Crypto ATM / kiosk operator in Hungary
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Hungary with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- VASP registration with the Magyar Nemzeti Bank (MNB) for AML/CTF compliance under the transposition of AMLD5/AMLD6
- Compliance with Act CXXXVI of 2013 on the prevention and combating of money laundering and terrorist financing (Pmtv.)
- Customer due diligence (KYC) obligations for all customers using the kiosk
- Transaction monitoring requirements for cash-in and cash-out transactions
- Suspicious activity reporting (SAR) obligations to the MNB / financial intelligence unit
- Once MiCA enters into force (2024-2025), full CASP authorization required under Regulation (EU) 2023/1114, including operational, organizational, and prudential requirements (Art. 53, 59-67)
- Under MiCA Article 67: segregation of client crypto-assets from own assets, maintenance of records allowing immediate segregation, and return of client assets without undue delay
Key Restrictions
- Local incorporation with the MNB is required — VASP registration and/or CASP authorization are mandatory, and foreign entities offering services to Hungarian residents without authorization face prohibition (e.g. Xifra Lifestyle enforcement)
- Cash-in/cash-out thresholds for AML apply under the Pmtv. — specific local currency cash-transaction reporting threshold applies under Hungarian AML law
- No specific statutory rules exist for cold storage or segregation of client assets pre-MiCA, but general civil law fiduciary duties apply
- MiCA authorization (CASP) will impose comprehensive operational requirements beyond AML registration — the MNB will be the competent authority for Hungary
Key Risks
- The MNB has taken enforcement action against unlicensed foreign crypto operators (e.g. Xifra Lifestyle), demonstrating a willingness to prohibit services to Hungarian residents and file criminal complaints
- There are no specific statutory rules for insurance/bonding, cold storage mandates, or qualified custodian definitions pre-MiCA — creates ambiguity in compliance expectations for kiosk operators
- Hungarian police and tax authority (NAV) actively investigate crypto-related fraud and tax evasion, creating criminal and tax exposure for non-compliant operators
- MiCA transition period creates dual regime risk — operators registered as VASPs under AML law must also prepare for full CASP authorization
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
VASP Registration: Under the transposition of the EU's 5th and 6th Anti-Money Laundering Directives (AMLD5/AMLD6), custodial wallet providers are classified as Virtual Asset Service Providers (VASPs).
Obligation: VASPs, including those offering custodial services, are required to register with, or be licensed by, the Hungarian Financial Supervisory Authority (primarily the Magyar Nemzeti Bank - MNB, the Central Bank of Hungary, which oversees financial market supervision) for AML/CTF purposes.
Purpose of Registration: This registration primarily obliges the entity to comply with AML/CTF requirements, such as customer due diligence (KYC), transaction monitoring, and suspicious activity reporting, rather than specific operational custody rules.
Act CXXXVI of 2013 on the prevention and combating of money laundering and terrorist financing (Pmtv.) – This is Hungary's primary AML law, amended to include virtual asset service providers.
Authorization as a CASP: Under MiCA, any entity providing "custody and administration of crypto-assets on behalf of third parties" will be classified as a Crypto-Asset Service Provider (CASP) and will require prior authorization by a national competent authority (in Hungary, this will be the MNB).
Regulation (EU) 2023/1114 of the European Parliament and of the Council of 31 May 2023 on markets in crypto-assets, and amending Regulations (EU) No 1093/2010 and (EU) No 1095/2010 and Directives 2013/36/EU and (EU) 2019/1937 (MiCA).
Explicit Mandate: MiCA explicitly requires CASPs providing custody services to make adequate arrangements to safeguard the ownership rights of clients, particularly in the event of the CASP's insolvency.
Key Requirements (Article 67):
Issuing warnings against unlicensed service providers (often foreign entities).
Entity Targeted: Xifra Lifestyle (also known as Xifra Global, Xifra LLC). Violation Type: Unlicensed financial service provision (offering investment services related to cryptocurrency trading without the necessary MNB authorization) and operating a scheme with characteristics of a pyramid scheme. Penalty Amount: The MNB issued a public warning and a cease-and-desist order. While no specific administrative fine amount was publicly disclosed by the MNB in its initial announcement, the action effectively prohibited the entity from operating in Hungary and referred the case to law enforcement for potential criminal proceedings.
Outcome: The MNB prohibited Xifra Lifestyle from offering its services to Hungarian residents. The MNB also filed a criminal complaint against the unknown perpetrators. The platform subsequently largely ceased operations in Hungary.
MNB Warnings: The MNB often issues general warnings to consumers about the risks of crypto, or specific warnings about unlicensed foreign entities, without a formal "fine" or "penalty amount" attached, but these are crucial in protecting consumers and maintaining market integrity.
Police Investigations: Hungarian police frequently conduct investigations and make arrests related to cryptocurrency fraud, scams, and money laundering. However, these are criminal proceedings targeting individuals or criminal groups, rather than administrative enforcement actions by a financial regulator against a formal "entity" with a specific "penalty amount" in the same way the MNB acts. The outcomes are typically arrests, charges, and eventual court sentences, which are distinct from regulatory fines.
Tax Authority (NAV): The National Tax and Customs Administration (NAV) enforces tax laws on crypto income and transactions, but these are typically individual or corporate audits and assessments rather than publicly announced "enforcement actions" against specific crypto platforms with a universal "penalty."
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operators may serve Hungarian residents only after registering as a VASP with the MNB for AML compliance (Pmtv.), and will additionally require full CASP authorization under MiCA (Regulation EU 2023/1114), with local incorporation, KYC for cash transactions, and operational safeguards including asset segregation.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?