Albuquerque's city council voted to ban Bitcoin ATMs outright. Operators get 45 days to pull the machines off the wall, unbolt them from bodega counters and laundromat lobbies, and eat the loss. The stated reason, repeated in every headline I've read this morning, is that 90% of transactions on these terminals are fraud.
I've been hunting spreads while the market sleeps since 2017, and I've watched a lot of municipal regulators swing a hammer at a problem they don't understand. This one is different in kind, not just in degree. Because the 90% number is doing two jobs at once: it justifies a physical ban, and it launders a much older complaint about cash-to-crypto rails that nobody in a council chamber wants to say out loud.
Let me get the raw facts down before the spin buries them.
The ban is municipal law, passed at the city level, not state and not federal. It targets the physical kiosks — the standalone terminals that let a person feed in dollar bills and receive Bitcoin, or the reverse. The removal window is 45 days from passage. That's not an emergency order, that's a considered timeline, which means this thing went through committee, got a fiscal note, got a legal review, and survived. People confuse a fast vote with a rushed process. This was neither fast nor rushed. It was deliberate.
The supporting data point is the "90% of transactions are fraud" claim, attributed to what city officials characterize as a pattern of complaints and, in some retellings, to law enforcement caseloads. There's a "criminal channel" framing attached to it — the idea that these machines function primarily as a cash laundering surface for scammers who talk elderly victims into walking into a gas station and depositing their retirement.
That part, I'll be blunt, is real. The scam pattern is real. But the number, and what it's used to justify, is where the analysis has to start.
Here's the context you need before you can read any of this correctly.
A Bitcoin ATM is not an exchange. It's a physical terminal — a crypto kiosk — that performs a one-directional or bi-directional fiat-to-crypto swap. You insert cash, the machine connects to a backend operator, the operator buys BTC on a wholesale venue, and the BTC is sent to a wallet you control via a printed QR code or an SMS link. The operator makes money on a spread. That spread historically ran 7% to 20%, sometimes higher on the sell-back side, and it is the reason these machines exist at all. The underlying Bitcoin is just the product; the business is the spread and the convenience premium.
The operators — think CoinFlip, BitStop, Coin Cloud before it blew up, the late-stage BitAccess installations — are registered as Money Services Businesses with FinCEN. They're supposed to run KYC. In practice, the KYC floor varies wildly. High-traffic urban machines ask for ID scans and selfies. Rural and low-volume machines have historically let you transact under a low cap with nothing but a phone number, which is functionally anonymous for anyone with a burner.
That inconsistency is the entire ballgame. Because the scam victim who walks into a kiosk at 11 p.m. with $9,000 in cash and a QR code a "Microsoft support agent" texted them is not a customer. They're a victim being processed by a machine that has no human at the counter to ask a question.
So when a council member says 90% of transactions are fraud, what they may actually mean is that 90% of the complaints that reach the city involve fraud. Those are two very different statements. One is a measured transaction-level statistic. The other is a filtered sample drawn from the only channel through which these machines generate public complaints — namely, people who got scammed and went to the police.
That distinction matters because a ban built on a filtered sample is a ban built on a story, not a dataset.
The information gain here is not that Albuquerque banned the machines. It's that the ban is a test case for something bigger: whether American municipalities will regulate crypto by attacking its physical last mile while leaving the digital rails untouched.
And that's the angle nobody covering this is writing about.
Think about what stays legal in Albuquerque after the machines come off the wall. Coinbase stays legal. Binance.US stays legal. Every centralized exchange with a banking partner stays legal. Peer-to-peer transfers stay legal. Hardware wallets stay legal. The only thing getting killed is the one channel that converts physical cash into crypto in a place where someone can stand at a counter.
Why would a city council care specifically about that channel?
Because it's the channel they can see. It's the only part of crypto that has a physical footprint, a landlord, a lease, a permit record, and a city council member whose phone rings when Grandma gets scammed. Every other rail is abstract. You cannot rip Coinbase out of a laundromat wall. You cannot point a local news camera at a peer-to-peer transaction.
