Alabama has become the 19th U.S. state to tighten rules on crypto ATMs. The Cryptocurrency Kiosk Fraud Prevention Act imposes transaction caps, mandatory blockchain analytics, and a refund framework for scam victims.
🔑 Key takeaways
- House Bill 303 signed by Governor Kay Ivey on April 8, 2026, effective October 1, 2026
- Daily cap of $1,000 and monthly cap of $10,000 for new consumers; $10,500/day for existing users
- Mandatory blockchain analytics software to block wallets tied to fraud
- Two distinct fraud warnings consumers must accept before each transaction
- Privacy coins banned ; full refund for new consumers defrauded within 60 days
Origins and scope of the law
House Bill 303 was filed on January 21, 2026 in the Alabama House of Representatives, sponsored by Rep. Russell Bedsole. The bill crossed over on February 24, 2026, cleared both chambers, and was signed by Governor Kay Ivey on April 8, 2026. It takes effect on October 1, 2026.
The act adds Section 8-7A-28 to the Alabama Code of 1975 and applies to every crypto kiosk physically located in the state, as well as to operators running digital-asset activity through those machines. A “cryptocurrency kiosk” is defined as an electronic terminal enabling the purchase, sale, or exchange of crypto for cash, bank credit, or other digital assets.
The statute distinguishes two consumer categories. A “new consumer” is anyone making their first transaction or one within 30 days of the initial transaction. An “existing consumer” covers any subsequent transaction. It also defines “privacy coins” as cryptocurrencies with features designed to enhance anonymity and reduce or remove traceability.
Pre-transaction transparency and warnings
Before any transaction, the operator must clearly disclose the U.S. dollar amount involved, all fees in dollars, the total amount in crypto and dollars, and the exchange rate showing the difference between market price and the price charged. Two distinct fraud warnings must be accepted separately before execution.
The first warning details eleven common scam patterns:
- Romance scams soliciting funds
- Virus pop-ups and fake tech support
- Impersonation of banks or law enforcement
- False alerts about frozen accounts or fraudulent transactions
- Fake accusations of identity theft
- Job offers requiring upfront payment
- Demands for payment to fake government agencies
- Bogus disaster-relief fundraisers
- Lottery ticket or vehicle giveaway scams
- Promises of winnings requiring upfront fees
- Crypto trading training offers
The second warning highlights the irreversibility of crypto transactions, the risk of scammers impersonating government bodies or acquaintances, and the absolute prohibition on disclosing private keys. All warnings must appear in a font that contrasts sharply with the screen background.
Receipts, traceability, and transaction caps
At the end of each transaction, the operator must deliver a physical or digital receipt containing the operator’s name and contact details (including a phone number for questions and complaints), the type, value, date, and precise time of the transaction, the full destination crypto address, the fees charged, the crypto-to-dollar exchange rate, and the refund policy. For digital receipts, the operator must transmit the full transaction hash to the Alabama Securities Commission.
The law also mandates blockchain analytics software to block any transaction involving a wallet identified as linked to fraudulent or criminal activity. Customer identity must be verified per federal requirements for every transaction. Caps vary by consumer profile:
| Consumer profile | Daily cap | Monthly cap |
|---|---|---|
| New consumer | $1,000 | $10,000 |
| Existing consumer | $10,500 | — |
| Senior 60+ (ASC rules) | Enhanced diligence | Enhanced diligence |
Heightened safeguards apply to consumers aged 60 or older, with implementation rules to be set by the Alabama Securities Commission. Operators headquartered in the United States must offer live, U.S.-based, toll-free customer service around the clock.
Refunds, bans, and federal compliance
In case of fraudulent inducement, the consumer has 60 calendar days to contact the operator, law enforcement, and the Alabama Securities Commission, and to file a fraud complaint. If a new consumer meets these conditions, the operator must refund the full transaction amount, including fees. For an existing consumer, the refund covers 50% of the total value.
“Many of the people falling victim to these scams are not stupid. They are educated people with good jobs, who have often lived very full lives. They simply fall into the trap because the scammers know what language to use.”
Captain Daniel Lowe, Hoover Police Department
The law also bans the purchase, sale, or sending of privacy coins from kiosks or operators’ online platforms. It prohibits sharing machines with financial institutions and bars signage suggesting a false bank affiliation. Operators must comply with federal reporting requirements, including the Bank Secrecy Act (BSA), the USA PATRIOT Act, and obligations from FinCEN and OFAC.
Context: a surge in kiosk fraud
The legislation lands amid an explosion in kiosk-related fraud. According to FBI data cited by AARP Alabama, more than 12,000 complaints tied to crypto-ATM scams were filed nationwide between January and November 2025, with reported losses exceeding $333 million. In Hoover alone, residents lost more than $800,000 over five years, according to Captain Daniel Lowe’s testimony.
Eighteen U.S. states had already taken legislative or regulatory action ; Alabama is now the 19th. At the federal level, S. 710 — the Crypto ATM Fraud Prevention Act of 2025 — remains in Senate committee and is separate from the Alabama law. The Alabama Securities Commission is empowered to enforce the new provisions and may levy civil penalties.
Conclusion
Alabama’s Cryptocurrency Kiosk Fraud Prevention Act illustrates how U.S. states are reasserting control over physical access points to digital assets. By combining strict transaction caps, blockchain analytics, fraud warnings, and a structured refund mechanism, the state aims to choke off a scam pipeline that already drained hundreds of millions of dollars from American savers in 2025.
Effectiveness will hinge on the deployment of screening software, operator compliance, and the Alabama Securities Commission’s ability to police a dispersed machine fleet. If the model delivers, it could become a template for other states and a clear signal to federal lawmakers whose S. 710 bill is still pending.
Sources
- CryptoSlate — Alabama Cryptocurrency Kiosk Fraud Prevention Act
- Alabama Legislature — Section 8-7A-28
- BillTrack50 — HB 303
- FastDemocracy — Bill Summary
- WBRC — New Alabama Law Targets Crypto Kiosk Scams
- Alabama Daily News — Alabama Must Act Now
This article is for informational and educational purposes only. It does not constitute investment advice. Do your own research (DYOR) before making any decision.
