Crypto ATM / kiosk operator in Liechtenstein
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Liechtenstein with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Registration with the FMA as a VT Exchange Service Provider under the TVTG (Blockchain Act) is mandatory for crypto ATM operators facilitating exchange of cash for crypto (li.licensing.requirement-registration-with-the-fma, li.licensing.definition-under-tvtg-a-vt)
- Full AML/CFT compliance under the Due Diligence Act (SPG/Sorgfaltspflichtgesetz) and the Ordinance on Professional Due Diligence (SPV), covering identification, verification, UBO identification, ongoing monitoring, and suspicious transaction reporting (li.aml.law-on-professional-due-diligence, li.aml.ordinance-on-professional-due-diligence)
- Customer identification and verification using official identification documents (passport, national ID) for natural persons; entity identification and UBO identification for legal persons (li.aml.identification-and-verification-of-the, li.aml.for-natural-persons-obtain-and, li.aml.for-legal-entities-companies-foundations)
- Screening customers and UBOs against national and international sanctions lists (UN, EU, OFAC) and PEP lists (li.aml.screening-customers-and-their-ubos)
- Establish Source of Funds (SoF) and Source of Wealth (SoW) for higher-risk relationships or significant transactions — cash-in/cash-out crypto ATM operations likely trigger this requirement given their high-cash AML risk profile (li.aml.source-of-funds-sof-source, li.aml.for-higher-risk-relationships-significant-transactions)
- Continuous transaction monitoring to ensure activity is consistent with customer risk profile (li.aml.vasps-must-continuously-monitor-the)
- Ongoing reporting and record-keeping obligations supervised by the Financial Market Authority (FMA) Liechtenstein (li.licensing.regulator-name-financial-market-authority)
Key Restrictions
- Must be registered as a VT Exchange Service Provider (or potentially VT Transfer Service Provider / VT Payment Service Provider depending on exact service scope) with the FMA under the TVTG (li.licensing.definition-under-tvtg-a-vt, li.licensing.requirement-registration-with-the-fma)
- A Liechtenstein-incorporated entity is required — the FMA registers and supervises VT Service Providers as regulated entities with local presence (li.licensing.regulator-name-financial-market-authority, li.licensing.withdrawing-or-refusing-licenses-for)
- If the kiosk operator holds private keys for customers, additional classification as a VT Key Depository applies (li.licensing.vt-key-depository-a-person)
- If the operator holds tokens in its own name for clients, classification as a VT Protector applies (li.licensing.vt-protector-a-person-who)
- If fiat payment processing is involved beyond cash, traditional Payment Services Act (Zahlungsdienstleistungsgesetz) obligations may also attach (li.licensing.traditional-payment-services-if-the)
Key Risks
- FMA actively issues public warnings, cease-and-desist orders, and withdraws licenses for non-compliance — unauthorized operation carries immediate enforcement exposure (li.enforcement.entity-targeted-various-companies-identified, li.enforcement.outcome-public-notification-of-unauthorized, li.licensing.issuing-cease-and-desist-orders)
- Crypto ATM (cash-intensive) operations are high-risk per the AML framework, likely requiring enhanced due diligence (EDD) and SoF/SoW documentation on every cash transaction above relatively low thresholds (li.aml.source-of-funds-sof-source, li.aml.for-higher-risk-relationships-significant-transactions)
- No explicit cash-transaction reporting threshold (e.g., $10,000 equivalent) was provided in the facts — ambiguity in applicable local cash thresholds poses a compliance calibration risk
- Regulatory dual-classification risk: the operator may fall under multiple TVTG categories (Exchange + Key Depository + Transfer) and/or traditional payment services law, multiplying compliance obligations (li.licensing.vt-key-depository-a-person, li.licensing.vt-transfer-service-provider-a, li.licensing.traditional-payment-services-if-the)
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Definition under TVTG: A "VT Exchange Service Provider" is a person who facilitates the exchange of VT Tokens against fiat currencies or other VT Tokens. This covers traditional cryptocurrency exchanges.
Requirement: Registration with the FMA as a VT Exchange Service Provider is mandatory.
