Iowa Sues Bitcoin Depot and CoinFlip Over Millions Lost in Crypto Scams

March 5, 2025 | JacobiJournal.com – Iowa crypto ATM scams have become the center of a legal battle, as Attorney General Brenna Bird filed lawsuits against Bitcoin Depot and CoinFlip, the state’s largest cryptocurrency ATM operators. The companies are accused of enabling millions in fraud by failing to implement safeguards, leaving vulnerable residents exposed to scams.

The lawsuits follow a statewide investigation revealing that hundreds of Iowans, particularly seniors, lost significant amounts of money through these kiosks. Regulators argue that the operators profited from excessive fees while neglecting consumer protection obligations, allowing scams to thrive unchecked.

State Investigation Uncovers Widespread Crypto Scams

In October 2023, the Attorney General’s office launched a groundbreaking investigation into cryptocurrency ATM operators. Officials subpoenaed 14 companies, requesting a list of Iowans who had transferred money through the machines. Investigators then contacted these individuals, reviewed complaints, police reports, and self-reported scams.

The findings were alarming: Hundreds of Iowans sent over $20 million through Bitcoin Depot and CoinFlip ATMs within less than three years. Most victims were over the age of 60.

Attorney General Calls Out “Evil” Scammers

Attorney General Bird condemned the scammers, stating:

“Con artists are evil and will stop at nothing to steal everything you have. They specifically target older Iowans—some even comb through obituaries to find widows. They manipulate victims into using crypto ATMs, while these companies take a cut of the profits. It’s not just wrong—it’s illegal.”

Bird emphasized her commitment to recovering stolen funds and forcing crypto ATM companies to implement safeguards.

How Bitcoin Depot and CoinFlip Profit From Scams

The investigation revealed that Bitcoin Depot pockets 23% of each transaction, while CoinFlip takes 21%—directly profiting from fraud victims. The lawsuits allege that both companies:

Charge excessive and hidden transaction fees.
Mislead consumers about their refund policies.
Violate the Iowa Consumer Fraud Act.

Lawsuits Aim to Protect Iowans from Future Fraud

Attorney General Bird is suing both companies for consumer fraud and demanding major changes in their operations. The broader investigation into crypto ATM companies remains ongoing.

The lawsuits seek restitution for victims, stronger compliance standards, and safeguards to prevent scammers from exploiting crypto ATMs in the future. Regulators argue that without tighter oversight, Iowans—especially seniors—will remain vulnerable to financial predators who use these kiosks as tools for fraud.

Protecting Consumers Moving Forward

The outcome of these lawsuits could set a precedent for how states hold ATM operators accountable in the future. By pushing for restitution and stronger oversight, Iowa officials aim not only to recover lost funds but also to create safeguards that protect vulnerable consumers from similar schemes. The broader investigation signals that regulators are taking an aggressive stance against companies that fail to stop scams, underscoring a growing demand for accountability in the rapidly expanding cryptocurrency market.

As the cases against Bitcoin Depot and CoinFlip progress, Iowa ATM scams remain a critical focus for regulators determined to curb fraud. The actions taken now may influence how other states respond, shaping consumer protection standards nationwide.

For more resources on recognizing and avoiding fraud, visit the Consumer Financial Protection Bureau.

New Update: Iowa Crypto ATM Scams Prompt Stronger Consumer Protection Laws as Lawsuits Continue

Iowa’s legal response to cryptocurrency ATM scams has expanded significantly since Attorney General Brenna Bird filed consumer fraud lawsuits against Bitcoin Depot and CoinFlip in February 2025. The state has introduced new statutory protections designed to limit financial losses, improve transaction transparency, and establish clearer responsibilities for cryptocurrency kiosk operators. On July 1, 2025, Iowa Code Section 533C.1004 took effect, establishing requirements for businesses operating cryptocurrency ATMs throughout the state. The legislation followed investigations revealing that hundreds of Iowa residents had transferred more than $20 million through Bitcoin Depot and CoinFlip kiosks during a period of less than three years.

State investigators identified older residents as particularly vulnerable to fraud schemes involving cryptocurrency transactions. The original lawsuits alleged that both operators failed to implement adequate safeguards, charged excessive or misleading fees, and maintained practices that exposed consumers to substantial financial losses. Those allegations remain distinct from findings of liability, and the enactment of new legislation does not automatically resolve the underlying civil lawsuits.

