Arizona’s crypto ATM fraud-prevention framework has helped 35 scam victims recover $171,332 since taking effect in September 2025, offering an early test of a regulatory model built around reimbursement rather than prohibition. The recoveries average roughly $4,895 per victim and show the law functioning as a direct consumer-remediation mechanism. Arizona Attorney General Kris Mayes disclosed the results on August 12.
In the Attorney General’s official announcement, the state said victims must act quickly because qualifying fraudulent transactions generally must be reported within 30 days. Arizona’s approach keeps cryptocurrency kiosks available while placing greater responsibility on operators to prevent scams and reimburse eligible victims.
Refund rights shift responsibility toward kiosk operators
Under Arizona’s HB 2387, a fraudulently induced new customer can receive a full refund, including associated fees, by contacting both the kiosk operator and either law enforcement or the Attorney General within 30 days. The customer must also provide the operator with a report determining that the transaction resulted from fraud. The statute effectively turns rapid reporting into the gateway for recovering money that might otherwise be difficult to retrieve after a crypto transfer.
The law goes beyond refunds. Arizona’s official legislative text requires operators to display prominent fraud warnings, provide physical or digital receipts and maintain live customer service around the clock. Operators must also use blockchain analytics and tracing software to avoid sending purchased cryptocurrency to wallets already known to be associated with fraud.
Transaction limits provide another safeguard. New customers, defined as those who have used an operator for less than 10 days, are capped at $2,000 per day, while existing customers face a $10,500 daily limit. The caps are designed to restrict how much money can leave through kiosks during a scam before a victim or operator has an opportunity to intervene.
Arizona tests regulation without banning crypto kiosks
The framework represents a different response from simply removing physical crypto access points. Arizona is instead requiring kiosk companies to absorb part of the operational and financial burden associated with fraud, including staffing customer support, producing disclosures and monitoring blockchain addresses.
Those obligations introduce compliance costs for operators, but they also create a clearer recovery path for victims. The Attorney General’s office has emphasized that users should preserve transaction receipts and report suspected scams immediately. The $171,332 recovered so far provides measurable evidence that the refund mechanism can return funds when victims invoke the law within its required timeframe.
The longer-term test will be whether the combination of transaction limits, warnings, analytics and mandatory refunds reduces successful fraud without materially restricting legitimate kiosk access. Arizona’s early results suggest the state is trying to balance continued crypto availability with stronger accountability for the companies operating the physical on-ramp.