This is the same pattern I watched during the 2022 Terra/Luna collapse, when I scraped Anchor Protocol's withdrawal queues and found the bank run forming about 30 minutes before the mainstream outlets caught up. The lesson there wasn't that the math was wrong. It was that the visible stress always gets reported as the story, and the invisible stress — the part already priced in, already moving, already hedged — gets ignored until it detonates somewhere else.
Albuquerque's ban is visible stress. The question every operator and every reader should be asking is where the real stress is hiding.
Let's do the numbers, because I don't trust narratives I can't price.
The Bitcoin ATM network in the United States is large. Depending on which tracker you pull — CoinATMRadar is the standard, though coverage gaps exist — the country hosts somewhere north of 30,000 machines, which is the overwhelming majority of the global fleet. The industry grew hard through 2020 and 2021, when retail FOMO made convenience worth a 15% spread, and then it consolidated brutally. Coin Cloud went bankrupt in early 2023 and took thousands of machines with it. The survivors got leaner and, in many cases, more compliant, because the ones that didn't couldn't get banking access.
Now look at the economics of a single Albuquerque-class machine. A busy urban kiosk might do $30,000 to $80,000 in monthly volume. At an average 12% gross spread, that's $3,600 to $9,600 in gross monthly revenue per location, out of which comes the landlord's cut (often a percentage of volume, sometimes 20-30% in high-footfall spots), the batch cost of the operator's own buy-side execution, KYC vendor fees, the light bill, the armored car service, and the general liability insurance.
Net margin on a good location sits somewhere in the 15-30% range. On a marginal location — a kiosk inside a closed-lobby convenience store in a low-traffic ZIP code — net margin can go negative, and that's exactly the machine that has the loosest KYC, because the operator is squeezing every basis point to stay alive.
Here's the contrarian piece nobody wants to run. The machines most likely to host fraud are the machines least able to afford to stop it. The ban doesn't remove the scammers. It removes the operator's ability to fund a better KYC layer.
That's not a defense of the operators. It's an observation about incentive design. If you regulate by prohibition instead of by compliance standard, you don't get compliance. You get an exit, and you get the scam demand migrating to the next nearest unregulated channel — which, in the case of a person who has already been socially engineered into walking into a building with cash, is a gig-economy driver turned informal OTC desk, a gas-station counter that "knows a guy," or a cross-state drive to the next city with machines.
I've said this before and I'll say it again, because it keeps being true: volatility is just noise until it becomes signal, and so are regulatory headlines. You have to read them for where the demand goes, not where the ban lands.
Let me put my money where my mouth is and walk through what I'd actually do if I ran one of these operators, because that's the only version of this analysis that has any practical value.
First, I'd read the 45-day window as a signal about how these bans are constructed, not as a countdown. Notice the window. It's long enough to negotiate, long enough for a legal challenge to be filed, long enough for the operator to relitigate the underlying data. Cities don't hand you a 45-day window unless they expect a fight and want the optics of having been reasonable. The window is a confession that the council knows the evidentiary record is thin.
Second, I'd look at where the machines go after Albuquerque. This is where the operator matrix matters. If the machines are owned outright, they get trucked to Texas, to Arizona, to the Florida strip, to anywhere with a heavier cash economy and a friendlier local posture. If they're leased or financed, the asset gets written down, the lease negotiation turns hostile, and the operator quietly stops expanding in states with a large number of mid-size cities and active Democratic city councils — because that's the political profile most likely to replicate this ordinance.
Third, and this is the part most retail readers will miss: watch what happens to the compliance vendors. Companies that sell KYC-on-kiosk solutions just got handed a sales pitch. "Albuquerque banned the machines because they couldn't identify the customer. We can identify the customer. Buy our stack, keep your city council off your back." That's a real second-order trade. I audited a revenue-sharing mechanism in a related vertical last year and the pattern was identical — the regulation didn't kill the category, it killed the worst-compliant part of the category and pushed the margin to whoever could afford to look clean.
