Utah Scam and Fraud Laws: Where to Report, Your Right to Sue (2026)

Utah's main consumer protection law, the Consumer Sales Practices Act, lets a consumer who suffers a loss because a supplier used a deceptive or unconscionable practice in a consumer transaction (a deal for personal, family or household purposes) sue for actual damages plus court costs. Since May 7, 2025, there is no $2,000 minimum recovery: a 2025 bill, S.B. 42, deleted it, so guides that still promise a $2,000 minimum are out of date. The act does not provide triple damages, and attorney's fees are up to the court.

Utah also caps how much cash a crypto ATM operator may take from one customer per day (since May 6, 2026), lets banks delay a suspicious transaction from an older customer's account for up to 15 business days (up to 25 at law enforcement's request), and requires anyone who suspects a vulnerable adult is being exploited to report it. Scam complaints go to the Division of Consumer Protection in the Utah Department of Commerce, but its own complaint form warns that you should not rely on the complaint alone to fix your problem.

Information last verified on October 2, 2026. This article has not been reviewed by a licensed lawyer.

Jurisdiction scope: This guide covers Utah state law: the Utah Consumer Sales Practices Act (Utah Code Title 13, chapter 11), Utah complaint offices, Utah protections for older and vulnerable adults, Utah's crypto kiosk law and other Utah laws aimed at specific scams, and Utah court limits and deadlines. Federal refund and reporting rights are summarized briefly and covered in depth on our national guides. Out of scope: criminal defense, and the law of other states (if the scammer or business is elsewhere, that state's law may also matter).

First steps if you were scammed in Utah

Call the bank, card issuer, payment app, wire company or crypto exchange that moved your money right away; that company is usually the one that can stop or reverse a payment. Your federal rights depend on how you paid, and our guide on how to get money back after a scam walks through each payment method. If your bank says no, see what to do when a bank refuses a scam refund.

Then report it. Most scams go to the FTC at ReportFraud.ftc.gov and online crime to the FBI's IC3; our where to report a scam guide lists every federal channel. The Utah offices below are in addition to those, not instead of them. If a scammer has your Social Security number or account details, see Utah identity theft laws.

Where to report a scam in Utah

The Attorney General's office says complaints against businesses should be sent to the Division of Consumer Protection. The Division's portal also notes that it generally lacks jurisdiction over purchases made by businesses or for business use, and it points scam victims to the FTC and the FBI, and international scams to econsumer.gov.

Be realistic about what a Division complaint does. Its complaint form (version of February 10, 2026) says:

"The Division of Consumer Protection is charged with enforcing consumer protection laws. We offer assistance according to those laws. You should not rely solely on the filing of this complaint to resolve your problem."

It is a report that can lead to enforcement, not a refund request. If you want your money back, the payment company and a lawsuit against someone you can identify (below) are the routes that can produce it. The Division of Securities is equally frank about investment losses: "The Division always tries to get money back to investors, but unfortunately there is no guarantee."

Utah's consumer protection law: can you sue?

Sometimes. Section 13-11-19 of the Utah Consumer Sales Practices Act gives a private right to sue, but only over the kind of conduct the act covers. Section 13-11-4(1) defines the core violation:

"A supplier that engages in a deceptive act or practice in connection with a consumer transaction violates this chapter, whether the deceptive act or practice occurs before, during, or after the transaction."

Section 13-11-5(1) does the same for "an unconscionable act or practice in connection with a consumer transaction." Two defined terms decide whether a scam fits.

Consumer transaction. Under section 13-11-3(2), this means a sale, lease, assignment, award by chance, or other transfer of goods, services or other property "to, or apparently to, a person for: (i) primarily personal, family, or household purposes," or for certain business opportunities that require the person to spend money and perform personal services on a continuing basis in a line of work they have not done before. It also covers offers, solicitations, agreements and charitable solicitations. Securities and insurance are excluded from the definition. The act does not separately define "consumer"; the question is whether your loss came from a consumer transaction.

