(Effective January 1, 2027) Anti-fraud policy

All virtual currency kiosk operators shall take reasonable steps to detect and prevent fraud, including establishing and maintaining a written anti-fraud policy. The anti-fraud policy shall, at a minimum, include: (1) The identification and assessment of fraud-related risk areas. (2) Procedures and controls to protect against identified risks. (3) Allocation of responsibility for monitoring risks. (4) Procedures for the periodic evaluation and revision of the anti-fraud procedures, controls, and monitoring mechanisms. (2026-45, s. 1.)