Hawaii’s New Law Targets Crypto Kiosk Scams

The machines are still there, blinking their bright screens in the corner of your local convenience store. You’ve seen the warnings: a loved one gets a frantic call from a “grandchild” in jail, or a message from what looks like the IRS demanding immediate payment to avoid arrest. The instructions are always the same: go to that machine, insert cash, and send cryptocurrency to a specified digital wallet. By the time you realize it’s a scam, the money is gone forever, zipped away on the irreversible rails of the blockchain.

If you’re in Hawaii and wondering why these crypto kiosks are still operating, you’re not alone. A new state law, known as Act 224, specifically targets these “digital financial asset transaction kiosks,” but it doesn’t take effect until October 1st. Their current presence is a frustrating countdown to a long-awaited crackdown. The law makes it an unlawful practice to own, operate, or manage a kiosk in the state that accepts U.S. currency in exchange for cryptocurrency. This targets the very mechanism scammers rely on: turning tangible, traceable cash into untraceable digital coins.

The push for this legislation came from stark data and vocal advocacy. Keali‘i Lopez, AARP Hawai‘i state director, described these kiosks as the “getaway car in a bank robbery.” The numbers justify the analogy. Citing FBI reports, Lopez noted that Hawaii consumers lost a staggering $3.85 million through crypto ATM fraud in 2025 alone, a near quadrupling from the previous year. In testimony supporting the bill, a lawyer for Hawaii’s Office of Consumer Protection argued that these machines are used more for fraud than for legitimate transactions, advocating for an outright ban—a path four other states have already taken.

Hawaii’s approach is more surgical. The law bans kiosks that accept cash for crypto but does not outlaw machines that exchange one digital asset for another or dispense cash for crypto. The focus is squarely on cutting off the scammer’s oxygen supply: easy access to liquid cash. As William Nhieu, a spokesperson for the Department of Commerce and Consumer Affairs, clarified, the prohibition extends to any form of U.S. cash “or the equivalent thereof, such as a debit card transaction.” This means a kiosk that accepts a debit card pull from your checking account falls under the same ban as one that takes physical bills.

This nuance leads to the next logical question from vigilant consumers: what if scammers simply pivot and start demanding payments via credit card at these kiosks? Nhieu addressed this directly. Any kiosk that accepts cash or its direct equivalent is unlawful. If a kiosk operator were to offer credit card-only deposits, they would still be violating the law if the machine also has any cash-accepting functionality. Furthermore, the OCP welcomes reports from the public on any kiosk that appears to operate on a credit-card-only model, as it would still likely contravene the new regulations.

There’s a critical piece of consumer wisdom embedded in this shift. Nhieu pointed out that credit cards, while not immune to fraud, come with powerful federal protections. Card issuers are required to investigate fraud claims and can reverse charges, a safety net that simply doesn’t exist with cash, wire transfers, or cryptocurrency. So, while the law slams the door on the scammer’s preferred cash method, it inadvertently guides consumers toward a payment method with built-in recourse.

The battle, however, is an ongoing game of cat and mouse. Scammers are nothing if not adaptable. The real-world implementation of Act 224 will be tested the moment it goes live. Will kiosk operators pack up and leave, or will they attempt to exploit loopholes? The success of the law will depend on continued public awareness and reporting.

• The presence of these machines may soon be illegal
• The social engineering tricks that drive people toward them will persist
• The new law is a vital tool
• It removes the most convenient weapon from the scammer’s arsenal
• A healthy dose of skepticism is crucial
• If an urgent request involves cryptocurrency, it’s almost certainly a scam