Arizona’s attorney general says a new state law governing cryptocurrency kiosks has already produced $171,332 in refunds for scam victims. The amount, announced Wednesday by Attorney General Kris Mayes, reflects money returned to 35 people under Arizona’s crypto ATM protections.
The refunds stem from House Bill 2387, enacted in May 2025 as Chapter 171. The measure requires kiosk operators to fully reimburse certain customers who were fraudulently induced into a transaction, including associated fees, if they complete the reporting steps set out in the law.
Refunds tied to a specific legal process
The $171,332 figure represents refunds that have already been obtained for identified victims, not an estimate of total losses in Arizona. Mayes’ office did not identify the kiosk operators that paid the refunds, disclose how much each victim recovered, or say how many claims were denied or remain unresolved.
Because those details were not released, it is not possible to determine how many potentially eligible victims have successfully recovered funds or what proportion of reported scams resulted in reimbursement. The announcement confirms only that 35 people have received money back under the statute so far.
Who qualifies for full reimbursement
Arizona’s protection does not apply equally to every kiosk user. Under the statute, a “new customer” is someone who has been a customer of an operator for fewer than 10 days. An existing customer is someone who has reached that 10-day mark.
To qualify, a victim must notify both the kiosk operator and either the Attorney General’s Office or another law enforcement agency within 30 days of the transaction. The customer must also provide a report from law enforcement or the attorney general determining that the transaction was fraudulently induced.
When those conditions are met, the operator must refund the full transaction amount and related fees. The law also makes clear that warning screens or a receipt do not eliminate that refund obligation.
Broader requirements for kiosk operators
The law combines reimbursement rules with operating restrictions and anti-fraud measures. New customers are limited to $2,000 in daily transactions across an operator’s kiosks, while existing customers face a daily cap of $10,500.
Operators must offer 24-hour live customer service, display a toll-free support number, and provide receipts that include transaction details. They are also required to use blockchain analytics and tracing software intended to help prevent transfers to wallets known to be associated with fraud at the time a transaction occurs.
Arizona lawmakers considered stricter transaction limits earlier in the legislative process. An earlier version of the bill proposed a $1,000 daily cap before the final figure was revised.
Arizona’s move against a wider fraud problem
The state’s early refund results come as federal data points to a much larger national problem involving crypto kiosks. FBI data for 2025 recorded more than 13,400 complaints involving cryptocurrency kiosks and roughly $389 million in reported losses.
According to the report, complaints rose 23% from 2024 and reported losses increased 58%. More than half of the complaints involved older adults, and people aged 60 or older accounted for 6,188 complaints and more than $257 million in reported losses.
The FBI has cautioned that kiosk-related figures can include scams that used other payment methods as well, so the totals should not be treated as losses caused solely by kiosk transfers.
What victims and operators face next
For Arizona residents who believe they were sent to a crypto ATM by a scammer, the key deadline is the rolling 30-day reporting window. Victims are advised to keep receipts and be ready to provide the transaction date, kiosk location, amount sent, and details of the scam when contacting the operator and law enforcement or the attorney general.
The attorney general has enforcement authority under the law, and violations are treated as violations of Arizona’s consumer fraud statute. For operators, that means the refund obligation sits alongside continuing duties on disclosures, customer support, blockchain tracing, and other anti-fraud controls.
Source: crypto.news