BitcoinATM.news
Canada's Bitcoin ATM Ban Proposal Highlights the Case for Practical Kiosk Rules

Canada's Bitcoin ATM Ban Proposal Highlights the Case for Practical Kiosk Rules

Canada's federal government is moving toward a nationwide ban on bitcoin ATMs, a policy shift that would remove nearly 4,000 machines from one of the world's densest kiosk markets. The proposal appeared in the Liberal government's Spring 2026 Economic Update, which framed the machines as a tool used by scammers to defraud victims and by criminals to launder illicit proceeds. But the evidence does not support treating the channel as mostly scam-related: TRM Labs reported that illicit cash-to-crypto volume through crypto ATMs was 1.2% of total crypto ATM volume in 2023, meaning 98.8% was not identified as illicit. The policy question is whether Canada can attack real fraud without cutting off a regulated cash-to-digital access point used mostly for legitimate transactions, including economic access and financial freedom for non-speculative users. If enacted, the ban would mark one of the most aggressive government responses yet to bitcoin ATM fraud — and force a reckoning for major U.S.-based operators with Canadian footprints, including Bitcoin Depot and CoinFlip. But the bigger story isn't the ban itself — it's the policy question Canada didn't ask first: whether targeted kiosk-level controls could have made prohibition unnecessary. A growing body of policy analysis, including a detailed virtual currency kiosk policy framework circulating among U.S. regulators and industry stakeholders this month, argues that the tools to fight bitcoin ATM fraud without eliminating the machines already exist — they just need to be mandated and enforced. Canada jumped from general money-service-business oversight to proposed prohibition without ever testing that middle path. For U.S. states still debating graduated restrictions, that's both a cautionary precedent and a roadmap for what to do instead.
~4,000
Bitcoin ATMs Targeted for Removal
#1
Per-Capita Bitcoin ATM Density Globally
350+
U.S. Operator Machines at Risk in Canada
0
Kiosk-Specific Rules Canada Tried First

What Ottawa Proposed — and What It Didn't

The ban proposal is currently a policy statement inside a budget document — not enacted law, not draft legislation, and not a regulation with a compliance deadline. That distinction matters. Bitcoin ATMs are not disappearing from Canadian convenience stores tomorrow, and operators remain able to function until the government converts the proposal into something binding. But the direction of travel is unambiguous. The Spring Economic Update labels bitcoin ATMs a primary conduit for fraud and money laundering, citing a 2023 analysis by FINTRAC — Canada's financial intelligence unit — which found the machines had become the main vehicle for fraudsters to collect money from Canadian scam victims. FINTRAC also identified activity involving money mules, falsified identities, high-risk exchanges, darknet markets, mixers, and transactions structured to avoid Know Your Customer thresholds. The proposal does not name specific operators, cite individual fraud cases, or single out any company for enforcement action. It is a blanket policy response that treats the entire product category as inherently high-risk. Canadians would still be able to buy cryptocurrency through licensed exchanges and remitters — just not through physical kiosks.

Key Details Still Missing from the Proposal:

Chart summarizing key sourced metrics.
Key sourced metrics. Visualize the strongest filing metrics as a simple chart. Source: Bitcoin ATM News reporting
  • No specific legislation has been introduced — the ban remains a policy statement in a budget document
  • No implementation timeline or phase-out period established
  • No enforcement mechanism or penalty structure detailed
  • No transition provisions for existing licensed MSB operators
  • No indication whether existing machines would be grandfathered or required to shut down immediately
Budget proposals in Canada do not automatically become law. The Liberal government will need to translate this policy intent into enforceable regulation or legislation, a process that could take months. But the political momentum behind the proposal is strong, and operators would be unwise to treat the vagueness as a reason for complacency. The government appears to be deciding how to implement the ban, not whether to pursue it.

The $704 Million Figure Needs Context

The Spring Economic Update cites $704 million in total fraud losses suffered by Canadians in 2025, as part of a broader $4 billion problem. That number deserves careful handling: it encompasses all scam types — romance fraud, investment schemes, phishing, tech-support scams — not just losses routed through bitcoin ATMs. The government did not break out what portion of the $704 million involved kiosks specifically.

$704 Million in Context: The Spring Economic Update cites $704 million as total Canadian fraud losses in 2025, encompassing all scam types. The government does not attribute this figure to bitcoin ATMs alone. FINTRAC's 2023 analysis found bitcoin ATMs were the primary collection method for scam proceeds, but the dollar amount flowing through kiosks specifically has not been publicly disclosed.

