Crypto ATM Fraud Prevention Act of 2025
- Sponsor
- Sen. Durbin, Richard J. [D-IL]
- Committees
- Banking, Housing, and Urban Affairs Committee (primary)
- Last action
- Feb 25, 2025
Bottom line
The bill seeks to combat fraud at virtual currency kiosks by imposing strict operational, disclosure, and anti-fraud requirements on operators, with specific protections and refund rights for customers, particularly those new to the service.
What it actually does
This bill amends title 31, United States Code, to establish comprehensive regulations for virtual currency kiosk operators, aiming to prevent fraudulent transactions. It mandates operator registration with the Treasury, requires detailed disclosures and physical receipts for customers, and imposes anti-fraud policies, including the use of blockchain analytics and the appointment of a compliance officer. The bill also introduces specific protections for new customers, such as verbal confirmation for larger transactions, transaction limits, and a refund mechanism for fraud victims.
Proponents argue
Supporters argue that this bill is a crucial step in protecting consumers, especially vulnerable populations, from prevalent scams and illicit financial activities facilitated by virtual currency kiosks. They contend that the mandated disclosures, anti-fraud measures, and refund provisions will increase transparency, enhance accountability for operators, and provide a vital safety net for fraud victims in a rapidly evolving financial landscape.
Opponents contend
Critics, particularly from the virtual currency industry, might argue that the bill imposes overly burdensome and costly compliance requirements on kiosk operators, which could stifle innovation and market growth. They may contend that the prescriptive regulations, such as live verbal confirmations and transaction limits for new customers, could deter legitimate users and drive business away from regulated entities, potentially leading to reduced access or a shift to less secure platforms.
The bill is relatively short and clearly structured, making it accessible for a thorough review within a reasonable timeframe.
Section 2, amending 31 U.S.C. 5330(d) and adding (f)
Enhanced Registration Requirements for Virtual Currency Kiosk Operators
This provision requires virtual currency kiosk operators to register with the Secretary of the Treasury. They must submit an updated list every 90 days containing the physical address of each kiosk they own or operate, their legal and trade names, start and end dates of operation, and all virtual currency addresses used by the operator. Filing false or incomplete information is considered a failure to comply.
Supporters argue
Supporters argue this increases transparency, helps law enforcement track illicit activities, and provides a clearer picture of the virtual currency kiosk landscape, making it harder for bad actors to operate anonymously.
Critics contend
Operators might argue this creates an undue administrative burden, particularly for smaller businesses, and could lead to privacy concerns regarding the detailed location and operational data required.
Tradeoffs
Balances the need for regulatory oversight and law enforcement access to operational data against the administrative costs and potential privacy implications for businesses.
Section 3, adding 31 U.S.C. 5337(b) and (c)
Mandatory Transaction Disclosures and Customer Consent
Before any transaction, virtual currency kiosks must clearly display all relevant terms, conditions, fees, and a warning that transactions are final and non-refundable. Crucially, it mandates specific warnings about common fraudulent schemes, such as impersonation of government officials or offers that seem too good to be true. Customers must provide explicit consent to acknowledge these disclosures each time they use the kiosk.
Section 3, adding 31 U.S.C. 5337(d), (e), and (j)
Detailed Receipts and Fraud-Related Refund Mandates
This provision requires operators to provide customers with a physical receipt for each transaction, detailing the operator's contact information, customer name, transaction specifics (value, date, time, hash, virtual currency address), fees, and a statement about refund eligibility for fraud. Significantly, it mandates full refunds for new customers (within 14 days of first transaction) and transaction fee refunds for existing customers if fraud is reported within 30 days with a sworn affidavit to law enforcement.
Section 3, adding 31 U.S.C. 5337(f) and (g)
Mandated Anti-Fraud Policy and Dedicated Compliance Officer
Each virtual currency kiosk operator must establish and maintain a written anti-fraud policy, including risk assessment, protective procedures, and monitoring responsibilities, which must be submitted to FinCEN. Additionally, operators are required to designate and employ a full-time compliance officer who is qualified to monitor adherence to all applicable laws, is not the CEO, and does not own or control more than 20 percent of the company.
