Alabama Scam and Fraud Laws: Where to Report, Your Right to Sue (2026)

Alabama's consumer protection law, the Deceptive Trade Practices Act (DTPA), lets a "consumer" sue, but the definition is narrow: a natural person who buys goods or services for personal, family or household use, and who suffered monetary damage from a practice the act makes unlawful. A consumer who wins gets actual damages or $100, whichever is greater, or up to three times actual damages if the court chooses, plus costs and a reasonable attorney's fee. Before suing you generally must send a written demand at least 15 days ahead, class actions are barred, and the deadline is one year from when you discovered (or should have discovered) the deception.

Alabama also has a crypto ATM law that took effect on October 1, 2026. It caps how much cash a kiosk may take from a new customer and requires a full refund for a new customer who was tricked into a kiosk transaction (half the value for an existing customer), but only if the victim contacts the operator, law enforcement and the Alabama Securities Commission within 60 days and files a report with law enforcement or the commission. Complaints about businesses go to the Attorney General's Consumer Interest Division, which mediates; it says filing a complaint "is not a legal action."

Information last verified on October 2, 2026. This article has not been reviewed by a licensed lawyer.

Jurisdiction scope: This guide covers Alabama state law: the Deceptive Trade Practices Act (Code of Alabama Title 8, Chapter 19), Alabama complaint offices, Alabama protections for older adults, the Cryptocurrency Kiosk Fraud Prevention Act, Alabama's phishing statute, and the Alabama small-claims limit. Federal refund and reporting rights are summarized briefly and covered in depth on our national guides. Out of scope: criminal defense, and the law of other states (if the scammer or business is elsewhere, that state's law may also matter).

First steps if you were scammed in Alabama

Contact the bank, card issuer, payment app, wire company or crypto exchange that moved your money right away; that company is usually the only one that can stop or reverse a payment. Your federal rights depend on how you paid, and our guide on how to get money back after a scam goes through each payment method. For app transfers, see the Zelle and payment app guide.

Then report it. Most scams go to the FTC at ReportFraud.ftc.gov, and online crime to the FBI's IC3; our where to report a scam guide lists every federal channel. The Alabama offices below are in addition to those, not instead of them. If a scammer has your Social Security number or account details, see Alabama identity theft laws.

Where to report a scam in Alabama

Be realistic about an Attorney General complaint. The office's complaint page says that "filing a consumer complaint is not a legal action, and that, after careful review of your complaint, you may be advised to seek private legal counsel. The Consumer Interest Division does not provide legal advice, interpretation, or opinions to consumers." Its divisions page adds that "The attorney general may not serve as a private attorney for an individual or provide consumers with legal advice." Mediation can work against a real business that wants to keep its reputation. It does little against an anonymous scammer, so the payment company remains the first call.

You can send supporting documents to ConsumerInterest@AlabamaAG.gov. The research for this guide did not find a Spanish-language version of the complaint form on the Attorney General's pages; if you need one, ask the hotline.

Alabama's consumer protection law: can you sue?

Sometimes. The private right to sue is in Ala. Code section 8-19-10(a):

"Any person who commits one or more of the acts or practices declared unlawful under this chapter and thereby causes monetary damage to a consumer ... shall be liable to each consumer or other person for: (1) Any actual damages sustained by such consumer or person, or the sum of $100, whichever is greater; or (2) Up to three times any actual damages, in the court's discretion."

Two conditions decide who can use it. First, you must be a "consumer," which section 8-19-3(4) defines as "Any natural person who buys goods or services for personal, family, or household use." Second, the practice must have caused you monetary damage. A victim who simply sent money to an impostor, without buying goods or services, may not fit that definition. A person who is not a consumer can sue only over two specific practices, pyramid schemes and certain seller-assisted marketing plans. Whether your situation fits is a question for an Alabama lawyer.

