← Regulations / Micronesia / Operating Models / Crypto ATM

Crypto ATM / kiosk operator in Micronesia

Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.

Conditional AI-Generated · Unreviewed

Crypto ATM is conditionally permitted in Micronesia with a local entity, subject to AML obligations and medium licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
Medium
Last updated
2026-07-13

AML Obligations

  • CDD obligations under the Anti-Money Laundering and Terrorist Financing Act 2017: identification and verification of natural persons using reliable, independent source documents (e.g., government-issued ID); identification and verification of legal entities (name, form, proof of existence, senior management); beneficial ownership identification
  • Risk-based approach: Enhanced Due Diligence (EDD) required for higher-risk customers (PEPs, high-risk jurisdictions, complex/unusually large transactions)
  • Ongoing monitoring: continuous scrutiny of transactions throughout the business relationship to ensure consistency with customer knowledge and risk profile
  • Suspicious Transaction Reporting (STR): mandatory reporting of any transaction or attempted transaction reasonably suspected of ML/TF to the FSM FIU, regardless of amount or asset type
  • Travel Rule obligations: for cross-border VA transfers, collect and transmit originator/beneficiary information for transactions ≥ USD 1,000; for domestic transfers, threshold is USD 3,000 (APG report July 2022, p.23)
  • Record-keeping: maintain customer identification records, transaction records (amounts, asset types, addresses, timestamps), and business correspondence
  • No tipping-off: prohibitions against informing customers that an STR has been filed
  • Registration/licensing requirement for VASPs under 2020 amendments to AML/CFT Act, applicable to exchange between VAs and fiat, exchange between VAs, and transfer of VAs

Key Restrictions

  • No specific crypto/kiosk licensing regime exists — no dedicated law for crypto ATMs or money transmission, creating legal grey-area operating risk
  • VASPs must register and be licensed/supervised under the 2020 AML/CFT amendments (Anti-Money Laundering and Counter-Terrorist Financing Act 2011 as amended 2020), but regulations to operationalize this are not fully developed
  • Any service resembling traditional financial services (e.g., custody of fiat, remittances) may fall under the FSM Banking Act 1980, which is not designed for crypto kiosks
  • No public enforcement examples or registered/licensed VASPs exist — operating in a de facto unregulated but potentially non-compliant posture
  • Geofencing requirements not explicitly stated, but given FATF/APG pressure, operators should expect to restrict services to FSM residents only

Key Risks

  • Regulatory ambiguity: no explicit framework for crypto ATMs means the operator may be required to comply with a regime that is not yet fully defined or operationalized
  • Enforcement gap: as of APG assessments, no VASPs are identified/registered; operating could trigger regulatory attention and potential sanctions if deemed to be acting without authorization
  • Capacity limitations: FSM authorities are still developing understanding of VA risks (APG 2021/2022 findings), leading to unpredictable enforcement
  • Travel Rule compliance risk: crypto ATM cash-in/out transactions that are cross-border may trigger Travel Rule obligations at USD 1,000 threshold, which is operationally difficult for kiosks
  • FATF/APG pressure: FSM is under APG recommendation to develop and enforce a comprehensive VA/VASP regime; regulatory landscape could shift rapidly, retroactively affecting operators

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

Undefined/Indirect: The FSM currently lacks a comprehensive and explicit regulatory framework specifically for cryptocurrencies and virtual assets. The approach can be characterized as largely undefined or operating in a "grey area."

licensing 60% confidence

Partial/Indirect Application: While there's no dedicated crypto law, existing anti-money laundering (AML) and combating the financing of terrorism (CFT) legislation and regulatory bodies would likely apply to virtual asset activities, especially for entities operating within the FSM or facilitating transactions involving FSM residents. This aligns with global standards set by the Financial Action Task Force (FATF), which requires countries to regulate Virtual Asset Service Providers (VASPs).

aml 40% confidence

Anti-Money Laundering and Terrorist Financing Act 2017 (Title 27 of the FSM Code): This act establishes the general framework for combating money laundering and terrorist financing, including obligations for financial institutions and designated non-financial businesses and professions (DNFBPs). While it may not explicitly mention "virtual assets" or "VASPs" as distinct regulated entities, the FSM, as an APG member, is expected to apply these requirements to VASPs in line with FATF Recommendation 15 (now Recommendation 16 in the context of the FATF's June 2019 Guidance for a Risk-Based Approach to Virtual Assets and Virtual Asset Service Providers).

