Illinois crypto-kiosk refunds: Eligibility and deadlines

Illinois crypto-kiosk operators have returned $750,206.61 to consumers under the state's Digital Asset Kiosks Act, according to an October 19 update from the Illinois Department of Financial and Professional Regulation. The department reported 453 refund requests since the law was signed in August 2025, with an average refund of $1,656. The figures describe the implementation of an existing law, not a new compensation scheme announced this week.

The update brings attention to an important distinction in the rules: eligible new customers can recover the full amount of qualifying fraudulent transactions, while the provision for existing customers covers charges. The department's published advisory reproduces these separate requirements. A reader should not assume that every loss at a crypto machine qualifies for reimbursement of the money transferred.

Different refunds for different customers

Section 45, as reproduced in the regulator's October 28, 2025 advisory, requires operators to refund a new customer for up to three fraudulent transactions made within the new-customer period. The customer must have been fraudulently induced to make those transactions. This is a conditional statutory protection, rather than a promise that an operator will reverse any transfer a customer later regrets.

There are two reporting deadlines in that provision. The new customer must contact the operator within 30 days after the last transaction occurring during the new-customer period and explain its fraudulent nature. A police report or government-agency report must then reach the operator within 60 days after that last transaction. Both steps concern reporting to the operator, not simply keeping a record privately.

For existing customers, the same section requires a refund of all charges when the customer was fraudulently induced to transact and meets the reporting conditions. Those customers must inform the operator within 30 days after the transaction or transactions concerned and provide a police or government-agency report within 60 days. The difference between charges and the full transaction amount matters when reading the headline refund total.

Illinois' consumer-information page also directs people to report scams to the department or the state Attorney General's Consumer Protection Division. Its guidance describes kiosks as self-service machines often found in third-party premises such as convenience stores. Customers can use cash to buy cryptocurrency, so someone targeted through a kiosk need not already have held digital assets.

Limits and disclosures already apply

The advisory separately reproduces daily transaction limits in Section 25. Operators cannot accept or dispense more than $2,500 in a day to or from the same new customer. For an existing customer, the daily ceiling is $10,500. These are transaction limits imposed on operators, not a calculation of what an individual can claim after a fraudulent transfer.

Section 30 sets the maximum charge for one kiosk transaction at the greater of $5 or 18% of the digital assets involved, valued at their market price when the customer starts the transaction. Describing this simply as an 18% cap would omit the dollar threshold expressly included in the statutory wording reproduced by IDFPR.

Operators also have disclosure duties before each transaction. The advisory's extract of Section 35 requires written information in English and the principal language used to advertise, solicit or negotiate with the customer. Disclosures must be clear, conspicuous and separate from other disclosures. Operators must provide a transaction receipt as well.

Other quoted provisions require reasonable fraud-prevention measures, including a written anti-fraud policy, and a frequently monitored communications line for relevant government agencies. Section 95 allows claims concerning violations of the transaction limits, customer-charge limits and refund provisions to be brought in a civil action. A prevailing resident may be awarded reasonable attorney fees and court costs; that is not an automatic payment to every complainant.

The state announced the legislation on August 18, 2025. Its announcement distinguished immediate consumer protections, including refunds, from the later registration timetable. The October refund figures therefore concern protections already operating, rather than a reason to wait for registration to begin. They also do not show how many refund requests remain unresolved or establish that all losses involving cryptocurrency are recoverable.

The regulator's consumer guidance warns that digital assets are not insured by the Federal Deposit Insurance Corporation in the way bank deposits are. The kiosk refund law is a separate, conditional protection. It should not be confused with deposit insurance or treated as removing the risks associated with digital assets.