Crypto ATM laws in Alabama: a guide for operators (2026)

Licensing in Alabama

Money transmission license under the Alabama Monetary Transmission Act (Ala. Code ch. 8-7A). The Act defines 'monetary value' to include virtual currencies, so receiving cash for crypto at a kiosk is treated as money transmission. Licensed by the Alabama Securities Commission (ASC). The ASC filing page puts the minimum bond at $100,000, and it can be raised to as much as $5,000,000.

Regulator: Alabama Securities Commission · License: Money transmitter license

Sources: Ala. Code 8-7A-2 definitions (monetary value includes virtual currencies) · ASC Monetary Transmission filing instructions (bond $100,000 minimum, up to $5,000,000) · CSBS MTMA legislative update, August 2026 (Alabama not listed) (secondary)

Alabama's kiosk law

Ala. Code 8-7A-28 (HB 303, 2026) · effective 2026-10-01

• A 'new consumer' is someone on their first kiosk transaction in Alabama, or within 30 days after it.
• A new consumer may put in no more than $1,000 a calendar day and $10,000 a calendar month, counted across all of the operator's kiosks in the state.
• An existing consumer may put in no more than $10,500 in one calendar day.
• The operator must verify every consumer's identity for every transaction.
• Before a transaction, the operator must clearly disclose the terms and conditions and get the consumer's acknowledgment. The disclosure covers the USD amount, all fees in USD, the total in both crypto and USD, the exchange rate, and the difference from the market price.
• Fraud warnings must be shown at the start of a transaction and accepted before it goes ahead (secondary summary).
• The operator must give a physical or digital receipt, and must send digital receipts to the ASC. The receipt includes the transaction hash, fees, exchange rate and refund-policy information.
• A defrauded new consumer gets a full refund of the transaction plus all fees. A defrauded existing consumer gets half the transaction value, including fees.
• To qualify for a refund, the consumer must contact the operator, law enforcement and the ASC within 60 calendar days, and file a report.
• Operators headquartered in the US must offer live, US-based, toll-free consumer service at all times and show the number on the kiosk or its screen.
• Operators must keep a dedicated, frequently monitored US phone number and email address for government agencies.
• Operators must use blockchain analytics and tracing software and hand its data to the ASC on request.
• Consumers aged 60 or older get enhanced due diligence, under rules the ASC will adopt.
• Privacy coins may not be bought, sold or sent through kiosks (secondary summary).
• The ASC may assess civil penalties, and the Act also provides criminal penalties. The fiscal note assumes $1,000 per day.

Sources: Ala. Code 8-7A-28 (codified Act text, via gov search excerpts) · HB303 enrolled text (excerpts via gov search; direct fetch blocked) · ASC press release: Act takes effect 2026-10-01 · ASC release PDF (refunds, new-consumer caps, disclosures) · LegiScan HB303 history (enacted 2026-04-08) (secondary) · CryptoSlate law profile (summary of receipts, analytics, privacy coins) (secondary)

Practical hurdles

• The money transmission bond is at least $100,000, and the ASC can raise it to as much as $5,000,000.
• Refund liability: a full refund for new consumers and a 50% refund for existing consumers on fraud claims filed within 60 days.
• Live, US-based toll-free support must run 24/7.

What we couldn't confirm

• Act number and exact signing date. LegiScan shows 'Enacted' on 2026-04-08, but a Fox10 story dated 2026-05-08 says the governor signed it 'this week'. we couldn't open the enrolled PDF (robots-blocked), so we took the details from codified-section excerpts.
• Whether there is a monthly cap for existing consumers. None appears in the excerpts.
• No fee cap appears in the sources we saw.
• Exact penalty amounts.
• Whether the ASC has adopted the rules on enhanced due diligence for consumers 60 and older.
• No local bans and no AG or ASC actions against kiosk operators were found.