Arizona’s new cryptocurrency ATM regulations have already resulted in $171,332 in full refunds for 35 scam victims, according to an August 12 announcement from Arizona Attorney General Kris Mayes.
The recoveries offer an early indication of how the state’s approach to cryptocurrency kiosks is working. Rather than banning crypto ATMs outright, Arizona has chosen to regulate them through transaction limits, fraud-prevention requirements, customer protections and mandatory refunds for certain qualifying victims.
The approach stands in contrast to several other U.S. states that have moved toward outright bans on cryptocurrency kiosks because of concerns about fraud and consumer losses.
Arizona’s Refund Requirement Is Already Producing Recoveries
Arizona enacted House Bill 2387 in May 2025, establishing new requirements for cryptocurrency ATM operators.
The law, which took effect on September 26, 2025, requires operators to provide a full refund to certain new customers who were fraudulently induced into making a cryptocurrency ATM transaction, provided they complete the required reporting process.
The refund covers both the amount transferred and associated transaction fees.
The $171,332 recovered by 35 victims represents actual refunds, rather than an estimate of potential losses, according to the attorney general’s office.
However, the state has not disclosed the names of the operators that issued the refunds, the amount recovered by each victim or the number of claims that were rejected.
As a result, the available figures do not show what percentage of eligible victims have successfully recovered their funds.
Attorney General Mayes encouraged victims to report suspected fraud as quickly as possible and said her office could assist victims seeking refunds under the law.
Who Qualifies for a Full Refund?
Arizona’s refund protection does not apply automatically to every cryptocurrency ATM transaction.
The law distinguishes between new customers and existing customers.
A new customer is generally defined as someone who has been using an operator’s services for fewer than 10 days. Customers beyond that period are treated as existing customers.
To qualify for the statutory refund, a victim must notify both the cryptocurrency ATM operator and either the Arizona Attorney General’s Office or another law enforcement agency within 30 days of the transaction.
The victim must then provide the operator with a report from law enforcement or the attorney general’s office confirming that the transaction was fraudulently induced.
The law also makes clear that simply providing warning screens or transaction receipts does not eliminate an operator’s refund obligations when the statutory conditions are satisfied.
Arizona Also Limits Crypto ATM Transactions
The state’s consumer-protection framework goes beyond refunds.
Under the final version of HB 2387, new customers are limited to $2,000 in cryptocurrency ATM transactions per day across an operator’s kiosks.
Existing customers face a higher daily limit of $10,500.
The limits are designed to reduce the amount of money a victim can lose in a single day, particularly in scams where criminals pressure victims into repeatedly transferring funds through cryptocurrency kiosks.
Earlier versions of the legislation had proposed a $1,000 daily limit for new customers, but lawmakers increased the threshold during the legislative process.
Operators must also provide 24-hour live customer support and display a toll-free telephone number for customers.
Receipts must contain transaction information, while operators are required to implement blockchain analytics and tracing technology intended to identify and prevent transactions involving cryptocurrency wallets known to be associated with fraudulent activity.
Crypto ATM Fraud Has Become a Major U.S. Problem
Arizona’s early refund figures come against the backdrop of a much larger nationwide cryptocurrency kiosk fraud problem.
According to FBI Internet Crime Complaint Center data, authorities recorded more than 13,400 complaints involving cryptocurrency kiosks during 2025, with reported losses approaching $389 million.
The number of complaints increased approximately 23% from the previous year, while reported losses increased by roughly 58%.
Older Americans were particularly affected.
More than half of the reported complaints involved people over the age of 50, who collectively reported more than $302 million in losses.
People aged 60 and older accounted for approximately 6,188 complaints and more than $257 million in reported losses.
The FBI cautions that its cryptocurrency kiosk statistics can include scams involving other transaction methods, meaning the reported totals should not necessarily be interpreted as losses exclusively attributable to crypto ATM transactions.
Nevertheless, the figures illustrate the scale of the consumer-protection challenge facing state regulators.
States Are Taking Very Different Approaches
Arizona’s decision to regulate cryptocurrency ATMs rather than prohibit them reflects one side of a growing policy divide in the United States.
Some states have moved toward outright bans following concerns about scams and consumer losses.
Minnesota, for example, transitioned from consumer-protection measures toward a statewide prohibition of cryptocurrency kiosks, with the ban taking effect in August.
Indiana has also enacted legislation prohibiting cryptocurrency kiosks, while Tennessee has moved to prohibit the machines following concerns about consumer fraud.
Other states have opted for stricter operating requirements rather than complete bans.
Tennessee and Georgia have adopted different approaches to cryptocurrency kiosk regulation, with Georgia imposing transaction restrictions, warning requirements and refund provisions.
Missouri has taken an enforcement-focused approach, including legal action against crypto ATM operator CoinFlip over alleged scam-related transactions and seeking consumer restitution and civil penalties.
The diverging policies highlight an unresolved question for U.S. regulators: whether cryptocurrency ATMs can be made sufficiently safe through regulation or whether the fraud risks are significant enough to justify eliminating them altogether.
Arizona’s Model Focuses on Restitution
The early results suggest that Arizona’s strategy is attempting to address the problem after fraud occurs as well as before it happens.
Transaction limits can reduce the amount a victim is able to lose, while blockchain monitoring and wallet screening are intended to prevent transfers to known fraudulent addresses.
The mandatory refund mechanism provides another layer of protection by shifting some of the financial consequences of qualifying fraud back toward kiosk operators.
For consumers, however, the 30-day reporting deadline is particularly important.
Victims who believe they were manipulated into sending cryptocurrency through a kiosk must act quickly and retain relevant documentation, including receipts, transaction details, the date and location of the kiosk and information about how the scam occurred.
What Happens Next?
Arizona’s August 12 announcement provides the first clear official measure of the law’s direct financial impact: 35 victims have recovered a combined $171,332.
But a fuller assessment of the program will require additional information.
The state has not disclosed the total number of claims filed, how many were rejected, how much money operators have refunded overall or whether operators have faced penalties for failing to comply with the law.
For now, the refunds demonstrate that Arizona’s consumer-protection framework can produce direct recoveries for qualifying victims.
The longer-term test will be whether the combination of transaction limits, fraud monitoring, mandatory refunds and enforcement can reduce losses while allowing legitimate cryptocurrency kiosk activity to continue.
As more states move toward either tighter regulation or outright bans, Arizona’s results could provide an important case study in whether regulation and restitution can offer a viable alternative to prohibition.