Supplier. Section 13-11-3(5) defines a supplier as "a seller, lessor, assignor, offeror, broker, or other person who regularly solicits, engages in, or enforces consumer transactions, whether or not the person deals directly with the consumer." A business that sold you something under false pretenses usually fits easily. Whether a one-off impostor who talked you into sending money counts as someone who "regularly" engages in consumer transactions depends on the facts; a Utah lawyer can tell you whether your situation fits.

Section 13-11-4(2) lists specific deceptive acts, several of which match common scams. Among them, a supplier violates the act if it:

• indicates that it has "a sponsorship, approval, license, certification, or affiliation" it does not have;
• takes payment and does not ship within the advertised time or 30 days, unless it offers a refund or extension, with any refund to be sent within 10 business days;
• sends an unsolicited mailing that "appears to be a billing, statement, or request for payment for a product or service the person has not ordered or used" (the fake invoice; see our tech support and fake invoice scams guide);
• runs a pyramid scheme or makes false charity claims; or
• solicits or enters into a consumer transaction with someone who lacks the mental ability to understand the transaction or whether it benefits them.

What you can recover

The damages rule is short. Section 13-11-19(2), as amended in 2025:

"A consumer who suffers loss as a result of a violation of this chapter may recover actual damages plus court costs, but not in a class action except as provided in this section."

Before May 7, 2025, this subsection read "actual damages or $2,000, whichever is greater." S.B. 42 (2025 General Session, Consumer Protection Amendments) struck those words, and the bill took effect on May 7, 2025. Many websites still describe the old $2,000 minimum. We did not find a clause in S.B. 42 saying whether the old minimum still applies to a transaction that happened before that date; if yours did, ask a Utah lawyer.

You can also ask a court, whether or not you are seeking damages, for a declaratory judgment that a practice violates the act and an order (injunction) stopping a supplier from continuing it (section 13-11-19(1)). Class actions for damages are restricted to practices already declared unlawful by Division rule or a prior judgment (section 13-11-19(4)).

The act's remedies add to, rather than replace, other claims for the same conduct (section 13-11-23), so a common-law fraud claim can be brought alongside it.

Attorney's fees

Fees are not automatic. Under section 13-11-19(5), "the court may award to the prevailing party a reasonable attorney's fee limited to the work reasonably performed" if either the supplier committed a violation or the consumer brought or kept up a suit the consumer "knew to be groundless," and the case ended in a judgment or a court-required settlement. "May" means the judge decides. It also means a consumer who sues knowing the claim is groundless risks paying the supplier's fee.

What the act does not cover

Section 13-11-22(1) says the act does not apply to, among other things, an act or practice "required or specifically permitted by or under state or federal law," the "credit terms of a transaction otherwise subject to this act," claims for personal injury or death, and public utilities regulated by the Public Service Commission. The business claiming an exemption has the burden of proving it.

Notice and deadlines

Section 13-11-19 does not set a pre-suit notice or demand requirement. We found no deadline for a private suit in chapter 11 itself. Which general Utah limitation period applies depends on how the claim is framed, so do not wait: ask a Utah lawyer early, and see the fraud deadline below.

The honest limit

A lawsuit under the act needs a supplier you can identify, serve and collect from. That often works against a Utah business, contractor or seller with a real address. It usually does not work against an anonymous caller using a spoofed number, or someone overseas who vanished with a wire or crypto transfer, and a judgment does not help if nobody can be found to pay it.

Protections for older adults in Utah

Who is protected. Utah's criminal code defines an "elder adult" as "an individual 65 years old or older," and every elder adult is a "vulnerable adult" (Utah Code section 76-5-111). So are certain dependent adults with a mental or physical impairment.

