California orders CoinFlip to pay approximately $5.16 million over crypto kiosk failures

이미지 불러오는 중

The DFPI consent order requires restitution to 20 scam victims and disgorgement of fees tied to alleged compliance lapses at CoinFlip kiosks

Mon 9 Nov 2026 · 15:17 EST · 3 min read

In Crypto

Share

California’s financial regulator has ordered CoinFlip to pay scam victims back and give up fees it allegedly overcharged customers. The total comes to approximately $5.16 million.

On November 4, 2026, the California Department of Financial Protection and Innovation (DFPI) imposed a consent order on GPD Holdings LLC, the company that does business as CoinFlip. The action targets alleged compliance failures across the operator’s crypto kiosk network in the state.

CoinFlip runs around 500 digital asset kiosks across California.

The details of the order

The largest piece of the bill is restitution. CoinFlip must pay at least $4,811,483 to 20 identified California victims of a scam.

On top of that, the company must hand over $351,530 in disgorgement. Disgorgement means surrendering money the regulator says was improperly collected. Here, it covers excessive fees charged to customers.

Add the two together and the financial hit lands at approximately $5.16 million.

The DFPI’s findings point to problems stretching back years. According to the regulator, CoinFlip’s anti-money laundering (AML) measures were inadequate starting in 2021.

The DFPI also found that CoinFlip exceeded California’s $1,000 daily transaction limit per customer beginning in 2024. And from 2025 onward, the regulator says, the company charged excessive fees.

Not the scammer, but the open door

The DFPI’s order draws an important distinction. CoinFlip is not directly implicated in facilitating the scams themselves.

Instead, the regulator pinned the harm on operational shortcomings. Weak customer identification and inadequate transaction monitoring allowed third-party fraudsters to exploit people using the kiosks.

The order goes beyond a check. CoinFlip must stop the unlawful practices and implement significant operational changes, and it will do so under ongoing oversight from the DFPI.

Part of a broader California crackdown

CoinFlip is not the first kiosk operator to land on the DFPI’s radar. The regulator has previously taken action against Hermes Bitcoin and RockItCoin.

What this means for kiosk operators and users

For the kiosk industry, the CoinFlip order is a pricing signal for noncompliance. Operators can now see roughly what years of alleged AML gaps, limit breaches and fee overcharges may cost in one state.

The more telling detail may be the structure of the penalty. Most of the money goes to victims rather than to the state. That suggests California regulators are focused on making harmed consumers whole, and on tying operator liability to the real-world losses scammers inflict through their machines.

The things to watch next are fairly concrete. First, how CoinFlip implements the required operational changes under DFPI supervision. Second, whether the restitution total grows, since the order sets the figure at a minimum of $4,811,483.

Third, whether the DFPI’s string of actions against Hermes Bitcoin, RockItCoin and now CoinFlip continues to other operators in the state.

Disclosure: This article was edited by John Chen. For more information on how we create and review content, see our Editorial Policy.