Crypto ATM / kiosk operator in Fiji
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Fiji with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- CDD required under FTRA 2004: obtain and verify identity (full name, DOB, residential address, nationality) from reliable independent sources (e.g. national ID, passport, driver's license) for all customers.
- Beneficial ownership identification required — identify ultimate natural person(s) with 25% or more ownership/control.
- Enhanced Due Diligence (EDD) mandatory for high-risk situations: customers from high-risk jurisdictions, PEPs, complex/unusually large transactions, customers in high-risk sectors (virtual assets are higher risk), non-face-to-face business relationships.
- Source of funds/wealth information required in high-risk situations.
- Suspicious Transaction Reports (STRs) — no monetary threshold; any suspected ML/TF transaction (including attempted) must be reported promptly to the FIU.
- No tipping-off prohibition applies.
- Internal reporting procedures and designated AML Compliance Officer required.
- Record-keeping: all CDD information, transaction records and STR records must be maintained.
- Any entity operating a crypto ATM/kiosk is considered a 'financial institution' or DNFBP under Fiji's AML/CFT framework (FTRA 2004).
- VASPs must comply with FATF standards — Fiji's FATF Mutual Evaluation Report (2022) highlights regulatory focus on virtual assets.
Key Restrictions
- Crypto is not legal tender in Fiji; RBF has repeatedly warned against cryptocurrencies.
- No specific VASP or crypto-ATM licensing regime exists — any operator would need to be structured as a licensed financial services provider under the RBF.
- Any platform facilitating exchange of cash for crypto would likely need RBF approval as a financial market operator or securities exchange if security tokens are involved.
- Prospectus requirements under Companies Act 2015 may apply if kiosk offers tokens deemed securities (e.g., investment tokens).
- RBF has a cautious/restrictive stance on crypto — repeated public warnings and advisories against crypto use (2021, 2022, 2023).
- Foreign exchange implications require RBF approval for any significant capital movements or foreign currency transactions.
Key Risks
- No specific crypto-ATM/kiosk license exists — operator must navigate general financial services licensing under RBF, which carries high uncertainty and no precedent.
- RBF has issued multiple public warnings against crypto (2021-2023), signaling hostility and potential future enforcement against unregulated operators.
- Fiji's FATF Mutual Evaluation Report (2022) highlights gaps in VASP regulation — operator may face sudden regulatory changes or crackdowns as Fiji moves to comply with FATF standards.
- High AML/CFT risk profile (cash-for-crypto) without clear regulatory guidance on cash-transaction reporting thresholds specific to crypto kiosks.
- No legal precedent for crypto ATM operations in Fiji — regulatory sandbox or exemptions are untested.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
AML/CFT Compliance: Any entity (exchange, broker, OTC desk) involved in the secondary trading of virtual assets (whether securities or not) is considered a "financial institution" or "designated non-financial business and profession" under Fiji's Anti-Money Laundering and Counter-Financing of Terrorism Act 2017. They would be subject to stringent AML/CFT obligations, including customer due diligence (KYC), suspicious transaction reporting, and record-keeping.
Licensing: The issuer or any entity advising on, marketing, or facilitating the offering of such security tokens may need to be licensed as a financial services provider by the RBF or other relevant authorities, depending on the nature of their activities (e.g., an investment adviser, broker-dealer, or fund manager).
Licensing for Platforms: Any platform facilitating the secondary trading of security tokens would need to be appropriately licensed as a securities exchange or a financial market operator by the RBF. Given the lack of specific crypto licenses, this would be a high bar to meet under existing legislation.
RBF Approval/Notification: For any significant capital raising, foreign exchange implications, or the introduction of new financial products, direct engagement with and potential approval from the Reserve Bank of Fiji would likely be required, especially given their cautious stance on crypto.
Prospectus Requirement: Generally, an offer of securities to the public in Fiji requires the preparation and registration of a prospectus with the Registrar of Companies. This prospectus must contain all material information necessary for investors to make an informed decision.
Financial Transactions Reporting Act 2004 (FTRA 2004): This is the foundational AML/CFT law in Fiji. It establishes the framework for reporting institutions, customer due diligence, suspicious transaction reporting, and the powers of the Financial Intelligence Unit (FIU).
Customer Identification and Verification:
Individual Customers: Obtain and verify identity using reliable, independent sources (e.g., national ID cards, passports, driver's licenses). This includes full name, date of birth, residential address, and nationality.
Beneficial Ownership: Identify and verify the ultimate natural person(s) who own or control the customer, or on whose behalf a transaction is being conducted. For legal entities, this typically involves identifying individuals with 25% or more ownership/control.
Enhanced CDD (EDD): Must be applied in higher-risk situations, which typically include:
Source of Funds/Wealth: In high-risk situations, VASPs may be required to obtain information on the source of funds or wealth of the customer.
Reporting Threshold: There is no monetary threshold for reporting. Any transaction (including attempted transactions), regardless of value, where the VASP suspects or has reasonable grounds to suspect involves money laundering, terrorism financing, or any other criminal activity, must be reported.
No Tipping-Off: VASPs and their employees are strictly prohibited from "tipping off" or informing the customer or any other third party that an STR has been filed or that an investigation is underway.
Internal Reporting: VASPs must establish internal procedures for reporting suspicious activities to a designated AML Compliance Officer, who is then responsible for filing the STR with the FIU.
All CDD information (customer identification data, beneficial ownership information).
Regulator Name: Reserve Bank of Fiji (RBF)
RBF Statement (2023) - Warning on Virtual Assets and Cryptocurrency: While a specific press release for 2023 isn't easily found, the RBF's general stance is reiterated in public speeches and financial stability reports. Their 2022 Annual Report mentions ongoing monitoring and collaboration with FIU.
RBF Statement (2021) - Warning on Virtual Assets and Cryptocurrency (example of consistent messaging):
FATF Mutual Evaluation Report for Fiji (2022) - discussing Fiji's VA framework:
FIU Typology Reports (various years, discussing virtual asset risks):
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operations in Fiji face high regulatory uncertainty: no specific VASP or ATM-operator license exists, operators would need to navigate general RBF financial services licensing and comply with FTRA 2004 AML obligations, but the RBF's consistently cautious public stance (2021-2023) and lack of established precedent create material operational and enforcement risk.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?