Fourth, I'd short the narrative, not the asset. There is no Bitcoin trade here. Bitcoin is not Albuquerque's problem and Albuquerque is not Bitcoin's problem. Anything that trades on the premise that this ban is bearish for BTC is trading noise. The genuinely tradeable signal is in the local operators and in state-level preemption fights — because the second a state legislature preempts a municipal ban, you get a legal template that every operator in the country files at the next city hall that tries this.
Let me be concrete about the preemption fight, because it's the one piece of this story that could actually move money.
Municipal authority over financial services is not absolute. Cities have police power — public safety, zoning, licensing — and crypto kiosks are typically regulated on that basis, not as securities. A city can absolutely say "no new cash-to-crypto kiosks inside city limits" under its licensing and zoning authority. What a city cannot easily do is forbid a federally registered MSB from operating when that firm holds the appropriate state license and the state has a regulatory framework that contemplates its existence.
That's the crack in the wall. New Mexico has a Money Services Business framework. If the operators were licensed at the state level and operating in compliance, the city's blanket ban raises a real preemption question, and the operators know it. The 45-day window is very likely the runway for exactly that argument to be filed.
And if it gets filed, it gets litigated, and if it gets litigated, the result becomes a national template. A court that upholds the ban tells every city council in America they can do the same. A court that strikes it down tells every city council in America they need a better record before they try.
That's the trade. Not BTC.
Now let me pivot to the part that genuinely irritates me about how this is being covered, because if I only write about the ban I'm doing exactly what the aggregators do.
The news reports are all framing this as a victory against fraud. Fine. But look at who the fraud actually targets, because the category of victim tells you what the machine is really for.
The archetypal crypto kiosk scam is the grandparent scam, the romance scam, the "your account is compromised" scam, the tax-authority scam, the "we found your identity being used, buy Bitcoin to secure it" scam. They all share a structure: a vulnerable person is induced by a confident voice on the phone to convert dollars into an irreversible, untraceable bearer instrument. The kiosk is the last ten feet of that pipeline.
But here's the thing. The kiosk is not the vulnerability. The phone call is the vulnerability. The kiosk is also, functionally, the only part of that pipeline with a camera pointed at it and a bank account behind it.
That's the contrarian inversion nobody is writing: a licensed, compliant, ID-requiring Bitcoin kiosk is arguably the best-monitored chokepoint in the entire cash-to-crypto scam ecosystem, and Albuquerque just removed it.
Think about it from a law enforcement perspective. If you want to catch a grandparent scammer, you want a physical location a victim will actually walk into, staffed or monitored by a machine that records a face and logs a transaction, operated by a company that is already a FinCEN-registered MSB and can be subpoenaed for records. That's a surveillance asset with a coin slot.
You close the kiosk and the victim doesn't stop getting the call. The victim gets told to buy gift cards, to wire money, to drive to a Bitcoin ATM in the next town over, to meet someone in a parking lot, to use an unregulated peer-to-peer app with no face and no log. The demand for the scam doesn't care about municipal boundaries. The pipeline just bends.
I'm not arguing the kiosks are good. I'm arguing that banning the visible node of an invisible crime is performance, not enforcement, and I've watched this exact movie before. When Terra depegged, the visible panic was on Anchor's withdrawal queue. The actual money had already rotated through the Curve pools and the lending markets, and it was the less visible flows that determined who got out whole and who got vaporized. Always follow the flow, not the fire.
Let me talk about the data claim itself, because a 90% fraud rate, if taken at face value, is not just damning for the kiosk industry. It's evidence of a massive AML failure that federal regulators have been complaining about for a decade.
If 90% of kiosk transactions were genuinely fraudulent, FinCEN would have a duty to act against the operators' MSB registrations. The fact that this number is coming from a city council and not from FinCEN tells you it's a local estimate, arrived at through a local lens, on local complaint data. I'd tag its confidence as medium at best and probably lower. The FTC has published reports on crypto-related fraud losses that support the concern directionally — the category is real, the losses are real, the trend line is bad — but a specific 90% claim requires a specific dataset, and I have not seen one cited that would survive a Bloomberg terminal footnote, let alone a courtroom.
