Crypto Scams in Baltimore: the Local Playbooks
Almost every crypto loss in this city follows one of five scripts, and four of them end with a person standing at a kiosk on the phone. Learn the scripts and the whole category becomes surprisingly easy to defeat. Here they are, plainly, with where to report.
Using a registered, licensed venue removes an entire class of risk. CEX.IO is FinCEN-registered with US money transmitter licensing (NMLS ID 1804170).
This is the page we would keep if we had to delete every other one on this site. Fee optimisation saves a Baltimore reader a few hundred dollars a year. Recognising an impersonation call saves someone their savings — and in this city, kiosk-collected fraud is not a theoretical risk. Local and county police in the Baltimore region have issued repeated warnings about residents being walked to crypto machines by callers, and the pattern is consistent enough to be worth memorising.
One structural fact explains why crypto is the collection method of choice. An on-chain transfer is final. There is no chargeback, no issuing bank, no reversal window, no fraud department that can claw it back. Combine that with cash, which is untraceable going in, and you have the ideal channel for someone who needs money to disappear in ten minutes. That is the whole reason kiosks feature in these stories.
No court, police department, sheriff's office, utility company, tax authority, federal agency or bank in the United States will ever ask you to resolve anything by putting cash into a cryptocurrency machine, buying gift cards, or reading a voucher code over the phone. Not for a warrant, not for a fine, not to "secure" your account, not to help an investigation. If that is the instruction, the call is fraud. Hang up and call the organisation back on a number you looked up yourself.
The five playbooks
1. The impersonation call — the one that hurts Baltimore most
A caller has authority and urgency. Perhaps there is a warrant for a missed jury summons. Perhaps your utility will be disconnected within the hour. Perhaps your bank's fraud team has detected a compromise and needs you to "move funds to a secure wallet". The details vary; the shape never does. There is a threat, a deadline measured in minutes, and an instruction to take physical cash to a machine while staying on the line.
Two details make this script recognisable. First, the caller will not let you hang up and call back — because the moment you do, the illusion collapses. Second, they need you to keep the transaction secret from store staff, and will often coach you on what to say if a cashier asks. Any request for secrecy from a shop assistant is, on its own, conclusive proof of fraud.
2. Romance and long-game investment grooming
Weeks or months of genuine-feeling conversation on a dating app, a social platform or even a wrong-number text that turns into a friendship. Money is never mentioned early. Eventually a trading opportunity appears — often a platform the other person "uses themselves", with a polished interface and a dashboard showing your balance growing.
The tell is always the withdrawal. Small early withdrawals work, building confidence. The large one triggers a fee, a tax, a verification deposit, an unlocking payment. There is no money on that platform and never was; the dashboard is a web page. If a withdrawal requires a deposit, it is over — stop sending, screenshot everything, and report.
3. Fake job, rental and marketplace flows
A remote job that requires you to buy crypto with your own funds to "test the payment system". A rowhouse listing in Canton or Hampden at an attractive rent where the landlord is out of state and needs a deposit in Bitcoin to hold it. A marketplace buyer who overpays and needs the difference returned in crypto. Every one of these inverts the normal direction of money — legitimate employers and landlords do not need you to send crypto to prove anything.
4. Fake support and wallet-drainer sites
You search for help with an exchange or wallet and reach a sponsored result, a plausible support account, or a Telegram group with your platform's logo. The "agent" is friendly, technically fluent, and eventually asks you to verify your wallet by entering your recovery phrase, or to connect it to a site to "resync".
Absolute rule: your recovery phrase is never needed by anyone, for any reason, ever. Not support, not a developer, not a validator, not a compliance check. Anyone who asks is stealing. Real support channels are reached only from the platform's own app or website.