The new Iowa cryptocurrency ATM law establishes a daily transaction limit of $1,000 per consumer. Individuals using a particular cryptocurrency ATM operator for the first time are also subject to an aggregate transaction limit of $10,000 during their initial 30 days with that operator. These restrictions are intended to reduce the amount of money consumers can transfer before recognizing that they may be participating in a fraudulent transaction. The legislation also limits transaction fees to the greater of $5 or 15% of the value of the cryptocurrency purchased.

This provision directly addresses concerns raised during Iowa’s investigation regarding the high fees charged by cryptocurrency kiosk operators. The original lawsuits alleged that Bitcoin Depot retained approximately 23% of transaction amounts, while CoinFlip collected approximately 21%, including fees incorporated into cryptocurrency exchange rates. These figures were allegations concerning the companies’ pricing practices at the time of the investigation and should not be presented as the operators’ current fees under the new law.

Additional consumer protection requirements now apply to cryptocurrency ATM transactions in Iowa. Operators must provide clear disclosures explaining transaction amounts, applicable fees, exchange rates, and refund policies. They must also display prominent warnings about common cryptocurrency scams and issue detailed transaction receipts. The law requires operators to use analytical tools capable of identifying suspicious transactions and patterns associated with potential fraud.

Cryptocurrency ATM businesses must maintain dedicated law enforcement contacts and provide live customer service during specified hours. These requirements are designed to improve communication when suspected fraud occurs and create opportunities to identify suspicious activity before consumers experience additional financial losses.

The legislation also establishes conditional refund protections for consumers who transfer funds through cryptocurrency ATMs as a result of fraudulent schemes. Refund eligibility depends on whether the individual qualifies as a new or existing customer, whether applicable reporting deadlines are met, and whether the transaction satisfies the law’s requirements. Iowa’s Attorney General explains that consumers generally must take specified steps within 90 days of a fraudulent transaction to pursue available refund protections. The law does not guarantee that every cryptocurrency transaction can be reversed or that all historical scam losses will be reimbursed. Instead, it creates defined legal obligations for covered operators and establishes procedures through which qualifying consumers may seek relief.

The lawsuits against Bitcoin Depot and CoinFlip remain important because they concern alleged conduct that occurred before Iowa’s new cryptocurrency ATM protections took effect. In a 2026 filing with the U.S. Securities and Exchange Commission, Bitcoin Depot disclosed that two of its subsidiaries had been served with Iowa’s civil complaint in March 2025. The company acknowledged that the lawsuit alleged violations of the Iowa Consumer Fraud Act involving cryptocurrency withdrawals associated with third-party scams.

The filing stated that Iowa sought injunctive relief and monetary penalties but had not obtained injunctive relief as of the reporting date. Bitcoin Depot disputed the allegations and maintained that it had defenses against the claims. This disclosure confirms that the litigation remained a material legal matter during 2026, although it does not establish a final judgment or settlement.

Separate legal proceedings in Iowa have also examined the rights of cryptocurrency scam victims and kiosk operators when law enforcement recovers money connected to fraudulent transactions. In May 2025, the Iowa Supreme Court issued decisions involving Bitcoin Depot and funds seized during investigations of cryptocurrency scams. Those proceedings concerned whether money deposited into cryptocurrency kiosks under fraudulent circumstances should be returned to the consumers or the kiosk operator.

The cases were separate from Attorney General Bird’s February 2025 consumer fraud lawsuits. Nevertheless, they illustrate the broader legal questions surrounding cryptocurrency transactions, consumer consent, third-party coercion, and the recovery of funds connected to financial scams.

The developments demonstrate that Iowa has moved beyond investigating individual cryptocurrency ATM transactions toward establishing statewide operating standards for the industry. For consumers, the new rules provide clearer information about transaction costs, additional fraud warnings, and defined opportunities to seek refunds when statutory requirements are satisfied. For cryptocurrency ATM operators, the legislation creates obligations involving transaction monitoring, customer service, disclosures, fee limitations, and cooperation with law enforcement.

As of October 2026, Iowa’s cryptocurrency ATM law is in effect, while the original lawsuits against Bitcoin Depot and CoinFlip must be evaluated according to their individual procedural records. The available official materials do not establish a final resolution of both lawsuits or confirm that all affected consumers have recovered their losses. The central development is Iowa’s transition from investigating alleged misconduct to enforcing specific statutory protections intended to reduce cryptocurrency ATM fraud and improve accountability throughout the industry.

For additional information, read the Iowa Attorney General’s official guidance explaining the state’s cryptocurrency ATM law, transaction limits, refund protections, and operator requirements.