Crypto ATM / kiosk operator in Kazakhstan
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Kazakhstan with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Must comply with AIFC AML Rules aligned with FATF recommendations (kz.licensing.amlkyc-anti-money-laundering-know-your)
- Must screen customers and transactions against the UN Security Council Consolidated List (kz.aml.a-un-sanctions, kz.aml.compliance-vasps-must-screen-customers)
- Must screen against OFAC SDN List if dealing with U.S. persons or USD transactions (kz.aml.b-ofac-us-sanctions, kz.aml.compliance-vasps-must-screen-against)
- Must screen against EU Consolidated Financial Sanctions List if doing business with EU persons/entities (kz.aml.c-eu-sanctions, kz.aml.compliance-vasps-must-screen-against)
- Must comply with Kazakhstan's national AML/CFT Law No. 191-IV (August 28, 2009) under supervision of the Financial Monitoring Agency (FMA) (kz.aml.a-national-legislation, kz.aml.law-of-the-republic-of, kz.aml.financial-monitoring-agency-fma-the)
- Must comply with Law on Digital Assets No. 4-VIII (Feb 6, 2023) which integrates digital asset activities into AML/CFT framework (kz.aml.law-of-the-republic-of)
- Must adhere to AIFC-specific AML rules under AFSA supervision (kz.aml.b-astana-international-financial-centre, kz.aml.specific-regime-the-aifc-operates)
Key Restrictions
- Must be incorporated or established as a legal entity within the AIFC (kz.licensing.must-be-incorporated-or-established)
- Must maintain a physical office presence in the AIFC (kz.licensing.maintain-a-physical-office-presence)
- Must have key personnel (CEO, Compliance Officer) primarily based in the AIFC (kz.licensing.have-key-personnel-eg-ceo)
- Crypto ATM/kiosk operation likely requires multiple licenses: a PSP license (for fiat-to-crypto on/off-ramps) and potentially a DATF and/or Custodian license depending on structure (kz.licensing.license-type-providing-payment-services, kz.licensing.key-services-fiat-to-crypto-onoff-ramps-crypto, kz.licensing.license-type-operating-a-digital, kz.licensing.license-type-providing-custodian-digital)
- Base capital requirements: PSP USD 50,000–200,000; DATF USD 300,000; Custodian USD 300,000 (kz.licensing.base-capital-this-varies-significantly, kz.licensing.digital-asset-trading-facility-datf, kz.licensing.payment-services-provider-psp-varies, kz.licensing.custodian-digital-assets-typically-usd)
- Ongoing capital must be maintained at all times sufficient to cover regulatory capital requirements (kz.licensing.ongoing-capital-firms-must-maintain)
Key Risks
- Strong enforcement precedent: unregistered crypto exchanges and mining operations face website blocking, asset confiscation, and criminal prosecution (kz.enforcement.afm-activities-of-a-large, kz.enforcement.kazinform-financial-monitoring-agency-blocks)
- Strict enforcement against unlicensed financial activity — operating outside AIFC framework is treated as illegal (kz.enforcement.entity-targeted-operators-and-websites)
- High AML/CFT scrutiny of cash-intensive business models — crypto ATMs/kiosks are inherently high-risk for money laundering
- Regulatory ambiguity risk: the facts do not explicitly address crypto ATM/kiosk operators, requiring inference from multiple license categories (PSP + DATF + Custodian)
- Potential need for compliance with both national (FMA) and AIFC (AFSA) regulatory frameworks simultaneously
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
License Type: Providing Payment Services Provider (PSP) services.
Key Services: Fiat-to-crypto on/off-ramps, crypto remittances, facilitating payments using stablecoins or other digital assets.
Legal Form & Local Presence:
Must be incorporated or established as a legal entity within the AIFC.
Maintain a physical office presence in the AIFC.
Have key personnel (e.g., CEO, Compliance Officer) primarily based in the AIFC.
Base Capital: This varies significantly based on the type and scope of the license.
Payment Services Provider (PSP): Varies depending on the specific payment services and tiers of authorization, ranging from USD 50,000 to USD 200,000 (or KZT equivalent) for higher-tier PSPs.
