Crypto ATM / kiosk operator in Madagascar
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Madagascar with a local entity, subject to AML obligations and low licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Low
- Last updated
- 2026-07-13
AML Obligations
- Customer identification and verification using reliable independent source documents (e.g., national ID card, passport) – full name, date of birth, address, nationality (mg.aml.identification-and-verification, mg.aml.for-individuals-obtain-and-verify)
- Beneficial ownership identification and verification for non-individual customers (mg.aml.beneficial-ownership-identify-and-verify)
- Understanding the purpose and intended nature of the business relationship (mg.aml.purpose-and-intended-nature-of)
- Ongoing monitoring of the business relationship and scrutiny of transactions (mg.aml.ongoing-monitoring-conduct-ongoing-due)
- Risk-based approach: Simplified CDD for low-risk situations; Enhanced CDD (EDD) required for higher-risk situations including PEPs, high-risk jurisdictions, complex or unusually large transactions, and transactions involving new technologies or anonymous transactions (mg.aml.risk-based-approach-apply-cdd-measures, mg.aml.enhanced-cdd-edd-required-for, mg.aml.simplified-cdd-may-be-applied, mg.aml.customers-from-high-risk-jurisdictions, mg.aml.politically-exposed-persons-peps-their, mg.aml.complex-or-unusually-large-transactions, mg.aml.transactions-involving-new-technologies-or)
- Source of funds and source of wealth verification required for EDD (mg.aml.source-of-funds-and-source)
- Obligation to report suspicious transactions to the Financial Intelligence Unit (FIU/Cellule de Renseignement Financier – CRF), regardless of amount, promptly upon suspicion (mg.aml.obligation-to-report-vasps-as, mg.aml.timeliness-reports-must-be-made)
- No tipping-off prohibition – reporting entities must not disclose STR submissions to customers or third parties (mg.aml.no-tipping-off-reporting-entities-and)
- Record-keeping: maintain CDD records, transaction data, and business correspondence for at least 5 years after the business relationship ends or the occasional transaction (mg.aml.customer-identification-data-all-records, mg.aml.transaction-data-records-of-all, mg.aml.business-correspondence-relevant-business-correspondence, mg.aml.duration-records-must-typically-be)
- No specific cash-transaction reporting threshold is defined for crypto-to-cash operations; general AML/CFT law (Loi n° 2018-043) applies broadly to reporting entities (mg.aml.loi-n-2018-043-du-19, mg.aml.this-law-is-the-cornerstone)
Key Restrictions
- No specific crypto/VASP licensing or registration regime exists for crypto ATM/kiosk operators – the activity is currently unrestricted but operates in a legal vacuum (mg.licensing.such-activities-are-currently-unrestricted, mg.licensing.no-specific-crypto-licensing-regime, mg.licensing.registration-vs-licensing-regime-currently)
- Fiat-to-crypto cash kiosk operations may implicitly fall under existing payment services or financial regulations overseen by the Banque Centrale de Madagascar (BCM), potentially requiring a payment-services authorization if handling MGA fiat (mg.licensing.exchanges-fiat-to-cryptocrypto-to-crypto-there-are-no, mg.licensing.payment-processors-virtual-assets-no)
- Central Bank (BCM) has historically maintained a cautious/prohibitive stance toward cryptocurrencies and has issued public warnings (mg.licensing.central-bank-cautionwarnings-the-banque)
- Activity may be implicitly restricted or discouraged under broader financial regulations, or face outright prohibitions from the Central Bank (mg.licensing.such-activities-may-be-implicitly)
- Local incorporation (locally registered entity) with physical presence and local management is typically expected (mg.licensing.local-presence-typically-a-locally)
- Fit and proper tests for directors and senior management expected (mg.licensing.governance-and-management-fit-and)
- AML/KYC compliance in line with FATF recommendations is expected, including transaction monitoring and suspicious activity reporting (mg.licensing.amlkyc-compliance-robust-anti-money-laundering)
- Sufficient capital to cover operational risks and customer asset protection expected (mg.licensing.capital-requirements-sufficient-capital-to)
Key Risks
- High regulatory risk: absence of clear rules creates uncertainty regarding legality, potential for sudden regulatory changes, and difficulties interacting with the traditional financial system (mg.licensing.high-regulatory-risk-operating-a)
- Evolving landscape: Madagascar is under pressure from FATF to implement VASP regulation, which could change at any time with new laws or decrees (mg.licensing.evolving-landscape-the-global-regulatory)
- AML/CFT obligations apply ambiguously — general AML law (Loi n° 2018-043) could be interpreted to apply to virtual asset activities, but without specific guidance the application is uncertain (mg.licensing.amlcft-implications-while-there-are, mg.licensing.in-the-absence-of-specific)
- High-cash AML risk profile of crypto ATMs (cash-in/cash-out) elevates the likelihood of being treated as a higher-risk reporting entity, triggering EDD obligations for anonymous or technology-facilitated transactions (mg.aml.transactions-involving-new-technologies-or)
- Banque Centrale de Madagascar (BCM) may treat cash-based crypto kiosks as unauthorized payment or money-transmission activity and take enforcement action (mg.licensing.central-bank-cautionwarnings-the-banque)
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Such activities are currently unrestricted but carry significant legal and operational risks due to the absence of specific protections or guidelines.
Such activities may be implicitly restricted or discouraged under broader financial regulations, or even face outright prohibitions from the Central Bank.
No Specific Crypto Licensing Regime: There is no specific law or regulation mandating licenses for cryptocurrency exchanges, custody providers, or virtual asset payment processors in Madagascar, unlike jurisdictions that have implemented frameworks like MiCA (EU), MAS (Singapore), or VARA (Dubai).
