← Regulations / Kazakhstan / Operating Models / Crypto ATM

Crypto ATM / kiosk operator in Kazakhstan

Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.

Conditional AI-Generated · Unreviewed

Crypto ATM is conditionally permitted in Kazakhstan with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Must comply with AIFC AML Rules aligned with FATF recommendations (kz.licensing.amlkyc-anti-money-laundering-know-your)
  • Must screen customers and transactions against the UN Security Council Consolidated List (kz.aml.a-un-sanctions, kz.aml.compliance-vasps-must-screen-customers)
  • Must screen against OFAC SDN List if dealing with U.S. persons or USD transactions (kz.aml.b-ofac-us-sanctions, kz.aml.compliance-vasps-must-screen-against)
  • Must screen against EU Consolidated Financial Sanctions List if doing business with EU persons/entities (kz.aml.c-eu-sanctions, kz.aml.compliance-vasps-must-screen-against)
  • Must comply with Kazakhstan's national AML/CFT Law No. 191-IV (August 28, 2009) under supervision of the Financial Monitoring Agency (FMA) (kz.aml.a-national-legislation, kz.aml.law-of-the-republic-of, kz.aml.financial-monitoring-agency-fma-the)
  • Must comply with Law on Digital Assets No. 4-VIII (Feb 6, 2023) which integrates digital asset activities into AML/CFT framework (kz.aml.law-of-the-republic-of)
  • Must adhere to AIFC-specific AML rules under AFSA supervision (kz.aml.b-astana-international-financial-centre, kz.aml.specific-regime-the-aifc-operates)

Key Restrictions

  • Must be incorporated or established as a legal entity within the AIFC (kz.licensing.must-be-incorporated-or-established)
  • Must maintain a physical office presence in the AIFC (kz.licensing.maintain-a-physical-office-presence)
  • Must have key personnel (CEO, Compliance Officer) primarily based in the AIFC (kz.licensing.have-key-personnel-eg-ceo)
  • Crypto ATM/kiosk operation likely requires multiple licenses: a PSP license (for fiat-to-crypto on/off-ramps) and potentially a DATF and/or Custodian license depending on structure (kz.licensing.license-type-providing-payment-services, kz.licensing.key-services-fiat-to-crypto-onoff-ramps-crypto, kz.licensing.license-type-operating-a-digital, kz.licensing.license-type-providing-custodian-digital)
  • Base capital requirements: PSP USD 50,000–200,000; DATF USD 300,000; Custodian USD 300,000 (kz.licensing.base-capital-this-varies-significantly, kz.licensing.digital-asset-trading-facility-datf, kz.licensing.payment-services-provider-psp-varies, kz.licensing.custodian-digital-assets-typically-usd)
  • Ongoing capital must be maintained at all times sufficient to cover regulatory capital requirements (kz.licensing.ongoing-capital-firms-must-maintain)

Key Risks

  • Strong enforcement precedent: unregistered crypto exchanges and mining operations face website blocking, asset confiscation, and criminal prosecution (kz.enforcement.afm-activities-of-a-large, kz.enforcement.kazinform-financial-monitoring-agency-blocks)
  • Strict enforcement against unlicensed financial activity — operating outside AIFC framework is treated as illegal (kz.enforcement.entity-targeted-operators-and-websites)
  • High AML/CFT scrutiny of cash-intensive business models — crypto ATMs/kiosks are inherently high-risk for money laundering
  • Regulatory ambiguity risk: the facts do not explicitly address crypto ATM/kiosk operators, requiring inference from multiple license categories (PSP + DATF + Custodian)
  • Potential need for compliance with both national (FMA) and AIFC (AFSA) regulatory frameworks simultaneously

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

License Type: Providing Payment Services Provider (PSP) services.

licensing 60% confidence

Key Services: Fiat-to-crypto on/off-ramps, crypto remittances, facilitating payments using stablecoins or other digital assets.

licensing 60% confidence

Must be incorporated or established as a legal entity within the AIFC.

licensing 60% confidence

Maintain a physical office presence in the AIFC.

licensing 60% confidence

Have key personnel (e.g., CEO, Compliance Officer) primarily based in the AIFC.

licensing 60% confidence

Base Capital: This varies significantly based on the type and scope of the license.

licensing 60% confidence

Payment Services Provider (PSP): Varies depending on the specific payment services and tiers of authorization, ranging from USD 50,000 to USD 200,000 (or KZT equivalent) for higher-tier PSPs.