Placing "$704M" next to "4,000 bitcoin ATMs targeted for removal" — as the proposal implicitly does — creates a misleading impression. Some of those fraud losses involved wire transfers, gift cards, bank transfers, and other payment methods that have nothing to do with bitcoin ATMs. What FINTRAC did say is that bitcoin ATMs had become the "primary method" for collecting scam proceeds from victims — a qualitative assessment about the dominance of the channel, not a dollar figure attributable to it. That finding alone is damning enough without inflating it with the total fraud number. The honest policy question is whether the channel's fraud problem is best addressed by shutting it down entirely — or by implementing the kind of kiosk-specific controls that Canada never tried.

TRM's Data Cuts Against a Blanket Ban

Canada's proposal doesn't exist in a vacuum, but the industry data points to a more precise conclusion than "bitcoin ATMs are mostly scam-related." Blockchain analytics firm TRM Labs published research in August 2024 showing that the cash-to-crypto industry — dominated by bitcoin ATMs — had processed at least $160 million in illicit volumes since 2019. In 2023, illicit volumes in the cash-to-crypto sector stood at 1.2% of total volume, double the 0.63% rate for the broader crypto ecosystem. That is a serious risk signal. It also means 98.8% of bitcoin ATM volume was not identified as illicit, a fact that matters before policymakers eliminate the channel entirely.
1.2%
Illicit Volume Rate at Bitcoin ATMs (2023)
0.63%
Illicit Rate, Broader Crypto Ecosystem
79%
Cash-to-Crypto Illicit Volume Linked to Scams
$160M+
Illicit Volume Through Bitcoin ATMs Since 2019
TRM's 79% figure should also be read precisely. The firm found that 79% of illicit cash-to-crypto volume in 2023 — over $30 million — went to known scam and fraud addresses. That does not mean 79% of all bitcoin ATM activity was scam-related; it means scams dominated the illicit slice. The pattern is still useful for enforcement: multiple deposits from different bitcoin ATMs, often in different geographic locations, flowing to single aggregation addresses controlled by fraudsters. TRM noted that unlike web-based transactions, bitcoin ATM location data cannot be spoofed with a VPN, making geographic clustering of deposits a reliable red flag for investigators. The FBI's Internet Crime Complaint Center reported over 15,000 complaints involving digital asset scams from individuals aged 60 and above in the same period, with total losses exceeding $1 billion. Of those, 2,000 involved bitcoin ATMs specifically. These numbers tell two stories simultaneously. The first: the fraud problem is real and concentrated. The second: it is measurable, traceable, and — at properly regulated machines — potentially interruptible. That second story is the one the ban proposal ignores.

Canada's Regulatory Vacuum Made This Predictable

What makes the Canadian proposal particularly striking is not the ban itself — it is the regulatory gap that preceded it. Despite hosting the world's densest network of bitcoin ATMs per capita, Canada had no bitcoin-ATM-specific regulations. Operators simply registered as money service businesses with FINTRAC and complied with general anti-money-laundering obligations — the same framework that applies to currency exchanges and wire transfer services. No daily transaction caps designed for kiosks. No mandatory identity verification thresholds beyond standard MSB rules. No fee limits. No scam-intervention protocols. No mandatory transaction holds. No real-time blockchain screening requirements. The 4,000 machines operated in a regulatory environment that was essentially identical to what existed before policymakers recognized bitcoin ATMs as a distinct fraud vector. Canada didn't fail at bitcoin ATM regulation. It never attempted it. And when fraud losses became politically untenable, the government reached for the only tool that doesn't require building a new compliance infrastructure: a ban. This is the cautionary tale for U.S. states that have yet to act. The longer a jurisdiction goes without kiosk-specific rules, the more political appeal a total ban accumulates. By the time policymakers are motivated enough to act, they may be too frustrated to pursue anything less than elimination.

