California crypto-kiosk enforcement wave culminates in Hermes Bitcoin shutdown

What changed

A sequence of DFPI orders applied California’s Digital Financial Assets Law and consumer-protection law to crypto-kiosk operators for excessive charges, transactions above the $1,000 daily limit, deficient receipts and disclosures, insufficient identifying information, and related safeguards. The later Hermes Bitcoin settlement required the operator to cease California activity and surrender its kiosk registration, while other orders imposed penalties and restitution.

Who it affects

• Digital financial asset transaction kiosk operators in California
• Crypto businesses and vendors supporting kiosk compliance
• Consumers using cash-to-crypto kiosks
• Advisers discussing kiosk access or fraud risks with clients

What is still open

• Whether DFPI will bring additional DFAL kiosk cases or extend the theories to other digital-financial-asset business models
• How licensing implementation and federal AML expectations will interact with California kiosk requirements

What it means for an advisor

• Treat kiosk transaction limits, total charges, receipts, identity controls, scam warnings, refunds and licensure as active enforcement priorities; advisers should flag irreversible-payment and scam risks when clients propose using crypto kiosks.