Hawaii Crypto ATM Ban: What Accounting Firms and CFOs Must Assess Before October 1

Hawaii will become the fourth US state to impose a total prohibition on cryptocurrency ATMs and kiosks when House Bill 1642 takes effect on 1 October 2026. For accounting firms, auditors, and CFOs whose clients touch cash-to-crypto infrastructure anywhere in the US, this is a hard enforcement date that demands immediate attention across compliance, treasury, and digital asset accounting software workflows.

What the Law Actually Says

Governor Josh Green signed HB 1642 in July 2026, following its passage through Hawaii's legislature in May. The statutory language is unusually broad: it prohibits "the ownership, operation, or management of a digital financial asset transaction kiosk that accepts United States currency from a customer in exchange for a digital financial asset." There are no grandfather clauses or winding-down exemptions apparent in the text as reported. The prohibition covers the full operator chain, not just the entity whose name is on the machine.

The Legislative Rationale

The bill drew directly on FBI Internet Crime Complaint Center data. The FBI reported that Americans lost more than $11 billion to digital asset scams in 2025. Within Hawaii specifically, the bureau recorded 826 complaints from residents in 2025, with losses attributed to digital assets, including ATMs and kiosks, reaching approximately $80 million. Legislators treated those figures as sufficient justification for a complete ban rather than a regulatory guardrails approach.

Machines Still Operating Before the Deadline

As of mid-August 2026, data from CoinATMRadar indicated 57 crypto ATMs and kiosks operating across four of Hawaii's main islands. Each of those machines, and the businesses behind them, faces a firm cutoff date. Any unit still transacting after 30 September 2026 places its operator in direct violation of state law.

Where Hawaii Sits in the Broader US State Landscape

Hawaii is not acting in isolation. Three states have already moved to total bans, and a further cluster has enacted strict guardrails rather than outright prohibition.

States with Total Bans Already Enforcing

Minnesota was the first to enforce a complete prohibition. Tennessee followed, with its ban taking effect in July 2026. Indiana enforced its ban in August 2026. Hawaii joins this group from 1 October. Each state cited consumer protection and fraud prevention as the primary drivers, though the legislative mechanisms differ in their detail.

States with Pending or Partial Measures

Delaware and New Jersey have proposed total bans that had not been signed into law as of August 2026. South Dakota and Wyoming have taken a different path, passing legislation that places strict operational guardrails on crypto ATM activity rather than prohibiting it entirely. Transaction limits, enhanced KYC requirements, and mandatory consumer disclosures are common features of the guardrails model. Firms with multi-state ATM exposure need to map each jurisdiction separately: the regulatory treatment is not uniform, and the compliance posture for a guardrails state is materially different from that of a total-ban state.

AML and Licensing Implications for Accounting Firms and CFOs

The compliance implications run deeper than simply pulling machines off the floor. Crypto ATMs that accept fiat currency in exchange for digital assets are money services businesses under federal FinCEN rules, meaning they carry Bank Secrecy Act obligations including registration, AML programme maintenance, and suspicious activity reporting. A state-level prohibition does not extinguish those federal obligations for the period during which the machines were operating. Accounting firms advising ATM operators need to confirm that all historical BSA filings are complete and that any open SAR obligations are addressed before the client winds down operations.

Operator-Level Due Diligence

HB 1642's language covers ownership and management as well as direct operation. That matters for accounting firms conducting due diligence on clients who may have indirect exposure: a holding company that owns an entity which in turn manages a kiosk network in Hawaii is within scope. Firms should review corporate structures, intercompany agreements, and management services contracts for any Hawaii-touching ATM operations before 1 October.

Transaction Record Retention

Regardless of the ban, BSA record-keeping requirements mean that transaction data from Hawaii-based ATMs must be retained for the legally required period after the machines stop operating. That data needs to be captured, archived, and accessible in the firm's crypto bookkeeping software or equivalent system before hardware is decommissioned. Losing access to transaction records at the point of wind-down is a common compliance failure in ATM enforcement actions, and it has featured in regulatory actions in other jurisdictions. For context on how ATM-related reporting failures have played out in another market, the accounting implications of AUSTRAC's suspension of Cryptolink and the ATM reporting failures behind it are instructive.

Ongoing AML Risk in a Shifting Landscape

The FBI's framing of crypto ATMs as a primary vector for scam-related losses is relevant beyond Hawaii. As state-level bans reduce the number of operating machines, illicit actors may concentrate activity in remaining ATM-permissive states or shift to peer-to-peer channels. Accounting firms with clients in the digital asset sector should update their AML risk assessments to reflect this displacement dynamic. The broader pattern of crypto being routed through informal networks as formal channels close is one firms need to track actively: the analysis of North Korea's use of crime networks to launder crypto and what it means for AML frameworks illustrates how regulatory closures in one channel rarely eliminate the underlying risk.

