Bitcoin ATM Laws by State in 2026: Fee Caps, Daily Limits and the New Bans

If you walked up to a Bitcoin ATM two years ago, almost nothing limited what the machine could charge you or how much you could put in. That has changed fast. By 2026, AARP counts 29 states with crypto kiosk laws of some kind, and a growing list of states and cities have banned the machines outright.

This guide covers how a Bitcoin ATM actually works, what it really costs, where the rules stand state by state, why lawmakers moved so quickly, and the one rule that keeps you safe no matter which state you live in.

What a Bitcoin ATM is (and isn't)

Despite the name, a Bitcoin ATM isn't a bank machine. It doesn't connect to your bank account, and it doesn't hold your money. It's a kiosk that sells you Bitcoin for cash and sends it to whatever wallet address you scan. You'll usually find one in a gas station, a convenience store or a shopping mall.

Most machines only sell. Some are two-way machines that also buy Bitcoin back and pay out cash.

The United States has 30,247 crypto kiosks, about 78% of all the machines in the world, according to Coin ATM Radar's March 2026 count. No other country comes close.

How a Bitcoin ATM purchase works, step by step

The process is the same on almost every machine:

• Get a wallet first. The machine doesn't keep your coins. You need your own Bitcoin wallet app, which shows a QR code for its receiving address.
• Verify yourself. Small purchases often need only a phone number and a text code. Larger ones ask you to scan a driver's license or other ID. The cutoff varies by operator and by state.
• Scan the QR code. The machine reads the wallet address the coins will go to. This is the most important step, because whoever owns that address owns the Bitcoin.
• Feed in cash. The screen shows how much Bitcoin you're getting for it.
• Confirm. The Bitcoin goes out to that address, usually within minutes. There's no undo button.

Selling works in reverse on two-way machines. You send Bitcoin to an address the kiosk shows you, and it pays out cash once the transfer confirms.

Notice that the machine works exactly the same whether the QR code belongs to you or to someone else. That detail is behind almost every law passed in the last two years.

What a Bitcoin ATM really costs

Most kiosk operators don't show a separate fee line. They build the fee into the exchange rate on the screen, so you see something like "you'll receive 0.0012 BTC" rather than a charge.

To find the real cost, open any exchange app on your phone while you stand at the machine. Compare the Bitcoin price there with the rate the kiosk is offering. The gap between the two is the fee.

How big is that gap? There's no neutral national study, but the states that capped fees tell you where operators had been pricing. California and Iowa cap kiosk fees at 15%. Illinois caps them at 18%. In a lawsuit filed in 2025, the District of Columbia's attorney general accused one operator of charging undisclosed fees as high as 26%.

For comparison, buying the same Bitcoin on a regulated exchange typically costs a percent or two.

Bitcoin ATM fee caps and daily limits by state

Here is where the main rules stood in 2026:

• California: $1,000 per person per day, and a fee cap of 15% or $5, whichever is greater.
• Iowa: $1,000 per day, required scam warnings on the machine, and refunds for some scam victims since 1 July 2025. Fee cap of 15%.
• Illinois: $2,500 a day for new customers and $10,500 for existing ones since August 2025. Fee cap of 18% or $5.

Daily limits matter because they cap how much a scammer can take in one visit. A person who is being coached on the phone can be sent back to the machine day after day, but a limit slows that down and gives family members, store clerks and banks a chance to step in.

Where Bitcoin ATMs are banned

Some places decided caps and limits weren't enough:

• Minnesota: banned statewide from 1 August 2026, with machines out by 31 December 2026.
• Albuquerque, New Mexico: city ban approved on 10 September 2026.
• Spokane and other Washington cities: city bans in 2025 and 2026.
• Indiana and Tennessee also passed bans this year.

In Congress, the Crypto ATM Fraud Prevention Act would cap new users at $2,000 a day. It was introduced in February 2025 and is still in committee.

Rules are changing quickly, so check your state regulator for the current limits where you live.