The crime and its reach. Section 76-5-111.4 makes financial exploitation of a vulnerable adult a crime, but it does not cover every scam aimed at an older person. It applies to someone who:

• is in a position of trust and confidence (a parent, spouse, adult child or other relative, joint tenant, guardian, trustee, agent under a power of attorney, conservator or caretaker), has a business relationship with the vulnerable adult, or has undue influence over them, and knowingly, by deception or intimidation, obtains or uses the person's funds, assets or property;
• knows or should know the vulnerable adult lacks the capacity to consent, and obtains or uses, or tries to obtain or use, their funds, assets or property;
• unjustly or improperly uses or manages the vulnerable adult's resources, or their power of attorney or guardianship, for someone else's profit or advantage; or
• involves a vulnerable adult who lacks the capacity to consent in criminal activity.

Whether a stranger who deceives a fully capable older adult by phone falls within it depends on those elements; we have not reviewed a court decision on that question. The penalty depends on intent and amount: intentional or knowing exploitation of $5,000 or more is a second-degree felony, and of less than $5,000 (or an amount that cannot be determined) a third-degree felony. Reckless exploitation is a class A misdemeanor, and exploitation through criminal negligence a class B misdemeanor.

A civil lawsuit. Under section 26B-6-213(1), "A vulnerable adult who suffers harm or financial loss as a result of exploitation has a private right of action against the perpetrator." If the plaintiff wins, the court "may order that the defendant pay the costs and reasonable attorney fees of the plaintiff." If the defendant wins and the court finds the suit frivolous, unreasonable or brought in bad faith, it may order the plaintiff to pay the defendant's costs and reasonable attorney fees. The statute does not multiply damages. "Exploitation" here means the offenses in sections 76-5-111.3, 76-5-111.4 and 76-5b-202 (section 26B-6-201), so the same limits on who is covered apply. If the vulnerable adult dies, the claim becomes an asset of their estate.

Everyone must report. Section 26B-6-205(1) says that if "an individual has reason to believe that a vulnerable adult is, or has been, the subject of abuse, neglect, or exploitation, the individual shall immediately report" it to Adult Protective Services or the nearest peace officer or law enforcement agency. Narrow exceptions cover clergy hearing a confession and attorneys who learn of it through a client. Willfully failing to report is a class B misdemeanor, and a person who reports in good faith is protected by immunity. Call 1-800-371-7897 (weekdays, 8:00 am to 5:00 pm) or report online at any hour.

Banks can hit pause. Utah's Financial Exploitation Prevention Act (Utah Code Title 7, chapter 26) lets a covered financial institution, including a bank, savings and loan, industrial bank, credit union or trust company, delay a transaction involving a vulnerable adult, defined for this chapter as anyone 65 or older or a vulnerable adult under section 26B-6-201. Section 7-26-301(1) allows the delay if "a qualified individual reasonably believes that executing the requested transaction will result in financial exploitation of the vulnerable adult," or if law enforcement provides information showing it is reasonable to believe exploitation is occurring. The rules:

1. The delay is permitted, not required: the institution "may" delay.
2. It must notify each authorized party on the account within two business days, though it can leave out someone it reasonably believes is attempting the exploitation.
3. The delay ends when the institution reasonably determines there is no exploitation, or 15 business days after it began, whichever is first.
4. At law enforcement's request it may extend the delay to no more than 25 business days after the delay began, and a court can extend or shorten it.

"Transaction" is broad: transfers, wires, ACH payments, money orders and cashier's checks, negotiating checks, securities sales and loans (section 7-26-102). A separate section, 7-26-201, lets an institution delay a wire transfer from any consumer account, regardless of age, if a qualified individual reasonably believes it will result in financial exploitation, subject to the same 15-business-day limit.

If you are worried about a parent's account, tell the bank directly that you suspect a scam; the delay depends on someone at the institution forming that belief. For more on how these scams work and what helps, see our elder fraud guide. For fraud against anyone 60 or older, the federal DOJ National Elder Fraud Hotline (833-372-8311) can also help you report.

Utah scam laws on the books

Crypto ATMs (virtual currency kiosks)

H.B. 72 (2026 General Session, Criminal Use of Cryptocurrency Amendments) added a Virtual Currency Kiosk Regulation chapter to Utah Code Title 13, codified as chapter 83 (sections 13-83-101 to 13-83-106) and in effect since May 6, 2026.