Accounting and Reporting Considerations

For firms using digital asset accounting software to manage client portfolios that include ATM operator revenues, the October deadline triggers several specific tasks.

Revenue and Asset Derecognition

ATM operators in Hawaii will need to derecognise the machines as revenue-generating assets. Under both US GAAP and IFRS, the accounting treatment depends on whether the machines are owned outright or subject to leasing arrangements. Owned machines that cannot be redeployed outside Hawaii may need to be assessed for impairment. Leased machines may trigger lease termination accounting, including any make-whole or early termination payments. These entries need to flow correctly through the client's financial statements before year-end.

Tax Implications of Wind-Down

The disposal or decommissioning of ATM hardware will carry tax consequences. Accelerated depreciation recapture, capital gains or losses on asset disposals, and the tax treatment of any termination payments received or made are all areas that need to be modelled before 30 September. Hawaii's state tax authority will also need to be considered alongside federal obligations. If machines are sold to operators in other states rather than scrapped, the gain or loss calculation and any sales tax implications of the transfer require careful review.

Digital Asset Holdings at Wind-Down

ATM operators typically hold a float of digital assets to fulfil customer buy orders. At the point of wind-down, those holdings need to be valued, and any disposal will be a taxable event for federal purposes. The cost basis methodology used by the operator, whether FIFO, HIFO, or specific identification, will affect the tax outcome materially. Firms should confirm which method the client has been using consistently and ensure it is applied correctly to the wind-down disposals. This is exactly the kind of scenario where robust crypto accounting software matters: manual reconciliation of a multi-machine float across multiple islands under time pressure creates significant error risk.

Practical Steps Before 1 October 2026

The timeline is short. Accounting firms with Hawaii-exposed clients in the ATM or kiosk sector should move through the following tasks without delay.

Immediate Actions

First, identify every entity in the client group that falls within HB 1642's definition, covering ownership, operation, and management. Second, confirm that all FinCEN MSB registrations for Hawaii operations are current and that the deregistration process is understood. Third, archive all transaction data from Hawaii ATMs to a compliant, accessible format before machines are taken offline. Fourth, assess the hardware assets for impairment or disposal accounting and model the tax consequences of each disposal route. Fifth, update AML risk assessments to reflect the changed operating environment and any residual obligations that survive the wind-down.

For firms with clients in states currently proposing bans, Delaware and New Jersey in particular, this is also a useful rehearsal. The legislative trajectory in those states suggests similar deadlines may follow, and a documented wind-down framework built for Hawaii will reduce the cost of responding to the next prohibition.

For a broader view of how crypto compliance obligations are evolving across the US regulatory environment, the crypto compliance and reporting resource centre tracks the key developments accounting firms need to monitor.

Frequently Asked Questions

Does HB 1642 apply to operators based outside Hawaii whose machines are physically located in the state?

The statutory language prohibits the ownership, operation, or management of a kiosk that accepts US currency in exchange for a digital financial asset. Physical location of the machine in Hawaii is the operative factor, not the operator's state of incorporation or principal place of business. Out-of-state operators with Hawaii-located machines are within scope.

Does a state-level ban relieve an operator of federal FinCEN obligations?

No. Federal Bank Secrecy Act obligations, including AML programme maintenance, SAR filing, and record-keeping, attach to the business's status as a money services business under federal law. A state prohibition on operating the machines does not retroactively extinguish obligations that arose while the machines were running, nor does it eliminate record-keeping duties that extend beyond the operational period.

How should operators account for ATM hardware that cannot be redeployed?

Under US GAAP (ASC 360) and IFRS (IAS 36), assets that are no longer in use or held for sale must be assessed for impairment. If the carrying value exceeds the recoverable amount, an impairment charge is required. If the machines are classified as held for sale, they are measured at the lower of carrying amount and fair value less costs to sell. The classification decision affects which standard applies and the timing of recognition.

What happens to the digital asset float held by an ATM operator at wind-down?

The float is a digital asset holding on the operator's balance sheet. Any disposal, whether by sale to a third party, transfer to another entity in the group, or conversion to fiat, is a taxable disposal event for federal income tax purposes. The gain or loss is calculated by reference to the asset's cost basis and the proceeds received. The operator's chosen cost basis method must be applied consistently to those disposals.

Are there states where crypto ATM operators can continue unrestricted?

As of August 2026, the majority of US states have neither a total ban nor strict guardrails legislation in force. However, the legislative direction is clearly toward tighter regulation at the state level. South Dakota and Wyoming have enacted guardrails rather than bans. Delaware and New Jersey are considering total bans. Federal-level AML obligations under FinCEN apply nationwide regardless of state law. Operators expanding into permissive states should not assume that the current regulatory environment in those states will remain static.

Source: Cointelegraph