← Regulations / Antigua and Barbuda / Operating Models / Crypto ATM

Crypto ATM / kiosk operator in Antigua and Barbuda

Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.

Conditional AI-Generated · Unreviewed

Crypto ATM is conditionally permitted in Antigua and Barbuda with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Licensing under the Digital Assets Business Act (DAB Act) 2020, overseen by the Financial Services Regulatory Commission (FSRC)
  • Customer Due Diligence (CDD): robust KYC for identifying and verifying clients (individuals and legal entities) — government-issued photo ID, proof of address, date of birth, nationality for individuals; entity verification, legal form, and 25%+ beneficial ownership identification for legal persons
  • Ongoing monitoring: continuous scrutiny of transactions throughout the business relationship to ensure consistency with customer knowledge and risk profile
  • Suspicious Transaction Reporting (STR) to the FIU — must report if VASP knows, suspects, or has reasonable grounds to suspect funds are proceeds of crime or related to terrorist financing, regardless of amount or completion status
  • Enhanced Due Diligence (EDD) for higher-risk customers including PEPs, customers from high-risk jurisdictions, complex/unusual transactions, and customers in sectors susceptible to ML/TF — must determine source of funds and source of wealth for high-risk customers
  • Sanctions screening against national and international sanctions lists
  • Record-keeping for a specified period (typically 5 years)
  • Travel Rule compliance for virtual asset transfers — obtain and transmit originator and beneficiary information
  • Conduct institutional risk assessments and apply a risk-based approach to customer categorization
  • Compliance with the Anti-Money Laundering and Prevention of Terrorism Act and the Prevention of Terrorism Act 2005 (as amended)
  • Fit and proper assessments of all directors, senior management, significant shareholders, and beneficial owners by the FSRC

Key Restrictions

  • Must be licensed under the Digital Assets Business Act (DAB Act) 2020 before commencing operations in or from Antigua and Barbuda
  • Must maintain a significant operational presence in Antigua and Barbuda including a physical office, local management, and a registered agent
  • Key personnel such as the Compliance Officer and MLRO may be required to be resident in Antigua and Barbuda
  • Must demonstrate robust and secure IT systems, cybersecurity measures, data protection protocols, business continuity plans, and cold storage solutions for large holdings of digital assets
  • Must maintain capital sufficient to meet liabilities and obligations — minimum capital likely in the range of USD $100,000–$250,000+ as determined by the FSRC
  • Subject to the 'fit and proper persons' standard for all directors, senior management, significant shareholders, and beneficial owners assessed by the FSRC
  • Must submit a comprehensive business plan, audited financial statements (initial and ongoing), and evidence of robust internal controls and governance structure

Key Risks

  • High-cash AML risk profile of crypto ATMs/kiosks attracts enhanced regulatory scrutiny and risk of enforcement action from the FSRC
  • Antigua and Barbuda is under increased monitoring by FATF (grey-listed), creating elevated regulatory and reputational risk for operators
  • Public disclosure of enforcement actions may be less detailed/transparent in Antigua compared to larger financial centers, creating uncertainty about enforcement precedent
  • While incorporated in Antigua, operators whose primary customer base is elsewhere risk enforcement actions by other jurisdictions' regulators
  • The DABA licensing process is capital-intensive (USD $100K–$250K+) and multi-month, representing a high upfront cost for a kiosk operation
  • Cash-transaction reporting thresholds specific to crypto ATMs are not clearly specified in available facts — operators must verify specific local currency thresholds for cash transaction reporting with the FSRC/FIU

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 92% confidence

The DABA requires a licensee to maintain capital sufficient to meet its liabilities and obligations.

licensing 95% confidence

The FSRC determines the specific minimum capital requirements, which can vary based on the type and scope of the digital asset business activities. Historically, capital requirements for various financial licenses in offshore jurisdictions can range from USD $100,000 to $250,000 or more, and for digital asset businesses, it's expected to be substantial to ensure solvency and protect clients. Applicants must demonstrate robust financial standing.

