Payment fraud and scams laws by state
76 bills on payment fraud and scams in 32 jurisdictions, 29 of them enacted in 2025 and 2026. The laws come first, with what each requires, then the bills that moved most recently.
- 29 laws enacted in 2025 and 2026, in 21 states. Most: Nebraska (4), Arizona (2), Iowa (2).
- 76 bills in 32 jurisdictions, 8 of them in Congress. Latest action 6 October 2026.
Updated 2 November 2026LawsRecent billsBy state
Enacted in 2025 and 2026
29 laws, by state. Laws enacted before 2025 are not listed.
Alabama
Enacted
HB 303: Cryptocurrency; measures to prevent fraud by cryptocurrency kiosk operators imposed, penalties established, Alabama Securities Commission authorized to enforce
Arizona
Enacted
SB 1351: gift cards; theft; forgery
A person must not acquire possession of a gift card or gift card information without consent of the holder, issuer, or seller, or by exploiting them, or obtain value using such information. A person must not falsely make, complete, alter, possess, or present a forged instrument, including a gift card.
Enacted
HB 2387: cryptocurrency kiosk; license; fraud prevention
Cryptocurrency kiosk operators must disclose all relevant terms and conditions in the customer's chosen language and obtain acknowledgment. Operators must provide two separate fraud warnings before each transaction and a detailed receipt after. Operators must use blockchain analytics software to prevent fraud, maintain written anti-fraud policies, comply with federal KYC and AML laws, limit new customers to $2,000 daily and existing customers to $10,500 daily, provide 24/7 customer service, and issue full refunds for fraudulently induced transactions if the customer meets specified conditions within thirty days.
Arkansas
Enacted
SB 302: To create the criminal offense of gift card fraud; and to declare an emergency.
The act creates a criminal offense of gift card fraud. A person is prohibited from obtaining gift card or gift card redemption information, or obtaining information from a card holder or card issuer, with the purpose of depriving the owner of property.
California
Enacted
SB 1208: Money laundering: digital assets.
Law enforcement officers or prosecuting agencies may obtain search warrants to seize digital financial assets upon probable cause that they contain proceeds of crime, are traceable to crime, or facilitate crime. Prosecuting agencies must initiate forfeiture proceedings within 180 days of seizure and distribute seized assets to crime victims on a pro rata basis up to their actual losses.
Takes effect 1 January 2027
Delaware
Enacted
HB 465: An act to amend title 11 of the delaware code relating to virtual currency.
Adds virtual currency to Delaware's criminal code definitions of property, funds, pecuniary value, and items subject to search and seizure, enabling prosecution of virtual currency theft and money laundering while allowing courts to order disposition of seized virtual currency.
Florida
Enacted
SB 1198: Fraudulent Use of Gift Cards
A person is prohibited from acquiring or retaining possession of a gift card or gift card redemption information without consent of the cardholder, card issuer, or gift card seller; altering or tampering with a gift card or its packaging; devising a scheme to obtain a gift card or redemption information by false pretenses; or using a gift card or redemption information obtained in violation of these prohibitions to obtain money, goods, services, or anything of value, all with intent to defraud.
Took effect 1 October 2025
Georgia
Enacted
HB 447: Crimes and offenses; crimes of gift card theft, gift card forgery, and gift card fraud; provide
Any person is prohibited from acquiring or retaining possession of a gift card or gift card redemption information without consent with intent to defraud (gift card theft), altering or tampering with a gift card or its packaging with intent to defraud (gift card forgery), devising a scheme to obtain a gift card through false pretenses with intent to defraud (gift card fraud), or using such obtained gift cards with intent to defraud.
Iowa
Enacted
SF 449: A bill for an act relating to digital financial asset transaction kiosks and including penalties, and effective date and applicability provisions.
Enacted
SF 266: A bill for an act relating to theft, forgery, and fraud involving a gift card, and providing penalties. Effective date: 07/01/2025.
