A. A cryptocurrency kiosk operator shall disclose in a clear, conspicuous and easily readable and understandable manner in the chosen language of the customer all relevant terms and conditions that are generally associated with the products, services and activities of the cryptocurrency kiosk operator and virtual currency. The cryptocurrency kiosk operator shall receive an acknowledgment of receipt of all disclosures required under this section from a customer through confirmation or consent.
B. A cryptocurrency kiosk operator shall provide the following disclosures separately in a font that contrasts with the background where the written warning appears and the customer must accept the two separate disclosures before executing a cryptocurrency kiosk transaction:
1. Warning: Consumer fraud often starts with contact from a stranger who is initiating a dishonest scheme or a criminal or fraudulent activity that may appear in many forms, including any of the following:
(a) Claims of a frozen bank account or credit card.
(b) Claims of a fraudulent bank transaction.
(c) Claims of identity theft or an offer of employment in exchange for payment.
(d) Requests for a payment to a government agency or company.
(e) Requests for disaster relief donations or loans.
(f) Offers to purchase lottery tickets or sweepstakes or drawings for vehicles.
(g) Prompts to click on desktop pop-ups that include virus warnings or communication from alleged familiar merchants.
(h) Communication from someone impersonating a representative of your bank or a law enforcement officer.
If you believe you have been scammed, stop and call your local law enforcement and the cryptocurrency kiosk operator.
2. Warning: Losses due to fraudulent or accidental transactions are not recoverable. Transactions in virtual currency are irreversible. People may use virtual currency transactions to steal your money by impersonating the government, organizations or people you know. Impersonators may threaten jail time, say your identity has been stolen, allege your computer has been hacked, insist you withdraw money from your bank account to purchase virtual currency or use a number of other scams. Do not disclose your private key that is associated with your virtual wallet to a third party. If you believe you are being scammed, stop and call your local law enforcement and the cryptocurrency kiosk operator.
C. On the completion of each cryptocurrency kiosk transaction, the cryptocurrency kiosk operator shall provide the individual who made the transaction at the cryptocurrency kiosk with a physical or digital receipt in the language chosen by the individual that contains all of the following information:
1. The cryptocurrency kiosk operator's name and contact information, including a telephone number to answer questions and register complaints.
2. The state and local law enforcement or government agency that receives complaints of fraud.
3. The type, value, date and precise time of a transaction, the transaction hash and each applicable virtual currency address.
4. The name and contact information of the sender.
5. The name, contact information and virtual wallet number of the designated recipient.
6. DAI fees charged. For the purposes of this paragraph, "DAI" means a decentralized stablecoin token that is designed to maintain a value of the United States dollar.
7. The exchange rate of the virtual currency to the United States dollar.
8. A statement of the cryptocurrency kiosk operator's refund policy.
9. Any additional information that a government authority may require.
D. A cryptocurrency kiosk operator shall use blockchain analytics and tracing software to help prevent fraud by not sending purchased virtual currency from a cryptocurrency kiosk operator to a virtual wallet known to be affiliated with fraud at the time of a transaction. A relevant government authority may request evidence from any cryptocurrency kiosk operator of current use of blockchain analytics.
E. All cryptocurrency kiosk operators shall take reasonable steps to detect and prevent fraud, including establishing and maintaining a written antifraud policy and conforming to federal know your consumer and anti-money laundering laws.
F. A cryptocurrency kiosk operator may not accept transactions of more than $2,000 United States dollars in cash or the equivalent in virtual currency in one day from a new customer in this state through one or more cryptocurrency kiosks. For existing customers, a cryptocurrency kiosk operator shall ensure that the cryptocurrency kiosk, in connection with cryptocurrency services for a single person in this state using one or more cryptocurrency kiosks, does not accept or dispense in a single day more than $10,500.
G. All cryptocurrency kiosk operators performing business in this state shall provide live customer service at a minimum of twenty-four hours a day, seven days per week. The customer service toll-free number shall be prominently displayed on the cryptocurrency kiosk or the cryptocurrency kiosk screens.
H. If a new customer as defined in subsection L, paragraph 7 of this section has been fraudulently induced to engage in a cryptocurrency kiosk transaction, the cryptocurrency kiosk operator shall issue a full refund for the fraudulently induced cryptocurrency kiosk transaction, including any fees charged in association with the transaction, if the new customer does all of the following:
1. Contacts the cryptocurrency kiosk operator within thirty days after the cryptocurrency kiosk transaction.
2. Contacts a law enforcement agency or the attorney general within thirty days after the cryptocurrency kiosk transaction.
3. Provides the cryptocurrency kiosk operator with a report from the law enforcement agency or attorney general's office that determines that the new customer was fraudulently induced to engage in a cryptocurrency kiosk transaction.
I. A victim of fraud is eligible to receive a refund even if a cryptocurrency kiosk operator provides the required disclosures prescribed in subsections A and B of this section and the receipt prescribed in subsection C of this section.
J. The attorney general shall enforce this section. Any act or practice that violates this section is a violation of section 44-1522.
K. Notwithstanding any other law, all individuals or entities subject to this section shall be classified as a new customer for the purposes of compliance on September 26, 2025. A new customer automatically converts to an existing customer ten days after becoming a new customer. An existing customer is subject to the transaction limits prescribed in this section.
L. For the purposes of this section:
1. "Blockchain analytics" means the analysis of data from blockchains or public distributed ledgers, including associated transaction information.
2. "Blockchain analytics and tracing software" means a software service that uses blockchain analytics data to provide risk-specific information and tracing of virtual currency wallet addresses, among other virtual items.
3. "Cryptocurrency kiosk":
(a) Means a physical, electronic terminal that is a mechanical agent of the cryptocurrency kiosk operator and that enables a cryptocurrency kiosk operator to facilitate the purchase, sale or exchange of cryptocurrency for money, bank credit or any other virtual currency.
(b) Includes a virtual currency exchange, which performs the actual virtual currency transmission or drawing on the virtual currency that is in the possession of the electronic terminal operator.
4. "Cryptocurrency kiosk operator" means an individual or entity:
(a) That engages in virtual currency business activity through a money transmission kiosk in this state.
(b) That operates or manages a money transmission kiosk where virtual currency business activity is offered in this state.
5. "Cryptocurrency kiosk transaction" means both:
(a) A transaction conducted or performed, in whole or in part, by electronic means through a cryptocurrency kiosk.
(b) A transaction made at a cryptocurrency kiosk to purchase virtual currency with fiat currency or to sell virtual currency for fiat currency.
6. "Existing customer" means a consumer transacting at a cryptocurrency kiosk in this state who has been a customer with a cryptocurrency kiosk operator for at least ten days.
7. "New customer" means a consumer transacting at a cryptocurrency kiosk in this state who has been a customer of a cryptocurrency kiosk operator for less than ten days.
8. "Transaction hash" means a unique identifier made up of a string of characters that acts as a record of and provides proof that the transaction was verified and added to the blockchain.
9. "Virtual currency address":
(a) Means a unique public alphanumeric identifier that is associated with a virtual currency type and wallet and that identifies the location where virtual currency transaction can be sent.
(b) Is referred to as a public key.
10. "Virtual wallet":
(a) Means a software application or other mechanism that provides a means to hold, store or transfer virtual currency or nonfungible tokens.
(b) Includes a public key, private key and a public receiving address. For the purposes of this subdivision, a private key may be used to sign for a transaction when sending cryptocurrency from a virtual wallet.