Kentucky Bitcoin ATM Rules Put Hardware Wallet Firms at Risk

Kentucky’s push to police crypto kiosks has widened into something far broader. In House Bill 380, a 2026 measure aimed at virtual currency kiosk fraud, lawmakers also added a section for hardware wallet providers that would require live toll-free support and assistance resetting access credentials. The language, filed in the Kentucky House and amended through March 13, 2026, places self-custody device makers inside the state’s consumer-protection crosshairs even though the bill’s main public rationale is Bitcoin ATM scam prevention, according to the Kentucky Legislature, WMKY, and Spectrum News 1.

Kentucky’s move matters because it collides with a core design principle of many hardware wallets: the manufacturer does not know, store, or recover a user’s seed phrase. That is why the bill’s hardware-wallet section has drawn attention beyond kiosk operators. The proposal does not just regulate machines in gas stations and convenience stores; it also creates duties for companies that “offer or provide” a hardware wallet, and it ties violations to Kentucky’s unfair or deceptive practices law.

March 13 Text Added 1 New Risk for Hardware Wallet Makers

The clearest flashpoint sits near the end of the 77-page bill. Section 33 defines a “hardware wallet provider” as a person that offers or provides a hardware wallet. It then says the provider shall offer live customer service through a toll-free number during operating hours of at least 8 a.m. to 10 p.m. local time in Kentucky. More significantly, it says the provider shall provide a mechanism for, and assist a person with, resetting any password, PIN, seed phrase, or similar information needed to access the wallet’s contents.

That wording is unusual because seed phrases are typically generated and held by the user, not by the device maker. Based on the bill text alone, the requirement appears to impose a service obligation that many self-custody providers may not be technically able to fulfill without changing product architecture. That is an inference from the statutory language and from how hardware wallets are generally described in digital-asset policy materials, not a statement of legislative intent. Kentucky’s own HB 825, another 2026 bill, lists hardware wallets as one form of wallet used to secure digital assets or private keys.

Why $500 Daily Limits Drove the Bill’s Main Consumer-Protection Pitch

Public discussion around HB 380 has centered on kiosk fraud, not hardware devices. WMKY reported on February 13, 2026 that AARP Kentucky backed tighter rules because many digital currency kiosk scams affect adults over 60. In that report, AARP Kentucky’s Daniel Roe said the bill would require operator licensing, ID verification, and a $500 daily transaction limit. Spectrum News 1 also reported on March 5, 2026 that the measure would establish guardrails for businesses using virtual currency kiosks.

The scam backdrop is material. WMKY cited FBI data showing cryptocurrency kiosks were used in scams that led to more than $300 million in reported losses in 2025. That helps explain why lawmakers targeted licensing, disclosures, transaction controls, and refund procedures for kiosk operators. In the bill text, those provisions span dozens of pages and include fee disclosures in U.S. dollars, exchange-rate disclosures, customer-service requirements, and refund obligations.

By comparison, the hardware-wallet language appears late in the bill and is much shorter. Yet its legal effect could be broader than its length suggests because it creates a separate compliance standard for a different category of crypto business. That contrast is the central tension in the Kentucky proposal: a bill sold as anti-scam ATM regulation also reaches self-custody hardware firms that do not operate kiosks.

2025 Self-Custody Law vs 2026 Kiosk Bill: A Kentucky Policy Split

The hardware-wallet provision stands out even more because Kentucky moved in the opposite direction in 2025. HB 701, signed in March 2025, was widely described as protecting self-custody rights and supporting mining activity in the state. The Block reported that the law established protections for bitcoin and cryptocurrency use after unanimous votes in both chambers. Atlas21 similarly described the measure as strengthening self-custody rights and shielding certain blockchain participants from liability tied to validated transactions.

That creates a policy split across two consecutive sessions. In 2025, Kentucky advanced a pro-self-custody framework. In 2026, HB 380 introduced language that could force hardware wallet providers to support credential resets that many self-custody systems are designed to avoid. The two positions are not formally irreconcilable in the text available, but they point in different directions. One protects user control over keys; the other appears to assume a provider can help restore access to those same credentials.

How Consumer-Law Penalties Could Reach Non-ATM Crypto Firms

HB 380 does more than set operational rules. It links hardware-wallet violations to Kentucky’s consumer-protection statute. The bill says a violation is deemed an unfair, false, misleading, or deceptive act or practice under KRS 367.170, and that the remedies, powers, duties, and penalties in KRS 367.110 to 367.300 and KRS 367.990 apply. In practical terms, that means the issue is not just technical feasibility; it is enforcement exposure.

For kiosk operators, the bill also raises the bar through licensing, disclosures, analytics checks, and strict liability in one subsection governing blocked transactions to certain overseas-linked wallets. Those provisions fit the anti-fraud narrative that supporters have emphasized publicly. The hardware-wallet section is different. It reaches a product category that many users choose precisely because the manufacturer cannot retrieve the user’s recovery phrase.

If HB 380 advances in its present form, the next question is whether lawmakers narrow, clarify, or remove Section 33. As of the bill-tracking record available through FastDemocracy, HB 380 was introduced on January 14, 2026, referred to House committees on January 22, and later reported favorably with committee substitute and floor amendments.