Florida puts crypto ATM scam losses onto operators

Florida is making crypto ATM operators carry more of the fraud risk, a shift that could affect kiosk economics well beyond one state. Under HB 505, now Chapter 2026-178, Florida will require scam warnings, receipts, daily transaction caps, registration filings, and in some cases full refunds for fraud victims.

Most of the law takes effect on Jan. 1, 2027. The registration section starts on March 1, 2027, though businesses already operating by Jan. 1 must apply within 30 days. Licensed money transmitters do not need separate kiosk registration, but they still have to follow the operating rules.

The refund rule is the sharpest change. A customer's first kiosk transaction must be fully refunded within 72 hours if the customer reports the alleged fraud to both the business and law enforcement or a government agency within 60 days, and provides proof such as a police report or notarized affidavit.

Florida also set daily limits of $2,000 for new customers and $10,000 for existing customers across one or more transactions or kiosks. Receipts must include contact details, transaction data, fees, exchange rate if applicable, and the refund policy. The move follows heavy losses tied to kiosk scams: the FBI logged 1,213 Florida complaints and $32.8 million in adjusted losses in 2025.