5. The local cash meetup
The specifically dangerous Baltimore variant. Someone offers a better-than-market rate for a private cash trade and proposes a meeting — a parking lot, a hotel lobby, a rented office in the county. These arrangements have produced robberies and violence in US metro areas, including this one. There is no legitimate walk-in cash desk in Baltimore; our OTC guide explains how genuine large trades settle by wire instead. Never meet a stranger to trade cash for crypto. Not in daylight, not in public, not with a friend along.
| Signal | What it really means |
|---|---|
| Urgency with a minutes-long deadline | Preventing you from thinking or verifying |
| Instruction to keep it secret from staff or family | Removing the people who would stop it |
| Guaranteed or fixed returns | Not a thing that exists in real markets |
| A fee required before a withdrawal | The balance is fictional |
| Any request for a recovery phrase | An attempt to empty your wallet |
| A QR code supplied by someone else | Their wallet, not yours |
| Proposal to meet with cash | A physical safety risk, not a trade |
If it has already happened
Act quickly, and do not spend a second on embarrassment — these scripts are engineered by professionals and they catch careful, intelligent people every week.
Stop all contact and send nothing further
The follow-up "recovery service" that contacts victims is, without exception, the same operation or another one. Recovery fees are a second theft.
Preserve evidence
Screenshot conversations, save phone numbers, keep the kiosk receipt, and note transaction hashes and wallet addresses. This is what any investigation runs on.
Notify the operator or platform immediately
Kiosk operators and exchanges have fraud teams. On rare occasions funds are still in a controllable account. Minutes matter.
File the reports
Local police for a case number, IC3 for the FBI, the FTC, and the Maryland Office of the Commissioner of Financial Regulation where a kiosk or money transmitter was involved.
Use the Maryland fraud fee refund process
The 2026 kiosk regulations create a Notice of Fraud route to reclaim fees charged on a fraudulent transaction. It does not return the coin, but it is a real entitlement — see our regulation guide.
Protective habits that cost nothing
- Never transact while on a phone call — no exceptions, no matter who is calling
- Type platform addresses yourself; never reach support through a search advert
- Recovery phrase on paper, offline, never photographed, never typed into a website
- App-based two-factor authentication rather than SMS, on every account
- Agree a family rule: any urgent money request gets a callback on a known number
- Talk to older relatives about the impersonation script specifically — it targets them hardest
Reduce the surface area
Most fraud reaching Baltimore residents arrives through unlicensed platforms, cash channels and strangers. Using a registered venue with real support and documented licensing removes an entire category of exposure. CEX.IO is FinCEN-registered with US money transmitter licensing under NMLS ID 1804170.
Scam and reporting questions
What is the most common crypto scam in Baltimore?
The impersonation call. Someone claiming to be from a court, sheriff’s office, utility, the Social Security Administration or your own bank’s fraud team tells you there is an urgent problem and instructs you to take cash to a crypto kiosk. It is fraud every single time — no government agency or bank in the United States collects money that way.
Can I get my money back after a crypto scam?
The cryptocurrency itself is almost never recoverable, because on-chain transfers are final and the receiving wallet is usually emptied within minutes. Maryland’s 2026 kiosk rules do create a Notice of Fraud process to reclaim the fees paid on a fraudulent transaction, which is worth pursuing, but it does not restore the coin.
Who should I report a crypto scam to in Maryland?
Report to local police for a case number, to the FBI’s Internet Crime Complaint Center at IC3.gov, to the Federal Trade Commission, and — where a kiosk or licensed money transmitter was involved — to the Maryland Office of the Commissioner of Financial Regulation. Notify the kiosk operator immediately as well; speed occasionally matters.
Are Bitcoin ATMs themselves a scam?
No. Legitimate kiosks are legal, registered businesses charging a high but disclosed price for cash convenience. The problem is that scammers weaponise them as a collection channel, because cash into a kiosk is fast, irreversible and hard to trace. The machine is the tool, not the culprit.
How do I know if a crypto investment offer is fake?
Guaranteed returns, a mentor you met on social media, a trading platform showing profits you cannot withdraw, pressure to recruit friends, or a withdrawal that suddenly requires a tax or fee payment first. Any one of those is enough to stop. Real markets do not promise outcomes, and no legitimate platform asks you to deposit more in order to withdraw.