What you can recover

• Actual damages or $100. The greater of the two is the base award.
• Up to three times actual damages, if the court chooses. It is a ceiling, not automatic. The statute tells the court to consider "the amount of actual damages awarded, the frequency of the unlawful acts or practices, the number of persons adversely affected thereby, and the extent to which the unlawful acts or practices were committed intentionally."
• Costs and attorney's fees. Section 8-19-10(a)(3) makes the defendant liable, "In the case of any successful action," for "the costs of the action or counterclaim, together with a reasonable attorney's fee."
• A risk the other way. If the court finds a suit frivolous or brought in bad faith, "the court shall award to the defendant ... reasonable attorney's fees and costs."

The 15-day written demand

Section 8-19-10(e) requires a demand letter first:

"At least 15 days prior to the filing of any action under this section, a written demand for relief, identifying the claimant and reasonably describing the unfair or deceptive act or practice relied upon and the injury suffered, shall be communicated to any prospective respondent by placing in the United States mail or otherwise."

The demand has teeth for the business too. If it makes a written offer of relief within the 15 days, you reject it, and the court later finds the offer "was sufficient to compensate the petitioner for his or her actual damages, the court shall not award any additional damages or attorney's fees or costs." So take a written settlement offer seriously.

The demand is not needed in one situation that often fits scams: "The demand requirements of this subsection shall not apply if the prospective respondent does not maintain a place of business or does not keep assets within the state."

No class actions

Section 8-19-10(f) says: "A consumer or other person bringing an action under this chapter may not bring an action on behalf of a class." Under subsection (g), only the Attorney General or a district attorney can sue in a representative capacity, and in those cases the court does not award the $100 minimum or treble damages. Each victim who wants damages under the DTPA has to bring their own case. The act provides for the suit to be filed in the circuit court of a county where the defendant resides, has its principal place of business, does business, or committed the act (section 8-19-10(c)).

The deadline

Section 8-19-14 is short and strict:

"No action may be brought under this chapter more than one year after the person bringing the action discovers or reasonably should have discovered the act or practice which is the subject of the action, but in no event may any action be brought under this chapter more than four years from the date of the transaction giving rise to the cause of action unless the contract or warranty is for more than three years."

One year from discovery is shorter than many other states allow. Since you also need to send the 15-day demand, do not wait.

Who the DTPA does not reach

Section 8-19-7 says nothing in the chapter applies to, among others, "any bank or affiliate of a bank which is regulated by the State Banking Department of Alabama, the Comptroller of the Currency of the United States, Federal Deposit Insurance Corporation or the Board of Governors of the Federal Reserve System," any person or activity subject to the Alabama Insurance Code, "Any activity which is subject to the provisions of the Securities Act of Alabama," and any violation of the Federal Consumer Credit Protection Act. The business claiming an exemption has the burden of proving it.

In practice, the DTPA is not a tool against your own regulated bank; your rights there come mainly from federal law and your account agreement, covered in our money-back guide. As general information, a fake seller or impostor that is not a regulated bank or securities firm does not appear to fall within these exclusions, but how they apply to a particular defendant is a question for a lawyer.

The honest limit

A DTPA case needs a defendant you can identify, serve and collect from. That can work against an Alabama business, contractor or seller with a real address. It usually does not work against an anonymous scammer behind a spoofed number, a fake website or a crypto wallet, and a judgment does not help if nobody can be found to pay it.

Protections for older adults in Alabama

Exploitation of an elderly person is a crime, whoever commits it. Alabama's Criminal Code defines an "elderly person" as "A person 60 years of age or older" (Ala. Code section 13A-6-191). It defines financial exploitation as "The use of deception, intimidation, undue influence, force, or threat of force to obtain or exert unauthorized control over an elderly person's property with the intent to deprive the elderly person of his or her property," or a breach of fiduciary duty by a guardian, conservator or agent under a power of attorney. The first part is not limited to people in a position of trust, so on its words it can reach a stranger who uses deception.

Report it. Alabama's Adult Protective Services takes reports on its Adult Abuse Hotline: "Call the Adult Abuse Hotline at 1-800-458-7214 to report suspected mistreatment." For fraud against anyone 60 or older, the federal DOJ National Elder Fraud Hotline (833-372-8311) can also help; see our elder fraud guide. The Alabama Securities Commission also takes complaints about "adult exploitation fraud" (see the table above).