Daily limits. Section 13-83-102 says an operator "may not accept virtual currency kiosk transactions from a single customer that exceed a cumulative total of":

"(a) during the three calendar days following the day on which the customer completes the customer's first virtual currency kiosk transaction with the virtual currency kiosk operator, $2,000 of cash or the equivalent in virtual currency per calendar day"

After that three-day window, the limit is $5,000 per calendar day. The cap counts all of the same operator's kiosks in Utah, but it is per operator: it does not stop a customer from using a different company's machine.

Warnings and receipts. Under section 13-83-103, kiosks must disclose that the money is not insured by the FDIC or SIPC and must display this warning, in English and Spanish, prominently and in bold:

"WARNING: NEVER SEND MONEY TO SOMEONE YOU DO NOT KNOW. THESE TRANSACTIONS ARE IRREVERSIBLE. NO GOVERNMENT AGENCY OR OFFICIAL WILL EVER REQUEST PAYMENT USING THIS KIOSK. IF YOU SUSPECT FRAUD, CALL LOCAL LAW ENFORCEMENT BEFORE PROCEEDING."

Receipts must state the operator's refund policy and name the state law enforcement or government agency for reporting fraud, and the operator must run a toll-free customer service line around the clock.

No refund right. The chapter requires the receipt to state the operator's refund policy. We read all six sections and found no requirement that the operator give you a refund, so do not count on one; contact the operator's customer service line and report the scam right away.

Enforcement. The Division of Consumer Protection enforces the chapter (section 13-83-106). It can impose an administrative fine of up to $2,500 per violation, and in a court action the Division brings, a court can order disgorgement, order disgorged money paid to an injured consumer, award actual damages to an injured consumer, and impose civil penalties. The fines and civil penalties are enforcement tools, not a recovery for the victim. The same section makes a violation of the chapter a deceptive act or practice under the Consumer Sales Practices Act, which may support a private claim under section 13-11-19 for a consumer who suffers a loss, subject to the standing limits above. Our crypto and investment scams guide covers what to do after a crypto loss.

Immigration consultants and notario fraud

Utah's Immigration Consultants Registration Act (Title 13, chapter 49) bars anyone from acting as an immigration consultant for pay without registering, unless they are authorized to practice law in Utah or federally authorized to represent people before immigration authorities (section 13-49-201). A registered consultant "may only offer nonlegal assistance or advice in an immigration matter," may not claim special influence with USCIS, and may not translate a document in a way that "falsely represents or implies that the immigration consultant is an attorney" (sections 13-49-201 and 13-49-401).

Under section 13-49-404, a person "that suffers pecuniary loss because of a violation" may sue and recover "the greater of $500 or twice the amount of the pecuniary loss," plus "court costs and reasonable attorney fees as the court determines." See our guide to notario fraud.

Door-to-door, phone and mail sales: three days to cancel

Under section 13-11-4(2)(m), a supplier violates the Consumer Sales Practices Act if, in a sale over $25 made away from its place of business by direct solicitation, including "through mail, electronic mail, facsimile transmission, telephone, or any other form of direct solicitation," it fails to give written notice of the buyer's right to cancel "within three business days of the time of purchase."

Telemarketing calls

Utah's Telephone and Facsimile Solicitation Act (Title 13, chapter 25a) gives a private right to sue. Under section 13-25a-107, when its conditions are met (such as two or more solicitations that violate the act after the person objected, or certain single violations), a person may recover "the greater of $500 or the amount of the pecuniary loss, if any," plus court costs and reasonable attorneys' fees, and if the violation was knowing and willful, the court may award treble the person's pecuniary loss. For how phone scams work and what to do after a suspicious call, see our phishing, smishing and vishing guide.

Suing a scammer or a business in Utah

Small claims court. Utah small claims court hears claims up to $20,000 from January 1, 2025, through December 31, 2029 (Utah Code section 78A-8-102). The Utah courts explain: "The most you can ask for is $20,000. That amount includes lawyer fees, but does not include court costs or interest." The limit rises to $25,000 on January 1, 2030. The defendant must live in, or the debt must have arisen within, the court's area, and small claims court can award money only; it cannot order someone to do something.

