Arizona’s crypto ATM law is already doing something most consumer-fraud schemes never do: paying victims back. Since the rule took effect on Sept. 26, 2025, 35 people have received a total of $171, 332 in full refunds, according to an Aug. 12 announcement from Attorney General Kris Mayes.
- 35 victims refunded
- $171, 332 returned
- 30-day fraud report deadline
- $2, 000 / $10, 500 daily limits
That is a real result, not a ceremonial ribbon-cutting exercise. Arizona did not ban crypto kiosks. It kept them legal, then forced operators to carry more of the burden when scammers use those machines as a theft pipeline.
The law started as House Bill 2387 and was enacted as Chapter 171 in May 2025. Its full consumer-protection framework kicked in on Sept. 26, 2025, and it gives qualifying victims a path to recover their money if they move quickly.
That speed is the whole game. Crypto scams are built on pressure, confusion, and a victim’s hesitation. By the time people realize they’ve been played, the funds are often gone and the damage is done. Arizona’s answer is blunt: if you were fraudulently induced into a kiosk transaction, report it fast and the operator has to refund you, including fees, if you meet the law’s requirements.
Under Arizona’s rules, a new customer is someone whose first transaction with that operator was within the past 10 days. Anyone beyond that is treated as an existing customer. New customers are capped at $2, 000 in daily transactions across an operator’s kiosks, while existing customers face a $10, 500 daily ceiling.
The law also requires operators to provide receipts with transaction details, display a toll-free support number, offer round-the-clock live customer service, and use blockchain analytics and tracing software intended to identify suspicious wallets and reduce transfers tied to fraud. In plain English: the machines still work, but the operator has to do more than shrug and cash the money.
“My office is happy to help any victim of crypto ATM fraud receive a refund they are entitled to under Arizona law, ” Attorney General Kris Mayes said.
To qualify, a victim must contact both the kiosk operator and the Arizona Attorney General’s Office or another law enforcement agency within 30 days of the transaction. That deadline is not a footnote. It is the mechanism that makes refunds possible. Miss it, and the money may stay gone.
The reporting window also shows the law’s real priority: recovery, not magic. Blockchain tracing tools can help flag risk, follow funds, and support investigations, but they are not a time machine. They cannot reverse a bad transfer once a scammer has talked someone into feeding cash into a kiosk like it’s a vending machine for heartbreak.
The national problem is still ugly. FBI Internet Crime Complaint Center data recorded 13, 460 complaints involving cryptocurrency kiosks in 2025, with roughly $389 million in reported losses. That marked a 23% increase in complaints from 2024 and a 58% rise in losses, according to the FBI.
The age breakdown is even worse. More than half of the complaints involved people older than 50, who reported more than $302 million in losses. People 60 or older accounted for 6, 188 complaints and more than $257 million in reported losses.
That pattern is familiar for a reason. Scammers lean on urgency, fear, and authority because it works. They pressure victims to act now, tell them money is at risk, and steer them toward crypto kiosks because the transfer is fast and usually irreversible. It is a rotten little business model, and it thrives on people not knowing enough to hit pause.
There is an important caveat on the FBI figures. The bureau says kiosk complaint totals can include scams involving other transaction methods, not just direct kiosk transfers. So the numbers are useful for showing scale, but they are not a perfectly clean measure of kiosk-only fraud. Anyone waving them around as if they were pure gospel is selling more certainty than the data provides.
Arizona’s approach sits in the middle of a bigger policy split. Some states have moved toward outright bans on crypto kiosks. Others, like Arizona, are trying to regulate the machines tightly enough to preserve legitimate use while making scams more expensive for operators and harder for criminals to exploit.
That is the more serious response. Banning every kiosk because criminals abuse them is a blunt instrument. Doing nothing is worse. Arizona is testing the harder route: keep the tool, build guardrails around it, and make the operator ecosystem share responsibility when things go sideways.
Whether the policy reduces fraud overall is still an open question. Thirty-five full refunds is a strong early sign that the reimbursement process works. It does not yet prove the underlying scam volume is falling. The bigger test is whether victims get warned sooner, reports arrive faster, and fewer people get dragged into these scams in the first place.
What remains unclear is how many claims have been filed, how many were denied, and how many victims never reported at all. Those missing numbers matter. A refund framework can look impressive while scammers keep finding fresh targets in the background.
Key questions and takeaways
-
Does Arizona’s crypto ATM law work?
So far, yes in limited cases. The state says 35 victims have already received full refunds totaling $171, 332, which shows the reimbursement process is real and operational. -
Who can get a refund?
Victims who were fraudulently induced into a kiosk transaction and report it properly within 30 days, including contacting the operator and law enforcement or the Attorney General’s Office. -
Why does the law distinguish new and existing customers?
Arizona uses a 10-day cutoff. New customers face tighter limits because fraud protections matter most when someone has just started using an operator. -
How bad is crypto kiosk fraud nationally?
FBI IC3 data recorded 13, 460 kiosk complaints in 2025 and roughly $389 million in losses, with older adults taking the biggest hit. -
Is blockchain tracing enough to stop these scams?
No. It can help detect suspicious activity and support recovery efforts, but it does not guarantee victims will get their money back once a transfer is made.
Arizona is not pretending crypto kiosks are harmless. It is also not pretending prohibition is the only answer. Instead, it is making operators answer for the damage their machines can cause. That is a lot better than hand-waving, and a lot better than letting scammers treat a kiosk like a private cash-out terminal for fraud.
Further reading
For more on crypto ATM fraud, enforcement, and the policy fight around kiosks, these resources add useful context.
- Attorney General Mayes helps nearly three dozen crypto ATM scam victims recover full refunds
- Spotting indicators of cryptocurrency kiosk scams
- Attorney General Hanaway files suit against crypto ATM network for enabling scams
- Arizona Attorney General guidance on cryptocurrency ATM fraud
- Cryptocurrency ATM overview
- How new crypto ATM fraud laws protect Arizona seniors
- Tennessee bans crypto ATMs as Minnesota pushes stricter regulation to curb fraud
- Australia cracks down on crypto ATMs amid surging crime rates
- Texas lawmaker proposes crypto ATMs in federal buildings to boost adoption and education
