A late change to a Kentucky crypto kiosk bill has led some members of the crypto community to express concern that it may erode self-custody.
Originally aimed at kiosk licensing and operator supervision, the 77-page Kentucky House Bill HB380 now includes a provision for hardware wallets, a mandate crypto experts claim does not account for the basic technical realities of private keys.
Under the new Section 33 floor amendment, manufacturers of hardware wallets would have to include a reset function for all security credentials, allowing consumers to recover their accounts if they lose their seed phrase or private key.
Nonetheless, the bulk of the bill sets out the framework for the crypto kiosk market, covering operator accountability, licensing requirements, and transaction transparency.
According to the Bitcoin Policy Institute, the added clause will “effectively outlaw self-custody in Kentucky.” It explained that hardware wallets are engineered for total privacy; hence, requiring a “reset” function exposes a security flaw that undermines the entire point of self-custody.
It remarked, “Requiring a backdoor for seed phrase recovery breaks Bitcoin’s fundamental security guarantees and pushes users toward centralized custodians that are vulnerable to hacks and failures.” Thus, it encouraged the Senate to drop this provision entirely before the bill is put to a vote.
Moreover, the agency’s managing director, Conner Brown, had commented, warning X users, “Kentucky is suddenly about to ban self-custody.”
Weighing in on the debate, BitAML Founder Joe Ciccolo also noted: “Policymakers often struggle with the concept of self-custody.”
He clarified that, unlike legacy systems, there is no central authority to manage resets, adding that the alteration appears to be a technical oversight rather than a calculated move to control the technology. Much like the BPI, he warned that this mandate would force a total redesign that compromises self-custody—or worse yet, drive providers out of the state.
“The very consumers the bill aims to protect would lose access to one of the safest ways to store digital assets,” he contended.
However, he advised the crypto community and authorities to explore social recovery mechanisms and multi-signature security systems to increase safety without fracturing decentralization. He also claimed that crypto experts need to engage policy leaders, as the autonomy and security of everyday crypto users must be safeguarded, particularly when a proposal is based on a lack of technical understanding.
State lawmakers across the nation are increasingly focusing on crypto kiosks—and HB 380 is part of Kentucky’s strategy to limit fraud associated with physical machines.
In Minnesota, however, lawmakers are leaning towards a total ban on crypto ATMs. The state’s elderly residents had lost a large share of their money to kiosk scams. The police had warned that seniors were spending their savings on people posing as tech support or government workers.
In response, Rep. Erin Koegel introduced legislation to ban digital currency machines altogether.
Before this, the state had tried to control the crypto ATM business in other ways. In 2024, it introduced a licensing framework for providers, including a $2,000 daily cap on new transactions and certain consumer refund rights.
Meanwhile, Connecticut also suspended Bitcoin Depot’s money-transmission permit for its failure to meet kiosk-fee, disclosure, and fraud-refund requirements.
Reports showed that the company was overcharging customers beyond the law’s 15% limit and failing to make full payments or meet compliance guidelines. But the company said that after suspending the network, it would ask customers for IDs before each transaction to enhance its organization’s compliance.
Overall, according to FBI data, nationwide losses from crypto ATM scams surged to $333 million in 2025.
If you're reading this, you’re already ahead. Stay there with our newsletter.