Crypto ATM / kiosk operator in Cambodia
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is not permitted in Cambodia.
Verdict Details
- Permitted
- no
- Local entity required
- No
- Licensing burden
- None
- Last updated
- 2026-07-13
AML Obligations
- No lawful pathway exists to operate crypto ATMs; however, general AML/CFT Law obligations (if hypothetically operating) would include: Customer Due Diligence (CDD) and verification of identity using reliable independent source documents (national ID, passport, driver's license, address, nationality) per Prakas 285 on AML/CFT.
- Enhanced Due Diligence (EDD) required for high-risk customers, including PEPs, customers from high-risk jurisdictions, complex or unusually large transactions, and new technologies with inherent anonymity.
- Screening customers against UN Consolidated List sanctions and PEP lists.
- Suspicious Transaction Reports (STRs) must be filed with the Cambodia Financial Intelligence Unit (CAFIU) without delay (typically within 24-48 hours of forming suspicion).
- No tipping-off prohibition applies to STRs.
- Ongoing due diligence and transaction monitoring to ensure transactions are consistent with customer risk profile.
- Record-keeping obligations for all CDD information and transactions.
- Staff training on AML/CFT obligations including sanctions compliance.
Key Restrictions
- General prohibition: The 2018 Joint Public Announcement by NBC, SERC, and General-Commissariat of National Police prohibits financial institutions and the public from buying, selling, trading, or using unauthorized virtual currencies (cryptocurrencies).
- No licensing or registration pathway exists for crypto ATM / kiosk operators — there is no recognized legal regime under which such an operation could be authorized.
- The ban has been continuously reiterated, including by the NBC Governor in 2022 and ongoing monitoring/warnings through 2023-2024.
Key Risks
- Operating a crypto ATM in Cambodia carries direct legal exposure — the 2018 ban on cryptocurrency circulation, trading, and use remains in effect and is actively enforced through public warnings and law enforcement actions.
- Enforcement risk includes potential criminal penalties under the ban (targeting unauthorized individuals/entities circulating, trading, mining, or using unauthorized virtual currencies).
- Cambodia was on the FATF grey list, heightening scrutiny on virtual asset activities and enforcement.
- Any fiat on/off-ramp through the Cambodian banking system is effectively blocked since financial institutions are prohibited from engaging with crypto.
- Reputational and secondary sanctions risk from OFAC/EU if crypto ATMs interacted with sanctioned persons or jurisdictions, even indirectly.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Prohibition on Issuance, Trading, and Use: In May 2018, the NBC, in collaboration with the Securities and Exchange Regulator of Cambodia (SERC) and the General-Commissariat of National Police, issued a joint public announcement prohibiting financial institutions and the public from buying, selling, or trading cryptocurrencies.
Legal Reference: Joint Public Announcement on the Management of Digital Currency (May 2018) by the National Bank of Cambodia, Securities and Exchange Commission of Cambodia, and the General-Commissariat of National Police. (Direct English URL often difficult to find; commonly cited as "Joint Announcement on Digital Currency, 2018").
Reiteration of the existing ban and public warnings.
Entity Targeted: The general public, unauthorized individuals/entities attempting to circulate, trade, or develop cryptocurrencies. Violation Type: Circulating, trading, mining, or using unauthorized virtual currencies, which are not recognized as legal tender or financial products in Cambodia. Penalty Amount: Not applicable for public warnings. Criminal penalties would apply for engaging in illegal financial activities or fraud.
Date: The original ban was issued in 2018/2019. Warnings have been continuously reiterated, including within the last three years.
Example of recent reinforcement (2022): The NBC Governor reinforced the ban and warned against the risks of digital assets in various forums.
Example of ongoing concern (2023-2024): Cambodian authorities continue to monitor and warn against the use of unauthorized digital assets, often linking it to broader financial stability and anti-money laundering efforts.
Identification and Verification of Customers:
For Individuals: Obtaining and verifying proof of identity (e.g., national ID card, passport, driver's license), date of birth, address, and nationality.
Enhanced Due Diligence (EDD): Required for high-risk customers, business relationships, or transactions (e.g., Politically Exposed Persons - PEPs, customers from high-risk jurisdictions, complex or unusually large transactions, new technologies with inherent anonymity).
Obligation to Report: Any VASP that suspects or has reasonable grounds to suspect that funds or other assets, regardless of the amount, are derived from criminal activity, or are related to terrorist financing, must report promptly.
Recipient: The Cambodia Financial Intelligence Unit (CAFIU).
Timeline: Reports must be made without delay, typically within 24-48 hours of forming the suspicion.
No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or to third parties that an STR has been or will be submitted.
Conducting ongoing due diligence on the business relationship and scrutinizing transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile, including, where necessary, the source of funds.
Ensuring that documents, data, or information collected under the CDD process are kept up-to-date.
Screening customers against relevant national and international sanctions lists (e.g., UN Security Council sanctions) and PEP lists.
Evidence fact kh.licensing.training-provide-regular-training-to not found (may have been renamed).
UN Sanctions: Cambodia's FIU is responsible for disseminating and ensuring compliance with the UN Consolidated List.
Risk-Based Approach: Assess their money laundering and terrorism financing risks, including sanctions risks.
General Context & AML Focus (2023):
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Not permitted — Cambodia has a comprehensive ban on cryptocurrency trading, circulation, and use since 2018 (joint NBC/SERC/Police announcement), actively reiterated through 2024, with no licensing or registration pathway for crypto ATM / kiosk operators.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?