Kansas
Enacted
HB 2591: Authorizing financial institutions to report suspected financial exploitation of an adult account holder to a designated agency, notify any adult designated as a trusted contact by such account holder of suspected financial exploitation and place a temporary hold on certain transactions or disbursements. Enacting the virtual currency kiosk consumer protection act, providing definitions, and establishing requirements for virtual currency kiosk operators. Prohibiting the office of the state bank commissioner or any other state agency from becoming a receiver for a technology-enabled fiduciary financial institution that becomes insolvent or declares bankruptcy. Providing that earned wage access service registrants are subject to the Kansas financial institutions information security act, and eliminating certain stipulations relating to the payment of negotiable instruments on Saturday afternoons or holidays.
Financial institutions may report suspected financial exploitation of adult account holders to designated agencies and notify trusted contacts. Financial institutions may place temporary holds on transactions for up to 10 business days if they reasonably believe the transaction furthers financial exploitation, extendable to 30 business days if requested by investigating agencies.
Kentucky
Enacted
SB 130: AN ACT relating to gift cards.
A person must not tamper with a gift card or its packaging, or possess or use a gift card known to be tampered with, with intent to defraud. A person must not take a gift card without consent of the cardholder, issuer, or merchant, or receive such a card knowing it was taken. A person must not obtain a gift card or gift card redemption information by false or fraudulent pretenses.
Louisiana
Enacted
SB 38: CRIME/PUNISHMENT: Creates the crime of theft of gift cards or gift card redemption information. (8/1/25) (EN SEE FISC NOTE GF EX)
No person shall misappropriate or take a gift card or gift card redemption information without consent of the cardholder, card issuer, or card seller. No person shall alter, tamper with, or duplicate a gift card, gift card redemption information, or gift card packaging with intent to defraud. No person shall devise or participate in a scheme to obtain a gift card or gift card redemption information by false or fraudulent pretenses.
Maryland
Enacted
HB 752: Criminal Law - Theft and Fraud Crimes - Valuation and Forgery of Gift Cards
A person may not, with the intent to defraud another, alter or tamper with a gift card or its packaging. For theft crimes, the value of a gift card is determined as the greatest of: the highest value listed on the gift card or its packaging, or $100 if no value is listed, or the value the defendant represented, or the actual loss incurred.
Took effect 1 October 2026
Enacted
SB 437: Criminal Law – Theft and Fraud Crimes – Valuation and Forgery of Gift Cards
A person may not, with the intent to defraud another, alter or tamper with a gift card or its packaging. For valuation purposes in theft crimes, the value of a gift card is the greatest of: the highest value listed on the gift card or its packaging, $100 if no value is listed, the value the defendant represented, or the actual loss incurred.
Took effect 1 October 2026
Michigan
Enacted
HB 4599: Crimes: organized; certain definitions related to gift card fraud; provide for. Amends 2012 PA 455 (MCL 752.1081 - 752.1087) by adding sec. 3a. TIE BAR WITH: HB 4598'25
Adds definitions to Michigan's organized retail crime law: gift card (physical or digital, activated or inactivated), gift card redemption information (unique access data), issuer (person issuing gift cards), and seller (merchant selling gift cards).
Nebraska
Enacted
LB 838: Change provisions relating to the financial exploitation of vulnerable or senior adults, rules and codes of procedure, decedents' estates, inheritance taxes, deceptive trade practices, the Age-Appropriate Online Design Code Act, the Equipment Business Regulation Act, the Nebraska Money Transmitters Act, and the Nebraska Uniform Trust Code and provide for rounding of certain cash transaction amounts
A social media platform that accepts payment for advertising must establish identity verification for advertisers, fraud detection systems, unlawful impersonation detection, measures to prevent repeated offenses, a user reporting tool, and a law enforcement reporting process. After a fraudulent advertisement is reported, the platform must investigate within five business days and remove it within five business days of determination.
