Louisiana just armed crypto ATM users with a legal cheat code to demand full refunds from unlicensed operators
Louisiana’s new Act 482 gives crypto ATM users the right to demand full refunds from unlicensed operators indefinitely, starting August 1, shifting the financial burden of unlicensed-kiosk fraud directly onto machine operators. This creates a first-of-its-kind refund liability regime that institutional investors in ATM networks and payment processors must now price into their operating costs and compliance frameworks.
- Louisiana Act 482 grants users unlimited-time refund rights for transactions made on or after August 1 with unlicensed operators, with refunds processed within 90 days of request.
- As of July 31, only 36 active virtual-currency business licensees operated in Louisiana, leaving potentially dozens of unlicensed kiosks exposed to retroactive refund liability.
- Operators must provide live toll-free support during kiosk hours and respond to refund requests within 10 business days, establishing a new operational burden independent of fraud-prevention technology.
- Aug. 1 Effective date when Louisiana’s unlimited refund right for unlicensed operator transactions begins.
- 36 Active virtual-currency business licensees in Louisiana as of July 31, establishing baseline for legal compliance.
- 90 Calendar days maximum for operators to complete refunds after user request or proof submission.
Louisiana has enacted sweeping consumer protection legislation that imposes indefinite refund liability on unlicensed cryptocurrency ATM operators, starting August 1.
Act 482 fundamentally reshapes the risk calculus for kiosk operators and networks: any transaction conducted without proper licensure becomes immediately eligible for full refund on demand, regardless of how much time has passed since the original purchase.
The law does not cap refund amounts, does not require the operator to prove the transaction was legitimate, and does not allow unlicensed operators to dispute refund requests based on the user’s conduct or market conditions. Instead, the burden falls entirely on the operator to verify its license status at the time of transaction and absorb the cost of any refund.
For institutional investors in ATM networks and payment settlement systems, the measure signals a regulatory pivot toward treating crypto kiosks as consumer-finance infrastructure subject to strict statutory protections rather than as merchant equipment.
Unlicensed operators face unlimited refund exposure while only 36 licensees operate in Louisiana
The law’s practical impact hinges on a stark disparity between licensed and unlicensed operators. Louisiana’s Office of Financial Institutions had approved only 36 virtual-currency business licensees as of July 31, just one day before the act took effect.
That narrow licensing base suggests a large installed base of unlicensed machines, or machines whose operators failed to complete licensing paperwork, now face potentially massive refund liabilities for every transaction executed without proper credentials.
Critically, the law defines “virtual-currency business activity” expansively to include owning, operating, soliciting, marketing, advertising, or facilitating a kiosk in the state. This language means that operators cannot simply claim they did not know they needed a license, nor can they argue they were in the process of obtaining one.
The act treats license status as a binary condition at the moment of transaction: either the operator held a valid license when the user deposited cash, or the user now has an indefinite right to recover that cash in full.
Institutional ATM networks with machines already deployed in Louisiana face immediate exposure if their subsidiary entities or franchisees lack active licensure status as of August 1.
Refund process imposes 10-business-day response deadline and 90-day completion window on operators
Act 482 establishes a structured but operator-intensive refund mechanism. Upon receiving a cancellation and refund request, an operator must acknowledge and respond within 10 business days, clearly disclosing all requirements for obtaining the refund. The 10-business-day clock measures the response deadline only, not the actual payment.
This distinction matters: an operator could respond on day 10 by requesting police-report documentation from the user, resetting the timeline to day 90 from the date the user then submits that proof, meaning a refund could legally arrive more than 100 days after the original request.
The law mandates live operator support through a toll-free number staffed during all kiosk operating hours, with the phone number displayed on the machine and included on every transaction receipt. This requirement eliminates callback systems and chatbots as compliant support channels.
Operators must staff or contract a dedicated support line, a recurring labor cost that applies whether or not a refund request ever arrives. For a refund claim based on suspected fraud, operators may require proof of a police report or a complaint filed with the FBI’s Internet Crime Complaint Center, plus proof of user identification.
If an operator’s policy clearly communicates these requirements upfront and the user supplies them later, the 90-day refund window resets from the date of submission.
The law creates two separate refund timelines: one for response (10 business days) and one for payment completion (90 calendar days), allowing the total process to exceed 100 days even in routine cases.
Act 482 preserves Louisiana’s 72-hour cancellation rule, doubling operator refund exposure
Act 482 does not replace Louisiana’s existing consumer-protection rule; it layers on top of it. The state’s general law already requires operators to hold a transaction for 72 hours or allow the user to cancel within that window for a full refund. The new act creates a second, unlimited refund pathway specific to unlicensed operators, coexisting with the 72-hour rule.
This means an operator faces refund liability on two separate tracks: immediate cancellation rights for all users (licensed or unlicensed operators) within 72 hours, and indefinite refund rights for any transaction executed by an unlicensed operator at any future time.
The dual-track structure creates compliance complexity for multi-kiosk operators.
A single machine might process 500 transactions monthly; the operator must now track which transactions were executed under a valid license and which were not, maintain that historical record indefinitely, and respond to refund requests for transactions from months or years prior if the operator’s license status changed or lapsed.
This record-keeping burden extends beyond typical transaction logging to include timestamped license-verification records.
For institutional investors evaluating ATM networks as portfolio additions, this layered refund regime raises a new due-diligence question: has the target operator maintained continuous, error-free licensing across all its machines, and does its accounting system segregate transactions by license status?
A single lapsed license renewal could expose an operator to refund claims for every transaction executed during the lapse period, potentially reaching thousands of dollars or more depending on kiosk volume and transaction sizes.
Law targets documented fraud pipeline but creates compliance burden beyond fraud prevention
Act 482 arrives in response to documented fraud involving crypto ATMs. The FBI’s Internet Crime Complaint Center has reported that crypto ATMs have become a primary endpoint for online coercion schemes, romance scams, and investment fraud, where perpetrators direct victims to deposit cash at kiosks for virtual-currency conversion.
The law frames refunds as a cost-of-business safeguard against this pipeline. By imposing refund liability on unlicensed operators specifically, the legislature created an incentive structure: licensed operators, presumed to have passed compliance vetting, bear less liability exposure than unlicensed ones.
However, the law does not require operators to prove fraud detection or prevention measures. It does not mandate transaction-monitoring systems, velocity limits, or flagging thresholds. Instead, it imposes a purely retrospective penalty: if you operated without a license, you pay refunds.
This approach treats licensing itself as a proxy for fraud-prevention capability, rather than requiring operators to demonstrate actual controls. An unlicensed operator cannot defend a refund request by showing that the transaction was legitimate or that the user acted voluntarily; the operator’s licensing status alone determines eligibility.
The law creates a refund-liability regime based solely on licensing status at transaction time, not on operator fraud-prevention practices or transaction legitimacy, shifting the fraud-cost burden from users to operators without requiring fraud-detection infrastructure.
Institutional compliance frameworks must now account for state-level refund liability beyond federal AML rules
For institutional
