Iowa Signs Crypto ATM Licensing and Oversight Bill Into Law

May 8, 2026 — Iowa has signed a new law requiring crypto ATM operators to obtain money transmission licenses and comply with expanded state oversight. Governor Kim Reynolds signed SF2296 on May 6, 2026, giving state authorities broader enforcement powers to combat consumer fraud tied to digital financial kiosks.

Immediate Details & Direct Quotes

The legislation mandates that operators must hold a money transmission license before owning, operating, marketing, or facilitating crypto ATMs across Iowa. The law updates fee disclosure rules, requires location reporting, and classifies violations as unlawful practices under Iowa’s consumer protection statutes.

Iowa Attorney General Brenna Bird stated: “Finally, we continue to fight to protect Iowans from the scammers who prey on them through crypto ATMs.”

Kiosk businesses must now provide the Iowa Division of Banking with each site they operate. Any site changes must be reported within 30 calendar days, and the division will publish each list online for public access.

The 2026 measure follows SF449, which Governor Reynolds signed in May 2025 and took effect July 1, 2025. That earlier law targeted crypto ATM scams through transaction limits, refund requirements, fee caps, fraud warnings, customer support rules, and detailed receipt requirements.

Market Context & Reaction

Enforcement authority rests with the Iowa Attorney General when there is reasonable belief a violation occurred. The office may seek injunctions, compel compliance, and pursue civil penalties of up to $10,000 per violation involving digital financial asset kiosks.

Fee provisions changed under the new rules. Businesses must disclose the dollar amount of all charges collected in a digital financial asset transaction. The statute also replaces certain exchange-price references with the prevailing market value of the asset at the transaction time.

Bird added: “Thank you to the legislature for passing these bills with huge bipartisan support and to Governor Reynolds for signing them into law.”

Under SF449, kiosk users cannot transfer or receive more than $1,000 per calendar day through a machine. New consumers are limited to $10,000 in aggregate transactions during their first 30 days with a specific operator. The law requires operators to issue refunds when users are fraudulently induced into transactions, if victims report fraud within 90 days and provide required documentation.

Background & Historical Context

Violations are now treated as unlawful practices under Iowa consumer protection provisions. The measure permits penalties of up to $100,000 for violating injunctions tied to digital financial asset kiosk enforcement actions. The law took effect upon enactment and applies to civil actions commenced on or after that date.

The legislation arrives as multiple states increase scrutiny of crypto ATM activity tied to fraud complaints and financial exploitation cases. During the 2025 House debate, Representative Shannon Lundgren stated an Iowa Attorney General investigation found Iowans had lost about $20 million to crypto ATM scams over the prior three years.

Iowa’s updated framework increases state supervision of kiosk businesses while applying licensing and reporting standards similar to other money transmission services.

What This Means

Crypto ATM operators in Iowa now face mandatory licensing and stricter reporting requirements. Operators must register kiosk locations and comply with fee disclosure rules immediately.

The enforcement framework gives state authorities tools to pursue violations through injunctions and civil penalties. Users benefit from transaction caps, refund protections, and fraud reporting windows.

This regulation signals increased state-level oversight of crypto kiosks nationwide. Other states may follow Iowa’s approach to licensing and consumer protection measures.

—