The Fraud Chain: Why Banning the Endpoint Isn't Enough

The strongest argument against an outright ban isn't that fraud doesn't exist at bitcoin ATMs — it clearly does. The argument is that a ban targets the wrong link in the chain and risks making the overall problem harder to detect. A kiosk-level policy framework circulating among U.S. regulators and industry stakeholders in April 2026 maps the typical scam as a five-stage fraud chain:

The Five-Stage Fraud Chain:

  • Stage 1 — Origination: Scammer obtains access to phone networks through a VoIP or telecom provider with weak customer due diligence
  • Stage 2 — Transmission: Call travels through intermediate carriers, often with spoofed caller ID
  • Stage 3 — Social engineering: Victim is pressured through impersonation, urgency, secrecy, or threats — the fraud happens psychologically before any payment method is selected
  • Stage 4 — Bank or cash-out step: Victim withdraws cash at a bank, ATM, or other source
  • Stage 5 — Financial endpoint: Victim sends value to scammer via bitcoin ATM, wire transfer, gift card, P2P app, or cash by mail
The kiosk sits at Stage 5 — the last stop, not the source. Banning it removes one regulated endpoint but doesn't dismantle the call centers, spoofed phone numbers, or social engineering scripts that created the victim in the first place. The scammers simply redirect victims to the next-easiest payment channel.

Where Scam Victims Go When Bitcoin ATMs Disappear:

  • Gift cards — a major scam payment method with weaker traceability
  • Cash by mail — virtually impossible to trace or recover
  • Wire transfers — comparable or larger scam losses than bitcoin ATMs
  • Peer-to-peer payment apps — less compliance infrastructure than regulated kiosks
  • Money orders and mule accounts — minimal real-time intervention capability
  • Unlicensed or offshore crypto channels — no KYC, no SAR filing, no camera, no audit trail
TRM Labs underscores this point from the investigative angle: on-chain activity from bitcoin ATM fraud schemes shows "a litany of ATM transactions, which can span geographic borders and service providers, benefitting fraudster aggregation addresses." Crucially, TRM notes that "investigators can use blockchain intelligence to both trace and freeze the proceeds of the fraud schemes, and even trace backwards to identify unknown victims." That investigative capability disappears when victims are pushed to less traceable channels. This doesn't mean the machines are blameless. Operators who ignore red flags, fail to implement meaningful controls, or resist compliance deserve enforcement action. But the policy choice between "ban everything" and "regulate nothing" is a false binary. Lawmakers generally do not propose banning wire transfers, gift cards, bank accounts, checks, or cash — even though all of these are used in scams at comparable or larger dollar volumes. They require controls, reporting, supervision, and enforcement. The question is why bitcoin ATMs should be treated differently.

What Better Bitcoin ATM Policy Actually Looks Like

If Canada had pursued kiosk-specific controls before reaching for a ban, what would those controls have looked like? The virtual currency kiosk policy framework lays out a concrete alternative — and several U.S. states are already testing versions of it. The key components fall into six categories.

1. Consumer Warnings and Wallet-Control Attestations

Every bitcoin ATM transaction should require the customer to pass through explicit scam-warning screens — not buried in terms of service, but displayed prominently before the transaction can proceed. The customer should be asked to attest that they control the destination wallet and are not being directed by someone else to make the transaction. These warnings don't stop sophisticated scammers, but they interrupt the urgency that is central to social engineering tactics and create a documented record that strengthens later enforcement.

2. Risk-Based Transaction Controls

The policy framework explicitly warns against ultra-low daily transaction caps, arguing they can fragment transactions below the thresholds that trigger Suspicious Activity Reports and Currency Transaction Reports. The result: less financial intelligence for law enforcement, not more. The better approach: risk-based controls calibrated to customer history, identity verification level, jurisdiction, and real-time risk indicators. A first-time customer sending $5,000 to an unscreened wallet should face different controls than a verified repeat user making a routine purchase. Real-time holds for elderly or high-risk customers — triggered by behavioral indicators, transaction size, or frequency — give operators and law enforcement a window to intervene before irreversible transfers occur. This is broadly consistent with what New Hampshire has enacted ($2,000 daily caps with blockchain screening) and what Virginia has pursued through fee limits and a mandatory refund window.

3. Stronger Operator Compliance and Enforcement

The most important regulatory tool may not be new legislation at all. State attorneys general have already demonstrated that existing unfair-and-deceptive-practices statutes, consumer-fraud acts, money-transmitter licensing laws, and elder-exploitation authorities can be used against operators that mislead consumers, conceal fees, ignore red flags, or fail to maintain meaningful risk-based safeguards. Iowa's enforcement action against CoinFlip — where investigators found 94.92% of transactions examined were scam-related — and Massachusetts' lawsuit against Bitcoin Depot alleging more than 80% of customers depositing $10,000 or more were scam victims demonstrate that enforcement tools already exist. The framework argues that the better approach is targeted enforcement: prosecute operators that don't protect consumers under laws already on the books, while preserving responsible operators that implement robust KYC, monitoring, warnings, holds, live intervention, SAR reporting, and law-enforcement cooperation.

