Background of the Arizona crypto ATM law
In September 2025, Arizona enacted House Bill 2387, a regulatory measure aimed at protecting users of cryptocurrency kiosks. The law obligates operators of crypto ATMs to reimburse newly onboarded customers who fall prey to fraud, covering both the principal amount and any associated fees. A "new customer" is defined as an individual who has used a particular kiosk for fewer than ten days. For these users, daily transaction limits are capped at $2,000, while established customers may transact up to $10,500 per day.
Refunds delivered since implementation
According to the Arizona Attorney General’s Office, the statute has already facilitated full refunds for 35 victims, amounting to $171,332 in total. These reimbursements were processed after the victims met the reporting requirements stipulated by the law.
Procedure for obtaining a refund
To qualify for a refund, a victim must take two steps within a 30‑day window from the fraudulent transaction: (1) notify the crypto ATM operator and (2) file a report with the Attorney General’s Office or another law‑enforcement agency. The operator must then receive an official determination confirming that the transaction was induced by fraud before the reimbursement, including any fees, is issued.
Attorney General Kris Mayes’ advisory
Attorney General Kris Mayes emphasized the importance of prompt reporting, stating that her office is prepared to assist any individual who has been defrauded through a crypto ATM. She urged residents to act quickly, noting that the 30‑day deadline is critical for eligibility under the new law.
Implications for crypto users
The Arizona framework illustrates a growing trend among U.S. states to introduce consumer‑focused safeguards in the rapidly evolving crypto space. By mandating swift reporting and providing a clear reimbursement pathway, the law aims to deter fraudulent operators and increase confidence among newcomers to cryptocurrency services.