Arizona's Crypto ATM Law Provides $171K in Refunds to Scam Victims

Arizona’s new crypto ATM law has already delivered real refunds to scam victims — but questions remain about how broadly it’s working. Since the consumer-protection rules took effect on Sept. 26, 2025, Arizona Attorney General Kris Mayes’ office says 35 people have received full refunds totaling $171,332, according to an Aug. 12 press release. Those recoveries offer an initial look at the state’s regulatory approach as other states split between outright bans and lighter-touch restrictions on cryptocurrency kiosks. What Arizona’s law does - Enacted as House Bill 2387 (Chapter 171) in May 2025, the law requires operators to fully reimburse a “new customer” who was fraudulently induced into a kiosk transaction — if the customer follows the reporting steps. The refund covers the full transaction amount and associated fees. - A “new customer” is defined as someone who has been a customer of a kiosk operator for fewer than 10 days; customers past that 10-day threshold are treated as existing customers. - New customers are limited to $2,000 in daily transactions across an operator’s machines; existing customers face a $10,500 daily cap. (An earlier bill draft sought a $1,000 cap before lawmakers raised it.) - Operators must offer 24/7 live customer support with a toll-free number, provide receipts with transaction details, and employ blockchain analytics and tracing software designed to block transfers to wallets known to be tied to fraud. How victims qualify for refunds - A qualifying victim must notify both the kiosk operator and either the Attorney General’s Office or another law enforcement agency within 30 days of the transaction. - The customer must then present the operator with a law-enforcement or attorney-general report confirming that the transaction was fraudulently induced. - Displaying warnings or issuing receipts alone does not absolve an operator of the refund duty when the statutory conditions are met. What the Arizona figures do — and don’t — show Mayes’ office framed the $171,332 as actual refunds already obtained, not an estimate of total kiosk-related losses in Arizona. The release did not identify the kiosk operators involved, break down individual refund amounts, or disclose how many claims were rejected. That makes it impossible to calculate what share of eligible victims have been reimbursed or to evaluate operator compliance across the market. “My office is happy to help any victim of crypto ATM fraud receive a refund they are entitled to under Arizona law,” Mayes said in the announcement, urging people to report fraud quickly. National context: fraud is growing Arizona’s limited refunds come against a much larger national fraud problem. The FBI’s Internet Crime Complaint Center (IC3) reported 13,460 complaints involving cryptocurrency kiosks in 2025 and roughly $389 million in losses — a 23% rise in complaints and a 58% jump in reported losses from 2024. More than half of those complaints involved people over age 50, who reported more than $302 million in losses; people aged 60 and older accounted for 6,188 complaints and roughly $257 million in reported losses. The FBI warns that some “kiosk” complaints may include scams that used other transaction methods, so totals aren’t exclusively attributable to kiosk transfers. States diverge on policy Arizona has chosen a regulated-and-restitution model. Other states have gone the opposite direction: Minnesota implemented a statewide prohibition on kiosks effective August 2025, Indiana has enacted a ban, and Tennessee moved to bar the machines after lawmakers cited fraud concerns. Some states, like Georgia, have opted for restrictions, warning labels and refund rules rather than removal. Missouri has pursued enforcement actions — notably suing CoinFlip over alleged scam-related transactions while seeking restitution and civil penalties. Practical advice for Arizona victims - Report the incident to the kiosk operator and to the Attorney General’s Office or local law enforcement within 30 days of the transaction. The 30-day window is the critical deadline. - Keep your receipt and note the date, kiosk location, transaction amount and the details of how the scam unfolded. - Supply the operator with the official law-enforcement or AG report establishing the transaction was fraudulently induced. Enforcement and next steps The statute treats violations as breaches of Arizona’s consumer fraud law, giving the attorney general enforcement authority and creating duties that extend beyond refunds (anti-fraud measures, tracing technology, disclosures and customer support). The Aug. 12 announcement did not reveal new lawsuits, penalties or statutory changes; for now, the 35 refunds are the clearest public evidence that Arizona’s model can generate direct financial recoveries. Broader transparency about total claims, denied applications and operator compliance will be needed to judge whether regulation and mandated restitution can curb kiosk fraud better than the outright bans adopted elsewhere.