US-FL v2.0 Sign in

US-FL (US-FL) · Module W10 · Derived Confidence: Confirmed

US-FL: Consumer Protection & APP Fraud

#

Florida consumer protection for payments rests on the general FDUTPA/FTSA private-enforcement framework plus newly enacted virtual-currency-kiosk-specific fraud protections (transaction limits, mandatory warnings, conditional refunds); Florida has not enacted a dedicated authorized-push-payment reimbursement mandate comparable to the UK's PSR regime.

Open gap — wpm-int-4No US-FL APP-fraud / consumer-protection payments action was identified this cycle.no under-indexing note recorded
Horizon · 2027-01-01 SpeculativeFlorida VC-kiosk consumer-protection provisions (limits/refunds) in forceProposed
Horizon · 2027-01-01 SpeculativeFL kiosk consumer-protection provisions take effectProposed
Standing sub-brief · as of 5 July 2026126 words · last cycle 2026-09-21

Consumer Protection & APP Fraud

HB505 introduces new consumer-fraud protections for virtual-currency kiosks: daily transaction limits of $2,000 for new customers and $10,000 for existing customers, and mandatory full refunds within 72 hours for fraud losses, responding to more than $33 million in FBI/FTC-reported Florida kiosk-fraud losses between January 2020 and December 2025. These protections have staged effective dates: the consumer-protection provisions take effect 1 January 2027, distinct from the 1 March 2027 operator-registration requirement. Florida has not enacted a dedicated authorised-push-payment fraud mandatory-reimbursement regime comparable to the UK's Payment Systems Regulator model.

Outlook

The kiosk consumer-protection provisions take effect 1 January 2027; watch for OFR guidance on implementation ahead of that date and for whether kiosk-fraud loss figures continue to climb before the protections activate.

Periodic update · new data 2026-09-22

Consumer Protection & APP Fraud

Florida House Bill 505, pending as of this cycle, would mandate an on-screen fraud-warning disclosure at virtual-currency kiosk terminals before a customer may initiate a transaction. This is a Probable-tier, Tier 1-sourced finding reflecting the bill's pending, not-yet-enacted status. The provision targets a payment channel, physical virtual-currency kiosks, that has drawn national regulatory and law-enforcement attention as a vector for authorised-push-payment-style fraud, where victims are induced to deposit funds into a kiosk under fraudulent pretences.

The disclosure mandate is bundled in the same bill as a proposed fee exemption for kiosk-only operators, meaning the consumer-facing protection measure and the operator cost-relief measure are advancing, or stalling, together as a single legislative package rather than as independent initiatives. No other Florida-specific consumer-protection or APP-fraud development was identified in this cycle's evidence.

Watch for whether HB 505 is enacted; if it passes, Florida would establish its first kiosk-specific consumer-facing fraud-warning requirement, a narrow but concrete APP-fraud mitigation measure applied to a channel that has otherwise operated without such a disclosure obligation.

2 earlier distinct update(s)
Periodic update · new data 2026-09-14

Consumer Protection & APP Fraud

Florida's Chapter 2026-178 (HB 505) builds an APP-fraud-style consumer-protection layer directly into the state's new virtual-currency-kiosk framework. The Act mandates on-screen fraud warnings displayed to customers before a transaction, provision of transaction receipts, and daily transaction caps set at $2,000 for new customers and $10,000 for existing customers. Its centrepiece consumer remedy is a conditional full refund: a kiosk operator must refund a customer's first fraudulent kiosk transaction in full within 72 hours, provided the customer reports the alleged fraud to both the business and a law-enforcement or governmental agency within 60 days and supplies supporting proof.

These terms were shaped directly by documented county-level fraud data rather than abstract policy design. The Flagler County Sheriff's Office documented over $2.75 million in fraudulent kiosk transfers from county residents, predominantly retirees, over a two-year period, a figure that helped drive the legislative push behind HB 505. Statewide, 2025 figures cited kiosk-related consumer losses at $32.8 million across 1,213 complaints, establishing the scale of the harm the Act was designed to address. Notably, a proposed 24-hour transaction hold did not survive the legislative process, an omission that the interpreter's key judgment attributes to industry pushback moderating the final consumer-protection package relative to its originally proposed form. The resulting statute therefore represents a negotiated compromise: real-time fraud warnings and transaction caps at the point of sale, paired with a retrospective refund mechanism, rather than a preventive transaction-delay mechanism that would have given victims or authorities a window to intervene before funds moved.

The consumer-protection provisions take effect January 1, 2027, and their real-world test will be whether the combination of fraud warnings, transaction caps and the 72-hour refund mechanism meaningfully reduces the fraud-loss pattern documented at the county and state level, absent the stronger transaction-hold safeguard that was dropped during negotiation.

Periodic update · new data 2026-09-08

Consumer Protection & APP Fraud

HB 505 imposes a defined set of consumer-protection obligations on Florida virtual-currency-kiosk operators, confirmed at the highest confidence tier in this cycle's evidence. Kiosk operators must issue fraud-warning disclosures, observe daily transaction limits of $2,000 for customers who have used the kiosk for fewer than seven days and $10,000 for all other customers, and refund first-time fraud victims who meet applicable reporting requirements. These mechanisms are structured around the fraud-vector specific to crypto-kiosk transactions, where a victim is typically directed by a scammer to deposit cash into a kiosk for irreversible conversion to crypto, and the tiered transaction limits are designed to cap the exposure of new or first-time users specifically, who research shows are disproportionately targeted by such schemes.

The first-transaction fraud refund obligation is a notably concrete consumer-remedy mechanism, requiring the covered kiosk operator to make the victim whole on the first fraudulent transaction where reporting requirements are satisfied, which functions similarly in principle to authorised-push-payment fraud reimbursement mechanisms seen in other jurisdictions' account-based payment-fraud frameworks, though applied here specifically to the crypto-kiosk channel rather than bank transfers.

Watch for the practical implementation of the refund mechanism once HB 505 takes effect on January 1, 2027, including how OFR defines the reporting requirements a victim must satisfy to qualify for the first-transaction refund, and whether kiosk operators' compliance with the disclosure and limit requirements becomes a documented OFR examination focus.

Sources and findings (4 unique sources · R-3/R-4)
  1. <cite index="127-3">The enacted provisions add licensing/registration requirements, daily transaction limits of $2,000 for new customers and $10,000 for existing customers, and full refunds within 72 hours in cases of fraud</cite>.

  2. [W10-E2] T1 Derived: Confirmed in_forcehttps://www.flsenate.gov/Session/Bill/2026/505/Analyses/h0505z.IBS.PDF re-verified

    <cite index="121-24">The FBI and FTC have received Florida-based complaints involving virtual-currency-kiosk fraud totaling well over $33 million in alleged victim losses between January 2020 and December 2025</cite>, the driver for the new consumer protections.

  3. [W10-E3] T1 Derived: Confirmed in_forcehttps://www.myfloridalegal.com/consumer-protection re-verified

    <cite index="32-4">The AG's Consumer Protection Division has secured over $565 million in total relief for Florida consumers since 2019, including more than $426 million in direct relief</cite>, the general backstop for deceptive payments practices.

  4. <cite index="94-4,94-5">The FTSA requires consent for auto-dialed calls/texts and gives Florida residents a private right of action, with damages of $500 per violation or actual damages, tripled for willful violations</cite>.