Crypto ATM / kiosk operator in Maldives
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Maldives with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Implement robust KYC procedures for all customers (mv.licensing.implement-robust-kyc-procedures-for)
- Conduct ongoing customer due diligence (mv.licensing.conduct-ongoing-customer-due-diligence)
- Monitor transactions for suspicious activity (mv.licensing.monitor-transactions-for-suspicious-activity)
- Maintain records for a specified period (mv.licensing.maintain-records-for-a-specified)
- Report suspicious transactions (STRs) to the Financial Intelligence Unit (FIU) of the Maldives Monetary Authority (mv.licensing.report-suspicious-transactions-strs-to)
- Implement sanctions screening (mv.licensing.implement-sanctions-screening)
- Appoint an AML Compliance Officer (mv.licensing.appoint-an-aml-compliance-officer)
- Adhere to the FATF Travel Rule (mv.licensing.adhere-to-the-travel-rule)
- As a VASP conducting fiat-to-crypto exchange (cash-in/out), the entity falls under the AML/CFT Act (No. 10/2014) definition of a VASP including 'exchange between virtual assets and fiat currencies' (mv.aml.exchange-between-virtual-assets-and)
- Safekeeping/administration of virtual assets on kiosks also falls under VASP definition (mv.aml.safekeeping-andor-administration-of-virtual)
Key Restrictions
- Crypto ATMs/kiosks involve exchange between fiat (cash) and virtual assets, which likely requires a financial services license (e.g., money service business / payment service provider license) from the MMA (mv.licensing.crypto-to-fiat-or-fiat-to-crypto-if-an)
- The MMA has repeatedly stated it does not license or regulate cryptocurrency activities, creating a fundamental ambiguity about whether any license path is actually available (mv.enforcement.mmas-consistent-position-the-maldives)
- Cryptocurrencies are not recognized as legal tender in the Maldives (mv.enforcement.mmas-consistent-position-the-maldives)
- A physical local presence (locally incorporated entity + local management) is required for any MMA-licensed financial service (mv.licensing.local-presence-for-any-financial)
- No specific kiosk/ATM regulatory framework exists — operator must fit into existing payment services or money services business licensing regimes
- If the kiosk processes payments solely in crypto with no fiat touchpoint, no specific MMA license exists but AML/CFT obligations still apply (mv.licensing.processing-payments-solely-in-crypto)
Key Risks
- Regulatory ambiguity — the MMA states it does not license crypto businesses, making it uncertain whether any application for a fiat-to-crypto kiosk license would be accepted or denied (mv.enforcement.lack-of-licensed-entities-since)
- Public advisories from MMA warn consumers about crypto risks, signaling hostility to crypto operations in the jurisdiction (mv.enforcement.public-advisories-the-mma-has)
- No licensed crypto entities exist in the Maldives — first-mover operators face significant regulatory uncertainty and potential enforcement action if operating without explicit authorization (mv.enforcement.lack-of-licensed-entities-since)
- No specific capital requirements for VASPs exist, but if under a payment services license, unknown capital thresholds apply (mv.licensing.capital-requirements-there-are-no)
- Cash-intensive business model (ATM/kiosk) magnifies AML risk in a jurisdiction still developing its VA AML/CFT framework — heightened scrutiny from FIU likely
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Crypto-to-Fiat (or Fiat-to-Crypto): If an exchange involves the exchange of fiat currency (Maldivian Rufiyaa - MVR or other fiat currencies) for virtual assets, or vice-versa, it could potentially fall under existing financial services regulations, such as those for money services businesses or payment service providers. This would require an appropriate license from the MMA for those traditional activities. The scope of these existing licenses might need to be interpreted or expanded to explicitly cover VA activities.
Local Presence: For any financial service that requires an MMA license (e.g., payment services), a physical local presence, typically in the form of a locally incorporated entity and local management, is usually mandatory. For purely crypto-related activities without a specific license, a local presence might not be legally mandated but is generally advisable for effective AML/CFT compliance and to engage with regulators.
Capital Requirements: There are no specific capital requirements for VASPs as VASPs yet. However, if a business falls under an existing financial license (e.g., payment service provider, money service business), then the capital requirements for that specific license would apply.
Implement robust KYC procedures for all customers.
Conduct ongoing customer due diligence.
Monitor transactions for suspicious activity.
Maintain records for a specified period.
Report suspicious transactions (STRs) to the Financial Intelligence Unit (FIU) of the Maldives Monetary Authority.
Implement sanctions screening.
Appoint an AML Compliance Officer.
Adhere to the "Travel Rule" as per FATF guidance.
Exchange between virtual assets and fiat currencies.
Safekeeping and/or administration of virtual assets or instruments enabling control over virtual assets. (This is where custody falls)
MMA's Consistent Position: The Maldives Monetary Authority has repeatedly stated that cryptocurrencies are not recognized as legal tender in the Maldives. They also do not provide licenses or regulatory oversight for any cryptocurrency-related activities or businesses operating within the country.
Public Advisories: The MMA has issued warnings to the public about the inherent risks of cryptocurrencies, including price volatility, cybersecurity risks, potential for fraud, and the absence of consumer protection. These advisories are the primary "action" taken by the regulator concerning crypto.
Lack of Licensed Entities: Since no crypto businesses are licensed by the MMA, there are no regulated entities for the MMA to "enforce" against in the traditional sense (e.g., for non-compliance with licensing conditions or specific crypto-related regulations). Any potential criminal activity involving crypto would fall under general criminal law enforcement by the police, rather than specific financial regulatory enforcement.
Processing payments solely in crypto: If a service exclusively processes payments in virtual assets without touching fiat currency in the Maldives, there isn't a specific license. Again, AML/CFT obligations would still apply.
Prevention of Money Laundering and Financing of Terrorism Act (No. 10/2014): This is the core AML/CFT legislation in the Maldives. VASPs, even without specific licensing, are expected to comply with its provisions.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- low
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a crypto ATM/kiosk operator (involving fiat-to-crypto cash exchange) would likely need to apply for an existing financial services license (payment service provider or money service business) from the MMA, but the MMA has publicly stated it does not license or regulate crypto activities, creating fundamental regulatory ambiguity; all AML/CFT obligations under Act No. 10/2014 apply regardless.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?