
Arizona's crypto ATM law has produced $171,332 in refunds for 35 scam victims since September. The recoveries offer the first concrete measure of how the state's consumer protection model works as other states ban kiosks outright.
Arizona's crypto ATM law has produced $171,332 in full refunds for 35 scam victims since it took effect Sept. 26, 2025, Attorney General Kris Mayes said Aug. 12.
The recoveries offer the first concrete measure of how Arizona's consumer protection model works as U.S. states diverge on crypto kiosks. Arizona lets the machines run but imposes transaction limits, fraud controls and mandatory refunds for qualifying new customers. Other states have banned them outright.
Arizona enacted House Bill 2387 in May 2025. The law requires operators to reimburse a new customer who was fraudulently induced into a kiosk transaction, provided the customer completes the required reporting process. The refund covers the full transaction plus fees.
The $171,332 figure represents refunds already obtained for 35 people, not an estimate of broader losses. Mayes' office did not name the kiosk companies that issued the refunds, disclose individual amounts or provide figures for unsuccessful claims. It is not possible from the state's release to calculate what share of eligible victims have received money back.
Mayes urged victims to report quickly. "My office is happy to help any victim of crypto ATM fraud receive a refund they are entitled to under Arizona law," she said.
The refund protection is narrower than a blanket guarantee for every kiosk user. Under HB 2387, a "new customer" is someone who has been a customer of an operator for fewer than 10 days. An existing customer has reached the 10-day threshold.
A qualifying victim must contact both the kiosk operator and the Attorney General's Office or another law enforcement agency within 30 days of the transaction. The customer must then give the operator a report from law enforcement or the attorney general determining that the transaction was fraudulently induced. Providing warning screens or a receipt does not remove the operator's refund duty when those conditions are met.
The final statute also limits new customers to $2,000 in daily transactions across an operator's kiosks. Existing customers face a $10,500 daily ceiling. When Arizona lawmakers first proposed consumer safeguards, an earlier version contemplated a $1,000 daily cap before the legislature changed the figure during the bill process.
Operators must provide round-the-clock live customer service and display a toll-free support number. They must also provide receipts with transaction details and use blockchain analytics and tracing software designed to prevent transfers to wallets known to be associated with fraud.
Arizona's refund results come against a much larger national fraud problem. FBI Internet Crime Complaint Center data recorded more than 13,400 complaints involving cryptocurrency kiosks in 2025 and more than $388 million in reported losses. Complaints increased 23% from 2024, while losses rose 58%. More than half of the complaints involved people older than 50, who reported more than $302 million in losses.
The FBI's full 2025 report recorded 13,460 kiosk complaints and roughly $389 million in losses. People aged 60 or older accounted for 6,188 complaints and more than $257 million of those reported losses. The FBI cautions that kiosk figures can include scams involving other transaction methods, meaning the reported totals should not be attributed solely to kiosk transfers.
Arizona has chosen regulation and restitution while some states have gone further. Minnesota moved from consumer safeguards to a statewide prohibition, which took effect in August. Indiana also enacted a prohibition. Tennessee barred cryptocurrency kiosks after lawmakers cited consumer fraud concerns.
Other jurisdictions are relying on operating restrictions rather than removal. Georgia imposed limits, warnings and refund requirements. Missouri has taken an enforcement route, suing CoinFlip over alleged scam-related transactions and seeking consumer restitution and civil penalties.
For Arizona victims, the most important requirement remains the rolling 30-day deadline. A person who believes a scammer directed them to a kiosk must notify the operator and either the Attorney General's Office or law enforcement within that period. The state also advises victims to retain their receipts and provide the date, location, transaction amount and details of the scam.
The law gives the Arizona attorney general enforcement authority, and violations are treated as violations of the state's consumer fraud statute. Operators therefore face duties that extend beyond issuing refunds, including anti-fraud controls, blockchain tracing, disclosures and customer support.
The Aug. 12 announcement did not disclose new litigation, penalties against an operator or changes to the statute. For now, the 35 refunds provide the clearest official evidence of the law producing direct financial recoveries. Future disclosures on total claims, rejected applications and operator compliance would provide a fuller measure of how well Arizona's model performs compared with states choosing to remove kiosks entirely.
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.