A. All virtual currency kiosk operators shall take reasonable steps to detect and prevent fraud, including establishing and maintaining a written anti-fraud policy.
B. The anti-fraud policy shall include but not be limited to all of the following:
(1) The identification and assessment of fraud related risk areas.
(2) Procedures and controls to protect against identified risks.
(3) Allocation of responsibility for monitoring risks.
(4) Procedures for the periodic evaluation and revision of the anti-fraud procedures, controls, and monitoring mechanisms.