aml 40% confidence

FSM Banking Act 1980 (Title 29 of the FSM Code): This act provides the general legal framework for banking and financial services. While it does not specifically regulate VASPs, any VASP that offers services resembling traditional financial services (e.g., custody of fiat currency, remittances) might fall under the purview or interpretation of this act or require specific licensing.

aml 40% confidence

Identification and Verification:

aml 40% confidence

Beneficial Ownership: Identifying and verifying the identity of the beneficial owner(s) of the customer, and taking reasonable measures to understand the ownership and control structure of legal persons and arrangements.

aml 40% confidence

Risk-Based Approach: Applying a risk-based approach to CDD, meaning enhanced CDD (EDD) measures must be applied to higher-risk customers (e.g., Politically Exposed Persons - PEPs, customers from high-risk jurisdictions, complex or unusually large transactions, or where the customer's identity verification poses higher risk) and simplified CDD (SCDD) may be applied to lower-risk customers.

aml 40% confidence

Reporting any transaction (or attempted transaction) that gives rise to a reasonable suspicion that it may be related to money laundering, terrorist financing, or other criminal activity.

aml 40% confidence

No Tipping-Off: Prohibitions against informing the customer or any third party that an STR has been filed or that an investigation is being conducted.

aml 40% confidence

Customer Identification Records: All records obtained through CDD measures (e.g., copies of identification documents, verification data).

aml 40% confidence

Transaction Records: Records of all transactions, including amounts, types of virtual assets, sending and receiving addresses/accounts, timestamps, and any other relevant transaction data.

aml 40% confidence

Business Correspondence: All relevant business correspondence, including records of analysis performed.

aml 40% confidence

Financial Intelligence Unit (FIU) of the Federated States of Micronesia (FSM FIU)

aml 40% confidence

Legal Basis: The FSM enacted the Anti-Money Laundering and Counter-Terrorist Financing Act 2011 (as amended 2020). The 2020 amendments were specifically introduced to address FATF Recommendations on VAs and VASPs, including the Travel Rule obligations. This amendment requires VASPs to register, be licensed, and comply with AML/CFT obligations.

aml 40% confidence

Asia/Pacific Group on Money Laundering (APG) Enhanced Follow-Up Report & Technical Compliance Re-Rating - Federated States of Micronesia (July 2022). Specifically, pages 21-23 regarding Recommendations 15 (New Technologies) and 16 (Wire Transfers).

aml 100% confidence

For cross-border transfers: The Travel Rule information must be collected and transmitted for transactions equivalent to USD 1,000 or more.

aml 100% confidence

For domestic transfers: The Travel Rule information must be collected and transmitted for transactions equivalent to USD 3,000 or more.

aml 100% confidence

Exchange between virtual assets and fiat currencies.

aml 100% confidence

Exchange between one or more forms of virtual assets.

enforcement 40% confidence

Lack of a Dedicated Regulatory Framework: The FSM currently lacks a comprehensive legal and regulatory framework specifically addressing virtual assets (VAs) and virtual asset service providers (VASPs).

enforcement 40% confidence

No Registered or Licensed VASPs: As of the latest assessments, there are no known or registered VASPs operating within the FSM that would fall under a regulatory scope (if one existed).

enforcement 40% confidence

Limited Capacity and Awareness: International assessments indicate that the FSM's financial authorities are still developing their understanding and capacity to monitor and regulate the virtual asset sector.

enforcement 40% confidence

No specific legislation: The FSM had not yet enacted specific legislation or regulations to address virtual assets or virtual asset service providers (VASPs).

enforcement 40% confidence

No VASPs identified: The authorities had not identified any VASPs operating within the jurisdiction.

enforcement 40% confidence

Lack of understanding and capacity: The report highlighted a lack of understanding by supervisory authorities regarding the risks associated with virtual assets and a need to develop supervisory capacity in this area.

enforcement 40% confidence

Recommendations: The APG recommended that FSM develop a comprehensive legal and regulatory framework for VAs and VASPs, including registration, licensing, and AML/CFT obligations, and ensure appropriate supervision and enforcement capabilities.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — Crypto ATM/kiosk operation in the FSM is legally ambiguous; no dedicated kiosk or money-transmitter license exists, but VASPs are required to register and be licensed under the 2020 AML/CFT amendments (not yet fully implemented), with full AML/CTF obligations including CDD, EDD, STR, Travel Rule, and record-keeping, supervised by the FSM FIU.

Questions this verdict aims to answer

  • What money-transmitter / kiosk-specific license is required?
  • What cash-transaction reporting thresholds apply?
  • What enhanced-KYC obligations attach to cash-in / cash-out?