Enacted
LB 717: Adopt changes to federal law regarding banking and finance, change provisions relating to control of certain banks and trust companies, digital asset depository institutions, interest rates on certain loans, installment loans, mortgage loan originators, mortgage bankers, and the Nebraska Money Transmitters Act, and change references to the Nebraska Money Transmitters Act in the Controllable Electronic Record Fraud Prevention Act
Amends the Nebraska Money Transmitters Act to add payroll processing services as an exemption for persons employing fewer than twenty full-time employees or serving fewer than fifty Nebraska employees, subject to criminal history and licensing restrictions.
Enacted
LB 559: Provide for offenses relating to skimmer devices and criminal enterprises involving financial offenses
Persons must not install skimmer devices on automated banking devices or point-of-sale terminals without authorization with intent to defraud. Persons must not use skimmer devices on such devices with intent to defraud. Persons engaged in continuing criminal enterprises involving financial transaction offenses must not commit such offenses in concert with two or more others while in a leadership position and obtaining substantial income.
Enacted
LB 609: Adopt the Controllable Electronic Record Fraud Prevention Act, require notice of potential fraud for purchasers of gift certificates and gift cards, and change provisions relating to search warrants
Controllable electronic record kiosk operators must obtain a money transmitter license, report kiosks as authorized delegates, use blockchain analytics software to prevent fraud, employ a full-time compliance officer, maintain antifraud policies, disclose transaction terms and fraud warnings to customers, provide receipts, limit daily transactions to $2,000 for new customers and $10,500 for existing customers, cap fees at 18%, and offer live customer service Monday-Friday 7am-9pm. Sellers of gift certificates and gift cards must provide fraud notices at point of sale.
New Hampshire
Enacted
HB 1175: relative to the offense of use of scanning device or reencoder to defraud.
A person is prohibited from knowingly using a scanning device to access, read, obtain, memorize, or store information encoded on the magnetic strip or integrated circuit chip of a payment card without permission of the authorized user and with intent to defraud. A person is also prohibited from knowingly using a reencoder to place such information onto a different card without permission and with intent to defraud.
Takes effect 1 January 2027
Enacted
SB 258: establishing crimes related to the fraudulent use of gift cards.
New Jersey
Enacted
S 3587: Upgrades, and in some circumstances provides for extended terms of imprisonment for, certain retail theft crimes, addresses gift card fraud, and authorizes new Attorney General initiatives to address organized retail theft.*
Retail mercantile establishments must train employees on identifying and responding to gift card fraud and display notices about gift card scams. Third-party gift card resellers must record and maintain transaction information for three years. Retail establishments must use secured packaging for open- and closed-loop gift cards.
Oklahoma
Enacted
SB 1980: Crimes and punishments; creating certain offenses related to gift cards and gift certificates. Effective date.
Any person is prohibited from knowingly and willfully acquiring or retaining possession of a gift card, gift certificate, or redemption information without consent of the cardholder or issuer. Any person is prohibited from knowingly and willfully altering or tampering with a gift card, gift certificate, or their packaging. Any person is prohibited from knowingly and willfully devising a scheme to obtain redemption information by false or fraudulent pretenses.
Took effect 1 November 2026
South Dakota
Enacted
SB 98: prevent virtual currency kiosk fraud.
Licensees operating virtual currency kiosks must be licensed under chapter 51A-17, establish daily transaction limits of one thousand dollars and thirty-day limits of ten thousand dollars, provide full refunds to fraud victims within seventy-two hours, charge no more than twenty-five percent per transaction, verify user identity before accepting payment, and employ fraud-detection software.
Took effect 1 July 2026
Texas
Enacted
SB 2371: Relating to skimmers on electronic terminals; authorizing a civil penalty; creating criminal offenses.
Service technicians and service companies must notify the center and merchant upon discovering a skimmer. Merchants must disable affected electronic terminals, notify law enforcement and the center, and protect terminals from tampering. Merchants must cooperate with center or law enforcement investigations and allow inspection and alteration of terminals.
Enacted
SB 1809: Relating to the creation of the offense of fraudulent use, possession, or tampering with a gift card, gift card packaging, or gift card data or redemption information.