Banks may delay a suspicious transaction. Under Ala. Code section 8-6-193, "the financial service provider may, but is not required to, refuse or delay the execution of a financial transaction on an account of an elderly or vulnerable adult" when it suspects financial exploitation. This is permission, not a duty. For this rule, an elderly adult is someone 65 or older, and a vulnerable adult is an adult who, because of mental or physical impairment, cannot fully manage their own resources, carry out some or all daily living activities, or protect themselves against neglect or exploitation without help (section 8-6-192). If it places a hold, it must notify the people authorized on the account (not the suspected exploiter) and "report the incident to the Department of Human Resources and the appropriate law enforcement agency." There is no fixed number of days: the hold "expires when the financial service provider reasonably believes that the financial transaction will not result in financial exploitation unless earlier terminated by an order of a court." Brokerage and investment-adviser accounts fall under a separate article (section 8-6-170 and following).

If you are worried about a parent who is about to send money, tell the bank or credit union directly that you suspect a scam. Alabama's Department of Human Resources counted 9,912 adult abuse, neglect and exploitation reports in fiscal year 2023, covering all types of mistreatment, not only financial.

Alabama laws aimed at specific scams

Crypto ATMs: the Cryptocurrency Kiosk Fraud Prevention Act

HB 303 of the 2026 regular session (Act 2026-369) added section 8-7A-28 to the Code of Alabama, and the enrolled bill says: "This act shall become effective on October 1, 2026." The law is now in force. The Alabama Securities Commission (ASC), which regulates money transmission in Alabama, enforces it. The ASC describes the refund as applying starting October 1, 2026.

Cash limits. For a new consumer, an operator "shall not accept transactions of more than one thousand United States dollars ($1,000) in cash ... in one calendar day, or ten thousand United States dollars ($10,000) in cash ... in a calendar month." For an existing consumer the cap is $10,500 in cash in one calendar day. A "new consumer" is someone making a first transaction with the operator or within the 30-day period immediately after it. All of these limits cover cash or the equivalent amount in foreign currency or cryptocurrency. The new-consumer limits count every transaction by the same consumer, whether one or several Alabama kiosks are used.

Refunds for fraud victims. Under section 8-7A-28(j)(1), if a consumer was "fraudulently induced" into a kiosk transaction:

• a new consumer gets a "full refund for the fraudulently induced transaction, as well as all fees";
• an existing consumer gets "a refund for one-half of the value of the transaction, including all fees incurred through the transaction."

The refund depends on the victim doing three things under section 8-7A-28(j)(2):

1. "Contact the operator not more than 60 calendar days after" the transaction.
2. Contact "a law enforcement agency, as well as the commission, not more than 60 calendar days" after it.
3. "File a report with a law enforcement agency or the commission."

The 60-day clock runs from each transaction, so act on every deposit separately. Eligibility for a refund holds "regardless of whether an operator provided the disclosures ... and the receipt." The ASC says anyone who suspects they are a victim of cryptocurrency fraud should call it at 1-800-222-1253.

Other operator duties. Each kiosk must show two warnings that the customer accepts before a transaction, give a receipt with the operator's phone number and refund policy, use blockchain analytics to block wallets "associated or affiliated with fraud," offer live, US-based toll-free customer service if headquartered in the United States, and provide "enhanced due diligence protections for consumers who are 60 years of age or older" under commission rules. The ASC may assess civil penalties against operators; those go to the state, not to victims. The section does not spell out whether a victim can sue an operator directly over a refused refund, and this guide has not verified that point. For how crypto scams work, see crypto and investment scams.

Phishing

Ala. Code section 13A-8-114 makes it a Class C felony to use a web page, email or other Internet means to induce someone to give identifying information by "representing that the person ... is a business, without the authority or approval of the business." Under subsection (c)(2), "An individual who is adversely affected by a violation of this section" may bring an action; the text read for this guide does not specify what a victim can recover. The Attorney General or a district attorney can sue for actual damages or $25,000 per violation, whichever is greater; after the costs of the case, the statute directs the remaining proceeds first toward restitution of any victims, as the court determines (section 13A-8-114(e) and (g)). For what to do if you clicked a link, see our phishing, smishing and vishing guide.

