Crypto ATM / kiosk operator in Micronesia
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Micronesia with a local entity, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- CDD obligations under the Anti-Money Laundering and Terrorist Financing Act 2017: identification and verification of natural persons using reliable, independent source documents (e.g., government-issued ID); identification and verification of legal entities (name, form, proof of existence, senior management); beneficial ownership identification
- Risk-based approach: Enhanced Due Diligence (EDD) required for higher-risk customers (PEPs, high-risk jurisdictions, complex/unusually large transactions)
- Ongoing monitoring: continuous scrutiny of transactions throughout the business relationship to ensure consistency with customer knowledge and risk profile
- Suspicious Transaction Reporting (STR): mandatory reporting of any transaction or attempted transaction reasonably suspected of ML/TF to the FSM FIU, regardless of amount or asset type
- Travel Rule obligations: for cross-border VA transfers, collect and transmit originator/beneficiary information for transactions ≥ USD 1,000; for domestic transfers, threshold is USD 3,000 (APG report July 2022, p.23)
- Record-keeping: maintain customer identification records, transaction records (amounts, asset types, addresses, timestamps), and business correspondence
- No tipping-off: prohibitions against informing customers that an STR has been filed
- Registration/licensing requirement for VASPs under 2020 amendments to AML/CFT Act, applicable to exchange between VAs and fiat, exchange between VAs, and transfer of VAs
Key Restrictions
- No specific crypto/kiosk licensing regime exists — no dedicated law for crypto ATMs or money transmission, creating legal grey-area operating risk
- VASPs must register and be licensed/supervised under the 2020 AML/CFT amendments (Anti-Money Laundering and Counter-Terrorist Financing Act 2011 as amended 2020), but regulations to operationalize this are not fully developed
- Any service resembling traditional financial services (e.g., custody of fiat, remittances) may fall under the FSM Banking Act 1980, which is not designed for crypto kiosks
- No public enforcement examples or registered/licensed VASPs exist — operating in a de facto unregulated but potentially non-compliant posture
- Geofencing requirements not explicitly stated, but given FATF/APG pressure, operators should expect to restrict services to FSM residents only
Key Risks
- Regulatory ambiguity: no explicit framework for crypto ATMs means the operator may be required to comply with a regime that is not yet fully defined or operationalized
- Enforcement gap: as of APG assessments, no VASPs are identified/registered; operating could trigger regulatory attention and potential sanctions if deemed to be acting without authorization
- Capacity limitations: FSM authorities are still developing understanding of VA risks (APG 2021/2022 findings), leading to unpredictable enforcement
- Travel Rule compliance risk: crypto ATM cash-in/out transactions that are cross-border may trigger Travel Rule obligations at USD 1,000 threshold, which is operationally difficult for kiosks
- FATF/APG pressure: FSM is under APG recommendation to develop and enforce a comprehensive VA/VASP regime; regulatory landscape could shift rapidly, retroactively affecting operators
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Undefined/Indirect: The FSM currently lacks a comprehensive and explicit regulatory framework specifically for cryptocurrencies and virtual assets. The approach can be characterized as largely undefined or operating in a "grey area."
Partial/Indirect Application: While there's no dedicated crypto law, existing anti-money laundering (AML) and combating the financing of terrorism (CFT) legislation and regulatory bodies would likely apply to virtual asset activities, especially for entities operating within the FSM or facilitating transactions involving FSM residents. This aligns with global standards set by the Financial Action Task Force (FATF), which requires countries to regulate Virtual Asset Service Providers (VASPs).
Anti-Money Laundering and Terrorist Financing Act 2017 (Title 27 of the FSM Code): This act establishes the general framework for combating money laundering and terrorist financing, including obligations for financial institutions and designated non-financial businesses and professions (DNFBPs). While it may not explicitly mention "virtual assets" or "VASPs" as distinct regulated entities, the FSM, as an APG member, is expected to apply these requirements to VASPs in line with FATF Recommendation 15 (now Recommendation 16 in the context of the FATF's June 2019 Guidance for a Risk-Based Approach to Virtual Assets and Virtual Asset Service Providers).
