SECTION 1. Chapter 167B of the General Laws is hereby amended by adding the following new section:-

Section 25. Virtual Currency Kiosks

(a) For the purposes of this section, the following words shall, have the following meanings unless the context clearly requires otherwise:

“Blockchain”, a mathematically secured, chronological and decentralized ledger or database.

“Blockchain analytics”, the analysis of data from blockchains or publicly distributed ledgers, including associated transaction information.

“Blockchain analytics software”, a software service that uses blockchain analytics data to provide information including, but not limited to, risk-specific information about virtual currency wallet addresses.

“New customer”, an individual who has never previously transacted with the virtual currency kiosk operator; provided, however, that a new customer shall remain defined as such for not less than 30 days after their first financial transaction with the virtual currency kiosk operator.

"Transaction hash", a unique identifier made up of a string of characters that act as a record of and provide proof that the transaction was verified and added to the blockchain.

"Virtual currency address", an alphanumeric identifier associated with a virtual currency wallet identifying the location to which a virtual currency transaction may be sent.

"Virtual currency kiosk", an electronic terminal acting as a mechanical agent of the virtual currency kiosk operator to enable the virtual currency kiosk operator to facilitate the exchange of virtual currency for money, bank credit or other virtual currency, including, but not limited to, by: (i) connecting directly to a separate virtual currency exchange that performs the actual virtual currency transmission; or (ii) drawing upon the virtual currency in the possession of the electronic terminal's operator.

“Virtual currency kiosk operator", a person that engages in virtual currency business activity via a money transmission kiosk located in the commonwealth or a person that owns, operates or manages a money transmission kiosk located in the commonwealth through which virtual currency business activity is offered.

"Virtual currency kiosk transaction", a transaction conducted or performed, in whole or in part, by electronic means via a virtual currency kiosk; provided, however, that a virtual currency kiosk transaction shall include a transaction made at a virtual currency kiosk to purchase virtual currency with fiat currency or to sell virtual currency for fiat currency.

"Virtual currency wallet", a software application or other mechanism providing a means to hold, store or transfer virtual currency.

(b) (1) A kiosk operator shall not engage in virtual currency business activity or advertise itself as being able to engage in virtual-currency business activity with or on behalf of another person unless the kiosk operator is licensed in the state as a money transmitter pursuant to chapter 167F, 169 or 169A and accompanying regulations.

(2) A virtual currency kiosk operator shall not locate, or allow a third party to locate, a virtual currency kiosk in the commonwealth unless the virtual currency kiosk operator registers the money transmission kiosk and obtains the prior approval of the commissioner for its activation.

(3) Each virtual currency kiosk operator shall submit a quarterly report of the location of each virtual currency kiosk located within the commonwealth within 45 days of the end of the calendar quarter. The location report shall include, at a minimum, the following regarding the location where a virtual currency kiosk is located:

(i) the company’s legal name;

(ii) any fictitious or trade name;

(iii) the physical address of the kiosk;

(iv) the start date of operation of a virtual currency kiosk at the location;

(v) the end date of operation of a virtual currency kiosk at the location, if applicable; and

(vi) any virtual currency addresses associated with the virtual currency kiosk.

(c) A virtual currency kiosk operator must disclose in a clear, conspicuous and easily readable manner in the chosen language of the customer all relevant terms and conditions generally associated with the products, services and activities of the virtual currency kiosk operator and virtual currency; provided, however, that: (i)the virtual currency kiosk operator shall receive acknowledgement of receipt of all disclosures required under this section via confirmation of consent; and

(ii) the disclosures provided under this subsection must address, at a minimum:

(A) a warning, written prominently and in bold type, and provided separately from the disclosures below, stating: "WARNING: LOSSES DUE TO FRAUDULENT OR ACCIDENTAL TRANSACTIONS ARE NOT RECOVERABLE AND TRANSACTIONS IN VIRTUAL CURRENCY ARE IRREVERSIBLE. IF YOU BELIEVE YOU ARE BEING SCAMMED, CONTACT YOUR LOCAL LAW ENFORCEMENT.";

(B) the material risks associated with virtual currency and virtual currency transactions, including a warning that once completed, the transaction may not be reversed; the virtual currency kiosk operator’s liability, if any, for unauthorized virtual currency transactions; the virtual currency kiosk customer’s liability, if any, for unauthorized currency transactions; disclosure that some virtual currency transactions are deemed to be made when recorded on a public ledger which may not be the date or time when the person initiates the transaction, if applicable; and disclosure that a person who accepts a virtual currency as payment today is not required to accept and may not accept virtual currency in the future