Digital Asset Trading Facility (DATF): Typically USD 300,000 (or KZT equivalent) for non-dealing DATFs. If the DATF also acts as a Dealer, higher capital may be required.
Custodian (Digital Assets): Typically USD 300,000 (or KZT equivalent).
Ongoing Capital: Firms must maintain capital sufficient to cover their regulatory capital requirements (base capital plus operational risk requirements) at all times.
AML/KYC (Anti-Money Laundering / Know Your Customer):
A. UN Sanctions:
Compliance: VASPs must screen customers and transactions against the UN Security Council Consolidated List (individuals and entities associated with terrorism and proliferation of weapons of mass destruction, and other sanction programs).
B. OFAC (U.S.) Sanctions:
Compliance: VASPs must screen against OFAC's Specially Designated Nationals And Blocked Persons List (SDN List) and other relevant sanctions lists specific to programs (e.g., Russia/Ukraine, Iran, North Korea).
C. EU Sanctions:
A. National Legislation:
Law of the Republic of Kazakhstan "On Counteracting Legalization (Laundering) of Criminal Proceeds and Financing of Terrorism" (No. 191-IV dated August 28, 2009, as amended): This is the primary AML/CFT law. It designates the Financial Monitoring Agency (FMA) as the competent authority and outlines the obligations of "financial organizations" and other reporting entities (which, under FATF standards, includes VASPs). It requires reporting entities to identify customers, monitor transactions, and report suspicious activities, including those related to terrorism financing and proliferation, which often involves sanctions screening.
Financial Monitoring Agency (FMA): The FMA is Kazakhstan's Financial Intelligence Unit (FIU) and the primary body responsible for enforcing AML/CFT laws, including monitoring compliance with international sanctions.
Law of the Republic of Kazakhstan "On Counteracting Legalization (Laundering) of Criminal Proceeds and Financing of Terrorism" (No. 191-IV dated August 28, 2009, as amended): This is the primary AML/CFT law. It designates the Financial Monitoring Agency (FMA) as the competent authority and outlines the obligations of "financial organizations" and other reporting entities (which, under FATF standards, includes VASPs). It requires reporting entities to identify customers, monitor transactions, and report suspicious activities, including those related to terrorism financing and proliferation, which often involves sanctions screening.
B. Astana International Financial Centre (AIFC):
Specific Regime: The AIFC operates under a separate legal system based on English common law, with its own independent financial regulator, the AIFC Financial Services Authority (AFSA). The AIFC is a key hub for crypto regulation in Kazakhstan.
AFM: Activities of a large cryptocurrency exchange in Almaty were suppressed by law enforcement agencies (This specifically refers to an operation in February 2023, though penalty details aren't itemized.)
Kazinform: Financial Monitoring Agency blocks 138 websites for illegal online casinos, cryptocurrencies (This article from Jan 2024 highlights ongoing efforts against illegal online platforms, including those related to cryptocurrencies, demonstrating continuous enforcement.)
Entity Targeted: Operators and websites of unregistered cryptocurrency exchanges and peer-to-peer trading platforms. Violation Type: Unlicensed financial activity, facilitation of illegal financial operations (e.g., fraud, money laundering), violation of financial regulations. Penalty Amount: Not specified as a direct fine in publicly available reports. Outcome: Blocking of website access, criminal charges against individuals involved, seizure of funds (if traceable).
Outcome: Websites were blocked, and criminal investigations were launched against individuals involved in operating these platforms. This reinforces Kazakhstan's stance against any crypto trading outside the regulated AIFC framework.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — crypto ATM/kiosk operators may operate in Kazakhstan only if licensed under the AIFC regime (likely requiring at least a PSP license for fiat-to-crypto conversion, plus potentially DATF and/or Custodian licenses), incorporated in the AIFC with physical presence and local key personnel, subject to USD 50,000–300,000+ base capital requirements and comprehensive AML/CFT obligations under both AIFC rules and national law, with strong enforcement risks for unlicensed operation.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?