On November 4, 2026, the DFPI announced a consent order resolving its investigation of a crypto ATM operator’s compliance with the Digital Financial Assets Law, the California Consumer Financial Protection Law, and federal AML requirements. The order requires the operator to pay at least $4,811,483 in restitution to 20 California consumers and $351,530 in disgorgement to the DFPI. The operator neither admits nor denies the order’s findings and conclusions.
The DFPI’s findings address alleged violations involving transaction limits, fees, disclosures, and receipts, as well as deficiencies in anti-money laundering controls. Specifically, the findings state that the operator:
- Exceeded daily transaction limits. On multiple occasions since January 1, 2024, its kiosks accepted more than $1,000 from a customer in one day, contrary to the Digital Financial Assets Law.
