What Blockchain Analytics Reveal About Bitcoin ATM Customers

What Does a Bitcoin ATM Customer Actually Look Like On-Chain?

There is a persistent image of the Bitcoin ATM customer in regulatory hearings and press coverage: shadowy, suspicious, probably laundering money or being scammed. This image is not supported by data. It is supported by anecdote, amplified by repetition, and hardened into political conviction without anyone checking the receipts.

Byte Federal decided to check the receipts. Using Elliptic — one of the world's leading blockchain analytics platforms, used by the FBI, the SEC, the IRS, and financial institutions across 29 countries — we screened customer wallets and analyzed our full transaction database to answer a simple question: who are our customers, and what are they actually doing with the Bitcoin they buy?

The answer is not what the headlines suggest.

The Transaction Profile: Small, Cautious, Consistent

Across 505,251 completed transactions involving 52,050 unique customers, the portrait that emerges is unmistakable:

Metric	Value
Median transaction	$300
Average transaction	$1,229
Median first purchase (new customer)	$150
Transactions under $500	67.4% — two-thirds
Transactions under $1,000	79.4% — four out of five
Transactions near the $29,500 cap	0.31%

Two-thirds of every transaction processed through a Byte Federal machine is under $500. The median — the number that best represents the typical customer, unaffected by outliers — is $300. The median first purchase is $150: cautious, exploratory, the financial equivalent of dipping a toe in the water.

This is not the transaction profile of a money launderer. It is the transaction profile of a person putting $20, $50, or $100 at a time into something they believe will hold its value — the same behavior that financial advisors recommend when they tell clients to dollar-cost average into an index fund.

Repeat Behavior: The 401(k) That Doesn't Require an Employer

If the transaction size tells you who the customer is, the repeat behavior tells you what they are doing. And what they are doing looks remarkably like systematic wealth accumulation.

Behavior	Customers	% of Total
3+ transactions	19,570	37.6%
10+ transactions	8,888	17.1%
25+ transactions	4,409	8.5%
50+ transactions	2,186	4.2%

Nearly 20,000 customers have come back three or more times. Almost 9,000 have come back ten or more times. The average repeat customer transacts every 24 days — roughly monthly. This is not impulsive buying. This is a cadence. This is a savings plan executed at a machine in a gas station by someone who does not have a brokerage account.

Retention data reinforces the pattern: 22% of customers remain active beyond 90 days, 16% beyond six months, and nearly 10% beyond a full year. These are not transient users passing through. They are returning customers with an ongoing financial relationship with the platform.

What Blockchain Analytics Reveal: 75% Low Risk

Transaction data tells you what happened at the machine. Blockchain analytics tell you what happened after. This is where the compliance narrative either holds or collapses — and where most Bitcoin ATM operators have historically had no data at all.

Byte Federal uses Elliptic, a blockchain analytics platform trusted by the FBI, the SEC, the IRS, the DEA, and financial institutions across 29 countries, to screen customer wallet addresses. Elliptic's risk scoring system evaluates exposure to sanctioned entities, illicit activity, darknet markets, fraud, terrorism financing, and other categories of concern.

Of 286 customer wallets screened through Elliptic's system:

Risk Level	Score Range	Wallets	Percentage
Low risk	Below 1.0	75	75%
Medium risk	1.0–3.0	6	6%
Elevated risk	Above 3.0	19	19%

The median risk score is 0.04 — effectively zero. Three-quarters of all screened wallets register as low risk, meaning they have no meaningful exposure to sanctioned entities, illicit marketplaces, or flagged counterparties anywhere in their transaction history.

A Note on "Elevated Risk"

The 19% figure requires context that is critical for honest interpretation. Elliptic's risk scoring evaluates exposure — any connection, however indirect, to a flagged entity anywhere in the blockchain's transaction graph. A wallet that received funds five hops downstream from a sanctioned address will score higher than zero, even if the wallet's owner has no knowledge of or relationship with the sanctioned entity.

This is analogous to how a $20 bill in your pocket may have passed through the hands of someone who committed a crime at some point in its circulation history. The bill is not evidence of your involvement. The exposure is statistical, not behavioral.

Elevated risk scores trigger enhanced due diligence under Byte Federal's compliance program — additional review, potential SAR filing, and, where warranted, transaction blocking. The score is a screening input, not a verdict.

Where Do Customer Funds Go?

Blockchain analytics also reveal the destination profile of customer wallets:

Destination Type	Wallets	What It Means
Personal wallets (unknown)	182	Self-custody — customer holding their own Bitcoin
Exchanges	52	Coinbase, Kraken, etc. — legitimate trading platforms
P2P exchanges	12	Peer-to-peer trading
Gambling	5	Legal online gambling platforms
Payment services	1	Payment processor
Scam-flagged	1	0.3% — flagged and reported

The dominant pattern is clear: customers buy Bitcoin at the machine and either hold it in personal wallets (self-custody) or move it to regulated exchanges. This is savings and investment behavior, not illicit finance.

Wealth Creation: The Access Argument

The cumulative picture is perhaps the most powerful argument for preserving Bitcoin ATM access:

Lifetime Investment	Customers
$10,000+	8,559
$50,000+	2,843
$100,000+	1,429
$500,000+	124
$1,000,000+	16

8,559 people have invested over $10,000 through Byte Federal machines. 124 have invested over half a million dollars. Sixteen have invested over a million. These investments were made $150, $300, $500 at a time — at machines in gas stations, convenience stores, and laundromats, in communities where there is no Schwab office, no Fidelity branch, and no financial advisor.

This is what happens when you give people who have historically been excluded from investment markets a physical, cash-accepting, 24-hour access point to an appreciating asset. They use it. Consistently. For years.

The Compliance Posture

The data profile — small transactions, repeat behavior, clean wallet scores, self-custody destination — exists within a compliance framework that is itself unusual in the industry:

KYC from dollar one. Every transaction at every Byte Federal machine requires identity verification regardless of amount. There is no anonymous tier.

97.3% of transactions are under the $10,000 CTR threshold. Only 0.55% of transactions fall in the $9,000–$9,999 range — no structuring pattern.

ISO 27001 certified. Information security management independently audited by A-lign to the same international standard used by banks and Fortune 500 companies.

84% elder fraud prevention rate. Live intervention calls to every customer over 60 flagged as a potential fraud victim, stopping the transaction before the money moves.

Blockchain analytics on every wallet. Elliptic screening integrated into the compliance workflow — not as an afterthought, but as a core component of transaction monitoring.

What the Data Says to Legislators

Every data point in this article is drawn from Byte Federal's own production records and independently verified blockchain analytics. None of it is modeled, estimated, or projected. It is what actually happened, across 505,251 transactions, involving 52,050 people, at over 1,350 machines, across 42+ states.

The portrait that emerges does not match the regulatory narrative. The typical Byte Federal customer is not a criminal, a money launderer, or a fraud victim. The typical customer is a person making a $300 purchase, coming back every 24 days, sending the Bitcoin to a personal wallet or a regulated exchange, with a blockchain risk score of 0.04.

This person is saving. Slowly, steadily, in amounts they can afford, through the only regulated cash-to-digital access point available to them. They are doing exactly what every financial literacy program in America tells people to do — invest small amounts regularly over time — and they are doing it without a bank account, without a brokerage, without a financial advisor, and without anyone's permission.

Before the next state legislature votes to ban these machines, the data suggests they should ask a different question: what happens to these 52,050 people when the machine is gone?