4. Elder-Fraud Safeguards

The policy framework calls for specific protections for older adults — the demographic most frequently targeted through bitcoin ATM scams. Targeted elder-fraud measures include mandatory transaction holds above certain thresholds for customers identified as at-risk, live intervention by trained compliance staff when behavioral indicators suggest coercion, trusted-contact procedures modeled on financial advisor safeguards, and rapid coordination with adult protective services and law enforcement. The live-intervention requirement is particularly important. A machine that can detect a 72-year-old customer attempting a $5,000 transaction to an address flagged by blockchain analytics — and then connect that customer with a live compliance agent before the transaction broadcasts — is performing a function that no gift card or cash-by-mail channel can replicate. The technology exists. What's been missing in most jurisdictions, including Canada, is the legal mandate to use it.

5. Pre-Broadcast Refunds — Not Post-Broadcast Mandates

This is one of the framework's most practical distinctions. A transaction placed on hold before cryptocurrency is transmitted on-chain can be refunded. The operator still has custody of both the cash and the crypto. But once a transaction broadcasts to the blockchain, the transfer is irreversible — no operator can "undo" it, regardless of what consumer protection law requires. Good policy distinguishes between these two situations. Mandating pre-broadcast holds and refund windows (as Virginia's 90-day refund window and New Hampshire's 14-day window do) gives operators both the legal obligation and the technical ability to protect victims. Mandating post-broadcast reimbursement creates an unfunded liability that could drive compliant operators out of business — which may be the point, but if so, lawmakers should call it a ban, not a consumer protection measure.

6. Upstream Enforcement: Telecom Accountability

The framework makes a point that virtually no bitcoin ATM legislation in any jurisdiction has addressed: the telecom companies that originate and transmit scam calls face far less regulatory scrutiny than the kiosk operators who process the final payment.

The Regulatory Asymmetry:

  • Bitcoin ATM operators: Federal MSB registration, AML program, SAR filing, OFAC screening, state money transmitter licensing, surety bonds, potential federal felony for unlicensed operation
  • VoIP/telecom providers that originate scam calls: No FinCEN MSB requirements, no SAR regime, no equivalent AML obligations, generally regulatory enforcement only
This asymmetry matters because effective fraud policy should focus on where fraud enters the system, not just where it exits. STIR/SHAKEN protocols authenticate caller-ID authorization but not intent — a scammer using a legitimately provisioned number passes authentication while still defrauding victims. Until telecom accountability catches up, kiosk operators are being held responsible for failures that originate several steps upstream.

The Financial Inclusion Cost of Bans

The ban debate rarely addresses who else uses these machines. Bitcoin ATMs are not only used by speculators. For some consumers, they are one of the few regulated cash-to-digital access points available without a traditional bank account. Millions of U.S. and Canadian households remain unbanked or underbanked. Cash-only consumers cannot easily use online exchanges that require linked bank accounts, debit cards, or ACH rails. Bank branch closures are accelerating, particularly in rural areas. Unbanked rates are disproportionately high among Indigenous, Black, Hispanic, low-income, disabled, and less formally educated households. For these communities, bitcoin ATMs are one of the few regulated cash-to-digital access points that don't require a bank account. Removing them creates a disparate impact on the very populations that traditional banking has underserved. A responsible policy framework protects vulnerable consumers from scams while preserving lawful access — not forcing a choice between the two.

Two Models, Diverging Fast

The global policy response to bitcoin ATM fraud is splitting into two camps, and the divide is widening with each passing month.

The Policy Spectrum (April 2026):

  • Elimination: Indiana (banned), Tennessee (banned effective July 1, 2026), Canada (proposed ban)
  • Graduated Regulation: Virginia (18% fee cap, mandatory licensing, 90-day scam refund window), New Hampshire ($2,000 daily caps, 14-day scam refunds, mandatory blockchain screening)
  • Targeted Enforcement: Iowa (AG lawsuit against CoinFlip, finding 94.92% of examined transactions were scam-related), Missouri (CIDs issued December 2025 to five major operators), Massachusetts (AG lawsuit against Bitcoin Depot)
  • No Bitcoin ATM-Specific Rules: Majority of U.S. states and, until this proposal, Canada
The graduated-regulation states are betting that transaction controls, fee caps, mandatory holds, scam refund windows, and blockchain screening can bring fraud ratios down to defensible levels while preserving legitimate access. These frameworks impose real costs on operators but keep machines running — and, critically, keep the machines functioning as traceable, monitorable nodes that law enforcement can use. The elimination jurisdictions have decided the bet isn't worth taking. Tennessee Governor Bill Lee signed HB 2505 on April 23, 2026, making it the second U.S. state to ban bitcoin ATMs, with violations classified as a Class A misdemeanor and an effective date of July 1, 2026. Indiana was first. Canada's proposal, if enacted, would remove more machines than Indiana and Tennessee combined. The policy framework's core argument is that the graduated approach is not just preferable but more effective: a regulated kiosk with KYC, real-time monitoring, transaction holds, scam warnings, and SAR filing provides more fraud-fighting infrastructure than the alternative payment channels victims are redirected to after a ban. But the argument only holds if operators actually implement the controls — and the industry's track record on voluntary compliance has been dismal enough to fuel the bans now gaining political momentum.

