Arizona Crypto ATM Law Compensates Scam Victims with $171K Refunds

Since its inception on September 26, 2025, Arizona’s cryptocurrency ATM regulation has enabled $171,332 in total refunds for 35 victims of scams, according to a statement from Attorney General Kris Mayes released on August 12.

The refunds represent an initial assessment of Arizona’s consumer protection framework, highlighting a significant divergence in the strategies employed by U.S. states regarding cryptocurrency kiosks. Arizona allows these machines but enforces transaction restrictions, fraud safeguards, and mandatory refunds for eligible new customers, whereas some states have chosen to implement outright bans.

Arizona’s crypto ATM regulation transforms refund obligations into recoveries

Arizona enacted House Bill 2387 as Chapter 171 in May 2025, requiring operators to reimburse new customers who are victimized by fraudulent transactions, provided they follow the prescribed reporting procedure. The refunds include the entire transaction amount and any associated charges.

The $171,332 noted in the latest announcement pertains to refunds already paid out to 35 individuals, not an estimate of broader losses. Mayes’ office did not reveal which kiosk companies issued the refunds, the specific amounts, or data on unsuccessful claims, preventing an accurate calculation of the percentage of eligible victims who received reimbursement.

Mayes urged victims to report fraud quickly, asserting, “My office is dedicated to helping any crypto ATM fraud victim obtain their rightful refund under Arizona law.”

Who qualifies for Arizona’s full refund?

Refund protection does not extend universally to all kiosk users. Under HB 2387, a “new customer” is defined as someone who has utilized an operator’s services for less than 10 days, while an existing customer has surpassed that duration.

Victims must notify both the kiosk operator and the Attorney General’s Office or another law enforcement agency within 30 days of the transaction. Additionally, a report must be provided from law enforcement or the Attorney General confirming that the transaction was conducted fraudulently. Even if operators provide warnings or receipts, they remain obligated to issue refunds under these conditions.

The law also limits new customers to a daily transaction cap of $2,000 across an operator’s kiosks, whereas existing customers can transact up to $10,500. Initially, the legislature contemplated a $1,000 daily limit for new customers but revised this during the bill’s review process.

Operators must offer live customer service around the clock and a toll-free support number. They are also responsible for issuing detailed receipts and employing blockchain analytics and tracing tools to avoid sending funds to wallets associated with fraudulent activities during transactions.

U.S. kiosk losses emphasize Arizona’s regulatory stance

The refund results in Arizona occur within a broader national context of fraud concerns. According to the FBI’s Internet Crime Complaint Center, there were over 13,400 complaints related to cryptocurrency kiosks in 2025, resulting in more than $388 million in reported losses. Complaints increased by 23% compared to 2024, with losses rising by 58%. Notably, over half of these complaints originated from individuals aged 50 and older, who collectively reported losses exceeding $302 million.

The FBI’s detailed 2025 report documented 13,460 complaints linked to kiosks and around $389 million in total losses. Individuals aged 60 and older accounted for 6,188 of those complaints, reporting over $257 million in losses. The FBI cautions that kiosk data may also include scams conducted via other transaction methods, implying that totals should not be exclusively tied to kiosk transactions.

Arizona has adopted a regulatory approach focused on restitution, while other states have opted for more drastic actions. For example, Minnesota has shifted from consumer protections to implement a statewide ban effective August. Similarly, Indiana has enacted a prohibition, and Tennessee has banned cryptocurrency kiosks due to consumer fraud concerns.

Other regions are considering operational restrictions instead of outright bans. While Tennessee has prohibited kiosks, Georgia has taken an opposite approach, instituting strict limits, warnings, and refund requirements. Missouri has pursued enforcement actions, taking legal action against CoinFlip over claims of fraudulent activities and seeking consumer restitution and civil penalties.

What lies ahead for victims and operators in Arizona?

For victims in Arizona, the critical requirement remains the 30-day deadline for reporting incidents. Individuals who suspect they have been deceived at a kiosk must notify both the operator and either the Attorney General’s Office or law enforcement within this period. The state also advises victims to retain their receipts and document the transaction date, location, amount, and relevant scam details.

The law grants the Arizona Attorney General enforcement authority, treating violations as breaches of the state’s consumer fraud statutes. Therefore, operators bear responsibilities that extend beyond merely processing refunds, encompassing anti-fraud measures, blockchain tracking, necessary disclosures, and consumer support.

The announcement on August 12 did not disclose any new legal actions, penalties against operators, or changes to the law. Currently, the 35 refunds stand as the clearest testament to the law’s efficacy in facilitating tangible financial recoveries. Future reports detailing total claims, unsuccessful applications, and adherence from operators would provide a more comprehensive overview of Arizona’s approach compared to states that have chosen to eliminate kiosks.