Hawaii Bans Cash Deposits at Crypto Kiosks in October

In brief: Beginning October 1, 2026, Hawaii prohibits operating a digital-asset transaction kiosk that accepts cash from a customer in exchange for a digital asset. The rule, enacted as Act 224 and signed by Governor Josh Green on July 9, targets the point where scam victims convert paper currency into hard-to-recover digital assets. Selling digital assets for cash at an eligible machine remains permitted.

Hawaii has drawn a specific line through the crypto kiosk business, and it lands on the cash-in function. Under House Bill 1642, enacted as Act 224, the state bars anyone from owning, operating, or managing a digital-asset transaction kiosk that takes United States currency from a customer in return for a digital asset. A digital-asset kiosk, in the statute's framing, is the freestanding machine that lets a member of the public exchange cash for programmable value on the spot. The prohibition takes effect October 1, 2026.

The distinction matters for anyone reading past the headlines. Several reports described the measure as a blanket ban on the machines, but the enacted text is narrower. It covers deposits used to purchase digital assets, not every service the kiosks provide. A resident can no longer feed cash into a machine to buy Bitcoin, yet the Hawaii House Democrats caucus confirmed that consumers may still cash out digital assets they already hold. The ban attacks the direction of flow that fraud rings depend on: victim to scammer, cash to irreversible transfer.

Why did Hawaii single out the cash-in leg?

Because that is where the losses concentrate. Kiosk fraud almost always follows the same script. A caller impersonating a bank, a government agency, or a tech-support line convinces a target that their money is at risk, then directs them to a nearby machine to "protect" it by converting cash into digital assets. Once the deposit clears, the funds move to an address the victim never controls, and recovery is close to impossible.

The federal data explains the urgency. The FTC reported that consumer losses at Bitcoin ATMs topped $65 million in just the first half of 2024, with a median loss of $10,000. Older adults bore the brunt: consumers over 60 were more than three times as likely as younger adults to report losing money at these machines. The FBI's Internet Crime Complaint Center recorded 10,956 kiosk-related complaints and $246.7 million in losses in 2024 alone, nearly double the prior year's complaint volume. Those figures sit inside a broader crypto-fraud total the FBI put at $9.3 billion for the year.

Hawaii placed its new prohibition in Chapter 481B of the Revised Statutes, the part of the code governing unfair and deceptive business practices. That choice is deliberate. Rather than treat the machines as a money-transmission question, the state framed the cash-in function itself as a consumer-protection defect, and gave enforcement to that existing structure.

How does this fit the wider state pattern?

Hawaii is the sharp end of a trend, not an outlier. Over 2024 and 2025, a bipartisan run of states moved on crypto kiosks, and their approaches sit on a spectrum from disclosure to outright restriction.

At the lighter end, California capped new-customer transactions at $1,000 per day, a limit a state court upheld in 2024, alongside receipt and fee-disclosure requirements. Vermont set transaction limits and fraud-warning rules for operators. Nebraska became the first state in 2025 to enact a dedicated kiosk law, folding in daily limits, mandatory fraud disclosures, full refunds for defrauded new users within a set window, and licensing under its banking regulator. Illinois and Iowa layered on their own licensing and consumer-protection regimes across the same period.

The federal government has begun circling the issue as well. The Crypto ATM Fraud Prevention Act of 2025, introduced in the Senate, would impose transaction limits, refund rights, and mandatory scam warnings nationwide. Hawaii's contribution is to skip the incremental controls and remove the riskiest function entirely, a stance closer to the ban Minnesota lawmakers have since debated than to California's dollar cap.

What should institutions take from a kiosk rule?

The direct commercial footprint is small. Kiosk operators are a niche corner of the digital-asset market, and few institutions run them. The signal underneath the rule is what deserves attention.

Regulators across the political spectrum are learning to isolate the specific mechanic that enables harm and legislate against that mechanic rather than the asset class as a whole. Hawaii did not outlaw digital assets, prohibit ownership, or block residents from selling holdings for cash. It removed one irreversible, anonymous, in-person cash-conversion path that fraud operators had industrialized. That is a precise intervention, and precision is the direction of travel.

For institutions building or financing digital-asset infrastructure, the lesson is that auditability and reversibility are becoming table stakes rather than differentiators. The machines Hawaii targeted failed on both counts: cash in, no verifiable counterparty, no practical clawback. Programmable assets designed with traceable settlement, clear customer records, and defined recourse are the ones that survive this kind of scrutiny, because they answer the question a fraud statute is really asking. As more states codify that expectation and Congress weighs a national version, the institutions positioned to raise, issue, or lend against digital assets will be those whose rails were built to be examined, not the ones retrofitting controls after the enforcement letter arrives.