Crypto ATMs or kiosks are the “lowest-friction extraction channel available to scammers,” said cybersecurity firm CertiK.