Washington Seeks to Revoke Coinflip's License, Fine

Highlights

Washington State's Department of Financial Institutions filed charges against crypto ATM operator Coinflip and its CEO, seeking to revoke the company's license.
Regulators are seeking a $1.03 million fine alongside mandatory consumer refunds and an industry ban for Coinflip and CEO Benjamin Weiss.
The charges allege inadequate surety bond coverage, undisclosed banking relationships and a data breach, a noncompliant refund policy, and at least 15 unrefunded customers.
State regulators flagged that elderly customers made up more than half of Coinflip's Washington business, a group they say faces disproportionate crypto ATM fraud risk.

Washington State's Department of Financial Institutions filed a statement of charges on September 3, 2026 against GPD Holdings LLC, doing business as Coinflip, and its chief executive Benjamin Weiss, seeking to revoke the company's license to operate cryptocurrency ATMs in the state. Regulators are asking for a $1.03 million fine on top of the license revocation, along with mandatory refunds to affected customers and bans on Coinflip and Weiss from the industry. The filing is the latest in a string of state-level crackdowns on crypto kiosk operators, whose machines have become a favored on-ramp for scammers who walk victims — disproportionately elderly ones — through in-person crypto purchases as part of investment and romance fraud schemes.

A Checklist of Compliance Failures

The statement of charges lays out several specific failures rather than a single incident. Washington's DFI alleges Coinflip failed to maintain adequate surety bond coverage for part of the period under review — a bond requirement designed to ensure money-transmission licensees have a financial backstop available if they can't meet obligations to customers. Regulators also allege the company didn't promptly disclose certain banking relationships, ongoing legal actions, and a data breach affecting Washington customers, all disclosures typically required of licensed money transmitters.

On the consumer-facing side, the charges claim Coinflip lacked a compliant refund policy and failed to refund at least 15 customers within the state's required timeframe. Notably, the filing states that elderly customers accounted for more than half of Coinflip's business volume in Washington — a detail regulators highlighted specifically because crypto ATMs have become one of the most common vectors through which older victims are funneled into scams, often at the direction of a fraudster coaching them by phone in real time as they feed cash into a kiosk.

Why Regulators Keep Targeting Crypto Kiosks

The Coinflip case fits a broader pattern of state regulators tightening oversight of the crypto ATM industry specifically because of its outsized role in elder fraud. Unlike an exchange transaction that happens entirely online, a crypto ATM purchase requires a victim to physically show up at a kiosk, often in a gas station or convenience store, and convert cash into crypto in a single irreversible transaction — a friction point regulators have increasingly targeted with mandatory fraud warnings, transaction limits, and now direct enforcement against operators seen as under-resourcing compliance, a concern that echoes EU regulators' recent warnings about impersonation scams targeting crypto users more broadly.

For crypto ATM operators generally, the specific allegations here — a lapsed bond, undisclosed banking relationships, an unreported breach, an inadequate refund process — read like a compliance checklist of the exact controls state money-transmission regulators expect licensees to maintain continuously, not just at renewal time. A company that lets any one of them lapse risks exactly this kind of statement of charges, regardless of whether a specific victim complaint triggered the review, the same dynamic that has fed investigators like ZachXBT's fraud-tracking efforts across the wider industry. For consumers, particularly older ones who rely on these machines without fully understanding the risk, the case is a reminder that a “regulated” or “licensed” crypto ATM operator is not the same as one with no fraud risk attached to its machines.

What Happens Next

Coinflip and CEO Benjamin Weiss can request a hearing to contest the charges, and Washington's filing remains a statement of allegations rather than a final enforcement order — meaning the $1.03 million fine, license revocation, and industry ban are not yet in effect and could be negotiated down or dropped depending on how the case proceeds. Watch for whether Coinflip requests that hearing in the coming weeks, and for whether other states with active crypto kiosk oversight cite this case as precedent for their own reviews. The elderly-customer concentration flagged in the filing is also likely to keep surfacing in future state and federal crypto ATM rulemaking, given how central that demographic has become to pig-butchering and romance-scam prosecutions nationally.

FAQ

What is Coinflip accused of by Washington regulators?
Washington's Department of Financial Institutions alleges Coinflip failed to maintain adequate surety bond coverage, didn't promptly disclose certain banking relationships and a data breach, lacked a compliant refund policy, and failed to refund at least 15 customers on time.

How much is Washington seeking to fine Coinflip?
Regulators are seeking a $1.03 million fine, in addition to revoking Coinflip's license and banning the company and CEO Benjamin Weiss from the industry.

Has Coinflip been found guilty of these allegations?
No. The filing is a statement of charges, not a final order, and Coinflip and Weiss can request a hearing to contest the allegations.

Why did regulators highlight elderly customers specifically?
The filing notes that elderly customers made up more than half of Coinflip's Washington business, a group regulators say faces disproportionate fraud risk from crypto ATMs.