That's the gap. And gaps are where asymmetry lives.
Here's my read on what is actually happening at the level of incentives, and this is the part I'd put my name on.
American cities are discovering that the fraud harm from crypto is concentrated in a handful of physical channels they can regulate cheaply, while the fraud harm from crypto that runs through banks and exchanges is diffuse, expensive, and politically inconvenient to confront. So they regulate the cheap target and call it progress.
That's not a crypto-specific failure. It's a governance-specific pattern. You always regulate what you can see. The kiosk is visible. The phone scammer is not. The bank that let a wire clear is not. The exchange with a compliance budget bigger than the city attorney's office is not.
And so the kiosk dies, and everyone gets to feel like something was done.
Which brings me to the one structural thing about this industry that I think is deeply under-reported, and it's why I take this Albuquerque story more seriously than most people will.
The Bitcoin ATM network is the crypto industry's only meaningful cash ingress. It's the only bridge between physical currency — the stuff in the drawer, off the books, invisible to the banking system — and the ledger. Every other fiat ramp requires a bank account, a name, a KYC profile, a traceable wire. The kiosk is the sole remaining place where physical anonymity meets digital settlement.
That's why it's under attack. Not because 90% of it is fraud, but because it is the last free boundary, and the last free boundary always gets closed first.
If you want a macro lens, put it here: the same year America approved spot Bitcoin ETFs — the most institutionally-legible, custody-wrapped, banking-integrated Bitcoin product ever created — a mid-sized American city banned the least-legible, least-integrated, most anonymous Bitcoin product it could reach. Those two events are not in tension. They're the same policy expressed at two altitudes. The system is being shaped, deliberately, toward a version of Bitcoin that is traceable at every step and exit-only through regulated channels. That's the trajectory. It doesn't require a conspiracy. It's just how compliance capital and political risk accumulate.
And it connects, if you're paying attention, to my broader view of where the value is going to settle. Post-halving, the mining side is consolidating toward a small number of pools, because marginal miners can't survive the revenue compression — and when the hashrate concentrates, the decentralization story gets thinner regardless of how many nodes you run. In the same way, the access side of Bitcoin is concentrating toward regulated custodians and traceable rails, because anonymous access is getting regulated out of every physical channel, one city at a time. Neither trend is a headline. Both are the actual story.
I spent the 2017 ether rush manually scraping 40+ whitepapers off the chain during the ICO peak, and the lesson I took from that wasn't about the tokens. It was that the market always prices the visible thing and misprices the structural thing. The visible thing here is a council vote in New Mexico. The structural thing is that American crypto's cash boundary just got a little narrower, and the money that used to move through it is going to move somewhere — and wherever that is, that's where the next regulation and the next opportunity go.
So let me close with what I'm actually watching, because a good trader never ends on a summary. A good trader ends on the next level.
Watch the preemption fight. If it gets filed in the 45-day window, it's the most important crypto legal proceeding you're not tracking, because a ruling one way or the other sets the template for every city that wants to copy Albuquerque's playbook. Watch the neighboring jurisdictions — the suburban cities around Albuquerque, the smaller New Mexico towns, the Texas border towns — because demand doesn't stop at a city line and neither does the supply that serves it. If machines start appearing just outside the city limits, that tells you the ban displaced rather than destroyed, which is almost always what bans do.
Watch the compliance vendors and their sales decks. Watch the FinCEN posture, because if the feds ever formalize a kiosk-specific rule, the state-versus-city fight becomes moot and every operator needs a new playbook overnight. And watch the operators' own language in the next quarter's filings — if they talk about "relocating assets to favorable jurisdictions," you'll know the industry reads this as the first domino, not a one-off.
And above all, do not trade this on the Bitcoin price. There's nothing there. The signal is in the rails, the licensing, and the lawyers.
Speed kills slower than greed, and the slowest thing in this whole story is the gap between what a city council said and what the data actually shows. That gap is where the next twelve months of this industry get decided. Hunt it while the rest of the market is still reading the headline.