Crypto Law Profile
Alabama HB303 adds crypto kiosk fraud safeguards, transaction limits, refund rules, privacy-coin restrictions, and ASC enforcement authority effective Oct. 1, 2026.
Alabama Cryptocurrency Kiosk Fraud Prevention Act is a United States state-level crypto consumer protection law enacted through Alabama House Bill 303. The measure adds Section 8-7A-28 to the Code of Alabama 1975 and is scheduled to become effective on October 1, 2026. The official enrolled text states that the section may be cited as the “Cryptocurrency Kiosk Fraud Prevention Act.”
This profile treats the requested “Cryptocurrency Kiosk Fraud Prevention Law” as Alabama HB303, not as a federal U.S. statute. A separate federal bill, S. 710, the Crypto ATM Fraud Prevention Act of 2025, was introduced in the U.S. Senate and referred to the Senate Banking Committee, but it is distinct from the Alabama enacted law.
The Act applies to cryptocurrency kiosks located in Alabama and to operators that conduct cryptocurrency business activity through those kiosks. It defines a cryptocurrency kiosk as a physical electronic terminal that enables an operator to facilitate the purchase, sale, or exchange of cryptocurrency for money, bank credit, or other cryptocurrency.
Operators must give clear and conspicuous disclosures before a transaction. Required disclosures include the U.S. dollar amount involved, fees in U.S. dollars, the total transaction amount in both cryptocurrency and U.S. dollars, and the exchange-rate difference between market price and the price charged to the consumer. The kiosk also must display fraud warnings at the beginning of a transaction, and both warnings must be accepted before the transaction may proceed.
At completion, the operator must provide a physical or digital receipt. The receipt must include operator contact information, transaction type, value, date and precise time, receiving cryptocurrency address, fees, exchange rate, and refund-policy information. If a digital receipt is selected, the operator must also provide the transaction hash and send the receipt to the Alabama Securities Commission.
The Act requires operators to use blockchain analytics and tracing software to prevent transactions involving cryptocurrency addresses identified as associated or affiliated with fraud or other criminal activity. If a consumer attempts to transact with a wallet detected as associated with fraud or criminal activity, the kiosk may not execute the transaction.
For new consumers, operators may not accept more than $1,000 in cash, or the equivalent amount of foreign currency or cryptocurrency, in one calendar day, or more than $10,000 in a calendar month. For existing consumers, the daily cap is $10,500. Operators must verify the identity of every consumer for each transaction in accordance with federal law.
Operators must provide enhanced due diligence protections for consumers who are 60 years of age or older, with implementing rules to be adopted by the Alabama Securities Commission. U.S.-headquartered operators must provide live, U.S.-based, toll-free consumer service at all times, display the service number on the kiosk or screen, and provide a frequently monitored U.S. phone number and email address for government-agency communications.
The refund provisions distinguish between new and existing consumers. If a new consumer is fraudulently induced into a kiosk transaction and completes the statutory reporting steps, the operator must issue a full refund plus fees. If an existing consumer completes the same steps, the operator must issue a refund for one-half of the transaction value, including fees. The consumer must contact the operator, law enforcement, and the Alabama Securities Commission within 60 calendar days and file a fraud report.
The Act is specific to Alabama, but it sits within the broader U.S. crypto-kiosk policy landscape. It requires kiosk operators to comply with federal reporting requirements under the Bank Secrecy Act, the USA PATRIOT Act, and reporting requirements imposed by FinCEN or OFAC. It also prohibits operators from permitting the buying, selling, or sending of privacy coins from cryptocurrency kiosks or online platforms.
As of June 4, 2026, HB303 should be treated as enacted but not yet effective. LegiScan lists the bill as enacted on April 8, 2026, while the enrolled Alabama text states that the Act becomes effective October 1, 2026.
Requires operators to disclose U.S. dollar amounts, fees, total transaction value, and exchange-rate differences before a kiosk transaction.
Requires prominent fraud warnings before execution and detailed physical or digital receipts after each transaction.
Requires blockchain analytics and tracing software to block transactions involving addresses tied to fraud or criminal activity.
Sets lower limits for new consumers and a separate $10,500 daily limit for existing consumers, with identity verification for each transaction.
Provides full refunds plus fees for eligible new consumers and half-value refunds plus fees for eligible existing consumers.
Prohibits operators from permitting the buying, selling, or sending of privacy coins from kiosks or online platforms.
Authorizes the Alabama Securities Commission to assess civil penalties for violations and preserves other criminal or civil liability.
Rep. Russell Bedsole introduced HB303, the Cryptocurrency Kiosk Fraud Prevention Act, in the Alabama House.
The Alabama House passed HB303 as amended and sent the measure to the Senate.
The Alabama Senate passed HB303 as amended.
The Alabama House concurred in the Senate amendment and the bill was prepared for enrollment.
LegiScan lists HB303 as enacted on April 8, 2026.
The enrolled Alabama text states that the Act becomes effective on October 1, 2026.
Alabama Legislature, Alabama Securities Commission, Governor of Alabama
Crypto assets, Privacy coins
State law, not federal legislation. This profile covers Alabama HB303, which adds Section 8-7A-28 to the Code of Alabama 1975. A separate federal Crypto ATM Fraud Prevention Act of 2025, S.710, remains a distinct congressional bill.
