Crypto ATM / kiosk operator in Latvia
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Latvia with a local entity, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- Register with the Financial Intelligence Unit (FIU) of Latvia as a VASP (pre-MiCA registration regime).
- Implement a robust AML/CTPF Internal Control System (ICS) including risk assessment, CDD/EDD procedures, transaction monitoring, suspicious transaction reporting, record-keeping (5 years), and employee training.
- Appoint a board member or senior employee as the AML/CTPF compliance officer (AML Officer).
- Conduct Customer Due Diligence (CDD) on all clients, including identity verification and beneficial ownership checks.
- Perform Enhanced Due Diligence (EDD) for higher-risk situations (e.g., cash transactions, high-value or politically exposed persons).
- Report suspicious transactions to the FIU (Suspicious Transaction Reports - STRs).
- Ensure fitness and propriety of management and beneficial owners as part of registration.
- Post-MiCA (from 30 December 2024): Transition to full licensing under MiCA with the Bank of Latvia, including prudential safeguards (capital requirements), organizational requirements, safekeeping rules for client crypto-assets, and IT/security arrangements.
Key Restrictions
- Must be a legal entity registered in Latvia (typically an SIA – Limited Liability Company) with a registered office in Latvia.
- Physical kiosks must comply with AML/CTPF registration as VASPs under the FIU — no specific 'kiosk' license category exists; kiosks fall under the VASP exchange definition.
- No explicit cash-transaction reporting threshold specific to crypto kiosks is defined in the available facts; general AML/CTPF obligations and EDD for high-risk cash activities apply.
- Post-MiCA (Dec 2024): Must obtain full CASP authorization from the Bank of Latvia, meeting stricter prudential, organizational, and client asset safekeeping requirements.
- No specific segregation of client crypto assets required pre-MiCA, but MiCA will mandate strict segregation.
Key Risks
- High-cash AML risk profile of crypto ATMs/kiosks attracts heightened scrutiny from the FIU and may trigger EDD obligations.
- No explicit kiosk-specific regulations exist — regulatory ambiguity around cash threshold reporting, physical security, and geographic limitations.
- Pre-MiCA registration regime is lighter but the transition to full MiCA licensing (Dec 2024) creates a near-term regulatory shift and application burden.
- Enforcement precedent is limited — publicly reported large fines against pure crypto businesses are scarce, but remedial actions and withdrawal of registration are possible outcomes.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Financial Intelligence Unit (FIU) of Latvia (Finanšu izlūkošanas dienests - FID): The primary authority responsible for registering and supervising VASPs for AML/CTPF compliance.
Current Regime (Pre-MiCA): Registration. Latvia requires entities engaged in virtual asset services to register with the FIU. This registration is primarily an AML/CTPF compliance obligation, meaning the focus is on preventing money laundering and terrorist financing, rather than prudential supervision (e.g., capital adequacy for consumer protection, market integrity, etc., which is typical of a full licensing regime).
Future Regime (Post-MiCA): Licensing. Once MiCA fully applies to VASPs (expected December 2024), Latvia will transition to a comprehensive licensing regime under MiCA. This will involve more stringent requirements, including prudential safeguards, operational resilience, and specific disclosures, and will likely be overseen by the Bank of Latvia (FCMC).
Exchanges (Virtual Asset Exchange Service Providers):
Entities offering services for the exchange of virtual assets against fiat currency or one or more other virtual assets. This covers both fiat-to-crypto, crypto-to-fiat, and crypto-to-crypto exchanges.
Relevant Law (Latvian): https://likumi.lv/ta/id/296767-no-noziedzigi-iegutu-lidzeklu-legalizacijas-un-terorisma-un-propagandas-finansesanas-preventijas-likums
The applicant must be a legal entity registered in Latvia (typically a Limited Liability Company – SIA).
The company must have its registered office in Latvia.
AML/CTPF Internal Control System (ICS):
Appointed AML Officer:
Requirement: Entities providing services of custodial wallet providers (which includes safekeeping or administration of virtual assets or instruments enabling control over virtual assets on behalf of clients) are considered Virtual Asset Service Providers (VASPs). They are required to register with the Latvian Financial Intelligence Unit (FID).
Process: The registration involves demonstrating compliance with AML/CTF requirements, including:
Developing and implementing robust internal control systems.
Appointing a responsible person for AML/CTF compliance.
Conducting customer due diligence (CDD) and ongoing monitoring.
Reporting suspicious transactions.
Ensuring the fitness and propriety of management and beneficial owners.
Law on the Prevention of Money Laundering and Terrorism Financing (AML/CFT Law) (Nozagoto noziedzīgi iegūtu līdzekļu legalizācijas un terorisma finansēšanas novēršanas likums): This is the primary law regulating AML/CFT, which also covers sanctions compliance for obligated entities, including VASPs.
Current Status: Under the current AML framework, there are no explicit, specific rules mandating the segregation of client crypto assets for non-bank VASPs. However, general good practice, risk management principles, and the expectation of investor protection inherent in financial services would strongly suggest that reputable custodians segregate client assets from their own operational funds. For traditional financial institutions providing crypto services, existing segregation rules for client funds/assets would generally apply.
Regulation (EU) 2023/1114 on Markets in Crypto-Assets (MiCA):
Latvijas Banka (Bank of Latvia) website: (Will provide specific guidance as MiCA implementation approaches)
Mandate: MiCA explicitly mandates strict segregation of client crypto-assets.
Penalty Amount: Varies depending on the severity of the violation, ranging from warnings and administrative measures to significant fines. However, publicly reported large fines against pure crypto businesses are scarce. Outcome: Remedial actions required, potential fines, or in severe cases, withdrawal of registration/license.
Outcome: Remedial actions required, potential fines, or in severe cases, withdrawal of registration/license.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operators may operate in Latvia as registered VASPs with the FIU, but must be locally incorporated, implement full AML/CTPF controls (including EDD for cash transactions), and will face a transition to full MiCA licensing by the Bank of Latvia from December 2024.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?