Where and How to Buy Crypto in Gaithersburg, Maryland

Gaithersburg is a city of about seventy thousand, most of them employed in federal contracting, biotech, healthcare or professional services, and almost all of them banked. That makes the ranking straightforward.

Licensed exchange, bank transfer — around 0.25%. The right answer for nearly everyone here. Verify identity once, link a checking account, buy at market. The first ACH deposit takes a couple of business days; after that it is routine.

Licensed exchange, debit card — around 3–4%. Instant, and worth paying occasionally when timing matters. A poor default.

Coinstar / Coinme in a supermarket — around 16.5% on the cash path. Cash in, redemption code out, redeemed in an app. Useful if you have banknotes and no account.

Dedicated kiosk — 9% to 20% all in. Fast, cash-friendly, expensive. Maryland caps the operator's visible fee at the greater of $5 or 15%, but the exchange rate the machine quotes is not capped, which is where the rest of the cost lives.

One route worth mentioning because people ask: peer-to-peer trading, meeting a stranger with cash. We do not recommend it. The counterparty risk is real, the fraud rate is high, and in Maryland an unlicensed person doing this as a business is likely engaged in unlicensed money transmission. The kiosk network exists precisely so you do not have to do this.

NIST does not endorse cryptocurrencies and nothing here should be read as it doing so. But the security engineering it publishes is directly applicable, and it is free.

Authentication. SMS-based two-factor authentication is the weakest common option, because a SIM swap defeats it entirely — an attacker persuades a mobile carrier to port your number, then resets your exchange password. Move to an authenticator app at minimum, and to a hardware security key if the platform supports it. This single change eliminates the most common account-takeover route.

Key management. A self-custody wallet is defined by its recovery phrase. Whoever holds those words holds the coins — there is no bank, no password reset, no appeals process. The practical implications: write it on paper or stamp it into metal, never photograph it, never store it in cloud notes, never type it into any website for any reason, and keep two copies in physically separate places.

Verification. Before sending crypto anywhere, check the first and last several characters of the destination address against what you intended. Clipboard-hijacking malware that swaps addresses is a real and active technique. Sending a small test transaction first costs cents and has saved people six-figure sums.

Threat modelling. Ask who you are actually defending against. For most Gaithersburg households it is not a nation-state; it is a phishing email, a fake support account on social media, and a family member who found the phrase in a drawer. Design for those.

It would be easy to write the machines off entirely, and that would be unfair to the people who genuinely need them.

Gaithersburg has a substantial population working in construction, food service, cleaning and home care — jobs that still pay partly in cash and that are often held by people who have not yet established a US banking relationship. For that worker, a kiosk on Montgomery Village Avenue is not a rip-off, it is the only door in the building. Maryland's regulators understood this, which is why the 2025 law regulated kiosks rather than banning them.

What the law changed is worth knowing if you use one. Every operator must register with the Commissioner of Financial Regulation and display an NMLS identifier. Daily purchases are capped at $2,000 for a new customer and $10,500 for an established one. The operator's fee cannot exceed the greater of $5 or 15%. Receipts must show the exchange rate, the destination address and the blockchain transaction hash. Fraud warnings must remain on screen for a minimum duration before you can proceed. And there is a defined refund process for fraud victims.

Practical advice if a kiosk is genuinely your only option: use a large-network machine rather than an unbranded one, go during daylight, bring the exact amount, check the quoted rate against a live price on your phone, and keep the receipt. And treat it as a bridge — the moment you can open a bank account, the economics change completely.

A specific Gaithersburg pattern: adult children helping older relatives, often across a language barrier, and worrying — correctly — about scams.

The threat is not hypothetical. The impersonation scam that drove Maryland's kiosk legislation targets older adults deliberately, and the kiosk is the mechanism of choice precisely because it is fast and irreversible. Montgomery County police have publicised local variants repeatedly.

What actually helps, in order of effectiveness:

• Establish one absolute rule together: no crypto transaction ever happens while someone is on the phone. Not to help police, not to fix a warrant, not to save a grandchild. Hang up, then call the family.
• Set up the account together on a licensed exchange, so there is a familiar interface and a real support channel rather than an anonymous machine in a shop.
• Turn on an authenticator app rather than SMS codes, and store the backup somewhere you both can reach.
• Write the recovery phrase on paper together, put it somewhere physically secure, and agree who else knows where it is.
• Agree a "second opinion" rule: any transaction above an agreed amount gets a phone call to you first, no exceptions, no urgency accepted.

If a relative has already been caught, act quickly. Maryland allows a Notice of Fraud within 90 days, requires the operator to investigate within 30 days, and bars denial on the grounds that warnings were ignored. Report to the Maryland Attorney General's Consumer Protection Division and to the FBI's IC3. Full detail on our scam page.

There is no Gaithersburg or Montgomery County crypto ordinance. What governs you is state law, and three pieces of it matter.

The Maryland Money Transmission Act (Financial Institutions Article, Title 12) requires anyone in the business of transmitting money — which includes crypto exchanges serving Maryland customers — to hold a state licence. This is why the licence check on NMLS Consumer Access is worth doing before you deposit a dollar.

The virtual currency kiosk law (Chapter 117 of 2025, from Senate Bill 305) took effect on 1 July 2025 with registration required from 1 January 2026, and is fleshed out by regulations at COMAR 09.03.16. It is the source of the daily caps, fee caps, receipt requirements and fraud-refund process described above.

Maryland income tax treats crypto as property. Gains are ordinary income at rates up to 5.75%, with no preferential long-term rate, plus Montgomery County's piggyback income tax, plus a 2% surcharge on capital gains for filers with federal AGI above $350,000 from tax year 2025. Our tax guide works through the detail.

And the one that is not a law but functions like one: the 2023 Maryland Securities Commissioner order that ended Coinbase's staking service for state residents. Kraken and Crypto.com exclude Maryland too. Legislation to reverse this has been introduced in Annapolis; until it passes, staking is off. See our staking page.