Alabama has begun enforcing new protections for people who lose money to scams involving cryptocurrency ATMs. The state’s Cryptocurrency Kiosk Fraud Prevention Act took effect on Oct. 1 after being enacted on April 8, creating refund obligations for kiosk operators and setting new operating rules for the machines.

Under guidance outlined by the Alabama Securities Commission on Sept. 30, qualifying scam victims may be entitled to reimbursement, but only if they meet reporting deadlines and notification requirements. The law also adds transaction caps, identity checks, fee disclosures, and customer-service rules for operators.

Refunds depend on customer status

The amount an Alabama scam victim can recover depends on whether the person is treated as a new or existing customer under the law. Qualifying new customers can receive a full reimbursement of the payment plus all fees, while existing customers can recover half of the payment’s value plus all fees.

The larger refund applies through a customer’s first cryptocurrency kiosk transaction and the 30 days that follow. After that period, the user is considered an existing consumer for purposes of reimbursement.

Victims face a 60-day reporting deadline

To qualify for reimbursement, both new and existing customers must act within 60 calendar days of the disputed payment. They must notify the kiosk operator, a law enforcement agency, and the Alabama Securities Commission.

They also must file a fraud report with either law enforcement or the commission. State regulators presented the reporting process as a way to address losses after a scam has already occurred, while also emphasizing the need for people to recognize suspicious payment demands before sending money.

New limits and disclosure requirements for kiosks

The law does more than create refund rights. It also limits how much can be sent through machines that convert cash into cryptocurrency. For new consumers, House Bill 303 sets caps of $1,000 per calendar day and $10,000 per calendar month. Existing consumers face a separate daily limit of $10,500.

A new customer cannot avoid those limits by using multiple kiosks operated by the same company. The new-customer caps apply across one or more machines in Alabama, and identity verification is required for every payment. Operators based in the United States must also provide live, U.S.-based, toll-free customer service at all times. Civil penalties can apply for violations.

Before a payment is processed, operators must disclose fees, the amount in cryptocurrency and in U.S. dollars, and exchange-rate information showing the difference between the market price and the price being charged. The Alabama Securities Commission said those disclosures are meant to make both costs and possible warning signs more visible.

Regulators warn scam patterns remain familiar

The commission tied the law to a common pattern in which a person receives an urgent call claiming there is a warrant, banking problem, or other emergency and is told to deposit cash into a crypto ATM. Alabama Securities Commission Director Amanda Senn said that when someone is directing a person to deposit money into a crypto ATM, it is likely a scam.

State regulators also pointed to other schemes, including romance scams, impersonation, fabricated emergencies, and threats or blackmail. Senior citizens were identified as frequent targets, and the commission warned that fast, irreversible payments make recovery especially difficult.

As an example of the kind of pressure tactic involved, the article cited local reporting from Sept. 16 about a Georgia woman who deposited $4,900 into a bitcoin ATM after a caller falsely claimed she needed to pay to avoid arrest for missing jury duty.

What changes now

With the law now in effect, crypto ATM operators in Alabama must handle qualifying fraud claims under the new refund framework while following the transaction, disclosure, and customer-service requirements set by the state.

The Alabama Securities Commission has also made clear that the law is not expected to stop scam attempts entirely. Its stated purpose is to reduce losses and improve protections when fraud involving cryptocurrency kiosks occurs.

Source: news.bitcoin.com