Digital Access LLC Investigation: The Crypto Kiosk Markups That Triggered Washington State Enforcement

Publication date: October 31, 2026

Cryptocurrency kiosks are often marketed as a convenient way to buy digital assets using cash. Customers can locate a machine, follow the instructions on the screen, insert money, and receive cryptocurrency in a wallet.

But convenience does not remove the need for transparent pricing, proper identity verification, and safeguards against financial exploitation.

A recent enforcement action by the Washington State Department of Financial Institutions (DFI) has brought these issues into focus.

On October 19, 2026, Washington DFI announced that it had issued a Statement of Charges against Digital Access LLC, a cryptocurrency kiosk operator. The regulator alleges that the company charged consumers markups of up to 31% above the fair market value of digital assets per transaction without appropriately disclosing those markups.

According to the agency, the markups and related charges totaled more than $1 million over a two-year period for Washington consumers.

The allegations extend beyond pricing. DFI also identifies concerns involving anti-money laundering controls, transaction monitoring, customer identity verification, recordkeeping, and protections for elderly consumers.

The department is seeking significant regulatory remedies, including license revocation, restrictions on the company’s activities, consumer refunds exceeding $1 million, and a fine of $1,006,175.

These are allegations contained in a Statement of Charges, not a final determination that every alleged violation occurred. Digital Access LLC has the right to request a hearing to contest the charges.

For consumers, investigators, and anyone evaluating cryptocurrency kiosk services, the case highlights an important issue: the price displayed during a crypto purchase is only one part of the transaction. The actual cost, identity of the operator, and protections surrounding the transfer also matter.

What Washington DFI alleges about Digital Access LLC

Digital Access LLC operates in the cryptocurrency kiosk sector, where customers can use physical machines to purchase digital assets.

Washington DFI’s October 19 announcement describes alleged violations identified through an examination of the business.

The agency states that the company charged customers markups of up to 31% of the fair market value of digital assets per transaction. According to DFI, these markups were not appropriately disclosed and, together with other transaction fees, totaled more than $1 million charged to Washington consumers over two years.

The regulator also alleges that Digital Access:

• Created an environment of noncompliance with anti-money laundering and Bank Secrecy Act requirements.
• Failed to maintain appropriate risk-based controls to protect elderly consumers.
• Did not have sufficient due diligence procedures to verify customer identity and sources of funds.
• Had inadequate transaction monitoring.
• Failed to comply with certain federal and state reporting requirements.
• Did not retain records required for Currency Transaction Reports.
• Did not correctly handle unclaimed consumer property.

These allegations describe several distinct areas of regulatory concern. They should not be reduced to a simple claim that customers were charged high fees.

The central question is whether the business operated its cryptocurrency services with the disclosures, compliance procedures, and consumer safeguards required by applicable law.

Why a 31% cryptocurrency markup matters

A cryptocurrency kiosk may appear straightforward: a customer inserts cash, selects a digital asset, and receives cryptocurrency.

However, the amount of cryptocurrency received may be substantially different from what the customer expects if the exchange rate and fees are not clearly explained.

Consider a simplified example.

A customer inserts $1,000 into a kiosk. The fair market value of the cryptocurrency purchased is $1,000 before any markup or additional charges.

If a transaction carries a 31% markup, the economic impact could be substantial. The exact amount received depends on how the operator applies the markup, the quoted exchange rate, and any other transaction fees.

This is why consumers should distinguish between:

Market value: The independently observable value of the cryptocurrency at the time of the transaction.

Quoted exchange rate: The rate the kiosk operator offers to the customer.

Markup: The difference between the quoted rate and the relevant market benchmark, where applicable.

Additional fees: Separate transaction, service, network, or other charges disclosed by the operator.

A customer should be able to understand the total cost before confirming the purchase.

A high fee is not automatically unlawful. The regulatory question includes how the charge was calculated, what disclosures were made, and whether the operator complied with applicable requirements.

In the Digital Access case, DFI specifically alleges that the markups were not appropriately disclosed.

The consumer protection issue: elderly customers and source-of-funds checks

One of the more serious aspects of the DFI announcement concerns protections for elderly consumers.