Central Bank Caution/Warnings: The Banque Centrale de Madagascar (BCM) – the country's central bank and primary financial regulator – has historically maintained a cautious, if not prohibitive, stance towards cryptocurrencies. They have likely issued public warnings about the risks associated with virtual assets, including price volatility, lack of consumer protection, and potential for illicit finance. These warnings often imply that crypto is not recognized as legal tender and regulated financial institutions should not facilitate their use.
AML/CFT Implications: While there are no crypto-specific AML/CFT regulations, Madagascar, as a member of the Eastern and Southern Africa Anti-Money Laundering Group (ESAAMLG) and subject to FATF recommendations, has general anti-money laundering and combating the financing of terrorism (AML/CFT) laws. The Cellule de Renseignement Financier (CRF) is Madagascar's Financial Intelligence Unit.
In the absence of specific VASP regulations, these general AML/CFT laws could be interpreted to apply to entities dealing with virtual assets, especially if they interact with the traditional financial system. However, without specific guidance, the application remains ambiguous.
Registration vs. Licensing Regime: Currently, neither a dedicated registration nor a licensing regime for VASPs exists in Madagascar.
Exchanges (Fiat-to-Crypto/Crypto-to-Crypto): There are no specific licenses required. However, if an exchange facilitates fiat currency transactions (e.g., MGA deposits/withdrawals), it might inadvertently touch upon existing payment services regulations overseen by the BCM, potentially requiring a payment service provider license for the fiat portion of its operations.
Payment Processors (Virtual Assets): No specific licenses are required for processing payments in virtual assets. Similar to exchanges, if these services involve conversion to or from fiat currency, they may fall under existing electronic payment service regulations.
Local Presence: Typically, a locally incorporated entity (e.g., a company registered in Madagascar) with a physical presence and local management.
Evidence fact mg.licensing.govrnance-and-management-fit-and not found (may have been renamed).
AML/KYC Compliance: Robust Anti-Money Laundering (AML) and Know Your Customer (KYC) policies and procedures, including transaction monitoring, suspicious activity reporting, and customer due diligence, in line with FATF recommendations.
Capital Requirements: Sufficient capital to cover operational risks, ensure solvency, and protect customer assets (amounts would vary based on the scope of services).
High Regulatory Risk: Operating a cryptocurrency business in Madagascar currently carries significant regulatory risk due to the absence of clear rules. This can lead to uncertainty regarding legality, potential for sudden regulatory changes, or difficulties in interacting with traditional financial institutions.
Evolving Landscape: The global regulatory landscape for virtual assets is rapidly evolving. Madagascar, like other countries, is under pressure from international bodies (like FATF) to address VASP regulation. This situation could change at any time with the introduction of new laws or decrees.
Banque Centrale de Madagascar (BCM):
Cellule de Renseignement Financier (CRF):
Loi n° 2018-043 du 19 décembre 2018 relative à la lutte contre le blanchiment de capitaux et le financement du terrorisme (Law No. 2018-043 of December 19, 2018, on the Fight against Money Laundering and the Financing of Terrorism).
This law is the cornerstone of Madagascar's AML/CFT framework. It defines the obligations of reporting entities, establishes the powers of the Financial Intelligence Unit (FIU), and outlines the criminalization of money laundering and terrorist financing.
For individuals: Obtain and verify identity using reliable independent source documents (e.g., national ID card, passport), including full name, date of birth, address, and nationality.
Beneficial Ownership: Identify and verify the natural person(s) who ultimately own or control the customer, or the natural person(s) on whose behalf a transaction is being conducted.
Purpose and Intended Nature of Business Relationship: Understand the rationale behind the customer's transactions and the nature of their relationship with the VASP.
Ongoing Monitoring: Conduct ongoing due diligence on the business relationship and scrutiny of transactions undertaken throughout the course of that relationship to ensure that the transactions are consistent with the VASP's knowledge of the customer, their business and risk profile, including, where necessary, the source of funds.
Risk-Based Approach: Apply CDD measures on a risk-sensitive basis:
Enhanced CDD (EDD): Required for higher-risk situations, such as:
Simplified CDD: May be applied where the risks of money laundering or terrorist financing are identified as low.
Customers from high-risk jurisdictions.
Politically Exposed Persons (PEPs), their family members, and close associates.
Complex or unusually large transactions.
Transactions involving new technologies or anonymous transactions where the risks are deemed higher.
Source of funds and source of wealth verification may be required for EDD.
Obligation to Report: VASPs, as reporting entities, are legally obligated to report any suspicious transactions or activities to the Financial Intelligence Unit (FIU), regardless of the amount involved. This includes transactions that are unusual, lack clear economic rationale, or appear to be connected to money laundering or terrorist financing.
Timeliness: Reports must be made promptly, usually within a few days of the VASP becoming aware of the suspicion.
No Tipping-Off: Reporting entities and their employees are prohibited from disclosing to the customer or to third parties that a suspicious transaction report is being, or has been, submitted to the FIU.
Customer Identification Data: All records obtained through CDD processes (identification documents, beneficial ownership information, account opening forms).
Transaction Data: Records of all domestic and international transactions, including the nature of the transaction, amount, date, parties involved, and any associated messages or instructions.
Business Correspondence: Relevant business correspondence, including records of analysis performed for suspicious transaction reports.
Duration: Records must typically be kept for at least five (5) years after the business relationship has ended or after the date of an occasional transaction.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operation in Madagascar is currently unrestricted (no specific license required) but operates in a legal vacuum with high regulatory risk; operators must incorporate locally, implement robust AML/KYC under the general Loi n° 2018-043 AML framework, and face potential enforcement by the BCM or CRF, with FATF-driven VASP regulation likely forthcoming.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?