Massachusetts Crypto ATM Ban: Signal of Tightening State-Level Regulation
Massachusetts is advancing toward stricter oversight of cryptocurrency ATMs, with multiple municipalities and state-level proposals reflecting growing concern about fraud vulnerability. The convergence of local bans, proposed statewide regulations, and escalating loss figures suggests a structural policy shift that could reshape how states approach crypto infrastructure oversight.
Key Takeaways
FBI data confirms over 12,000 crypto ATM complaints from January to November 2025, with losses exceeding $333.5 million, establishing clear fraud risk baseline.[1]
Massachusetts residents reported approximately $10 million in losses connected to Bitcoin Depot operations alone between August 2023 and January 2025.[1]
Minnesota’s proposed comprehensive ban reflects regulatory frustration with existing protections; state received 70 complaints and $540,000 in losses despite 2024 safeguards.[1]
Proposed Massachusetts legislation (SB 707/HB 1247) introduces licensing requirements, daily transaction limits, and fraud victim refunds rather than outright bans.[4]
Multiple Massachusetts municipalities-Haverhill, South Hadley, and Waltham-have independently adopted or proposed local crypto ATM bans.[2][3][4]
Subscribe to our Social Media for Exclusive Crypto News and Insights 24/7!
The Fraud Problem Driving Regulatory Action
The scale of cryptocurrency ATM fraud has created sufficient political pressure for regulatory response. The FBI’s Internet Crime Complaint Center documented over 12,000 complaints involving Bitcoin ATMs from January to November 2025, resulting in losses exceeding $333.5 million.[1] This represents a significant concentration of fraud in a relatively narrow infrastructure segment-crypto kiosks occupy physical space yet facilitate irreversible transactions vulnerable to social engineering.
Older adults constitute the majority of reported losses in recent years, with scammers frequently impersonating government entities or financial institutions to direct victims toward crypto ATM deposits.[1] The Massachusetts Attorney General filed suit against Bitcoin Depot in February 2026, alleging the company “knowingly facilitated crypto scams” with more than half of funds processed through Massachusetts kiosks from August 2023 to January 2025 connected to fraudulent activities, totaling over $10 million in consumer losses.[1]
State-Level Regulatory Divergence
States are adopting fundamentally different approaches to crypto ATM regulation, signaling no consensus on whether infrastructure limitation or protective framework is more effective.
Minnesota’s Comprehensive Ban Approach: Minnesota Representative Koeg introduced House Bill 3642 on February 23, proposing to prohibit placement or operation of virtual currency kiosks throughout the state.[1] The bill seeks to revoke the regulatory framework established in 2024-which included daily transaction limits of $2,000 for new users, mandatory fraud warnings, and 14-day refund periods for scam victims-and replace it with an outright ban.[1] The Minnesota Department of Commerce expressed strong support for the ban, reporting that the state received 70 complaints related to crypto kiosks last year, totaling approximately $540,000 in reported losses.[1] This regulatory reversal suggests that 2024’s safeguard measures have been deemed inadequate by state officials, despite being in place for roughly one year.
Massachusetts’ Regulatory Framework Approach: In contrast, Massachusetts is pursuing Senate Bill No. 707 and House Bill No. 1247, “An Act Relative to Preventing Fraud and Establishing Regulations on Certain Virtual Currencies.”[4] Rather than banning crypto kiosks entirely, the proposed legislation introduces licensing requirements for kiosk operators as money transmitters, state registration of kiosk locations, transaction receipts with hashes, transparent fee disclosures, scam warnings at kiosks, daily transaction limits, full refunds for fraud victims including fees, police access to software analytics, and creation of a blockchain study commission.[4] AARP Massachusetts has publicly supported this regulatory framework, testifying before the Joint Committee on Financial Services.[4]
Municipal-Level Enforcement
Several Massachusetts municipalities have moved independently toward bans rather than waiting for statewide guidance. Haverhill City Council is considering an ordinance that would ban installation of virtual-asset cryptocurrency ATMs, with all existing crypto kiosks subject to removal within 60 days and violations punishable by $300-per-day fines.[2] South Hadley’s town government has proposed a ban brought forward by the South Hadley Police Department, citing risks including financial fraud and money laundering.[3] Waltham has already enacted a ban on cryptocurrency ATMs within city limits.[4]
This municipal-level activity suggests local law enforcement views crypto ATM fraud as an immediate public safety concern rather than awaiting statewide policy resolution. The speed and consistency of municipal action across different Massachusetts communities indicates that constituent pressure regarding fraud losses may be outpacing formal legislative timelines.