FSM Banking Act 1980 (Title 29 of the FSM Code): This act provides the general legal framework for banking and financial services. While it does not specifically regulate VASPs, any VASP that offers services resembling traditional financial services (e.g., custody of fiat currency, remittances) might fall under the purview or interpretation of this act or require specific licensing.
Beneficial Ownership: Identifying and verifying the identity of the beneficial owner(s) of the customer, and taking reasonable measures to understand the ownership and control structure of legal persons and arrangements.
Risk-Based Approach: Applying a risk-based approach to CDD, meaning enhanced CDD (EDD) measures must be applied to higher-risk customers (e.g., Politically Exposed Persons - PEPs, customers from high-risk jurisdictions, complex or unusually large transactions, or where the customer's identity verification poses higher risk) and simplified CDD (SCDD) may be applied to lower-risk customers.
Reporting any transaction (or attempted transaction) that gives rise to a reasonable suspicion that it may be related to money laundering, terrorist financing, or other criminal activity.
No Tipping-Off: Prohibitions against informing the customer or any third party that an STR has been filed or that an investigation is being conducted.
Customer Identification Records: All records obtained through CDD measures (e.g., copies of identification documents, verification data).
Transaction Records: Records of all transactions, including amounts, types of virtual assets, sending and receiving addresses/accounts, timestamps, and any other relevant transaction data.
Business Correspondence: All relevant business correspondence, including records of analysis performed.
Financial Intelligence Unit (FIU) of the Federated States of Micronesia (FSM FIU)
Legal Basis: The FSM enacted the Anti-Money Laundering and Counter-Terrorist Financing Act 2011 (as amended 2020). The 2020 amendments were specifically introduced to address FATF Recommendations on VAs and VASPs, including the Travel Rule obligations. This amendment requires VASPs to register, be licensed, and comply with AML/CFT obligations.
Asia/Pacific Group on Money Laundering (APG) Enhanced Follow-Up Report & Technical Compliance Re-Rating - Federated States of Micronesia (July 2022). Specifically, pages 21-23 regarding Recommendations 15 (New Technologies) and 16 (Wire Transfers).
For cross-border transfers: The Travel Rule information must be collected and transmitted for transactions equivalent to USD 1,000 or more.
For domestic transfers: The Travel Rule information must be collected and transmitted for transactions equivalent to USD 3,000 or more.
Exchange between virtual assets and fiat currencies.
Exchange between one or more forms of virtual assets.
Lack of a Dedicated Regulatory Framework: The FSM currently lacks a comprehensive legal and regulatory framework specifically addressing virtual assets (VAs) and virtual asset service providers (VASPs).
No Registered or Licensed VASPs: As of the latest assessments, there are no known or registered VASPs operating within the FSM that would fall under a regulatory scope (if one existed).
Limited Capacity and Awareness: International assessments indicate that the FSM's financial authorities are still developing their understanding and capacity to monitor and regulate the virtual asset sector.
No specific legislation: The FSM had not yet enacted specific legislation or regulations to address virtual assets or virtual asset service providers (VASPs).
No VASPs identified: The authorities had not identified any VASPs operating within the jurisdiction.
Lack of understanding and capacity: The report highlighted a lack of understanding by supervisory authorities regarding the risks associated with virtual assets and a need to develop supervisory capacity in this area.
Recommendations: The APG recommended that FSM develop a comprehensive legal and regulatory framework for VAs and VASPs, including registration, licensing, and AML/CFT obligations, and ensure appropriate supervision and enforcement capabilities.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operation in the FSM is legally ambiguous; no dedicated kiosk or money-transmitter license exists, but VASPs are required to register and be licensed under the 2020 AML/CFT amendments (not yet fully implemented), with full AML/CTF obligations including CDD, EDD, STR, Travel Rule, and record-keeping, supervised by the FSM FIU.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?