Crypto Scams in Florida, and How to Stop Them

What Florida is actually losing

Florida's exposure to cryptocurrency fraud is not a rounding error and it is not evenly distributed. The state combines several things fraudsters need: one of the largest populations over sixty-five in the country, enormous seasonal in-migration of people unfamiliar with local institutions, a dense crypto kiosk network, and a great deal of visible wealth.

Those kiosk figures were cited in the Florida Legislature's record during the 2026 session and became the evidentiary basis for HB 505, the Virtual Currency Kiosk Act. They cover kiosks only. Fake investment platforms and romance-to-investment schemes cost Floridians considerably more, and every category is believed to be substantially under-reported — because the defining feature of these frauds is that they make the victim feel foolish.

On the enforcement side, the Florida Attorney General's Cyber Fraud Enforcement Unit has become genuinely capable at tracing digital assets. It recovered $3.3 million in the first fiscal quarter of 2026 and $7.2 million in total since its founding roughly two and a half years earlier. In April 2026, working with the Marion County Sheriff's Office, it announced the recovery of $5.4 million from a romance-turned-investment scheme — described at the time as the largest statewide recovery of its kind. It has also returned individual sums including a record $710,000 to a single Florida victim.

Recovery happens. It is rare, partial, and dramatically more likely if you report early.

The kiosk scam, step by step

This is the highest-volume crypto fraud in Florida. Learn the sequence and you will recognise it inside thirty seconds.

1. Step 1 The call, with spoofed authority Someone claims to be from your bank's fraud department, Medicare, the Social Security Administration, a utility about to disconnect, Amazon about a fraudulent order, a court about a missed jury summons, a sheriff's deputy with a warrant, or an immigration authority. The caller ID looks legitimate because it is faked. In Florida, Spanish-language and Creole-language versions of every one of these are in circulation.
2. Step 2 Urgency, and then the tell: secrecy Something terrible happens within hours. And you must not tell anyone — the investigation is confidential, the bank staff cannot be trusted, your family will worry unnecessarily. This is the single most reliable indicator of fraud in existence.
3. Step 3 A specific cash withdrawal You are told exactly how much to withdraw, and often coached on what to say if a teller asks questions. Being given a script for your own bank is not something legitimate institutions do.
4. Step 4 Driving directions and a QR code You are sent to a named crypto kiosk, frequently twenty or thirty miles away — which is why having no machine in your neighbourhood offers no protection at all. In documented Florida cases the caller has arranged a rideshare. They stay on the line while you deposit the cash and scan a QR code they supply. That code is their wallet address.
5. Step 5 Irreversible Once the transaction confirms on the blockchain it cannot be recalled by the operator, the police or a court. This is why crypto was chosen.

From 1 January 2027, Florida's Virtual Currency Kiosk Act requires pre-transaction fraud warnings — including asking whether you have used another kiosk that day — plus daily caps of $2,000 for new customers and $10,000 thereafter, receipts showing the transaction hash and wallet addresses, and a full refund within 72 hours for a first-transaction victim who reports to the operator and law enforcement within 60 days with documentation. Details on our Kiosk Act page.

Romance-to-investment fraud

Sometimes called pig butchering. By dollar value this is the costliest crypto fraud in Florida, and it is the pattern behind the state's largest recovery case.

1. Contact. A dating app, a social platform, a professional network, or a "wrong number" text that turns into a friendly conversation. The approach is warm and unhurried.
2. Relationship. Weeks or months of daily contact. No request for money — and this is precisely what makes it effective. The victim is not being pressured; they are being befriended.
3. The introduction. The contact mentions an investment: a trading platform, an arbitrage system, a mining operation, sometimes framed as a family connection or insider access.
4. The test. A small deposit. The dashboard shows a profit. The victim withdraws successfully. This step is the hinge of the entire fraud — it converts scepticism into confidence.
5. The escalation. A much larger deposit, frequently funded by liquidating retirement savings, refinancing a home or borrowing. The dashboard shows spectacular growth.
6. The wall. The victim tries to withdraw. There is a tax to pay first. Then a compliance fee. Then an additional deposit to "unlock" the account. There is no money and there never was.

Three defences, and they are simple rather than sophisticated.

• Nobody you have only met online should ever advise you on investments. Not a partner, not a friend, not a relative's contact. This single rule defeats the entire category.
• A platform that requires a payment before releasing your withdrawal is a fraud. Always, without exception. No legitimate platform anywhere works this way.
• An early successful small withdrawal proves nothing. It is a designed feature of the scam, not evidence of legitimacy.

Fake platforms and withdrawal walls

The same withdrawal-wall mechanism appears without any romance element — introduced through social media advertising, a Telegram group, a YouTube video, or an "account manager" who contacts you after you commented somewhere.

The recognisable markers:

• You cannot find the entity in NMLS Consumer Access or the Florida OFR register. This alone is decisive.
• Returns are unusually smooth — 3% every month, never a losing week. Real markets do not do this.
• An "account manager" or "adviser" contacts you rather than the reverse.
• Deposits are requested to a wallet address or a personal bank account rather than a named licensed entity.
• Pressure to increase your position before withdrawing anything.
• Fees, taxes or "verification deposits" demanded before a withdrawal will process.
• Aggressive leverage marketing — high-leverage offshore venues profit from liquidations, which is the business model rather than a side effect.