Why lawmakers moved so quickly

The speed of these laws comes down to one set of numbers. The FBI's Internet Crime Complaint Center received 13,460 complaints about crypto kiosks in 2025, with reported losses of $388,981,267. That was a 58% rise on 2024.

The losses fall hardest on older people. In the FBI's 2025 numbers, people over 50 filed more than half of the kiosk complaints and lost more than $302 million.

The individual losses are large too. The Federal Trade Commission's 2024 study put the median loss at $10,000.

And when investigators in Iowa and the District of Columbia reviewed kiosk transactions, they found more than 90% were linked to scams.

The three scam stories behind most losses

The FTC found the same three stories behind most kiosk losses:

• Someone posing as the government: the IRS, a sheriff's office or the FBI, saying you owe a fine or there's a warrant out.
• Someone posing as a business: your bank's fraud team or Amazon, saying your account has been hacked and your money needs to be "moved to safety".
• A fake tech-support agent who says your computer has been compromised.

The script is always urgent. Your account is compromised, there's a warrant out, your money has to move today. Then comes the trick: they send you a QR code and tell you to scan it at the kiosk. That QR code is their wallet, not yours. Once you confirm, the money is gone.

The one rule that keeps you safe

No bank, government agency or police department will ever ask you to pay at a Bitcoin ATM. Not to protect your savings, not to pay a fine, not to clear a warrant.

If someone stays on the phone with you while you feed cash into a kiosk, hang up. That's the scam, every time.

It's worth sharing that rule with older relatives in particular. A two-minute conversation now can save thousands of dollars later.

What to do if you've already paid a scammer

Speed matters. Do these things in order:

• Call the kiosk operator right away. Their phone number is on the machine and on your receipt. Iowa's law now requires refunds in some scam cases, and operators sometimes freeze funds that haven't moved yet.
• Report it to the FBI at ic3.gov and to the FTC at ReportFraud.ftc.gov. Include the receipt, the wallet address and any texts or call logs.
• Call your local police and get a report number. Your bank and the operator may ask for it.
• Expect a second scam. "Recovery services" that promise to get your Bitcoin back for a fee are a known follow-up. Don't pay them.

Using a Bitcoin ATM safely

Bitcoin ATMs are legal in most of the country, and they do exactly what they say. If you do use one:

• Bring your own wallet app and scan only your own QR code.
• Never use a QR code or wallet address someone else sent you.
• Compare the rate on the screen with the price on any exchange app, so you know the fee before you pay.
• Check your state's daily limit and fee cap, so you know if a machine is breaking the rules.

If you simply want to buy Bitcoin, a regulated exchange is usually far cheaper, and nobody can talk you into scanning their code.

Frequently asked questions

Are Bitcoin ATMs legal? In most of the United States, yes. Minnesota has banned them statewide, and several cities, including Albuquerque and Spokane, have their own bans.

How much does a Bitcoin ATM charge? The fee is usually hidden in the exchange rate. States that cap fees set the limit at 15% (California and Iowa) or 18% (Illinois). An exchange typically costs a percent or two.

Do you need ID to use a Bitcoin ATM? Small purchases often need only a phone number and a text code. Larger purchases ask for a driver's license or other ID, and the cutoff depends on the operator and the state.

Can a Bitcoin ATM payment be reversed? No. Once the Bitcoin leaves for the address you scanned, there's no undo button. Call the operator right away if something went wrong, because funds that haven't moved can sometimes be frozen.

DeFi Market Journal's full guide walks through a kiosk purchase step by step, with the complete state table and a 53-second video: https://defimarketjournal.com/markets/how-does-a-bitcoin-atm-work.html

Written by Robert Stone, editor of DeFi Market Journal. This article is for information only and is not financial or legal advice. State and city rules change quickly; check your state regulator for current limits.

DeFi Market Journal
City: Belen
Address: 400 N Main St
Website: https://defimarketjournal.com
Email: news@defimarketjournal.com