A Timeline of Escalation

How Policy Responses Have Accelerated:

Chart summarizing reported bitcoin atm scam losses in u.s..
Reported Bitcoin ATM Scam Losses in U.S.. Illustrates the rapid growth in funds lost to crypto ATM scams, underscoring why regulators in Canada (and elsewhere) are responding aggressively. Source: tomshardware.com
  • 2023: FINTRAC identifies bitcoin ATMs as primary fraud collection vehicle in Canada; TRM Labs reports illicit volume rate at bitcoin ATMs is double the broader crypto industry
  • 2024: Indiana becomes first U.S. state to ban bitcoin ATMs; TRM publishes data showing $160M+ in illicit bitcoin ATM volume since 2019
  • Feb. 2025: Massachusetts AG sues Bitcoin Depot over scam facilitation
  • Dec. 2025: Missouri AG issues civil investigative demands to five major operators
  • Mar. 2026: Virginia enacts comprehensive regulatory framework with fee caps and refund windows
  • Apr. 2026: New Hampshire passes bitcoin ATM bill with daily caps and blockchain screening
  • Apr. 23, 2026: Tennessee Governor signs HB 2505, banning bitcoin ATMs effective July 1
  • Apr. 2026: Canada proposes nationwide ban on all ~4,000 bitcoin ATMs; virtual currency kiosk policy framework circulates advocating targeted controls over prohibition

U.S. Operators Face a Forced Canadian Exit

The ban would hit American companies directly — and at a moment when they can least afford it. Bitcoin Depot (NASDAQ: BTM), headquartered in Atlanta, operates over 200 bitcoin ATMs across Canadian cities. The company is already navigating a difficult regulatory environment at home — three NMLS adverse actions, the Massachusetts Attorney General's consumer protection lawsuit alleging more than 80% of customers depositing $10,000 or more were scam victims, and a March 2026 cyberattack that resulted in the theft of 50.9 BTC ($3.7 million) from corporate settlement accounts. Losing 200-plus Canadian kiosks by government order would mean both a revenue hit and a narrative problem: machines removed in two countries simultaneously. Illinois-based CoinFlip expanded into Canada in 2024 and operates at least 150 machines there. CoinFlip is simultaneously the subject of the Iowa Attorney General's lawsuit, which found 94.92% of CoinFlip transactions examined in that state were scam-related. A forced Canadian exit would compound the reputational and operational damage. Together, these two operators alone account for at least 350 machines that would need to be decommissioned. Dozens of smaller Canadian operators — including Toronto-based Localcoin, which has reportedly been cooperating with the RCMP and Ontario Provincial Police on fraud investigations — would face an existential threat, their entire business model eliminated by federal policy. Neither Bitcoin Depot nor CoinFlip has publicly detailed the financial impact a Canadian ban would have on their revenue.

What This Means for Canadian Bitcoin ATM Users

If you use bitcoin ATMs in Canada:

  • Machines aren't disappearing tomorrow. The ban is a policy proposal with no implementation timeline. Bitcoin ATMs remain operational until legislation or regulation is finalized and an effective date is set.
  • You still have alternatives. The government explicitly stated that Canadians can continue buying crypto through licensed exchanges and money service businesses.
  • If someone has directed you to a bitcoin ATM and told you to deposit cash urgently — stop. No legitimate government agency, bank, or law enforcement body asks for payment via bitcoin ATM. This is almost certainly a scam. Contact the Canadian Anti-Fraud Centre at 1-888-495-8501.
  • Watch for scammers exploiting the ban announcement itself. Fraudsters may create urgency — "buy now before machines are gone" — as a social engineering tactic.
  • If you depend on bitcoin ATMs because you are unbanked or underbanked, investigate licensed Canadian exchanges that accept cash deposits or in-person verification. The ban, if enacted, will not eliminate your ability to buy cryptocurrency — but it will eliminate the most convenient cash-to-crypto channel.
  • Document your transactions. If machines are eventually removed, you may need records for tax reporting or dispute resolution.
  • Review our consumer protection resources for guidance on identifying bitcoin ATM scams.