A person commits an offense if they acquire or retain possession of a gift card, digital imprint, or gift card redemption information without consent of the cardholder, card issuer, or gift card seller with intent to harm or defraud another; alter or tamper with a gift card or packaging; use counterfeit gift cards or improperly obtained redemption information; or transport unactivated gift cards into retail locations and place them on display to entice purchase.
Took effect 1 September 2025
Virginia
Enacted
HB 190: Electronic fund transfers; Office of AG shall convene work group to review fraudulent activity, etc.
A financial institution that receives knowledge of fraudulent transactions or occurrences on an account shall take reasonable measures to prevent the continuation of such fraudulent transactions or occurrences, including by providing consumer education materials to the account holder, temporarily suspending all activities on the account, prohibiting further fraudulent transactions or occurrences, and reversing fraudulent transactions or occurrences on the account.
West Virginia
Enacted
HB 4990: Relating to crimes using gift cards
Any person is prohibited from acquiring or retaining possession of a gift card or gift card redemption information without consent of the cardholder, card issuer, or gift card seller with intent to defraud. Any person is prohibited from altering or tampering with a gift card or its packaging with intent to defraud. Any person is prohibited from devising a scheme to obtain a gift card or gift card redemption information through false or fraudulent pretenses with intent to defraud.
Bills that moved most recently
The 25 open payment fraud and scams bills with the latest action. The Payments and Fintech Tracker follows all 76.
Congress H.R. 9331: STOP Payments Fraud Act of 2026
What it would do: Amends the Expedited Funds Availability Act to allow depository institutions to delay funds availability for checks when they have reasonable suspicion of fraud, for wire transfers suspected of fraud, and for accounts with greater fraud risk circumstances, up to 60 days per occurrence.
Passed committee
Virginia HB 689: Gift certificates; amends definition, international transactions, fraud reports.
What it would do: Amends gift certificate definitions and requires merchants to implement a 24-hour hold on gift certificate activation for international transactions. Requires local law enforcement to report gift certificate fraud to the FBI's Internet Crime Complaint Center.
In committee
Congress H.R. 9668: STOP Senior Fraud Act
What it would do: Authorizes financial institutions to delay or refuse transactions for up to 55 days (extendable to 85 days) if they reasonably believe financial exploitation of older adults, vulnerable persons, or fraud victims is occurring, and requires notification to authorities and account parties within two business days.
In committee
Congress H.R. 9268: Stop Crypto ATM Scams Act
What it would do: Requires digital asset kiosk operators to register locations with Treasury, submit updates every 90 days, and comply with anti-money laundering programs, transaction limits of $2,000 daily for new customers and $10,000 total, customer disclosures, fraud warnings, and refunds for fraudulently induced transactions.
In committee
New York S 704: Enacts the New York gift certificate scam prevention act
What it would do: Requires merchants selling gift certificates in-person to conceal visible card numbers or use anti-tampering technology, mandates employee training on gift certificate scams, and requires third-party resellers of open loop gift certificates to record and maintain transaction details for three years.
Passed chamber
New Jersey S 4108: Requires SNAP retailers to take measures to help prevent card skimming.
What it would do: Beginning January 31, 2027, authorized New Jersey SNAP retailers accepting electronic benefits transfer cards must equip each point of sale terminal with features or technology to prevent card skimming. The Department of Human Services may inspect for compliance and assess penalties up to $1,000 for first violations, $3,000 for second, and $5,000 for subsequent violations, or exclude retailers after four violations.
In committee
Congress H.R. 5877: Combatting Money Laundering in Cyber Crime Act of 2025
What it would do: Expands Secret Service authority to investigate crimes involving digital asset transactions, money laundering, and structured transactions. Extends FinCEN record retention from 5 to 10 years and increases international financial institution reporting requirements from 6 to 10 years.
Passed committee
Massachusetts S 3048: An Act to stop cryptocurrency ATM misuse ("SCAM" Act)
What it would do: Prohibits virtual currency kiosk operators from operating cryptocurrency ATMs in Massachusetts and makes violations subject to Chapter 93A consumer protection laws, allowing courts to order forfeiture of collected charges, kiosks, and investigation costs.