Cryptocurrency kiosks can be used for legitimate purchases, but they can also become payment channels in impersonation, romance, investment, and other scams.

A person may be instructed by someone claiming to represent a government agency, bank, investment company, or technical support department to withdraw cash and deposit it into a cryptocurrency kiosk.

The customer may believe they are paying a tax, protecting their savings, or moving money to a secure account.

In reality, the transaction may send cryptocurrency to a wallet controlled by someone else.

This is why operators need effective risk-based controls. Depending on the circumstances and applicable law, these may include identity verification, transaction monitoring, source-of-funds checks, and procedures for identifying suspicious activity.

DFI alleges that Digital Access did not maintain sufficient safeguards in several of these areas.

The regulator’s allegations are particularly relevant to anyone investigating a cryptocurrency kiosk transaction involving an elderly customer or someone who was pressured to make a purchase.

How cryptocurrency kiosk transactions can be investigated

A physical cryptocurrency kiosk transaction can produce several types of evidence.

An investigation should not rely exclusively on a blockchain transaction because the on-chain record may not show the cash inserted into the machine, the person operating the kiosk, or the instructions that prompted the customer to use it.

A complete review may require several separate records.

1. Kiosk receipt and transaction details

Preserve the original receipt and any transaction confirmation.

Important information may include:

• Date and time of the transaction.
• Amount of cash inserted.
• Cryptocurrency purchased.
• Exchange rate quoted.
• Fees or markups shown.
• Transaction identifier.
• Destination wallet address.
• Kiosk location or machine identifier, if provided.

Do not discard the paper receipt. Photograph it and retain the original.

2. Blockchain transaction records

If cryptocurrency was sent to a wallet, identify the blockchain network and transaction hash.

The transaction hash can help establish whether the transfer was broadcast and identify the receiving address.

An investigator may then examine subsequent wallet activity to identify transfers, consolidation, or potential connections to cryptocurrency services.

However, blockchain data does not independently identify the person who operated the kiosk or controlled the destination wallet.

3. Customer communications

If someone instructed the customer to use a kiosk, preserve the original communications.

This may include:

• Telephone calls and call logs.
• Text messages.
• WhatsApp or Telegram conversations.
• Emails.
• Social-media messages.
• Instructions identifying a particular kiosk location.
• Messages explaining why the customer needed to purchase cryptocurrency.

The communication history can help establish whether the customer acted independently or followed instructions from someone else.

4. Financial records

Bank statements and cash withdrawal records can help establish where the money originated.

Where the customer withdrew cash before visiting a kiosk, the withdrawal date and amount may help corroborate the transaction timeline.

These records should be compared with the kiosk receipt and blockchain transaction.

For more guidance, see Cyb3rsect’s Digital Evidence Preservation guide. Insert the live internal link to that article before publication.

What customers should check before using a crypto kiosk

Before completing a purchase, customers should understand exactly how much cryptocurrency they will receive and what the transaction will cost.

Useful precautions include:

Review the total cost: Compare the quoted exchange rate with an independent market reference and examine every disclosed fee.

Confirm the operator: Identify the business responsible for the kiosk and check whether it is properly licensed for the services it provides in the relevant jurisdiction.

Read the transaction screen carefully: Do not proceed if the exchange rate, fees, or amount of cryptocurrency to be received are unclear.

Avoid instructions from strangers: Be especially cautious if someone on the phone or through a messaging application tells you to use a specific kiosk.

Do not treat cryptocurrency as a government payment method: A person claiming to represent the IRS, police, a bank, or another government agency should not be allowed to pressure you into purchasing cryptocurrency to resolve an alleged emergency.

Keep the receipt: It may be essential if the transaction later needs to be reviewed.

A cryptocurrency kiosk transaction can be difficult to reverse once completed. Taking time to verify the details before confirming a purchase is important.

What the enforcement action means for Digital Access LLC

Washington DFI’s October 19 announcement states that the department issued a Statement of Charges seeking several remedies.

The agency is seeking:

• Revocation of Digital Access LLC’s license.
• Restrictions preventing the company and its responsible individual from participating in the industry.
• Consumer refunds of more than $1 million.
• A fine of $1,006,175.

The proposed consumer refunds relate to fees and markups that DFI says were charged to Washington consumers.

