Alabama’s new law governing Bitcoin ATMs takes effect today, capping kiosk transactions, requiring ID checks and ordering refunds in some fraud cases. The Alabama Securities Commission says crypto scams have already cost state residents millions of dollars in 2026.
The legislation, approved during Alabama’s 2026 legislative session, establishes new requirements for cryptocurrency kiosk operators. Among the changes are transaction limits, enhanced disclosures and identification verification intended to make it harder for criminals to use crypto machines to facilitate fraudulent transactions.
The measures are particularly focused on transactions that may involve vulnerable consumers or common scam scenarios. Under the new requirements, Alabamians over 60 will receive additional questions during certain transactions to determine whether they may be responding to a scam, including schemes involving purported government fines.
The Alabama Securities Commission has been monitoring reports of cryptocurrency fraud from law enforcement agencies as concerns grow about the use of digital assets and crypto kiosks in fraudulent schemes.
Amanda Senn, director of the Alabama Securities Commission, said kiosk operators have an incentive to comply quickly with the new requirements.
“I know the kiosk operators certainly don’t want users losing money to fraud and other criminal activity and so they’re absolutely motivated to come into compliance really quickly,” — Amanda Senn, director of the Alabama Securities Commission.
Crypto kiosks face new safeguards
The new law places additional obligations on operators of cryptocurrency kiosks and Bitcoin ATMs, which allow users to convert traditional money into digital assets through physical machines.
Unlike conventional financial transactions handled through regulated banks and other established financial institutions, cryptocurrency transactions can present additional challenges for investigators seeking to trace funds after they have been transferred. That characteristic has made crypto increasingly attractive to criminals seeking to move money connected to scams, according to Alabama officials.
The Alabama Securities Commission says it has received hundreds of reports from law enforcement agencies about cryptocurrency scams in recent months. The reports have contributed to concerns that cryptocurrency fraud is affecting consumers across the state and that funds transferred through crypto machines can be difficult to recover.
Senn said criminals have adapted to new technologies and increasingly used cryptocurrency kiosks as part of fraudulent schemes.
“Once the money’s transmitted, the likelihood of recovery is slim to none,” she said. “Criminals, I know, exploit all new technologies, but they have absolutely began using cryptocurrency kiosks or Bitcoin ATMs as vehicle to help perpetrate their fraud. They find it easy to conceal the nature of the transactions.” — Amanda Senn, director of the Alabama Securities Commission.
The comments underscore the importance of preventing suspicious transfers before money is sent rather than relying solely on efforts to recover funds afterward.
Cryptocurrency fraud protections include refunds
One of the significant changes under the law is the introduction of provisions that can require refunds for certain transactions associated with fraud. The legislation also requires greater disclosure at cryptocurrency kiosks, giving users additional information before completing transactions.
Transaction limits are another component of the new framework. By restricting the amount that can be transferred through the machines under specified circumstances, the law seeks to reduce the potential financial impact of cryptocurrency fraud when consumers are manipulated into sending money to scammers.
Identification verification will also become part of the process. The additional checks are intended to establish greater accountability around transactions and provide another opportunity to identify circumstances in which a consumer may be acting under fraudulent instructions.
The additional protections for people over 60 reflect concerns about scams that use authority figures or urgent financial demands to persuade victims to transfer money. One example cited in the report involves scammers allegedly directing people to use cryptocurrency to pay a supposed government fine.
The safeguards do not eliminate the possibility of cryptocurrency fraud, but they introduce additional points at which suspicious activity can potentially be identified before funds are transferred.
Alabama officials urge scam victims to report
The financial consequences of cryptocurrency fraud remain a central concern for Alabama regulators. According to the Alabama Securities Commission, scams involving cryptocurrency have already resulted in millions of dollars in losses among Alabama consumers in 2026.
Senn said the scale of losses associated with cryptocurrency kiosks has prompted expectations that the new requirements could prevent substantial financial damage.
“We hope this prevents millions and millions and millions of dollars because those are the losses we’ve seen as a result of these machines and they are staggering,” — Amanda Senn, director of the Alabama Securities Commission.
The law’s implementation on Oct. 1 places responsibility on kiosk operators to meet the new requirements while giving consumers additional safeguards when using cryptocurrency ATMs.
For regulators and law enforcement agencies, the changes are intended to address a growing challenge: preventing cryptocurrency fraud before transactions become difficult or impossible to reverse.
Consumers who believe they have become victims of cryptocurrency fraud are encouraged by the Alabama Securities Commission to contact the agency and report the incident. Early reporting can provide regulators and law enforcement with information that may assist in identifying fraudulent activity and protecting other consumers.
As cryptocurrency adoption continues to expand, Alabama’s new requirements mark a regulatory response focused specifically on transactions conducted through physical crypto kiosks. The effectiveness of the measures will depend in part on compliance by operators and consumers’ ability to recognize suspicious requests before money is transferred.