After the Sedgwick County District Attorney's Consumer Protection Division sent a cryptocurrency ATM operator a copy of a scam victim's complaint, the operator agreed to issue her refund by check — reversing an earlier offer to repay her only in cryptocurrency, according to a September 9 news release from the DA's office. Without the protections created by Kansas HB 2591, the office says, the victim likely would not have recovered any of her money.
That single sentence is the most consequential thing said about crypto-kiosk regulation in Kansas this year. HB 2591's refund provisions took effect July 1, 2026, and this is the first publicized case in which a Kansas prosecutor used them to move an operator from a token gesture to actual cash in a victim's hands. For operators, it establishes what a county-level consumer protection office can do with a forwarded complaint. For victims and their families, it establishes that "we'll refund you in Bitcoin" is not a compliant answer under Kansas law.
What Happened:
- A Sedgwick County resident was targeted by an outstanding-warrant scam and directed to pay via a cryptocurrency ATM.
- She contacted the Wichita Police Department. Sgt. Marr advised her to contact the cryptocurrency ATM operator directly, report the scam, and request a refund.
- The operator initially agreed to issue a refund — but only in cryptocurrency, an option the DA's office describes as offering little practical help to a victim with no familiarity with digital currency or how to access it.
- Facing that obstacle, the victim considered giving up. Sgt. Marr encouraged her to keep pursuing it.
- The Consumer Protection Division took up the case under HB 2591, forwarded her complaint to the operator, and the operator agreed to pay by check.
The Crypto-Only Refund Offer Was the Real Obstacle
Strip away the scam narrative and the operational story here is about refund form, not refund willingness. The operator did not refuse. It offered to make the victim whole in the same asset the scammers had extracted — an asset she had no wallet for, no exchange account for, and no ability to convert. A crypto refund to a victim who does not use crypto is functionally a denial with better optics.
Kansas statute closes that gap. Under HB 2591, required refunds must be delivered by cash payout, ACH, or mailed paper check within 10 business days. Cryptocurrency is not an authorized refund method. That is why the Consumer Protection Division's involvement changed the outcome: the office was not asking the operator for a favor, it was pointing at a statutory obligation with a defined delivery mechanism.
What HB 2591 Actually Requires
Kansas Gov. Laura Kelly signed HB 2591 on April 9, 2026. The virtual-currency-kiosk provisions took effect July 1, 2026. The DA's release summarizes them as a holding period before purchased cryptocurrency can be released, transaction limits, and mandatory refunds to fraud victims under certain conditions. The statutory detail:
The refund mechanism is conditional and time-boxed. For qualifying fraud claims involving an initial transaction — or another transaction within the first 14 days — the customer must report the fraud to a regulator or law-enforcement agency within 30 days and provide either a police report or a sworn declaration. A qualifying refund covers the transmitted amount plus fees. The statute also permits law enforcement to request that refund on the customer's behalf, which is the specific lever that gave the Consumer Protection Division leverage the victim did not have when she called the operator alone.
Why the reporting timeline is the whole ballgame:
- The refund right attaches to a customer's initial transaction or transactions in the first 14 days — not to a long-running relationship with a kiosk.
- The victim must report within 30 days. Miss that window and the statutory claim is gone, regardless of how sympathetic the facts are.
- A police report or sworn declaration is required documentation. Calling the operator's support line is not a substitute for filing with law enforcement.
- In this case the victim went to the Wichita Police Department first. That sequencing is what made the statutory path available.
What We Still Don't Know
The Sedgwick County release does not identify the cryptocurrency ATM operator, and we are not going to guess. It also does not state how much the victim deposited or ultimately recovered, when the transaction and fraud report occurred, which precise statutory refund provision the division invoked, or whether the check has been received and cashed as opposed to merely promised. Those gaps matter for anyone trying to model how HB 2591 performs at scale — a single unquantified recovery is proof of concept, not a track record.
Where Kansas Sits in the Broader Refund-Mandate Wave
Kansas is now one of a growing set of states whose kiosk statutes pair transaction caps with an enforceable refund duty rather than disclosure alone. South Dakota's SB 98 layered registration, a $1,000 daily cap, and scam refund duties. Louisiana's Act 482 attached full refunds to unlicensed operation. Arizona's kiosk law produced $171,332 in full refunds for 35 victims through the state attorney general.
What distinguishes the Kansas case is who executed it. Arizona's recoveries came from a state attorney general. Here, a county district attorney's consumer protection division applied the statute to a single complaint and got a result. That is a meaningfully lower bar to enforcement, and it means operators serving Kansas should expect refund demands to arrive from dozens of local offices, not one centralized regulator.
What This Means for Operators
Three concrete exposures follow from this case:
- Audit your refund rails. If your remediation workflow defaults to returning crypto to a customer wallet, it does not satisfy Kansas law. Cash, ACH, or mailed check — within 10 business days.
- Treat a forwarded complaint as a statutory demand. The DA's office did not sue. It sent paperwork. Operators that route those into a general support queue will generate the kind of release Sedgwick County just published.
- The caps are structural, not advisory. A $1,000 initial-transaction ceiling with a 72-hour hold on early transactions changes the unit economics of new-customer onboarding in Kansas. Whether that materially reduces scam losses is an open policy question — the statute does not claim a proven fraud-reduction effect, and neither should anyone else.
What This Means for Kansas Scam Victims
The Sedgwick County office's own guidance is the starting point: legitimate government agencies, law enforcement, and courts will never instruct anyone to pay a fine, fee, bail, or warrant through a cryptocurrency ATM. If a caller claiming to represent law enforcement, a court, a utility, or a government agency directs you to a kiosk, the DA's office says that is a scam and you should end the contact immediately.
If money is already gone, the sequence that worked in this case is the sequence to copy: report to law enforcement first, get a police report, then contact the operator — and if the operator offers a cryptocurrency refund, do not accept it as the final answer. Kansas law does not authorize that form of payment for a qualifying claim. Escalate to the Sedgwick County District Attorney's Consumer Protection Division or your local equivalent, which can request the refund on your behalf. Note the 30-day reporting deadline; it is short. Our consumer protection resources and the Kansas regulations page cover the documentation requirements in more detail.
"Residents who believe they have been targeted by a scam, including one involving a cryptocurrency ATM, are encouraged to contact the Sedgwick County District Attorney's Consumer Protection Division or file a report with their local police department."
— Sedgwick County District Attorney's Office news release, September 9, 2026
The Test Ahead
One check does not validate a statute. The question for the next twelve months is volume: how many HB 2591 refund demands do Kansas prosecutors issue, how many operators comply within the 10-business-day window without a second letter, and how many victims fall outside the law's boundaries — the ones who reported on day 45, or whose losses came after their first 14 days of kiosk activity and therefore never triggered the refund right at all.
Watch for two things specifically: whether the Kansas Attorney General's office begins consolidating kiosk refund enforcement rather than leaving it to county offices, and whether any operator litigates a refund demand rather than paying it. The first operator to test HB 2591 in court will tell the industry how much this statute is really worth.