The company and its responsible individual have the right to request a hearing to contest the charges.

This procedural distinction is important. A Statement of Charges is a formal regulatory action, but the requested penalties and remedies should not be described as final orders unless the regulator subsequently enters them.

Customers who believe they were affected should follow official DFI updates and retain their own transaction documentation.

How to investigate a suspected crypto kiosk loss

If someone believes they paid excessive or undisclosed fees, or was manipulated into purchasing cryptocurrency through a kiosk, the investigation should begin with the transaction evidence.

A structured review may involve:

1. Identifying the kiosk operator and machine location.
2. Preserving the original receipt and transaction confirmation.
3. Establishing the cash amount paid and the cryptocurrency received.
4. Comparing the quoted exchange rate with an independent market reference for the transaction time.
5. Identifying separately disclosed fees and markups.
6. Reviewing the blockchain transaction and destination wallet.
7. Preserving messages or calls that prompted the purchase.
8. Reporting suspected fraud or regulatory violations through the appropriate official channels.

If the customer was instructed to send cryptocurrency to a wallet as part of a scam, the investigation may also need to examine subsequent transactions.

For more information, see Cyb3rsect’s Blockchain Transaction Tracing guide. Insert the live internal link to that article here.

Beware of recovery scams after a kiosk transaction

Someone who loses money through a cryptocurrency kiosk may later receive unsolicited messages from people claiming they can recover the cryptocurrency.

These individuals may describe themselves as blockchain experts, ethical hackers, government representatives, or recovery specialists.

They may promise to retrieve the assets in exchange for an upfront fee or request access to the customer’s wallet.

Be cautious.

No legitimate investigator should need a customer’s wallet seed phrase or private keys to examine public blockchain transactions. Do not install remote-access software at the request of an unknown person, and do not send additional cryptocurrency simply because someone claims to have located the original funds.

If a person claims to represent a government agency or financial regulator, verify that claim through an independently obtained official contact channel.

Cyb3rsect’s Crypto Recovery Scam Investigation guide explains how to identify common warning signs. Add the live internal link to that article here.

How Cyb3rsect approaches cryptocurrency kiosk investigations

A cryptocurrency kiosk investigation may require a combination of transaction analysis, payment-record review, and examination of the communications that led to the purchase.

Cyb3rsect focuses on organizing available digital evidence and identifying investigative leads that may help clarify what happened.

Depending on the records available, this may include:

• Reviewing kiosk receipts and transaction confirmations.
• Examining exchange-rate and fee information.
• Comparing the quoted price with historical market data.
• Reviewing blockchain transaction records.
• Examining destination wallet activity.
• Organizing bank, cash withdrawal, and payment records.
• Reviewing communications that prompted the customer to use the kiosk.
• Preparing a chronological evidence report.

The objective is to establish what the evidence supports and identify appropriate next steps.

Blockchain analysis cannot automatically reverse a cryptocurrency transaction, identify every wallet controller, or guarantee recovery. Regulatory and legal remedies also depend on the outcome of the relevant proceedings.

Final thoughts

The Digital Access LLC enforcement action highlights why transparency and consumer protection are essential in the cryptocurrency kiosk industry.

Washington DFI alleges that the operator charged markups of up to 31% above the fair market value of digital assets without appropriate disclosure. The agency also raises concerns about anti-money laundering controls, transaction monitoring, customer verification, reporting, and safeguards for elderly consumers.

The department is seeking license revocation, consumer refunds exceeding $1 million, and a fine of $1,006,175. Digital Access LLC has the right to contest the charges, and the allegations should not be presented as final findings.

For consumers, the lesson is to understand the complete cost of a cryptocurrency purchase before confirming the transaction and never allow an unfamiliar person to pressure them into using a kiosk.

For anyone investigating a disputed transaction, preserve the receipt, financial records, communications, and blockchain transaction details. Together, these records can provide a much clearer picture than a wallet address alone.

Cyb3rsect — digital evidence review, cryptocurrency transaction analysis, and online financial investigation support.

If you believe you have experienced an undisclosed cryptocurrency kiosk charge or a suspicious transaction, contact Cyb3rsect to discuss the available evidence and possible investigative next steps.