licensing 85% confidence

This is a cornerstone requirement, heavily influenced by FATF standards. Licensees must implement comprehensive Anti-Money Laundering (AML) and Counter-Financing of Terrorism (CFT) policies and procedures.

licensing 95% confidence

Customer Due Diligence (CDD): Robust KYC procedures for identifying and verifying clients (individuals and legal entities).

licensing 95% confidence

Ongoing Monitoring: Continuous monitoring of transactions and business relationships for suspicious activity.

licensing 95% confidence

Reporting: Reporting of suspicious transactions to the national Financial Intelligence Unit (FIU).

licensing 95% confidence

Sanctions Screening: Screening clients against national and international sanctions lists.

licensing 95% confidence

Record Keeping: Maintaining records for a specified period (typically 5 years).

licensing 100% confidence

Compliance with the Travel Rule for virtual asset transfers, now integrated under frameworks like MiCA, requires VASPs to obtain and transmit originator and beneficiary information, including standardized identifiers such as Legal Entity Identifiers (LEIs) where applicable, as part of evolving global regulatory infrastructure.

licensing 95% confidence

Compliance with Antigua and Barbuda's specific anti-money laundering legislation (e.g., the Anti-Money Laundering and Prevention of Terrorism Act) is mandatory, but the cited evidence does not reference any singular 'Money Laundering (Prevention) Act' in the AG jurisdiction, and the sources provided are from the U.S., Singapore, and Australia, not Antigua and Barbuda.

licensing 90% confidence

While not always a requirement for a physical office for all license types, entities generally need to establish a significant operational presence, which often includes a physical office, local management, and a registered agent in Antigua and Barbuda.

licensing 90% confidence

Key personnel, such as the Compliance Officer and Money Laundering Reporting Officer (MLRO), may be required to be resident in Antigua and Barbuda.

licensing 95% confidence

All directors, senior management, significant shareholders, and beneficial owners must undergo rigorous "fit and proper" assessments by the FSRC. This involves background checks, demonstrating competence, integrity, and sound financial standing.

licensing 90% confidence

Applicants must demonstrate that they have robust and secure IT systems, cybersecurity measures, data protection protocols, and business continuity plans to protect client assets and data. This includes cold storage solutions for large holdings of digital assets.

licensing 95% confidence

A comprehensive business plan outlining the intended operations, target market, risk management framework, internal controls, and corporate governance structure.

licensing 70% confidence

Initial application often requires audited financial statements (for existing businesses) and ongoing submission of audited financials is a licensing condition.

licensing 90% confidence

The 'fit and proper persons' standard is currently enforced by the Clean Energy Regulator for ANREU account holders and by FERC for licensee fitness, but it is not part of the EPA's Agricultural Worker Protection Standard.

aml 90% confidence

The correct name of the Antigua & Barbuda legislation is the Digital Assets Business Act, 2020 (as amended by the Digital Assets Business (Amendment) Act, 2020), not 'Digital Assets (Business) Act, 2020 (DAFIA)'.

aml 95% confidence

This is the specific law that defines 'virtual assets' and 'virtual asset service providers,' establishes a licensing regime, and outlines AML/CFT obligations for VASPs. It mandates that VASPs implement measures to combat money laundering and terrorist financing in accordance with the Money Laundering (Prevention) Act and the Prevention of Terrorism Act. Following the State Bank of Pakistan's April 2026 notification, licensed VASPs may now access banking services under strict regulation.

aml 95% confidence

The Anti-Money Laundering and Countering the Financing of Terrorism Programs rule (2026) and FATF Guidance (2025) establish modern AML obligations including CDD, record-keeping, STR, and screening requirements for financial institutions and DNFBPs, which now explicitly extend to VASPs, superseding any 1996-era framework in AG.

aml 75% confidence

The current operative law for terrorism prosecutions in Nigeria is the Terrorism (Prevention) Act, 2011 (as amended), likely by the 2022 amendment, not the 2005 Act.