Passed committee
Missouri HB 1990: Establishes the offense of gift card fraud
What it would do: Establishes the offense of gift card fraud, making it illegal to knowingly alter gift cards, devise schemes to obtain gift card redemption information through deceit, or use fraudulently obtained gift cards. Penalties range from class A misdemeanor to class C felony based on value.
Passed committee
Massachusetts H 1611: An Act relative to gift card fraud
What it would do: Adds definitions and criminal penalties for gift card fraud, including larceny for acquiring gift card redemption information without consent, forgery for altering gift cards, and larceny for fraudulently using stolen gift cards, with felony charges if value exceeds $1,200 in six months.
In committee
Congress S. 4078: Stop Somali CASH Fraud Act
What it would do: Amends section 5316 of title 31 to require reports filed at least 72 hours before monetary instruments or currency leave the United States if transported by aliens who are nationals of certain designated countries, state sponsors of terrorism, or high-risk countries identified by the State Department, and requires detailed information about the transporter, beneficiary, and funding source.
In committee
Hawaii SB 2797: Relating to consumer protection.
What it would do: Establishes gift card fraud prevention requirements for merchants and third-party resellers, including secure packaging, employee training, and transaction record-keeping; extends minimum redemption period for paper gift certificates from two to four years; creates criminal penalties for fraudulent gift card use.
Passed chamber
New Jersey A 4102: Requires SNAP retailers to take measures to help prevent card skimming.
In committee
Iowa SSB 3086: A bill for an act relating to consumer fraud and unlawful practices, including digital financial asset transaction kiosks, and providing civil penalties.
What it would do: Reclassifies violations of digital financial asset transaction kiosk regulations as unlawful consumer fraud practices, allowing civil penalties up to $100,000 for injunction violations and removing the limitation that repeated conduct affecting multiple persons counts as a single violation.
Passed committee
Massachusetts H 1247: An Act relative to preventing fraud and establishing regulations on certain virtual currencies
What it would do: Establishes regulations for virtual currency kiosks in Massachusetts, requiring operators to be licensed money transmitters, use blockchain analytics software, maintain anti-fraud policies, employ compliance officers, provide customer disclosures and receipts, limit daily transactions to $1,000, cap fees at $5 or 3%, and offer refunds to defrauded new customers within 90 days.
Passed committee
Congress S. 3801: Combating Money Laundering, Terrorist Financing, and Counterfeiting Act of 2026
In committee
New York S 2040: Requires transmitters of money to provide a certain warning to consumers
What it would do: Requires money transmitters to provide consumers with a clear, prominent warning before completing wire or electronic fund transfers, including information about fraud risks and how to stop transfers, with civil penalties of up to $250 for first violations and $500 for subsequent violations.
Passed chamber
Hawaii SB 3185: Relating to consumer protection.
What it would do: Creates the Digital Asset Kiosk Consumer Access and Protection Act requiring operators to hold money transmitter or virtual currency licenses beginning 2026, submit annual reports, display consumer disclosures and fraud warnings, implement transaction limits of $3,000 per day for new consumers, provide receipts, maintain records, and cooperate with law enforcement.
In committee
Maryland HB 152: Consumer Protection - Electronic Funds Transfers - Regulations (Elder Fraud Prevention Act of 2026)
What it would do: Requires financial institutions operating in Maryland to subject consumer wire transfers made ancillary to bank-to-bank transfers via wire service to the federal Electronic Funds Transfer Act of 1978. The act becomes effective October 1, 2026.
In committee
West Virginia SB 339: Commissioner of Financial Institutions rule relating to Fintech Regulatory Sandbox Program
What it would do: Authorizes the Commissioner of Financial Institutions to promulgate a legislative rule relating to the Fintech Regulatory Sandbox Program, as filed in the State Register on February 3, 2025.