The Broader Regulatory Landscape
The cryptocurrency ATM fraud problem extends beyond Massachusetts. Chain Analysis estimated that cryptocurrency scams accounted for $9.9 billion in losses in 2024.[3] The FBI reported that Americans lost $9.3 billion to crypto-related scams in 2024, representing a 66% increase from the previous year.[4] These figures position crypto ATM fraud as a subset of a larger systemic vulnerability within the crypto ecosystem.
The FBI data, however, suggests that crypto ATMs specifically account for a disproportionate share of verifiable fraud: the 12,000+ complaints and $333.5 million in losses from January to November 2025 represent concrete, traceable transactions in physical infrastructure, whereas broader crypto scam losses may include harder-to-quantify online schemes, rug pulls, and Ponzi structures.[1]
Current Infrastructure Scale
Minnesota currently operates approximately 350 licensed crypto kiosks managed by eight to ten different companies.[1] This indicates that even in states pursuing comprehensive bans, the installed base of crypto ATM infrastructure remains modest relative to traditional ATM networks. However, the concentration of fraud losses relative to transaction volume suggests that ATM-mediated fraud has elevated conversion rates compared to other crypto fraud vectors.
Policy Implications for Market Structure
The regulatory divergence between Minnesota’s ban approach and Massachusetts’ framework approach creates uncertainty regarding long-term viability of crypto ATM operators as a business model. If multiple states adopt Minnesota’s strategy, operators face geographic fragmentation and reduced total addressable market. If Massachusetts’ regulatory framework becomes the model, operators can continue operating under stricter compliance requirements and fee caps.
The proposed Massachusetts legislation’s inclusion of daily transaction limits mirrors Minnesota’s 2024 approach, suggesting that transaction velocity constraints are becoming standard protective mechanisms across state regulators. This represents implicit acknowledgment that fraud vulnerability scales with transaction size and frequency-two variables directly controlled through regulatory limits.
Uncertainties and Missing Data
No direct data confirms whether the fraud losses stem primarily from compromised kiosk software, social engineering of users, or deliberate operator complicity. The Bitcoin Depot lawsuit alleges operator knowledge of fraud, but does not specify whether fraud resulted from inadequate identity verification, transaction monitoring gaps, or intentional platform design facilitating scams.[1]
The refund success rate following Minnesota’s 14-day refund period is not disclosed in available sources, meaning the practical effectiveness of this protective measure remains unquantified. If refund rates are low due to customer inability to file claims or technical barriers, the policy’s protective value may be overstated in regulatory discussions.
Downside Scenario: Regulatory Capture by Operators
If crypto ATM operators successfully lobby for higher daily transaction limits or longer refund windows by framing them as “too burdensome” for legitimate use, the protective value of state frameworks deteriorates. Regulatory capture through incremental exemptions has historically weakened financial crime prevention in other sectors. Massachusetts’ proposed framework includes transparency and police software access provisions that could mitigate this risk, but enforcement mechanisms for these provisions are not specified.[4]
The Structural Insight
The shift from crypto ATM growth to regulatory restriction reflects an asymmetry between transaction reversibility and user protection. Traditional financial infrastructure provides transaction reversal, dispute resolution, and deposit insurance-structural safeguards that crypto ATMs cannot offer. Once this asymmetry became visible through measurable fraud losses concentrated in older adult populations, regulation became inevitable. The question is not whether crypto ATMs face restriction, but whether that restriction occurs through operational bans (Minnesota model) or through protective frameworks with transaction limits (Massachusetts model). The answer will depend on whether regulators view crypto ATMs as infrastructure that can be safely managed through disclosure and limits, or as inherently misaligned with consumer protection objectives.