aml 100% confidence

Proceeds of Crime Act, 1993 (as amended)

aml 85% confidence

Free Trade & Processing Zone Act, 1994 (as amended) is the primary legislation legalizing and governing online gaming/iGaming in Antigua and Barbuda, with oversight by the Financial Services Regulatory Commission (FSRC)

aml 90% confidence

Identification and Verification:

aml 95% confidence

For Individuals: Obtain and verify identity using reliable independent sources (e.g., government-issued photo ID, proof of address, date of birth, nationality).

aml 90% confidence

For Legal Persons/Arrangements (Companies, Trusts): Obtain and verify identity of the entity, its legal form, proof of existence, powers governing the entity, names of relevant persons (directors, trustees), and the beneficial owners (persons who ultimately own or control 25% or more of the entity).

aml 95% confidence

Purpose and Intended Nature of Business Relationship: Understand the reasons for establishing the relationship and the expected types of transactions.

aml 95% confidence

Scrutinize transactions throughout the course of the relationship to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile.

aml 90% confidence

Keep customer identification data, beneficial ownership information, and risk assessments up-to-date.

aml 98% confidence

Conduct institutional risk assessments and apply a risk-based approach to individual customers, categorizing them based on factors such as geographic location, product/service type, delivery channel, and transaction value.

aml 85% confidence

Apply risk-calibrated, continuous, and technology-driven Enhanced Due Diligence (EDD) for higher-risk customers, integrated into a dynamic control plane rather than a static checklist.

aml 85% confidence

Politically Exposed Persons (PEPs) and their family members/close associates.

aml 85% confidence

Customers from AG (Antigua and Barbuda) are from a jurisdiction under increased monitoring by FATF, but FATF policy explicitly prohibits de-risking or blanket exclusion of all customers from such jurisdictions, requiring instead a risk-based approach.

aml 90% confidence

Transactions of a complex, unusually large, or unusual pattern.

aml 90% confidence

Customers engaged in activities known to be susceptible to ML/TF.

aml 95% confidence

VASPs must determine the source of funds and source of wealth for high-risk customers.

aml 95% confidence

Sanctions Screening: Screen customers and transactions against national and international sanctions lists.

aml 95% confidence

Reporting Obligation: If a VASP knows, suspects, or has reasonable grounds to suspect that funds are proceeds of a criminal activity, or are related to terrorist financing, it must promptly report this to the FIU. This applies regardless of the amount or whether the transaction is completed.

enforcement 20% confidence

Nature of Regulation: The Financial Services Regulatory Commission (FSRC) of Antigua and Barbuda is the primary regulator for financial services, including digital assets. Antigua enacted the Digital Assets Business Act (DAB Act) in 2020 to regulate virtual asset service providers (VASPs). Their approach tends to be more focused on licensing and compliance rather than frequent public enforcement actions against major players.

enforcement 20% confidence

Transparency: Public disclosure of enforcement actions, especially with specific penalties and dates, may be less common or less detailed in smaller jurisdictions compared to larger financial centers like the US, UK, or EU.

enforcement 20% confidence

Jurisdictional Focus: While companies may incorporate in Antigua, their primary operational hubs and customer bases often lie elsewhere, leading to enforcement actions being initiated by regulators in those other jurisdictions.

enforcement 20% confidence

Regulator Name: Financial Services Regulatory Commission (FSRC)

enforcement 20% confidence

Relevant Legislation: Digital Assets Business Act (DAB Act) 2020

enforcement 20% confidence

Scope: The DAB Act governs any person carrying on or purporting to carry on a digital assets business from within Antigua and Barbuda or to or from Antigua and Barbuda, requiring licenses for activities such as virtual asset exchange, transfer, custody, and participation in financial services related to initial coin offerings.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — crypto ATM/kiosk operators may operate in or from Antigua and Barbuda only after obtaining a DABA license from the FSRC, which requires a local physical presence, resident key personnel, robust AML/CFT programs (including CDD, EDD, STR, Travel Rule compliance, sanctions screening, and record-keeping), sufficient capital (likely USD $100K–$250K+), and fit-and-proper assessments for all senior personnel.

Questions this verdict aims to answer

  • What money-transmitter / kiosk-specific license is required?
  • What cash-transaction reporting thresholds apply?
  • What enhanced-KYC obligations attach to cash-in / cash-out?