Starting August 1, 2026, Minnesota is changing the way people can buy and store crypto. Crypto kiosks, the ATM-style machines found in gas stations and convenience stores, are now banned. At the same time, a new law lets Minnesota banks and credit unions hold crypto for their customers.
These two changes happened on purpose. The state wants to shut down a tool scammers loved, while opening a safer, regulated path for everyday people who still want to buy crypto.
Why Minnesota Banned Crypto Kiosks
Crypto kiosks look like regular ATMs, but instead of giving you cash, they turn your cash into cryptocurrency. Scammers used them constantly.
Heres the usual trick: a scammer calls or emails you, claiming your bank account is hacked, you owe back taxes, or a family member is in trouble and needs bail money. They create panic, then tell you to rush to a nearby kiosk and feed in cash. Once that money becomes crypto, it moves overseas in seconds and is almost impossible to trace or recover.
The Minnesota Department of Commerce investigated 134 complaints involving crypto kiosks between 2023 and 2025, and Minnesotans lost nearly $1 million during that time. A 2024 FBI report found about 11,000 complaints involving crypto kiosks nationwide, with more than $240 million in losses, and most victims were over age 60.
Minnesotas Commerce Commissioner, Grace Arnold, put it bluntly: there is no safe crypto kiosk, and every complaint represents someone whose life was upended by a scammer.
Roughly 350 licensed kiosks were operating in the state when the ban passed, and they were run by eight companies. Machines had to go offline by August 1 and must be physically removed from stores by the end of 2026.
You can still buy crypto in Minnesota, just through regulated online exchanges, not street-corner machines.
How Bank Custody Protects Your Digital Assets
On the very same day the kiosk ban started, a second law took effect: Minnesota banks and credit unions can now hold crypto for customers, giving local financial institutions a clear role in the digital asset market.
When your crypto sits with a bank instead of a random app or offshore platform, a few protections kick in:
- Segregation of assets.Customer crypto must be kept legally and operationally separate from the bank‘s own assets. Your coins aren’t mixed in with the bank‘s money, so they’re not at risk if the bank itself runs into trouble.
- Real oversight.Banks can use outside custody providers, but they stay responsible for security, business continuity planning, and following the rules.
- A permission process, not a free-for-all.Before offering custody, credit unions must give Minnesota‘s commerce commissioner at least 60 days’ notice.
In plain terms, your bank has to prove it has strong security and a real plan before it‘s allowed to touch your crypto. That’s very different from handing your money to an anonymous kiosk or an app you found online.
Which Minnesota Banks Are Moving First
Most banks are still working through security reviews before they launch anything. But one credit union got a head start. St. Cloud Financial Credit Union rolled out its own crypto custody product, called the CU-Digital Asset Vault, in March 2026 — months before the law even passed. By this July, members were storing roughly 13.5 Bitcoin through the platform.
The system runs on technology built by DaLand CUSO, a technology cooperative owned by credit unions. It uses a shared-control model, meaning no single party — not the credit union, the member, or the tech provider — can move funds alone.
An executive there described the new law as removing a “regulatory gray zone” that had kept many Minnesota banks and credit unions from offering this kind of service, even when they wanted to.
Expect more banks and credit unions to follow now that the legal path is clear. Each must file its 60-day notice with the state before launching.
The Rules Banks Must Follow
Minnesota didnt just wave banks into crypto custody. The law comes with real guardrails:
- Written policies required.Banks must have documented plans for risk management, internal controls, cybersecurity, and business continuity before they can offer custody.
- 60-day advance notice.Institutions must formally notify the Department of Commerce, including details of their risk management plan, before launching.
- Strict segregation.Client crypto can never be recorded as the banks own property.
- Ongoing responsibility.Even if a bank hires an outside custody provider, its still on the hook for oversight and compliance.
These rules mirror how banks already handle other valuables, like safe deposit boxes, just adapted for digital assets.