licensing 60% confidence

Digital Asset Trading Facility (DATF): Typically USD 300,000 (or KZT equivalent) for non-dealing DATFs. If the DATF also acts as a Dealer, higher capital may be required.

licensing 60% confidence

Custodian (Digital Assets): Typically USD 300,000 (or KZT equivalent).

licensing 60% confidence

Ongoing Capital: Firms must maintain capital sufficient to cover their regulatory capital requirements (base capital plus operational risk requirements) at all times.

licensing 60% confidence

AML/KYC (Anti-Money Laundering / Know Your Customer):

aml 60% confidence

Compliance: VASPs must screen customers and transactions against the UN Security Council Consolidated List (individuals and entities associated with terrorism and proliferation of weapons of mass destruction, and other sanction programs).

aml 60% confidence

Compliance: VASPs must screen against OFAC's Specially Designated Nationals And Blocked Persons List (SDN List) and other relevant sanctions lists specific to programs (e.g., Russia/Ukraine, Iran, North Korea).

aml 60% confidence

Law of the Republic of Kazakhstan "On Counteracting Legalization (Laundering) of Criminal Proceeds and Financing of Terrorism" (No. 191-IV dated August 28, 2009, as amended): This is the primary AML/CFT law. It designates the Financial Monitoring Agency (FMA) as the competent authority and outlines the obligations of "financial organizations" and other reporting entities (which, under FATF standards, includes VASPs). It requires reporting entities to identify customers, monitor transactions, and report suspicious activities, including those related to terrorism financing and proliferation, which often involves sanctions screening.

aml 60% confidence

Financial Monitoring Agency (FMA): The FMA is Kazakhstan's Financial Intelligence Unit (FIU) and the primary body responsible for enforcing AML/CFT laws, including monitoring compliance with international sanctions.

aml 60% confidence

Law of the Republic of Kazakhstan "On Counteracting Legalization (Laundering) of Criminal Proceeds and Financing of Terrorism" (No. 191-IV dated August 28, 2009, as amended): This is the primary AML/CFT law. It designates the Financial Monitoring Agency (FMA) as the competent authority and outlines the obligations of "financial organizations" and other reporting entities (which, under FATF standards, includes VASPs). It requires reporting entities to identify customers, monitor transactions, and report suspicious activities, including those related to terrorism financing and proliferation, which often involves sanctions screening.

aml 60% confidence

Specific Regime: The AIFC operates under a separate legal system based on English common law, with its own independent financial regulator, the AIFC Financial Services Authority (AFSA). The AIFC is a key hub for crypto regulation in Kazakhstan.

enforcement 60% confidence

AFM: Activities of a large cryptocurrency exchange in Almaty were suppressed by law enforcement agencies (This specifically refers to an operation in February 2023, though penalty details aren't itemized.)

enforcement 60% confidence

Kazinform: Financial Monitoring Agency blocks 138 websites for illegal online casinos, cryptocurrencies (This article from Jan 2024 highlights ongoing efforts against illegal online platforms, including those related to cryptocurrencies, demonstrating continuous enforcement.)

enforcement 60% confidence

Entity Targeted: Operators and websites of unregistered cryptocurrency exchanges and peer-to-peer trading platforms. Violation Type: Unlicensed financial activity, facilitation of illegal financial operations (e.g., fraud, money laundering), violation of financial regulations. Penalty Amount: Not specified as a direct fine in publicly available reports. Outcome: Blocking of website access, criminal charges against individuals involved, seizure of funds (if traceable).

enforcement 60% confidence

Outcome: Websites were blocked, and criminal investigations were launched against individuals involved in operating these platforms. This reinforces Kazakhstan's stance against any crypto trading outside the regulated AIFC framework.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — crypto ATM/kiosk operators may operate in Kazakhstan only if licensed under the AIFC regime (likely requiring at least a PSP license for fiat-to-crypto conversion, plus potentially DATF and/or Custodian licenses), incorporated in the AIFC with physical presence and local key personnel, subject to USD 50,000–300,000+ base capital requirements and comprehensive AML/CFT obligations under both AIFC rules and national law, with strong enforcement risks for unlicensed operation.

Questions this verdict aims to answer

  • What money-transmitter / kiosk-specific license is required?
  • What cash-transaction reporting thresholds apply?
  • What enhanced-KYC obligations attach to cash-in / cash-out?