment scam

Someone met on a dating app, a social platform or even a wrong-number text builds rapport over weeks or months. Money is never mentioned early. Eventually they reference a trading platform with remarkably consistent returns. Small withdrawals work at first — that is the recruitment mechanism. Then a larger deposit is required to "unlock" the balance, or a tax must be paid before withdrawal. The platform is fabricated end to end.

The tell never changes: the platform was introduced by someone you met online rather than found yourself. That single fact should trigger verification regardless of how long the relationship has lasted or how plausible the person seems.

Affinity fraud

In affluent Pennsylvania communities the mechanism is different and more polished: a "private fund" or "algorithmic strategy" introduced by a plausible acquaintance at a club, a church, a school event. Early participants may receive real "returns", which recruits further investors — that is the structure of the fraud, not evidence against it.

Consistent returns in a volatile asset class are the defining signature of a Ponzi arrangement. Verify the entity yourself in NMLS Consumer Access and the FinCEN MSB registry, and search the name with "enforcement" and "cease and desist". Who introduced it is irrelevant to whether it is real.

Recovery scams

A second fraud aimed at people already victimised. Someone offers to trace and recover stolen crypto for an upfront fee, sometimes claiming law-enforcement or blockchain-forensics credentials. They cannot recover it, and no legitimate service does this for a fee. Victim lists circulate among fraud operations precisely because previously defrauded people are the most receptive targets.

Technical attacks: SIM swaps and fake wallets

For people who do hold crypto, the losses come from a different direction.

SIM-swap attacks are the leading cause of retail account takeover. An attacker persuades a mobile carrier to port your number to a device they control — carrier verification is often just a name and date of birth, both trivially findable — then uses SMS password resets to take over your exchange account. Two fixes eliminate this and take four minutes combined: switch two-factor authentication from SMS to an authenticator app on every financial account, and call your carrier to add a port-out PIN or account passcode.

Fake wallet apps installed from a link rather than an official app store, which prompt for a recovery phrase during setup. No legitimate wallet asks for an existing recovery phrase through a web form or a support chat. Ever. Under any circumstances.

Address poisoning sends you a tiny transaction from an address visually similar to one you use, hoping you copy it from your history next time. Always verify the full address, or use an address book feature.

Malicious signature requests on decentralised applications can grant unlimited spending permission over tokens in your wallet. Read what you are signing, and use a separate wallet with limited funds for anything experimental. Our wallet guide covers safe practice in detail.

Protecting your family — a practical checklist

1. Deliver the sentence before the call comes

   "Nobody legitimate will ever ask you to pay at a bitcoin machine." Say it to every older relative. Write it on a note by the phone. This is not undignified — it is a fire escape plan.

2. Establish a family callback rule

   Any unexpected demand for money, from anyone, for any reason, gets a phone call to a designated family member before anything happens. Scams only work while the victim is isolated on the line.

3. Agree a family code word

   AI voice cloning has made "it sounded like them" unreliable evidence. A code word settles a grandchild-in-trouble call in five seconds.

4. Move every financial account off SMS two-factor authentication

   Authenticator app instead, plus a port-out PIN with your mobile carrier. Four minutes, free, and it closes the most common technical attack path entirely.

5. Make the three-minute verification routine a habit

   NMLS Consumer Access, FinCEN MSB registry, and a search for enforcement actions. Before every deposit to any platform, regardless of who recommended it.

6. Never transact at a kiosk while on a phone call

   If this were the only rule anyone followed, Pennsylvania's kiosk fraud losses would fall dramatically.

What to do if it has already happened

Act fast, and do not let embarrassment stop you. Under-reporting is a serious problem — many victims never tell anyone, which means the cases never get built.

1. Contact the operator or platform immediately

   Call the number on the kiosk or receipt, or the exchange's support line. In rare cases a very recent transaction can be flagged before it settles. Do this first.

2. Report to local police

   File a report and get the report number. You will need it for everything that follows.

3. File with the Pennsylvania Attorney General

   The Bureau of Consumer Protection accepts complaints from anyone in Pennsylvania, regardless of immigration status.

4. File with the FBI's IC3

   ic3.gov is the federal clearing house. This is the data that produces the annual reports cited on this page and that supports multi-state investigations.

5. Preserve everything

   The kiosk receipt, the wallet address, the transaction hash, the caller's phone number, screenshots of messages, and any website addresses. This is the evidence.

6. Ignore anyone offering to recover it for a fee

   That is the second scam, and it targets people at exactly this moment. No legitimate service recovers stolen cryptocurrency for an upfront payment.

What Pennsylvania is doing about it

Senate Bill 1015 — the Virtual Currency Kiosk Regulation Act — was introduced in September 2025 and received a committee hearing in April 2026. Companion legislation has been circulated in the House, with Representative Liz Hanbidge signalling a bill to regulate cryptocurrency kiosks and institute consumer safeguards.

As proposed, kiosk operators would be licensed by the Department of Banking and Securities and required to comply with daily transaction limits, transaction fee caps, identity verification, pre-transaction disclosures of material risks, a plain-language fraud warning, written anti-fraud policies including a specific policy protecting elderly and vulnerable adults from financial exploitation, blockchain analytics, live 24-hour customer service, detailed receipts, and quarterly kiosk location reports to the Department.

Separately, since 15 October 2024 the Department has expected businesses transmitting virtual currency for Pennsylvania customers to hold a Money Transmitter Licence. Our Pennsylvania crypto law guide tracks the full picture.

None of which helps a victim tomorrow. Until the legislation passes, the protection that works is the one you install in your own family: the sentence, the callback rule, and the code word.