Crypto ATM laws in Utah: a guide for operators (2026)

Licensing in Utah

No state license. Since 2020, Utah's Money Transmitter Act excludes 'blockchain tokens' from money transmission (Utah DFI). An early draft of HB 72 (2026) would have required kiosk operators to get an MTL, but the enacted bill instead put kiosks under Division of Consumer Protection rules with no license.

Regulator: Utah Division of Consumer Protection (kiosk rules); Utah DFI (money transmitters) · License: None (crypto excluded)

Sources: Utah DFI: Money Transmitters (2020 blockchain-token exclusion; $1,000,000 net worth for MTL) · Utah Code § 7-25-102 · HB 72 1st Substitute (had MTL requirement)

Utah's kiosk law

Utah Code ch. 13-83 (HB 72, 2026) · effective 2026-05-06

• Daily cap of $2,000 per customer for the 3 calendar days after the customer's first transaction with the operator, then $5,000 per day, counted across all of that operator's kiosks in Utah.
• All terms must be disclosed in the customer's chosen language, including that the service is not FDIC- or SIPC-insured, and the customer must confirm consent.
• A bold fraud warning in English and Spanish is required: 'WARNING: NEVER SEND MONEY TO SOMEONE YOU DO NOT KNOW. THESE TRANSACTIONS ARE IRREVERSIBLE. NO GOVERNMENT AGENCY OR OFFICIAL WILL EVER REQUEST PAYMENT USING THIS KIOSK. IF YOU SUSPECT FRAUD, CALL LOCAL LAW ENFORCEMENT BEFORE PROCEEDING.'
• A receipt is required. It must show the operator's contact and complaint number, the agency to report fraud to, the transaction hash, wallet addresses, amounts in crypto and USD, fees, exchange rate and refund policy.
• A toll-free customer service line must be available 24 hours a day, 7 days a week, with its number shown on the kiosk or screen.
• Operators must keep records, cooperate with law enforcement, and name a fraud point of contact.
• An annual location report goes to the Division, and the operator must notify the Division within 30 days of installing or removing a kiosk.
• No fee cap and no mandatory refund appear in the statute.
• Enforcement is by the Division of Consumer Protection: administrative fines up to $2,500 per violation, plus court actions.
• A proposed rule R152-83 (Utah State Bulletin 2026-09-15) would require transaction records to be kept 5 years, encrypted, in XML/EDI/JSON/ISO 20022/UBL format.

Sources: Utah Code ch. 13-83 index · Utah Code § 13-83-102 transaction limits · HB 72 enrolled copy · HB 72 bill text (HTML) · Utah State Bulletin 2026-09-15, proposed R152-83 · Orrick InfoBytes 2026-04-16 (signed 2026-03-25) (secondary)

Bills and changes to watch

• SB 173 (2026 General Session) appeared in search results as an introduced bill. Its subject and status are unconfirmed.

Practical hurdles

• The 24/7 toll-free support line is stricter than most states (which typically require weekday business hours).
• The records-format rule (XML/EDI/JSON/ISO 20022/UBL, encrypted, 5 years) was proposed in September 2026 and may change operators' data systems.

What we couldn't confirm

• That the HB 72 signing date was 2026-03-25 (Orrick, secondary).
• The adoption and effective date of rule R152-83 (only the proposal was seen).
• Whether SB 173 (2026) relates to kiosks.
• Any Utah AG or Division action against kiosk operators: none found.