What This Means for Operators

Canada's proposal crystallizes the existential risk facing the bitcoin ATM industry — but it also illuminates what the alternative looks like if operators are willing to embrace it. The failure mode is regulatory neglect, not inevitability. Canada didn't ban bitcoin ATMs because regulation was tried and failed. It banned them because regulation was never tried. Every state and country that currently has no kiosk-specific fraud controls is on the same trajectory. The lesson is not that bans are inevitable; it's that bans become politically inevitable in the absence of a credible regulatory alternative. The policy framework provides the playbook. Operators who want to survive the next two years should be advocating — loudly and publicly — for the specific controls outlined in the virtual currency kiosk framework: mandatory KYC, real-time transaction holds for high-risk customers, wallet-control attestations, blockchain screening, live human intervention, and rapid SAR filing. Every machine operated without those controls is a data point for the next ban proposal.

Concrete Controls the Industry Should Be Implementing Now:

  • Scam-warning screens with wallet-control attestations before every transaction
  • Pre-broadcast transaction holds for elderly or high-risk customers, with live agent review
  • Real-time blockchain analytics screening against known scam and sanctions addresses
  • Risk-based transaction limits calibrated by customer history and verification level — not just a flat dollar cap
  • Rapid SAR filing and direct law enforcement cooperation channels
  • Coordination with adult protective services for elder-fraud intervention
  • Voluntary public disclosure of fraud ratios and intervention statistics
Operators with Canadian footprints — particularly Bitcoin Depot and CoinFlip — need to begin contingency planning now, even without a firm implementation date. The political momentum behind this ban is strong. The absence of a timeline means the government is working out mechanics, not reconsidering the policy. The graduated-regulation states are the industry's lifeline. Virginia's fee cap and scam refund mandate, New Hampshire's daily limits and blockchain screening requirements — these frameworks are demanding, but they keep machines running and create a model other states can adopt. Operators who resist those frameworks, or lobby against them, are making bans more likely, not less. Publish your fraud data voluntarily. The industry's refusal to disclose scam ratios is what gives regulators the political leverage to ban machines entirely. The numbers coming out of Iowa (94.92% scam transactions at CoinFlip) and Massachusetts (more than 80% of high-value Bitcoin Depot transactions linked to fraud) are the numbers policymakers cite when they choose elimination. Counter them with better data and demonstrably better controls, or accept the consequences. Engage on telecom accountability. The fraud chain starts with a phone call, not a kiosk. Operators should be publicly and aggressively advocating for telecom-sector reform — Know Your Customer-style requirements for VoIP providers, enforcement against carriers that originate scam traffic, and better STIR/SHAKEN implementation. As long as the regulatory burden falls disproportionately on the last link in the fraud chain, bans will remain the path of least political resistance.

What Happens Next

Canada's proposal raises three immediate questions. First: what legislative vehicle will the government use, and how fast can it move? A ban tucked into a budget implementation bill could pass quickly with majority support; standalone legislation could face more debate and industry lobbying. Second: will the Canadian bitcoin ATM industry mount a legal challenge, arguing that a blanket ban is disproportionate when targeted regulation was never attempted? Third — and most consequential for the global industry — which U.S. jurisdiction moves next, and will it choose the Virginia model or the Tennessee model? The deeper question is whether the practical policy framework now circulating among regulators — consumer warnings, targeted transaction controls, elder-fraud safeguards, risk-based holds, pre-broadcast refunds, stronger operator compliance, law-enforcement cooperation, and telecom-side accountability — will gain traction before more jurisdictions follow Canada's lead. TRM Labs' data cuts both ways: the identifiable illicit share was double the broader crypto average, which alarms regulators, but it was still 1.2% of total crypto ATM volume. For a channel where 98.8% of activity was not identified as illicit, the better test is whether Canada can force the risky slice down with controls while preserving legitimate cash-to-digital access. The bitcoin ATM industry has a narrow window to demonstrate that the alternative to prohibition actually works. Canada just showed what happens when that window closes without anyone building the middle option. The question for every remaining jurisdiction is whether operators and regulators will build it together — or whether the next proposal will be another ban.