Regulator Name: Financial Market Authority (FMA) Liechtenstein
Token and VT Service Provider Act (TVTG) / Blockchain Act:
Due Diligence Act (DDA) (Sorgfaltspflichtgesetz):
VT Key Depository: A person who holds private keys for clients or is responsible for their storage.
VT Protector: A person who holds VT Tokens in its own name for the account of a third party (client).
VT Payment Service Provider: The TVTG explicitly defines a "VT Payment Service Provider" as a person who provides payment services involving VT tokens or virtual currencies.
VT Transfer Service Provider: A person who facilitates the transfer of VT Tokens on behalf of a third party. This can also encompass aspects of payment processing.
Traditional Payment Services: If the payment processing involves fiat currency and falls under the scope of traditional payment services (e.g., electronic money issuance, payment initiation, account information services), it may also fall under the Payment Services Act (Zahlungsdienstleistungsgesetz - ZDG), which implements PSD2 in Liechtenstein, and require a separate payment service license from the FMA.
Issuing cease-and-desist orders.
Withdrawing or refusing licenses for non-compliance.
Law on Professional Due Diligence for the Prevention of Money Laundering, Organised Crime and Terrorist Financing (Due Diligence Act, Sorgfaltspflichtgesetz - SPG): This is the overarching AML/CFT law that sets out the due diligence obligations for all financial intermediaries, including VASPs.
Ordinance on Professional Due Diligence (Sorgfaltspflichtverordnung - SPV): This ordinance provides detailed implementing provisions for the Due Diligence Act.
Law on Token and Trustworthy Technology Service Providers (Token and TT Service Provider Act, TVTG - commonly known as the "Blockchain Act"): This groundbreaking law defines and regulates various TT (Trustworthy Technology) service providers, which largely encompass VASPs. It explicitly brings these entities under the scope of the Due Diligence Act (SPG) for AML/CFT purposes.
Identification and Verification of the Customer and UBO:
For natural persons: Obtain and verify the identity of the customer by requiring official identification documents (e.g., passport, national ID card) and verifying their name, date of birth, nationality, and residential address.
For legal entities (companies, foundations, trusts): Obtain and verify the entity's name, legal form, registered address, registration number, articles of association, and the identities of directors/executives. Crucially, VASPs must identify and verify the Ultimate Beneficial Owner (UBO), which typically means identifying any natural person who directly or indirectly owns or controls 25% or more of the entity, or otherwise exercises control.
Screening: Customers and their UBOs must be screened against national and international sanction lists (e.g., UN, EU, OFAC) and politically exposed persons (PEP) lists.
Source of Funds (SoF) / Source of Wealth (SoW):
For higher-risk relationships, significant transactions, or when red flags are raised, VASPs must establish the source of the funds being used (e.g., salary, investment income) and the overall source of the customer's wealth.
VASPs must continuously monitor the business relationship, including transactions, to ensure that the activities are consistent with their knowledge of the customer, their business, and risk profile.
Entity Targeted: Various companies identified for unauthorized operation, often involving crypto/token offerings. (Specific company names are usually listed on the FMA's warning page, which is regularly updated). Violation Type: Operating financial services or token services without the necessary license under the TVTG or other relevant financial market laws, often coupled with allegations of scams or misleading information. Penalty Amount: Not a direct monetary fine imposed by the FMA in this context, but rather a public warning and expectation of cessation of activity. Failure to comply can lead to further legal action. Outcome: Public notification of unauthorized activity, demand for cessation of operations in Liechtenstein, consumer protection.
Outcome: Public notification of unauthorized activity, demand for cessation of operations in Liechtenstein, consumer protection.
Outcome: Withdrawal of authorization, cessation of regulated activities, safeguarding market integrity.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM / kiosk operators in Liechtenstein must register with the FMA as a VT Exchange Service Provider (and potentially other TVTG categories) under the Blockchain Act, establish a local entity, and comply with the full AML/CFT framework under the Due Diligence Act, including enhanced due diligence and sanctions screening; the FMA actively enforces against unauthorized operators.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?