Crypto ATM / kiosk operator in Switzerland
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Switzerland with a local entity, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- Must join a FINMA-recognized SRO (e.g., VQF, SO-FIT, AOOS) which supervises AML compliance — this is the typical path for smaller crypto businesses (SRO membership 1-3 months, no minimum capital).
- KYC mandatory for cash transactions exceeding CHF 1,000 per month per customer; must verify identity and prove ownership of non-custodial wallets.
- Enhanced Due Diligence (EDD) required for high-risk clients (e.g., PEPs), unusual transactions, or third-party involvement including ongoing risk reviews and client segmentation.
- Collect personally identifiable information (PII) for all customers to prevent fraud, identity theft, and money laundering.
- Retain client identification data, beneficial owner details, and transaction records for at least 10 years per AMLA standards.
- Implement internal controls, staff training, and transaction monitoring (including blockchain analytics for amounts over CHF 1,000).
- Conduct regular risk-based reviews to keep data current.
- Report suspicious activity to MROS (Money Laundering Reporting Office Switzerland).
- Swiss Travel Rule obligations apply under AMLA for crypto transfers.
Key Restrictions
- SRO membership is the minimum regulatory path for a crypto ATM / kiosk operator (exchange activity) — no dedicated 'kiosk' or 'money transmitter' license exists; the activity is regulated as VASP financial intermediation.
- If the operator holds client crypto assets (e.g., temporarily in a hot wallet before dispensing), a banking license or FinTech license (CHF 300K capital, no lending, deposits up to CHF 100M) may be required — this could significantly increase the licensing burden for cash-out ATMs.
- FINMA applies technology-neutral regulation: the economic function determines the license requirement, not the use of crypto or kiosks.
- No minimum capital for SRO-based path, but a FinTech license (CHF 300K) or banking license (CHF 10M+) may be triggered by custody of client assets or deposit-taking.
Key Risks
- Custody trigger risk: If the ATM kiosk holds crypto in its own wallet before dispensing cash (or vice versa), FINMA may deem this 'custody of client assets,' requiring a banking/FinTech license — significantly raising entry barriers.
- High-cash AML profile: Cash-intensive kiosk operations attract enhanced FINMA scrutiny; any compliance gaps may result in enforcement actions or license revocation.
- SRO supervision variability: Different SROs may apply different levels of scrutiny; choosing the wrong SRO can lead to regulatory friction.
- FINMA guidance evolution: FINMA's AML updates (e.g., 2021 lowered thresholds for crypto) could further tighten requirements for cash-to-crypto transactions.
- No dedicated kiosk framework: The operator must self-classify under existing financial intermediary categories, creating legal uncertainty around exact obligations.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
FINMA — All financial market supervision — licensing, AML enforcement, ICO/STO guidance, stablecoin regulation
SROs (VQF, SO-FIT, AOOS) — Self-regulatory organizations for financial intermediation — common path for smaller crypto businesses
AMLA (Anti-Money Laundering Act) (1998) — AML/CFT for VASPs — strict KYC/CDD, suspicious activity reporting, Travel Rule
VASP: Activity-dependent — no single 'crypto license'. SRO membership (1-3 months, no minimum capital): exchange, brokerage. FinTech license (3-6 months, CHF 300K): deposit-taking up to CHF 100M without lending. Banking license (12-18 months, CHF 10M+): full banking. DLT Trading Facility (6-12 months): multilateral DLT securities trading.
CUSTODY: Banking license or FinTech license required for holding client crypto assets. DLT Act provides legal certainty — client crypto segregated in custodian bankruptcy.
EXCHANGE: DLT trading facility license (new FMIA category), banking license, or SRO path depending on scale. FINMA no-action letters available for regulatory clarity.
Technology Neutrality: Regulation focuses on the economic function and purpose of an asset or activity, not the underlying technology. This means that if a crypto asset or service performs a function traditionally regulated by financial law, it will be subject to those regulations.
Anti-Money Laundering Act (AMLA/GwG): Core legislation mandating AML/CFT obligations for financial intermediaries, including VASPs handling cryptocurrencies, custodians, and exchanges. It requires joining a recognized SRO and full compliance with KYC, record-keeping, and reporting.
FINMA AML Updates (e.g., September 2021): Lowered KYC thresholds for crypto transactions and mandated enhanced due diligence (EDD) under the AML/CFT framework.
Threshold: KYC mandatory for transactions exceeding CHF 1,000 per month; prove ownership of non-custodial wallets.
Enhanced Due Diligence (EDD): Required for high-risk clients (e.g., PEPs), unusual transactions, or third-party involvement; includes ongoing risk reviews and client segmentation.
Collect personally identifiable information (PII) to prevent fraud, identity theft, and money laundering.
Internal controls, staff training, and transaction monitoring (e.g., blockchain analytics for amounts over CHF 1,000) are required.
Retain client identification data, beneficial owner details, and transaction records for at least 10 years (per AMLA standards).
Conduct regular, risk-based reviews to keep data current; applies to both supervised and SRO-affiliated VASPs.
Swiss Financial Market Supervisory Authority (FINMA): Primary overseer; licenses exchanges, issues guidelines (e.g., token classification), enforces AML, and supervises banking/securities activities involving crypto.
Money Laundering Reporting Office Switzerland (MROS): Handles suspicious activity reports under AMLA.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM / kiosk operators in Switzerland must join a FINMA-recognized SRO (VQF, SO-FIT, AOOS) for AML supervision as financial intermediaries (1-3 months), apply KYC for cash transactions over CHF 1,000/month, and may face a higher licensing burden (FinTech or banking license) if the kiosk structure involves custody of client crypto assets.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?