From the journal

California DFPI Orders Hermes Bitcoin to Shut Down 42 Kiosks for DFAL Violations, May 2026

California's Department of Financial Protection and Innovation ordered Anh Management, LLC, operating as Hermes Bitcoin, to cease all digital financial asset kiosk operations in California by May 20, 2026. The settlement agreement resolves DFPI findings that Hermes Bitcoin violated the Digital Financial Assets Law across its 42 Southern California kiosk locations.

3 min read

The California Department of Financial Protection and Innovation (DFPI) announced a settlement agreement with Anh Management, LLC, operating as Hermes Bitcoin, on approximately May 20, 2026. Under the agreement, Hermes Bitcoin must permanently cease all digital financial asset kiosk business activity in California. The settlement resolves DFPI findings of multiple violations of the California Digital Financial Assets Law (DFAL).

California's Digital Financial Assets Law (DFAL), Cal. Fin. Code sections 3200 et seq., governs digital financial asset businesses including kiosk operators. The DFPI investigation found that Hermes Bitcoin violated DFAL from January 1, 2024 onward through the following conduct: accepting more than the $1,000 per-day cash transaction limit per customer; charging fees above DFAL-prescribed limits; failing to provide required pre-transaction disclosures to consumers; issuing receipts without required information; and operating a deficient Bank Secrecy Act and anti-money laundering compliance program.

Crypto kiosk operators in California must hold DFAL registration and comply with per-transaction fee limits, daily cash caps, pre-transaction disclosure requirements, and BSA/AML program obligations. Hermes Bitcoin operated 42 kiosks in Southern California. This action continues a DFPI enforcement series against kiosk operators: DFPI previously fined Coinme, Inc. $300,000 with $51,700 in consumer restitution, and fined LSGT Services, LLC (Coinhub) $675,000 with $105,000 in restitution.

DFPI's pattern of enforcement against kiosk operators since 2024 signals sustained supervisory attention to this sector under DFAL. Other California kiosk operators should review fee-charging practices, transaction-limit controls, receipt and disclosure procedures, and BSA/AML programs for DFAL compliance. Pending questions include how DFAL interacts with federal cryptocurrency ATM rules under FinCEN's regulations and proposed federal digital asset legislation.

Licentium advises crypto asset businesses on regulatory compliance including licensing, AML program design, and enforcement response across US jurisdictions. Please contact us to discuss your regulatory exposure. Work we undertake includes DFAL registration support, crypto kiosk regulatory analysis, BSA/AML policy review, enforcement defense, and multi-state digital asset licensing strategy.

Source: California Department of Financial Protection and Innovation, Press Release: DFPI Shuts Down Crypto Kiosk Operator for Cheating Consumers and Violating State Laws, approximately 20 May 2026, https://dfpi.ca.gov/press_release/dfpi-shuts-down-crypto-kiosk-operator-for-cheating-consumers-and-violating-state-laws/

The information provided is not legal, tax, investment, or accounting advice and should not be used as such. It is for discussion purposes only. Seek guidance from your own legal counsel and advisors on any matters. The views presented are those of the author and not any other individual or organization. Some parts of the text may be automatically generated. The author of this material makes no guarantees or warranties about the accuracy or completeness of the information.

Crypto Regulatory

More from the journal

See all

Colorado Enacts SB 26-189 Replacing Prior AI Consumer Rules with Automated Decision-Making Technology Obligations, 2026

Colorado SB 26-189, the Automated Decision-Making Technology Act, repeals and replaces the consumer AI protections in SB 24-205, establishing new obligations for developers and deployers of covered automated decision-making technology in consequential decisions. Developer obligations take effect 1 January 2027. Violations constitute deceptive trade practices under the Colorado Consumer Protection Act, enforceable by the Attorney General.

UK Designates 18 Cryptocurrency Exchanges Under Russia Sanctions Regulations, 26 May 2026

On 26 May 2026, the UK designated 18 cryptocurrency exchanges under The Russia (Sanctions) (EU Exit) Regulations 2019, including Huobi Global S.A., operator of HTX, and three Georgian Russia-focused exchanges. OFSI confirmed HTX is subject to UK financial sanctions by reason of Huobi's ownership. The action marks the first time the UK has directly sanctioned cryptocurrency exchanges in connection with Russian sanctions evasion.

European Commission Opens Consultation on Draft Guidelines for High-Risk AI System Classification Under Article 6, June 2026

The European Commission has published draft guidelines clarifying when an AI system qualifies as high-risk under Article 6 of Regulation (EU) 2024/1689 (AI Act). A targeted consultation is open until 23 June 2026. The guidelines are not legally binding but reflect the Commission's interpretation and will guide market surveillance authorities and AI providers in applying the high-risk classification rules.

Ready to launch without the regulatory guesswork?

Book a 30-minute consultation. We'll map your AI or licensing path and tell you exactly what's required, in plain language.