Section 3, adding 31 U.S.C. 5337(h)
Mandatory Use of Blockchain Analytics for Fraud Prevention
This provision mandates that virtual currency kiosk operators utilize blockchain analytics technology. This is required to prevent the sending of virtual currency to wallets known to be associated with fraudulent activity at the time of a transaction and to detect transaction patterns indicative of fraud or other illicit activities. FinCEN is authorized to request evidence from operators to confirm their compliance with this requirement.
Section 3, adding 31 U.S.C. 5337(i) and (k)
Verbal Confirmation and Transaction Limits for New Customers
For 'new customers' (defined as within the first 14 days of their first transaction), any virtual currency kiosk transaction valued at $500 or more requires a live verbal confirmation. This confirmation, via telephone or video call with an operator employee, must verify the customer's intent, understanding, and ensure they are not being fraudulently induced. Additionally, new customers face transaction limits: no more than $2,000 in any 24-hour period and a total of no more than $10,000.
Defines "virtual currency" broadly as any digital representation of value recorded on a cryptographically secured distributed ledger or similar technology, including systems designed to leverage or replace blockchain, distributed ledger technology, or their derivatives.
Section 3, 31 U.S.C. 5337(a)(7)
Why it matters:This is standard legislative practice to define terms upfront, but the breadth of this definition is significant for the future applicability of the Act.
Case for: Supporters would argue this broad definition ensures the law remains future-proof, covering new technologies that emerge to replace or build upon current blockchain systems, thereby preventing regulatory arbitrage and ensuring consistent oversight.
Case against: Critics might argue that such a broad definition creates uncertainty for future technological developments, potentially stifling innovation by bringing unforeseen technologies under strict regulation without specific consideration of their unique characteristics.
Estimated impact: Potentially broadens the scope of the Act to cover future digital asset innovations beyond current blockchain implementations, ensuring regulatory relevance over time.
Any person who willfully denies a refund to a customer in violation of the Act shall be liable to the customer for 3 times the amount of the refund owed or $10,000, whichever is greater. This penalty is in addition to any other civil penalties under the Act.
Section 3, 31 U.S.C. 5337(j)(3)
Why it matters:Could be seen as standard enforcement language, but the significant financial penalty makes it a powerful deterrent that might be strategically placed to avoid drawing immediate attention.
Case for: Proponents would argue this provides a strong incentive for operators to comply with refund mandates, ensuring victims of fraud receive timely restitution and deterring willful non-compliance through substantial financial consequences.
Case against: Opponents might contend that such high penalties could be disproportionate for smaller operators or in cases of genuine dispute, potentially leading to excessive litigation and creating an overly punitive regulatory environment.
Estimated impact: Significantly increases the financial risk for operators who fail to comply with refund requirements, potentially leading to higher compliance costs or legal challenges.
States that the provisions of this section shall preempt any State law, rule, or regulation only to the extent that such State law, rule, or regulation conflicts with a provision of this section. It further clarifies that nothing in the section prohibits a State from enacting a law, rule, or regulation that provides greater protection to customers.
Section 3, 31 U.S.C. 5337(o)
Why it matters:This is standard language for federal legislation to clarify the interplay between federal and state authority, but it's crucial for understanding the potential for a layered regulatory environment.
Case for: Supporters would argue this ensures a baseline of federal protection for consumers while allowing states to innovate and provide stronger safeguards where they deem necessary, promoting a 'race to the top' in consumer protection.
Case against: Critics might argue that this approach creates a patchwork of regulations, increasing compliance complexity for operators who must navigate varying state-specific rules on top of federal ones, potentially hindering national operations.
Estimated impact: Allows for varied regulatory landscapes across states, potentially leading to different levels of consumer protection and compliance burdens depending on an operator's geographic footprint.