Arizonas crypto ATM law has helped 35 scam victims recover $171,332 in full refunds since taking effect on Sept. 26, 2025, according to an Aug. 12 release from Attorney General Kris Mayes.
Summary
- Arizonas crypto ATM law helped 35 scam victims recover $171,332 in full refunds since September.
- Eligible new customers must report fraudulent kiosk transactions within 30 days to receive full reimbursement.
- New customers face a $2,000 daily transaction cap, while existing customers face a $10,500 limit.
- Operators must use blockchain tracing tools, provide receipts, warnings, and round the clock customer service.
- FBI data recorded 13,460 kiosk complaints and $389 million in reported U.S. losses during 2025.
The recoveries offer an early measure of how Arizonas consumer protection model is working as U.S. states take sharply different approaches to cryptocurrency kiosks. Arizona allows the machines but imposes transaction limits, fraud controls and mandatory refunds for qualifying new customers. Other states have chosen outright prohibitions.
You might also like:
Arizona advances bill to hold Bitcoin and XRP in state reserve
Arizona crypto ATM law turns refund mandate into recoveries
Arizona enacted House Bill 2387 as Chapter 171 in May 2025. The law requires operators to reimburse a new customer who was fraudulently induced into a kiosk transaction if the customer completes the required reporting process. The refund covers the full transaction and associated fees.
The $171,332 announced Wednesday represents refunds already obtained for 35 people rather than an estimate of broader losses. Mayes‘ office did not name the kiosk companies that issued the refunds, disclose individual amounts or provide figures for unsuccessful claims. It therefore is not possible from the state’s release to calculate what share of eligible victims have received money back.
Mayes urged victims to report quickly, saying, “My office is happy to help any victim of crypto ATM fraud receive a refund they are entitled to under Arizona law.”
Who qualifies for Arizonas full refund？
Refund protection is narrower than a blanket guarantee for every kiosk user. Under HB 2387, a “new customer” is someone who has been a customer of an operator for fewer than 10 days. An existing customer is someone who has reached the 10 day threshold.
A qualifying victim must contact both the kiosk operator and the Attorney General‘s Office or another law enforcement agency within 30 days of the transaction. The customer must then give the operator a report from law enforcement or the attorney general determining that the transaction was fraudulently induced. Providing warning screens or a receipt does not remove the operator’s refund duty when those conditions are met.
The final statute also limits new customers to $2,000 in daily transactions across an operators kiosks. Existing customers face a $10,500 daily ceiling. When Arizona lawmakers first proposed consumer safeguards, an earlier version contemplated a $1,000 daily cap before the legislature changed the figure during the bill process.
Operators must provide round the clock live customer service and display a toll free support number. They must also provide receipts with transaction details and use blockchain analytics and tracing software designed to prevent transfers to wallets known to be associated with fraud when a transaction occurs.
U.S. kiosk losses put Arizonas approach in focus
Arizonas refund results come against a much larger national fraud problem. FBI Internet Crime Complaint Center data recorded more than 13,400 complaints involving cryptocurrency kiosks in 2025 and more than $388 million in reported losses. Complaints increased 23% from 2024, while losses rose 58%. More than half of the complaints involved people older than 50, who reported more than $302 million in losses.
The FBIs full 2025 report recorded 13,460 kiosk complaints and roughly $389 million in losses. People aged 60 or older accounted for 6,188 complaints and more than $257 million of those reported losses. The FBI cautions that kiosk figures can include scams involving other transaction methods, meaning the reported totals should not be attributed solely to kiosk transfers.
Arizona has chosen regulation and restitution while some states have gone further. In related coverage, Minnesota moved from consumer safeguards to a statewide prohibition, which took effect in August. Indiana also enacted a prohibition, while Tennessee barred cryptocurrency kiosks after lawmakers cited consumer fraud concerns.
Other jurisdictions are relying on operating restrictions rather than removal. Tennessee and Georgia adopted sharply different kiosk policies, with Tennessee prohibiting the machines while Georgia imposed limits, warnings and refund requirements. Missouri has taken an enforcement route, suing CoinFlip over alleged scam related transactions and seeking consumer restitution and civil penalties.
What happens next for Arizona victims and operators？
For Arizona victims, the most important requirement remains the rolling 30 day deadline. A person who believes a scammer directed them to a kiosk must notify the operator and either the Attorney Generals Office or law enforcement within that period. The state also advises victims to retain their receipts and provide the date, location, transaction amount and details of the scam.
The law gives the Arizona attorney general enforcement authority, and violations are treated as violations of the states consumer fraud statute. Operators therefore face duties that extend beyond issuing refunds, including anti fraud controls, blockchain tracing, disclosures and customer support.
The Aug. 12 announcement did not disclose new litigation, penalties against an operator or changes to the statute. For now, the 35 refunds provide the clearest official evidence of the law producing direct financial recoveries. Future disclosures on total claims, rejected applications and operator compliance would provide a fuller measure of how well Arizonas model performs compared with states choosing to remove kiosks entirely.