The defence is the two-minute check. Verify the entity in the public register before you deposit, and check any investment adviser on Investor.gov. Then test a small withdrawal before you scale up — if you cannot get $50 out easily, without a fee and without an explanation, you do not own anything. See our licence verification guide.

Account takeover: phishing and SIM swaps

Different category, same outcome. Rather than persuading you to send crypto, the attacker takes control of the account holding it.

Affinity and community fraud

Florida's demographics make this unusually effective, and it deserves naming plainly because the usual advice — "be sceptical of strangers" — does not apply. The whole point is that the introduction comes from someone you trust.

Schemes spread through church congregations, WhatsApp groups, extended families, alumni networks, HOA social pages, youth sports circles, professional associations and — in military towns like Pensacola and Jacksonville — base housing groups and "veteran-owned" fund pitches. The returns offered are usually plausible rather than absurd: 3% a month, not 3% a day.

Central Florida has produced a notable series of prosecuted crypto Ponzi cases in the Middle District of Florida, typically marketed exactly this way. Miami-Dade's immigrant communities, Broward's Caribbean communities and the Treasure Coast's fast-growing suburbs — where most social ties are recent and shallow — have all seen the same pattern.

Two tests defeat nearly all of it, and neither requires doubting your friend:

• Verify the operator's registration. Advisers on Investor.gov, money transmitters on NMLS. Free, two minutes. A real firm passes.
• Test a small withdrawal. Put in a small amount, then take it out. If that is difficult, expensive or requires an explanation, stop — and tell the person who introduced you why, because they are probably a victim too.

Money mule recruitment

This one carries criminal exposure for the victim, which makes it different from everything else on this page.

The offer is framed as a paid opportunity: a remote "payment processing" role, a "financial assistant" job, a favour for a friend, or simply "let me use your account and I'll pay you". You receive cryptocurrency or funds and forward them onward, keeping a percentage.

That is money laundering, and it is unlicensed money transmission under Chapter 560 of the Florida Statutes. The person moving the funds is the identifiable, prosecutable participant — not the organiser overseas. It is heavily recruited on Florida university campuses (UF, UCF, FSU, FIU, USF), through remote-job listings, and in immigrant communities where the request comes with a plausible story.

Decline. Regardless of who asks, how it is framed, or how much it pays. There is no version of this that ends well for you.

The second theft: recovery scams

After a loss, victims are contacted by someone claiming they can trace and recover the funds — sometimes posing as a blockchain forensics firm, sometimes as a law enforcement liaison, sometimes as a lawyer. They require an upfront fee, or a "retainer", or a payment to unlock seized assets.

This is a second theft targeting people who have already been robbed, and it is targeted precisely because they have — victim lists circulate. It is also, in a grim way, the most cruel category on this page.

What to do if it has already happened

Act fast, and do not let embarrassment cost you the reporting window. Investigators have seen every version of this and they are not judging you.

1. Stop all contact. Do not make further transactions. Do not respond to the caller, the "adviser" or the platform. Do not pay a "final fee" to release anything.
2. Report to law enforcement. Your local police or sheriff's office, and FBI IC3 at ic3.gov. Get a report number — you will need it.
3. Report to the Florida Attorney General. The Cyber Fraud Enforcement Unit handles exactly these cases and has demonstrated it can trace and recover.
4. Notify the operator or platform in writing. For a kiosk, this is essential — from 1 January 2027 it is a precondition of the statutory refund right, and it must happen within 60 days.
5. Contact your bank immediately if funds moved from an account. Same-day intervention occasionally works; a week later almost never does.
6. Preserve everything. Receipts (photograph them — thermal paper fades), transaction hashes, wallet addresses, screenshots, call logs, message threads, bank records. The transaction hash is what makes tracing possible.
7. Secure your accounts. Change passwords, move two-factor to an authenticator app, add a carrier port-out PIN, and check for unauthorised withdrawal addresses.
8. Tell someone you trust. Isolation is what the scam depends on, and continued isolation is what makes a second loss likely.

Protecting a relative

If you have a parent or older relative in Florida, this is the most valuable part of this page — and it is not about explaining blockchain to them.

The intervention that works is a pre-agreed family rule, stated explicitly, repeated occasionally, and made completely blame-free:

That works because the scam requires isolation. Every version of it includes an instruction to keep quiet. Removing the effectiveness of that instruction removes the fraud's core mechanism.

Supporting measures worth putting in place:

• Agree that unexpected calls get hung up on and called back on a number the relative already has — from a statement, a card, or the phone book. Never a number the caller gives.
• Ask their bank about a trusted contact or transaction alerts on withdrawals above a threshold.
• Tell them tellers are allies. If a bank employee questions a withdrawal, that question is help, not an obstacle. Being coached on what to tell a teller is itself proof of fraud.
• Explain the withdrawal test for any investment: if you cannot take a small amount out easily, you never owned anything.
• Know the reporting route in advance — IC3, the Attorney General, local sheriff — so nobody has to research it while panicking.

The counties where this matters most, based on demographics and reported losses, are Charlotte, Sarasota, Pinellas, Hernando, Marion, Palm Beach, Broward, Lee and Volusia. Our city guides cover the local picture in each.

Related guides