(C) the amount of the transaction denominated in dollars as well as the applicable virtual currency;

(D) any fees or expenses charged by the virtual currency kiosk operator;

(E) any applicable exchange rates;

(F) a daily virtual currency transaction limit of no more than $1,000 for new customers;

(G) notice of a change in the virtual currency kiosk operator's rules or policies;

(H) the name, address and corporate telephone number of the owner of the kiosk and the days, times and means by which a consumer may contact the owner for consumer assistance, which shall be displayed on or at the location of the virtual currency kiosk or on the first screen of such kiosk;

(I) under what circumstances the virtual currency kiosk operator, without a court or government order, discloses a person's account information to third parties; and

(J) any other disclosures that are customarily given in connection with a virtual currency transaction.

(3) Upon each transaction's completion, the virtual currency kiosk operator shall provide to the customer a physical receipt, unless such customer requests such receipt by electronic mail, in the language chosen by the customer containing:

(i) the virtual currency kiosk operator's name and contact information, including a telephone number to answer questions and register complaints;

(ii)the type, value, date and precise time of the transaction, transaction hash and each applicable virtual currency address;

(iii) the name and contact information of the sender, if applicable;

(iv)the name and contact information of the designated recipient;

(v) all fees charged;

(vi) he exchange rate of the virtual currency to dollars;

(vii) a statement of the virtual currency kiosk operator's liability for non-delivery or delayed delivery;

(viii)  a statement of the virtual currency kiosk operator's refund policy; and,

(ix) any additional information the division of banks may require.

(d)(1) All virtual currency kiosk operators must use blockchain analytics software to assist in the prevention of sending purchased virtual currency from a virtual currency kiosk operator to a virtual currency wallet known to be affiliated with fraudulent activity at the time of a transaction. The commissioner may request evidence from any virtual currency kiosk operator of current use of blockchain analytics.

(2) Virtual currency kiosk operators shall take reasonable steps to detect and prevent fraud, including establishing and maintaining a written anti-fraud policy.  The anti-fraud policy shall, at a minimum, include:

(i) the identification and assessment of fraud related risk areas;

(ii) procedures and controls to protect against identified risks;

(iii) allocation of responsibility for monitoring risks; and

(iv) procedures for the periodic evaluation and revision of the anti-fraud procedures, controls, and monitoring mechanisms.

(3) Each virtual currency kiosk operator shall designate and employ a compliance officer who:

(i) shall be qualified to coordinate and monitor compliance with this section and all other applicable federal and state laws, rules and regulations;

(ii) shall be employed full-time by the virtual currency kiosk operator; and

(iii) shall not be an individual who owns more than 20 per cent of the virtual currency kiosk operator by whom the individual is employed.

(3) Compliance responsibilities required under federal and state laws, rules and regulations shall be completed by full-time employees of the virtual currency kiosk operator.

(4) A virtual currency kiosk operator shall issue a refund to a new customer for the full amount of all transactions made within the 30 day new customer time period upon the request of the customer. In order to receive a refund under this paragraph, a new customer shall have been fraudulently induced to engage in such virtual currency transactions and shall have contacted the virtual currency kiosk operator and local or state law enforcement to inform them of the fraudulent nature of the transaction agency within 90 days of the last transaction to occur during the 30 day new customer time period.

(e) A virtual currency kiosk operator shall not accept transactions of more than $1,000 of cash or the equivalent in virtual currency in a day in connection with virtual currency kiosk transactions with a new customer in the commonwealth via 1 or more virtual currency kiosks.

(f) The aggregate fees and charges, directly or indirectly, charged to a customer related to a single transaction or series of related transactions involving virtual currency effected through a money transmission kiosk in the commonwealth, including any difference between the price charged to a customer to buy, sell, exchange, swap or convert virtual currency and the prevailing market value of such virtual currency at the time of such transaction, shall be clearly and conspicuously disclosed to the customer prior to the customer’s confirmation of the transaction.

(g) Virtual currency kiosk operators performing business in the commonwealth shall provide live customer service at a minimum during standard business hours. The customer service toll-free number shall be displayed on the virtual currency kiosk or the virtual currency kiosk screens.

SECTION 2. Chapter 10 of the General Laws is hereby amended by inserting after section 78 the following section:-

Section 79. The office of the state treasurer shall develop and periodically review and update a digital module and resources on virtual currencies and digital assets to support Massachusetts residents with overseeing their finances, understanding money management strategies and protecting their security. In addition, the office shall develop and periodically review a digital module and resources specifically targeted toward Massachusetts residents over the age of 50 to help these individuals identify scams or fraud that are related to or take advantage of virtual currencies and how to best avoid being victimized.