Suing a scammer or a business in Alabama

Small claims. For smaller claims, under section 12-12-31(a) "The district court shall exercise exclusive jurisdiction over all civil actions in which the matter in controversy, exclusive of interest and costs, does not exceed six thousand dollars ($6,000)."

Deadlines. A DTPA claim has the one-year discovery limit above. The deadline for a common-law fraud claim depends on how the claim is classified under Alabama law, and this guide has not verified a single number for it. Ask an Alabama lawyer about your dates, and see our Alabama statute of limitations guide for other civil deadlines.

Who you can actually reach. Lawsuits work against people and businesses with a name, an address and assets. A scammer who hid behind a fake identity, a spoofed caller ID or an overseas account is usually not reachable through an Alabama court. In those cases the payment company, a fast report to law enforcement, and protecting your identity are where your effort pays off. Our guide on when a lawyer helps after a scam explains when hiring one makes sense. If a debt collector is pressing you over a debt tied to a scam, see Alabama debt collection laws.

Related guides

• Scams and fraud: your rights and where to start
• How to get money back after a scam
• Where to report a scam
• Elder fraud
• Crypto and investment scams
• Zelle and payment app scams
• Alabama identity theft laws
• Alabama debt collection laws
• Alabama statute of limitations

Last updated: October 2, 2026.

This article is general legal information, not legal advice. For your specific situation, contact your payment company, the Alabama office named above, or a lawyer licensed in Alabama.

Frequently Asked Questions

Can I sue a scammer in Alabama?

Possibly, if you are a consumer under the Alabama DTPA (a natural person who bought goods or services for personal, family or household use) and the scammer's unlawful practice caused you monetary damage, and you can identify and serve them. Ala. Code section 8-19-10 allows actual damages or $100, or up to three times actual damages at the court's discretion, but an anonymous or overseas scammer is usually not reachable.

Does the Alabama DTPA award triple damages?

Only if the court chooses to. Section 8-19-10(a) lets a consumer recover actual damages or $100, whichever is greater, or up to three times actual damages in the court's discretion, considering factors such as how often and how intentionally the practice was used.

Do I have to send a demand letter before suing under the Alabama DTPA?

Generally yes. Section 8-19-10(e) requires a written demand at least 15 days before filing, describing the practice and your injury. It is not required if the business does not maintain a place of business or does not keep assets in Alabama.

How long do I have to sue under the Alabama Deceptive Trade Practices Act?

One year after you discovered or reasonably should have discovered the practice, and in most cases no more than four years after the transaction, under section 8-19-14.

Can I join a class action under the Alabama DTPA?

No. Section 8-19-10(f) bars a consumer from bringing a DTPA action on behalf of a class; only the Attorney General or a district attorney may sue in a representative capacity.

Will the Alabama Attorney General get my money back?

Not as your lawyer. The Consumer Interest Division mediates between consumers and businesses, but its complaint page says filing a complaint is not a legal action and it does not give legal advice. Call your payment company first.

Does Alabama have a crypto ATM law?

Yes. Since October 1, 2026, Ala. Code section 8-7A-28 caps cash from new kiosk customers at $1,000 a day and $10,000 a month and requires a refund to a fraud victim (in full for a new customer, half for an existing one) if the victim contacts the operator, law enforcement and the Alabama Securities Commission within 60 days and files a report.

Who do I call if an elderly person in Alabama is being scammed?

Call the Alabama Adult Abuse Hotline at 1-800-458-7214. The federal DOJ Elder Fraud Hotline (833-372-8311) also helps with fraud against anyone 60 or older, and the Alabama Securities Commission (1-800-222-1253) takes adult exploitation complaints.

Can an Alabama bank stop a transaction if it suspects elder fraud?

Yes, but it does not have to. Under Ala. Code section 8-6-193 a financial service provider may refuse or delay a transaction on an elderly or vulnerable adult's account, and must then report to the Department of Human Resources and law enforcement.

What is the small claims limit in Alabama?

$6,000, not counting interest and costs. Under Ala. Code section 12-12-31(a), the district court has exclusive jurisdiction over civil cases up to that amount.