← Regulations / Cambodia / Operating Models / Crypto ATM

Crypto ATM / kiosk operator in Cambodia

Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.

Not permitted AI-Generated · Unreviewed

Crypto ATM is not permitted in Cambodia.

Verdict Details

Permitted
no
Local entity required
No
Licensing burden
None
Last updated
2026-07-13

AML Obligations

  • No lawful pathway exists to operate crypto ATMs; however, general AML/CFT Law obligations (if hypothetically operating) would include: Customer Due Diligence (CDD) and verification of identity using reliable independent source documents (national ID, passport, driver's license, address, nationality) per Prakas 285 on AML/CFT.
  • Enhanced Due Diligence (EDD) required for high-risk customers, including PEPs, customers from high-risk jurisdictions, complex or unusually large transactions, and new technologies with inherent anonymity.
  • Screening customers against UN Consolidated List sanctions and PEP lists.
  • Suspicious Transaction Reports (STRs) must be filed with the Cambodia Financial Intelligence Unit (CAFIU) without delay (typically within 24-48 hours of forming suspicion).
  • No tipping-off prohibition applies to STRs.
  • Ongoing due diligence and transaction monitoring to ensure transactions are consistent with customer risk profile.
  • Record-keeping obligations for all CDD information and transactions.
  • Staff training on AML/CFT obligations including sanctions compliance.

Key Restrictions

  • General prohibition: The 2018 Joint Public Announcement by NBC, SERC, and General-Commissariat of National Police prohibits financial institutions and the public from buying, selling, trading, or using unauthorized virtual currencies (cryptocurrencies).
  • No licensing or registration pathway exists for crypto ATM / kiosk operators — there is no recognized legal regime under which such an operation could be authorized.
  • The ban has been continuously reiterated, including by the NBC Governor in 2022 and ongoing monitoring/warnings through 2023-2024.

Key Risks

  • Operating a crypto ATM in Cambodia carries direct legal exposure — the 2018 ban on cryptocurrency circulation, trading, and use remains in effect and is actively enforced through public warnings and law enforcement actions.
  • Enforcement risk includes potential criminal penalties under the ban (targeting unauthorized individuals/entities circulating, trading, mining, or using unauthorized virtual currencies).
  • Cambodia was on the FATF grey list, heightening scrutiny on virtual asset activities and enforcement.
  • Any fiat on/off-ramp through the Cambodian banking system is effectively blocked since financial institutions are prohibited from engaging with crypto.
  • Reputational and secondary sanctions risk from OFAC/EU if crypto ATMs interacted with sanctioned persons or jurisdictions, even indirectly.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

aml 60% confidence

Prohibition on Issuance, Trading, and Use: In May 2018, the NBC, in collaboration with the Securities and Exchange Regulator of Cambodia (SERC) and the General-Commissariat of National Police, issued a joint public announcement prohibiting financial institutions and the public from buying, selling, or trading cryptocurrencies.

aml 60% confidence

Legal Reference: Joint Public Announcement on the Management of Digital Currency (May 2018) by the National Bank of Cambodia, Securities and Exchange Commission of Cambodia, and the General-Commissariat of National Police. (Direct English URL often difficult to find; commonly cited as "Joint Announcement on Digital Currency, 2018").

enforcement 60% confidence

Entity Targeted: The general public, unauthorized individuals/entities attempting to circulate, trade, or develop cryptocurrencies. Violation Type: Circulating, trading, mining, or using unauthorized virtual currencies, which are not recognized as legal tender or financial products in Cambodia. Penalty Amount: Not applicable for public warnings. Criminal penalties would apply for engaging in illegal financial activities or fraud.

enforcement 60% confidence

Date: The original ban was issued in 2018/2019. Warnings have been continuously reiterated, including within the last three years.

enforcement 60% confidence

Example of recent reinforcement (2022): The NBC Governor reinforced the ban and warned against the risks of digital assets in various forums.

enforcement 60% confidence

Example of ongoing concern (2023-2024): Cambodian authorities continue to monitor and warn against the use of unauthorized digital assets, often linking it to broader financial stability and anti-money laundering efforts.

licensing 60% confidence

Identification and Verification of Customers:

licensing 60% confidence

For Individuals: Obtaining and verifying proof of identity (e.g., national ID card, passport, driver's license), date of birth, address, and nationality.

licensing 60% confidence

Enhanced Due Diligence (EDD): Required for high-risk customers, business relationships, or transactions (e.g., Politically Exposed Persons - PEPs, customers from high-risk jurisdictions, complex or unusually large transactions, new technologies with inherent anonymity).

licensing 60% confidence

Obligation to Report: Any VASP that suspects or has reasonable grounds to suspect that funds or other assets, regardless of the amount, are derived from criminal activity, or are related to terrorist financing, must report promptly.

licensing 60% confidence

Recipient: The Cambodia Financial Intelligence Unit (CAFIU).

licensing 60% confidence

Timeline: Reports must be made without delay, typically within 24-48 hours of forming the suspicion.

licensing 60% confidence

No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or to third parties that an STR has been or will be submitted.

licensing 60% confidence

Conducting ongoing due diligence on the business relationship and scrutinizing transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile, including, where necessary, the source of funds.

licensing 60% confidence

Ensuring that documents, data, or information collected under the CDD process are kept up-to-date.

licensing 60% confidence

Screening customers against relevant national and international sanctions lists (e.g., UN Security Council sanctions) and PEP lists.

Evidence fact kh.licensing.training-provide-regular-training-to not found (may have been renamed).

aml 60% confidence

UN Sanctions: Cambodia's FIU is responsible for disseminating and ensuring compliance with the UN Consolidated List.

aml 60% confidence

Risk-Based Approach: Assess their money laundering and terrorism financing risks, including sanctions risks.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
high

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Not permitted — Cambodia has a comprehensive ban on cryptocurrency trading, circulation, and use since 2018 (joint NBC/SERC/Police announcement), actively reiterated through 2024, with no licensing or registration pathway for crypto ATM / kiosk operators.

Questions this verdict aims to answer

  • What money-transmitter / kiosk-specific license is required?
  • What cash-transaction reporting thresholds apply?
  • What enhanced-KYC obligations attach to cash-in / cash-out?