Virginia General Assembly Approves Landmark Crypto Kiosk Regulations to Combat Fraud and Protect Consumers
RICHMOND, Va. — The Virginia General Assembly has passed bipartisan legislation establishing comprehensive regulations for cryptocurrency kiosks, commonly known as crypto ATMs, to safeguard consumers from rampant scams.[3][1]
The bills, HB 665 in the House of Delegates and SB 489 in the Senate, cleared both chambers with strong support. The House passed HB 665 last week by an 84-13 vote, while the Senate approved SB 489 unanimously. The measures now await Governor Glenn Youngkin’s signature to become law.[3][1]
Key Protections Target Scam Vulnerabilities
Sponsored by Delegate Michelle Maldonado (D-Manassas) in the House and Senator Sadam Salim (D-Fairfax) in the Senate, the legislation addresses the proliferation of crypto kiosks in convenience stores, gas stations, and other retail locations. These machines, which resemble traditional bank ATMs, allow users to purchase cryptocurrency and transfer funds to digital wallets—but their unregulated nature has made them a prime tool for fraudsters.[3][1]
Nationwide, crypto kiosk scams resulted in approximately $330 million in losses in 2025 alone. In Virginia, victims include a Southwest Virginia resident who lost $15,000 and multiple cases in Fairfax County. Scams represent about 7% of the industry’s business, often targeting seniors who mistake the kiosks for regular ATMs.[1][3]
“They look like ATMs. They’re shaped like ATMs. But instead of taking money out, you’re sort of putting money in to purchase crypto that goes into a broader exchange,” Delegate Maldonado explained, highlighting the confusion exploited by scammers.[1]
The irreversible nature of blockchain transactions exacerbates the problem: “The thing about crypto is that once it goes into the exchange, which is in the blockchain environment, there’s no way to trace it. There’s no way to get it back,” Maldonado added.[1]
Robust Safeguards for New and Existing Users
The new rules impose statewide licensing requirements on operators, who must register with the state, pay fees, and submit regular business reports. Transaction fees are capped, with limits discussed around 15-18% in committee substitutes.[1][2][7]
- Licensing and Reporting: Operators classified as money transmitters must obtain annual licenses and adhere to disclosure protocols.[3][7]
- Transaction Limits: Daily caps for new users (defined variably as first 10-14 days) at around $2,000-$5,000, with monthly limits up to $10,000-$10,500 for all users.[2][7]
- 48-Hour Hold for New Users: Funds from initial transactions are held for 48 hours, enabling refunds if fraud is suspected.[1][3][5]
- ID Verification: Required for all transactions to enhance traceability.[3]
- Warning Notices: Prominent scam risk alerts on every kiosk, prohibiting ATM-like marketing.[1][2]
These measures aim to prevent catastrophic losses. “Transaction limits will limit how much a person can lose so that they’re not totally wiped out,” said Jared Kalfi of AARP Virginia.[2]
Bipartisan Support Amid Industry Pushback
AARP Virginia and elder-protection advocates strongly backed the bills, emphasizing protections for vulnerable populations. Jim Dau, AARP Virginia state director, stated: “Virginians have been losing money to scammers who take advantage of the lack of regulations and relative anonymity of cryptocurrency kiosks.”[3]
Kiosk operators, including CoinFlip and Bitcoin Depot, acknowledged the need for some safeguards but sought adjustments. Sarah Thomas of CoinFlip called the $10,000 monthly cap “one of the more restrictive” provisions, arguing it overlaps with existing compliance and would make Virginia among the strictest states. Operators urged higher limits during Senate committee hearings.[2]
Despite objections, the substitute versions advanced, balancing consumer protection with industry viability. If signed, Virginia will join at least 17 other states with comprehensive crypto kiosk oversight, as the machines continue to expand nationwide.[4]
Broader Context and Next Steps
The legislation reflects growing national concern over crypto kiosks. Similar bills are progressing in states like West Virginia (HB 5353), which proposes a 15% fee cap and daily limits.[4] In Washington state, efforts under SB 5280 stalled in the House despite proposals for $2,000 daily limits and 15% fees.[6]
Proponents argue the rules provide essential “guardrails” without stifling innovation. Senator Salim told committees the bill is meant to “provide consumer protections” amid rising scams targeting retail users.[2]
Governor Youngkin has not indicated his stance, but the bill’s bipartisan momentum suggests a high likelihood of enactment. Once law, the State Corporation Commission will oversee enforcement, tracking operators and facilitating refunds.[1][3]
This regulatory framework marks a proactive step for Virginia, prioritizing consumer safety in the evolving digital asset landscape. As crypto kiosks proliferate—numbering in the tens of thousands nationwide—states are increasingly stepping in to curb fraud before losses escalate further.[3][1]
(Word count: 1028)