Arizona’s Cryptocurrency ATM Law: A Consumer Protection Success
Since its implementation on September 26, 2025, Arizona’s new law governing cryptocurrency ATMs has successfully enabled 35 victims of fraud to reclaim a total of $171,332 in refunds, as reported by Attorney General Kris Mayes on August 12. This law serves as a potential template for consumer protection in the cryptocurrency sphere, particularly as different states adopt various strategies regarding ATM operations. Unlike states that have banned such kiosks entirely, Arizona not only permits them but also enforces transaction limits and fraud prevention measures, including mandatory refunds for eligible customers.
House Bill 2387: Key Provisions
House Bill 2387, enacted in May 2025, was designed to ensure that individuals deceived into using these machines can be reimbursed, provided they follow the proper channels. The refunds encompass the full amount of the fraudulent transaction along with any related fees and apply specifically to new customers, defined as those who have patronized an ATM operator for less than 10 days. While Mayes’ office did not disclose the names of the kiosk operators or the specific refund amounts to individual victims, they emphasized the importance of prompt reporting to secure these refunds.
Reporting and Refund Process
The law stipulates that victims must notify both the kiosk operator and a relevant law enforcement agency within a 30-day window following the fraudulent incident. To qualify for a refund, the victim must submit a report indicating that fraud occurred. Notably, the operators retain their refund obligations even if they provide a receipt or warning screens, as long as the reporting conditions are fulfilled.
Maximum transaction limits under the new statute cap new customers at $2,000 per day across the operator’s kiosks, while those with longer-standing relationships are allowed up to $10,500 a day.
Fraud Prevention Measures
Additionally, operators are mandated to offer 24/7 customer support, display a toll-free assistance number, and utilize blockchain technology to mitigate fraud risk during transactions. The successful reimbursement of $171,332 represents a small fraction of a much broader national issue concerning crypto-related scams. In 2025, the FBI’s Internet Crime Complaint Center recorded over 13,400 complaints tied to cryptocurrency ATMs, leading to reported losses exceeding $388 million—an increase of 23% from the previous year.
Demographics of Fraud Victims
Most notably, individuals aged 50 and above filed more than half of these complaints, totaling $302 million in losses. The complexities of these figures mean that while they highlight the dangers associated with cryptocurrency kiosks, they may also include scams through other transaction mediums.
State Responses and Future Considerations
As Arizona moves forward with its consumer protection policies, some states, like Minnesota and Indiana, have chosen to eliminate cryptocurrency ATMs entirely due to similar consumer fraud concerns. In contrast, others, such as Tennessee, have opted for strict operating restrictions without a total ban. Missouri has taken legal action against specific operators for alleged scams.
For affected individuals in Arizona, the critical takeaway is the 30-day deadline for reporting fraud to either the kiosk operator or law enforcement to be eligible for a refund. Retaining transaction details, including receipts, is also vital. Under the law, any violations by operators not only result in obligations to refund but also to implement fraud prevention measures, with non-compliance treated as violations of consumer protection laws. The recent announcement did not specify any new penalties or litigation against operators: the 35 refunds remain the most direct indication of the law’s initial success, leaving future evaluations needed to assess overall effectiveness compared to states that have adopted stricter measures.