Deadlines. A lawsuit "for relief on the ground of fraud or mistake" must be brought within three years, and it "does not accrue until the discovery by the aggrieved party of the facts constituting the fraud or mistake" (section 78B-2-305). The Consumer Sales Practices Act has no deadline of its own, as noted above. Our Utah statute of limitations guide covers other civil deadlines.

Who you can actually reach. Lawsuits work against people and businesses with a name, an address and assets. A scammer hiding behind a fake identity, a spoofed caller ID or an overseas account is usually not reachable through a Utah court. In those cases, the payment company, a fast report to law enforcement and protecting your identity are where your effort pays off. Our guide on when a lawyer helps after a scam explains when a case is worth bringing.

Related guides

• Scams and fraud: your rights and where to start
• How to get money back after a scam
• Where to report a scam
• Zelle and payment app scams
• Elder fraud
• Crypto and investment scams
• Utah identity theft laws
• Utah debt collection laws
• Utah statute of limitations

Last updated: October 2, 2026.

This article is general legal information, not legal advice. For your specific situation, contact your payment company, the Utah office named above, or a lawyer licensed in Utah.

Frequently Asked Questions

Can I sue a scammer in Utah?

Possibly, if you can identify and serve them and your loss came from a supplier's deceptive or unconscionable act in a consumer transaction (a deal for personal, family or household purposes). Utah Code section 13-11-19 then allows actual damages plus court costs, but an anonymous or overseas scammer is usually not reachable through a Utah court.

Does Utah's consumer protection law still pay $2,000 minimum damages?

Not under the current text. S.B. 42 (2025) deleted the '$2,000, whichever is greater' language from section 13-11-19(2), effective May 7, 2025; a consumer now recovers actual damages plus court costs. If your transaction happened before that date, ask a Utah lawyer whether the old rule matters.

Does the Utah Consumer Sales Practices Act award triple damages?

No. Section 13-11-19 provides actual damages plus court costs, with no multiplier. The separate telemarketing law (section 13-25a-107) allows treble pecuniary loss for knowing and willful violations.

Will I get my attorney's fees back if I win?

Maybe. Under section 13-11-19(5), the court may award a reasonable attorney's fee to the prevailing party when a supplier violated the act; it is the judge's call, not automatic. A consumer who knowingly brings a groundless suit can be ordered to pay the supplier's fee.

Will the Division of Consumer Protection get my money back?

Do not expect it. The Division's complaint form says it enforces consumer protection laws and that you should not rely solely on filing the complaint to resolve your problem. Contact your payment company for a reversal and consider a lawsuit against a business you can identify.

Is there a limit on crypto ATM deposits in Utah?

Yes, since May 6, 2026. Under section 13-83-102, an operator may not accept more than $2,000 a day from a customer during the three calendar days after the customer's first transaction with that operator, and $5,000 a day after that, across that operator's Utah kiosks.

Can I get a refund from a Utah crypto ATM?

The kiosk law does not require one. Receipts must state the operator's refund policy and where to report fraud, so call the operator's toll-free line and report the scam right away. The Division of Consumer Protection enforces the kiosk rules.

Who do I call if an elderly person in Utah is being scammed?

Call Adult Protective Services at 1-800-371-7897 (weekdays, 8:00 am to 5:00 pm) or report online 24/7. Utah law requires anyone with reason to believe a vulnerable adult is being exploited to report it to APS or law enforcement.

Can a Utah bank stop a transaction if it suspects elder fraud?

It may. Under Title 7, chapter 26, a bank or credit union may delay a transaction involving a customer 65 or older (or another vulnerable adult) if it reasonably believes it will result in financial exploitation. The delay lasts up to 15 business days, or up to 25 business days from the start at law enforcement's request.

What is the small claims limit in Utah?

$20,000 from 2025 through 2029, including attorney fees but not court costs or interest (Utah Code section 78A-8-102). It rises to $25,000 on January 1, 2030.