The decision in front of you
You have been talking to someone you have never met in person. They have asked you to take cash out, go to a cryptocurrency ATM, and scan a code they sent. The useful thing to understand before you leave home is narrow but important: the code is a payment instruction, not a character reference. It tells a machine where value should go. It does not tell you who controls that destination, whether the person who sent it is who they say they are, or whether the reason you were given is real.
That is why the safest reading of this request is not “let me verify it first” but “this is the point where I stop.” You lose nothing by pausing. You can lose the cash you withdraw by continuing.
What the code actually does
A recipient QR code carries a destination address for a payment. When you scan it at a kiosk and confirm, the cash you inserted is directed to that address. Nothing in that action checks the identity of the person who sent the code, and nothing in it confirms that the story behind the request is true.
The FBI describes romance schemes in which a scammer directs a person to a physical cryptocurrency ATM and supplies a QR code for the scammer-controlled recipient wallet. Source
So the question “what will this code authorize?” has a practical answer: it authorizes a payment to the wallet the code names. Treat that as the whole of what the code establishes. It is not evidence that your contact is genuine, that the money is for a fee, a delivery, a hospital bill or an investment, or that anyone will be able to get it back.
Three stages, three different actions
The same request looks different depending on how far you have already gone. Use the row that matches where you are right now.
| Where you are | What is still open | What to do |
|---|---|---|
| You have not left home yet | Nothing has been sent. The request is still only an instruction. | Do not withdraw cash for this purpose. Do not travel to a kiosk to complete a payment a contact you have never met in person asked for. |
| You are at the kiosk, payment not completed | The cash is still yours and the transfer has not gone through. | Stop before confirming. Do not scan and pay on the instruction of an online-only contact. If the operator or staff warn you that the transaction looks like fraud, do not override that warning. |
| You have already paid | The payment has gone to the destination in the code. | Keep your own receipt and transaction record privately. Report through the official IC 3 route. Do not expect a promised reversal or a quick refund. |
Two of these rows are about not paying. Only the last one is about what happens after.
If you have not paid yet
The clearest guidance for this exact situation is to decline the instruction itself, not to negotiate a smaller version of it.
The FBI advises not following an online-only contact’s instructions to scan a QR code and pay at such an ATM, and to stop or cancel when the ATM operator warns the transaction matches fraud. Source
That advice covers the moment at the machine as well as the decision to go. If you are standing at a kiosk and an operator tells you the transaction matches a known fraud pattern, that warning is the second signal arriving at the same time as the first. You do not need to weigh them against each other. Cancelling costs you nothing except the trip.
Some readers will want to ask the contact a clarifying question before deciding. That is reasonable, but notice what a reply can and cannot do. A message can explain, apologize, pressure or reassure. It cannot turn a destination address into a verified identity. If the answer you get is urgency, secrecy, or a request to hurry before the machine times out, that is a reason to pause longer, not a reason to complete the payment.
If the payment has already gone through
Once a payment is confirmed at the kiosk, the money has moved to the address in the code. This article cannot tell you whether any particular payment can be recovered, how long anything takes, or what a given provider will do. Those outcomes depend on facts this page does not have, and no honest general answer should promise a reversal.
What you can do is keep your own records and use the official reporting channel.
Suspected cryptocurrency ATM or QR-payment fraud can be reported to IC 3. Source
Keep the receipt, the transaction details and the messages that led to the payment somewhere private that you control. Reporting is not the same as recovering funds, and filing a report does not guarantee that money comes back. It does create an official record and puts the pattern in front of the people who track it.
If you are still in contact with the person who sent the code, you do not owe them an explanation for stopping. A request that depends on you not pausing is worth pausing on.
What a public profile can and cannot settle
Many readers arrive here after looking at the profile of the person who asked. It is natural to want to know whether the person behind the messages is real. Public information can help you organize what you already know, but it cannot close that question on its own.
A matching photo, a familiar biography or a handle that appears in several places can be consistent with a genuine person, with a copied profile, or with something in between. The same is true of a search that returns nothing. A shared image does not prove identity, and a missing result does not prove deception. These are leads to weigh, not verdicts.
TraceSeek, the app covered by this publication, can search publicly accessible profile candidates from a username you supply, and its public-content analysis can retrieve and summarize accessible profile content. That can help you put the claims a contact has already made in public into one place and notice where they do not line up. It cannot tell you who owns a wallet, trace funds, reverse a payment, or confirm that a relationship allegation is true. Those are different questions with different evidence.
If you want to use that step, do it after you have dealt with the immediate payment decision, not instead of it. The app’s documented username scan is described as taking 20-30 seconds, with a free first scan and no registration or login required for that first scan. Those figures apply to the username scan; they are not a promise about how long any other review will take or what it will find.
A different pattern worth separating
A request to pay at a crypto ATM is not the same as a request to invest. The investment version has its own shape, its own warning signs and its own decision points. If what you are looking at is a person who has been talking about trading, profits or a platform they want you to join, the separate guide on the relationship-investment pattern is the better starting point: the relationship is the product.
Keeping the two apart matters because the right next action differs. Here, the action is about a single payment at a physical machine. There, it is about a longer arrangement built over time.
The short version
A code from an online romantic contact is a destination, not a verification. If you have not paid, do not follow the instruction to scan and pay, and do not override a fraud warning from the machine’s operator. If you have paid, keep your own records and report through the official route without expecting a guaranteed refund. Public profile review can help you sort the claims you were given; it cannot settle who owns a wallet or prove what happened in a relationship.