Crypto ATM / kiosk operator in Belize
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Belize with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Must register as a VASP under the Virtual Asset Services Act 2023 (VASA) and be licensed by the Financial Services Commission (FSC, formerly IFSC).
- Designated as a 'reporting entity' under the Money Laundering and Terrorism (Prevention) Act (MLTPA), subject to full AML/CFT obligations.
- Must conduct Customer Due Diligence (CDD) including obtaining and verifying full name, date of birth, nationality, physical address, and government-issued ID.
- Must identify and verify beneficial owners (any natural person owning >25% of shares/voting rights or otherwise controlling the entity).
- Must understand the purpose and intended nature of the business relationship and expected transaction volumes/types.
- Enhanced Due Diligence (ECDD) required for higher-risk customers such as PEPs, customers from high-risk jurisdictions, or complex transactions — includes obtaining source of funds/wealth data, increased monitoring frequency, and senior management approval for establishing relationships.
- Must continuously monitor transactions and regularly update customer information, especially for high-risk customers.
- Must report suspicious transactions to the Financial Intelligence Unit (FIU) of Belize via STRs.
- Risk-based approach required: Simplified CDD permitted for lower-risk situations (if allowed by regulations); ECDD mandatory for higher-risk situations.
- Record-keeping obligations under the MLTPA apply.
Key Restrictions
- A physical presence or local incorporation in Belize is effectively required — the operator must be licensed by the FSC and subject to FIU supervision.
- Pure payment tokens (e.g., Bitcoin, Ether used as medium of exchange) are generally not securities, but any token with investment characteristics may trigger securities registration requirements under the Securities Industry Act 2021.
- No explicit kiosk-specific license class exists in provided facts — the operator must fit within the VASP licensing regime under VASA 2023.
- Must comply with the full CDD/ECDD framework under MLTPA — physical cash kiosk operations (cash-in/cash-out) inherently trigger higher-risk classification, mandating ECDD.
Key Risks
- Belize does not appear to have a specific crypto/kiosk regulatory sandbox or tailored ATM/kiosk license — high risk of regulatory ambiguity regarding how cash-transaction thresholds (e.g., CTR-equivalent reporting) apply to crypto kiosks.
- High-cash AML risk profile of kiosks may attract enhanced supervisory scrutiny from the FIU and FSC; no explicit cash transaction reporting threshold (e.g., $10,000 equivalent) was found in the provided facts.
- If any token offered at the kiosk has security-like characteristics, the operator could face dual licensing under both VASA and securities laws, significantly increasing compliance burden.
- Enforcement precedent is unclear — Belize's VASA regime is relatively recent (2023); limited public enforcement history for crypto kiosk violations.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Virtual Asset Services Act, 2023 (VASA)
Money Laundering and Terrorism (Prevention) Act (MLTPA) [Revised Edition 2011 & subsequent amendments]:
Financial Intelligence Unit (FIU) of Belize
Role: The FIU is the central national agency responsible for receiving, analyzing, and disseminating suspicious transaction reports (STRs) to law enforcement agencies.
Legal Persons/Arrangements (e.g., companies, trusts):
Understand the ownership and control structure of the legal person/arrangement.
Identify and verify the identity of the beneficial owner(s) – any natural person(s) who ultimately owns or controls the customer, directly or indirectly, through more than 25% of the shares or voting rights, or otherwise exercises control over the entity.
Purpose and Intended Nature of Business Relationship: Understand the purpose and intended nature of the business relationship (e.g., why the customer wants to use the VASP's services, expected transaction volumes and types).
Source of Funds/Wealth: For higher-risk customers or transactions, VASPs must take reasonable measures to establish the source of funds or source of wealth.
Continuously monitor the business relationship and transactions to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile.
Regularly update customer information, especially for high-risk customers.
Risk-Based Approach: VASPs must apply a risk-based approach to CDD, meaning that the intensity and nature of CDD measures should be commensurate with the money laundering and terrorism financing risks identified. This involves:
Simplified CDD (SCDD): For lower-risk situations, if permitted by regulations.
Enhanced CDD (ECDD): For higher-risk situations, such as customers from high-risk jurisdictions, Politically Exposed Persons (PEPs), or complex transactions. This includes obtaining additional information, increased frequency of monitoring, and requiring senior management approval for establishing or continuing relationships.
International Financial Services Commission (IFSC) Belize: This is the primary regulator for VASPs. Their website often contains guidance and information on regulated entities.
The Financial Services Commission (FSC), formerly the IFSC, is responsible for issuing licenses, setting regulatory standards, and overseeing compliance for entities offering international financial services, including virtual asset services.
The primary regulator for financial services in Belize, including licensing and oversight of investment businesses, securities dealing, and collective investment schemes, is now the Financial Services Commission (FSC), which replaced the International Financial Services Commission (IFSC).
Financial Intelligence Unit (FIU): Responsible for anti-money laundering (AML) and countering the financing of terrorism (CFT) supervision, including for entities dealing with virtual assets.
Payment Tokens (Pure Cryptocurrencies): Like Bitcoin or Ether, when used purely as a medium of exchange or store of value, are generally not considered securities themselves.
Investment Tokens (Security Tokens): Tokens explicitly designed to represent a share in a company, a right to dividends, a portion of profits, or an interest in a collective investment scheme or fund. This includes asset-backed tokens (e.g., representing real estate, commodities, or revenue streams).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operators may operate in Belize only if licensed as a VASP under the Virtual Asset Services Act 2023 by the Financial Services Commission, with local incorporation, full AML/CFT obligations under the MLTPA, and ECDD for higher-risk cash transactions, though no kiosk-specific license or cash-transaction reporting threshold was identified in available facts, creating ambiguity.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?