Crypto ATM / kiosk operator in Canada
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Canada with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- FINTRAC MSB registration under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act is mandatory — covers all virtual currency exchange activities including ATM/kiosk cash-for-crypto transactions.
- Must implement a FINTRAC-compliant AML/CFT program including appointed CCO, written policies, risk assessment, and ongoing compliance monitoring.
- Large cash transaction reporting (LCTR) to FINTRAC for any single cash-in/cash-out transaction of CAD $10,000 or more (or equivalent in foreign currency).
- Must report any attempted or completed suspicious transactions (STR) to FINTRAC regardless of amount when suspicion of money laundering or terrorist financing arises.
- Must verify identity of any individual transacting CAD $10,000 or more (single transaction). Enhanced KYC measures may be required based on risk assessment for cash-heavy business model.
- Must keep records of all receipt/transfer of funds (including crypto) and virtual currency exchange receipts for at least 5 years.
- Provincial securities registration (Restricted Dealer or Marketplace) likely required — kiosk operators enabling crypto-to-crypto trades may be deemed to be trading in securities under CSA Staff Notice 21-327.
Key Restrictions
- Must register with FINTRAC as an MSB (2-4 weeks) AND obtain provincial securities registration (Restricted Dealer, typically 6-18 months) — or face enforcement action.
- Provincial securities regulators (e.g. OSC, AMF, BCSC) may consider crypto-for-crypto functionality via ATM/kiosk as trading in securities, requiring registration under NI 31-103.
- Pre-registration undertakings (PRUs) restrict margin trading and limit altcoins; likely similarly limiting for kiosk operators.
- Qualified Canadian custodian required for client assets if platform holds crypto on behalf of users — may apply if kiosk provides hosted wallets rather than only instant cash-for-crypto at kiosk.
- Minimum capital of CAD $25,000–$100,000 for non-IIROC registrants (provincial Restricted Dealer).
- Must designate a Chief Compliance Officer (CCO) approved by the regulator with 3-5 years industry experience, EMPC or equivalent course completion, and direct board access.
- Geographic operating scope limited to provinces where securities registration is obtained (passport system applies, but each province must be addressed).
Key Risks
- Aggressive enforcement posture — Ontario Securities Commission (OSC) and AMF (Québec) have imposed multimillion-dollar penalties and cease-operations orders on unregistered crypto platforms (e.g. KuCoin $1.65M penalty, Binance $2.25M AMF penalty).
- High AML/cash-risk profile attracts enhanced regulatory scrutiny — cash-in/cash-out ATMs are a known vector for money laundering, increasing risk of FINTRAC compliance audits and RCMP involvement.
- Regulatory ambiguity persists on whether standalone cash-to-crypto kiosks (without custody or wallet features) require full provincial securities registration; regulators may interpret kiosk spreads as constituting a marketplace.
- Binance and Bybit exited Canada entirely rather than comply with registration requirements — precedent that Canada's regulatory demands can make operation uneconomical.
- Dual registration pathway (FINTRAC + provincial securities) creates significant compliance cost and time burden for a typical kiosk operator business model.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
FINTRAC — AML/CFT, MSB registration, transaction reporting
Proceeds of Crime (Money Laundering) and Terrorist Financing Act (2000) — AML/CFT, MSB registration
VASP: FINTRAC MSB registration (2-4 weeks) + provincial Restricted Dealer registration via CSA (6-18 months). Foreign platforms serving Canadians must register or face enforcement. Binance exited Canada rather than comply.
EXCHANGE: MSB (FINTRAC) + Restricted Dealer or Marketplace registration (provincial). Pre-registration undertakings prohibit margin trading and restrict altcoin offerings. $50K-$100K minimum capital for restricted dealers.
CUSTODY: Qualified Canadian custodian required for registered platforms. Client asset segregation mandatory.
CSA Staff Notice 21-327: Guidance on Securities Legislation for Crypto Asset Trading (via BCSC or CSA sites).
Registration framework is established through National Instrument 31-103 (NI 31-103) — Registration Requirements, Exemptions and Ongoing Registrant Obligations
All registrants must maintain minimum capital and insurance based on registration category and business activities; non-IIROC firms require CAD 25,000 to CAD 100,000 depending on category
All registrants must designate a Chief Compliance Officer (CCO) approved by the regulator who must complete the Exempt Market Products Course (EMPC) or equivalent plus CCO training
Regulators expect CCOs to have relevant industry experience, typically 3-5 years, with direct access to board/senior management and authority to implement compliance changes
Ongoing Focus on Unregistered Platforms: Securities regulators continue to target platforms operating in Canada without registration. This often results in cease trading orders, financial penalties, and requirements for platforms to either register or exit the Canadian market.
Many international crypto trading platforms that previously operated without registration have entered into pre-registration undertakings (PRUs) with provincial commissions, which are formal agreements required to continue operating while pursuing registration, rather than post-hoc settlements for past non-compliance.
KuCoin: In June 2022, the OSC obtained orders against KuCoin (Mechbit Technology Ltd.) permanently banning it from participating in Ontario's capital markets and requiring it to pay an administrative penalty of $1,650,000 and $99,754 for costs.
Binance: Following a pattern of non-compliance, Binance entered into an undertaking with the OSC in December 2022 to cease all operations in Ontario. Later, in May 2023, the AMF imposed an administrative monetary penalty of $2.25 million on Binance for operating an unregistered platform and offered non-compliant derivatives in Quebec.
Bybit: In March 2023, the OSC reached a settlement with Bybit, requiring the platform to pay $2,468,982 and provide an undertaking that it would not operate in Ontario without registration.
Registration assessment includes evaluation of business model, capital adequacy, compliance infrastructure, and individual fitness, with multiple rounds of questions and potential in-person or virtual meetings
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operators in Canada must register with FINTRAC as an MSB (for AML/CFT compliance) and secure provincial securities registration (Restricted Dealer) via the CSA process, with high capital/compliance burdens and significant enforcement risk for unregistered operation.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?