Congress mandates fraud warnings and refunds at crypto ATMs—closing a scam pipeline

What it does

This bill requires crypto ATM operators to register their machines with the Treasury Department, implement fraud-prevention measures including blockchain analytics, and provide customers with detailed disclosures about transaction risks before purchase. It mandates refunds for customers defrauded into transactions, limits new customers to $2,000 per day and $10,000 total, and imposes $10,000 civil penalties per violation on operators who fail to comply.

Why we flagged it

The bill's core mechanism is establishing mandatory consumer protections and operator compliance requirements for crypto ATMs. While it creates regulatory burden on operators, its primary function is fraud prevention and victim restitution, not industry subsidy or deregulation.

What the text implies

• Blockchain analytics requirement may create privacy concerns for legitimate users, as operators must track and analyze transaction patterns tied to wallet addresses.
• Refund obligation limited to 30 days post-transaction may exclude victims who discover fraud later, creating a narrow window for recourse.
• Compliance officer requirement (full-time, non-CEO, <20% ownership) may impose significant operational costs on smaller crypto ATM operators, potentially consolidating the market toward larger players.
• Preemption of state law may prevent states from imposing stricter protections than federal baseline, limiting local regulatory flexibility.
• Transaction limits ($2,000/day, $10,000 total for new customers) may push fraud victims toward unregulated peer-to-peer crypto transfers or other channels.

Who it affects

Ordinary people using crypto ATMs gain concrete protections: mandatory fraud warnings, refund rights for scam victims, transaction limits on new customers, and operator accountability through civil penalties. These provisions directly reduce consumer harm from the high-fraud environment surrounding crypto ATMs, which disproportionately target vulnerable populations.

Who stands to gain

• Compliance software vendors
• Blockchain analytics firms
• Large crypto ATM operators with existing compliance infrastructure
• Insurance companies offering fraud liability coverage

Named in the bill

FinCEN (Financial Crimes Enforcement Network), SecTreas (Secretary of the Treasury), AIG, Fiserv (FBK), Fidelity National Information Services (FIS/FMAO), Principal Financial Group (PFG), Prudential Financial (PRU)

Where it stands

6 cosponsors: 5 Democrats, 1 Republicans.

• Feb 25, 2025 — Introduced · Congress.gov: “Introduced in Senate”
• Feb 25, 2025 — Referred to Senate Committee on Banking, Housing, and Urban Affairs · Congress.gov: “Read twice and referred to the Committee on Banking, Housing, and Urban Affairs.”

Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.

Money around this bill

1 lobbying clients named this bill on 2 disclosure filings across 2 quarters, Dec 2025 to Jun 2026. Those filings disclosed $100,000 in lobbying spend. A filing names 4 bills on average, so that figure is what each filing reported, not a share belonging to this bill.

More lobbying clients named this bill than 0% of bills with at least one filing.

Richard Durbin, the sponsor, reported $-29,800 in PAC receipts in the 2026 cycle.

• Coinflip — $100,000 on 2 filings

Lobbying Disclosure Act filings through Jul 19, 2026. A filing shows who paid to lobby on a bill it names, not what changed.