On August 12, the Arizona Attorney General’s Office stated that since the state’s cryptocurrency ATM regulatory law took effect in September 2025, 35 scam victims have received full refunds, totaling $171,332 recovered. This is the first time the state has disclosed enforcement outcomes.
35 people have received refunds.
This law does not prohibit the operation of crypto ATMs, but requires operators to assume stricter anti-fraud responsibilities. For eligible new users, if a transaction is determined to have been induced by fraud, operators must refund the full transaction amount and associated fees.
The state government has disclosed the amount of refunds already processed, not an overall loss estimate. The announcement did not reveal which operators made the refunds or how many applications were denied, so the overall coverage rate cannot yet be determined.
Full refunds are available only to new users.
Under HB 2387, a "new user" is defined as someone who has been a customer of an operator for less than 10 days. Users beyond this period will be considered existing customers and will not be eligible for the same full refund protection.
To apply for a refund, victims must contact both the operator and the state attorney general’s office or other law enforcement agency within 30 days of the transaction, and submit documentation demonstrating that the transaction was induced by fraud. Even if the machine displayed a warning or printed a receipt, the operator must still issue a refund if the conditions are met.
Limits and risk controls are enforced simultaneously.
The law also sets transaction limits. New users have a daily transaction limit of $2,000 across all machines operated by the same provider, while existing customers have a daily limit of $10,500.
- New users have a daily limit of $2,000.
- The current daily limit for existing customers is $10,500.
- The fraud reporting period is within 30 days after the transaction.
The operator must also provide 24/7 human customer service and a free support hotline, issue transaction receipts to users, and employ blockchain analysis and tracking tools to help prevent funds from being transferred to known fraudulent wallets.
U.S. states are diverging in their approaches
As Arizona announces progress on refunds, the problem of cryptocurrency ATM scams in the U.S. continues to grow. FBI data shows that in 2025, there were 13,460 related complaints in the U.S., reporting losses of approximately $389 million.
At the state regulatory level, approaches vary. Arizona has chosen to retain machine operations but has added requirements for refunds, limits, and risk controls; Tennessee has implemented a ban; Georgia has imposed restrictions and refund rules; Missouri relies more on enforcement actions and civil penalties.
Additional information: This announcement from Arizona did not disclose any new lawsuits, penalties imposed on operators, or the number of denied claims.