In committee
West Virginia HB 4240: Relating to authorizing the Commissioner of Financial Institutions to promulgate a legislative rule relating to the Fintech Regulatory Sandbox Program.
What it would do: Authorizes the legislative rule filed February 3, 2025, by the Commissioner of Financial Institutions relating to the Fintech Regulatory Sandbox Program (106 CSR 21) under authority of §31A-8G-3.
In committee
New Jersey ACR 60: Urges United States President, Congress, and USDA to take steps to protect SNAP beneficiaries from fraud.
In committee
New York S 6299: Limits the liability of a debit cardholder for unauthorized use of a debit card
In committee
Indiana SB 190: Crimes concerning gift cards.
What it would do: Establishes the offenses of gift card theft, a Class A misdemeanor (Level 6 felony if prior conviction), and gift card fraud, a Level 6 felony (Level 5 felony if prior conviction). Defines gift card, counterfeit gift card, and gift card redemption information.
In committee
New Jersey A 4636: Requires that notice concerning gift card fraud be posted by retail mercantile establishments that sell gift cards to consumers.
What it would do: Requires retail mercantile establishments that display gift cards for sale to post a conspicuous notice at or near the gift card display location cautioning consumers about gift card fraud and instructing them on steps to take if fraud is suspected. Violators are subject to a $1,000 civil penalty.
Passed chamber
Payment fraud and scams laws, state by state
- Congress8 bills
- New Jersey7 bills, 1 enacted
- Texas6 bills, 2 enacted
- Maryland5 bills, 2 enacted
- Iowa4 bills, 2 enacted
- Nebraska4 bills, 4 enacted
- New York4 bills
- Florida3 bills, 1 enacted
- Massachusetts3 bills
- Virginia3 bills, 1 enacted
- West Virginia3 bills, 1 enacted
- Arizona2 bills, 2 enacted
- Hawaii2 bills
- Illinois2 bills
- New Hampshire2 bills, 2 enacted
- Oklahoma2 bills, 1 enacted
- Alabama1 bill, 1 enacted
- Arkansas1 bill, 1 enacted
- California1 bill, 1 enacted
- Connecticut1 bill
- Delaware1 bill, 1 enacted
- Georgia1 bill, 1 enacted
- Idaho1 bill
- Indiana1 bill
- Kansas1 bill, 1 enacted
- Kentucky1 bill, 1 enacted
- Louisiana1 bill, 1 enacted
- Michigan1 bill, 1 enacted
- Missouri1 bill
- Pennsylvania1 bill
- Puerto Rico1 bill
- South Dakota1 bill, 1 enacted
Questions
Which states have payment fraud and scams laws?
States that enacted payment fraud and scams laws in 2025 and 2026: Nebraska (4), Arizona (2), Iowa (2), Maryland (2), New Hampshire (2), Texas (2), Alabama (1), Arkansas (1), California (1), Delaware (1), Florida (1), Georgia (1), Kansas (1), Kentucky (1), Louisiana (1), Michigan (1), New Jersey (1), Oklahoma (1), South Dakota (1), Virginia (1) and West Virginia (1). Laws enacted before 2025 are not listed here.
Which states have the most payment fraud and scams bills?
Congress (8), New Jersey (7), Texas (6), Maryland (5) and Iowa (4). In all, 76 bills in 32 jurisdictions, the latest action on 6 October 2026.
What do payment fraud and scams bills cover?
Payment fraud and scams: liability for unauthorized and induced transfers, scam reimbursement, gift card fraud and tampering, kiosk scams, financial exploitation holds, and fintech regulatory sandboxes. Each enacted law above has a line on what it requires.
Is this legal advice?
No. Which bills count as payment fraud and scams bills, and the line on what each law requires or each bill would do, are drafted by software and not reviewed by an attorney. Every bill links to the legislature’s own record: read the text before relying on it. The list covers bills from the 2025 and 2026 sessions.
Follow payment fraud and scams bills in every state
The Payments and Fintech Tracker sends the bills that moved and a monthly report you can forward to a client.