California Regulators Order CoinFlip to Refund $1.8M to Fraud Victims

The California Department of Financial Protection and Innovation (DFPI) has issued a formal order against CoinFlip, a prominent cryptocurrency ATM operator, requiring the firm to compensate victims of fraudulent schemes. The regulatory action follows an investigation which determined that the company’s compliance failures allowed scammers to exploit its network. Under the terms of the settlement, CoinFlip must return over $1.8 million to affected users and pay an additional penalty exceeding $15,000 for the collection of illegal excess fees.

Failures in KYC and Anti-Money Laundering Protocols

The DFPI investigation revealed that since 2021, CoinFlip failed to maintain adequate Know Your Customer (KYC) and anti-money laundering (AML) standards. These systemic gaps allowed malicious actors to utilize the company's network of approximately 500 kiosks—typically located in accessible venues such as supermarkets and gas stations—to process illicit transactions. Regulators noted that elderly individuals were frequently targeted by these scams, which often involved social engineering tactics to persuade victims to deposit cash into Bitcoin ATMs.

The regulatory body identified several specific violations of California financial codes:

• Lack of effective identification procedures for high-risk users.
• Failure to detect and report suspicious transaction patterns.
• Processing transactions that exceeded the $1,000 daily limit established by local regulations.
• Charging customers fees that surpassed legal thresholds.

Consumer Protection and Regulatory Oversight

Beyond the failure to block fraudulent activity, CoinFlip was cited for failing to provide necessary financial disclosures to its clientele. By neglecting to inform users of the risks and costs associated with digital asset transactions, the operator allegedly breached the trust of the investing public. The DFPI’s action reflects a broader trend among state regulators to tighten oversight on the physical infrastructure of the crypto economy, specifically Bitcoin and Ethereum ATMs, which often serve as entry points for retail investors.

This action demonstrates our commitment to protecting California consumers, particularly those most vulnerable to fraud, and ensuring that financial service providers comply with the law.

This enforcement action highlights the increasing scrutiny on virtual currency kiosks as law enforcement agencies seek to curb the rise of "pig butchering" and other financial scams. The DFPI has signaled that it will continue to monitor operators to ensure they implement robust screening tools and transparent fee structures. For the cryptocurrency industry, this serves as a reminder that compliance with state-level financial regulations is mandatory for maintaining a license to operate within the California market.