358-U:4 Core Consumer Protections. –
I. An operator shall not accept or dispense, in the aggregate, more than $2,000 per customer per calendar day across all kiosks under common control within the United States.
II. Before accepting funds, all kiosks shall display conspicuous warnings, including that no government agency, law enforcement, court, utility, bank, tech support, employer, or retailer will ever demand payment by crypto ATM. The kiosk shall require the customer to answer fraud-screening prompts, including whether they are being coached by another person. If the customer indicates a risk of fraud, the kiosk shall block the transaction and display law enforcement and consumer protection and antitrust bureau contact information.
III. Operators shall use blockchain analytics to block transfers to or from wallet addresses flagged for association with scams, theft, sanctions, or other illicit activity, and shall maintain written anti-fraud and consumer protection policies.
IV. Before accepting funds, kiosks shall disclose in writing and on-screen all fees, the spread between the operator's price and the reference price, expressed as a percentage and dollar amount, and the total digital asset expected to be delivered.
V. The kiosk shall provide a printed and electronic receipt summarizing the transaction, including the operator's name and toll-free live customer service phone number, the kiosk's location, a timestamp, the name of the asset, the quantity of the asset, the asset's reference price, the asset's spread, all fees paid, the total amount paid, the wallet address or voucher ID, any applicable cancellation codes, and a refund policy.
VI. The digital asset transaction kiosk operator shall provide a full refund of all transactions to a customer who was fraudulently induced to engage in a digital asset kiosk transaction or transactions, provided that the customer contacts the digital asset kiosk operator and a law enforcement or government agency to inform the operator and the agency of the fraudulent nature of the transaction or transactions within 14 days after the customer's last digital asset transaction with the digital asset transaction kiosk operator. The refund shall include any fees charged in association with the fraudulently induced transactions.