Crypto ATM / kiosk operator in Malawi
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Malawi with a local entity, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- Any entity operating as a VASP (including crypto ATM/kiosk operators handling cash-to-crypto) is subject to Malawi's general AML/CFT framework under the Proceeds of Serious Crime and Money Laundering Act, 2006 (as amended).
- The Financial Intelligence Authority (FIA) Malawi is the primary AML/CFT supervisor; VASPs may be required to register with the FIA and comply with AML/CFT obligations, though no specific VASP regulations have been finalized.
- General AML obligations likely include: customer due diligence (CDD), record-keeping, suspicious transaction reporting (STRs) to the FIA.
- Cash-transaction reporting thresholds: no specific crypto/cash threshold identified in available facts; general Malawi AML law thresholds for cash transactions would likely apply if the operator handles traditional fiat cash-for-crypto conversions.
- Enhanced due diligence (EDD) obligations likely attach to cash-in/cash-out transactions due to high-risk profile, though no crypto-specific EDD rules exist.
- Malawi, through ESAAMLG, is subject to FATF Recommendation 15, which pushes for VASP licensing/registration for AML/CFT purposes.
Key Restrictions
- Virtual assets are not recognized as legal tender in Malawi; the Reserve Bank of Malawi has repeatedly advised the public against dealing in cryptocurrencies.
- No specific crypto ATM/kiosk or money-transmitter license exists; operators operate in a legal grey area without dedicated supervisory framework.
- The RBM has warned that crypto activities carry risks of no consumer protection, price volatility, fraud, cybercrime, and money laundering.
- Any entity generating revenue in Malawi must be registered as a local entity or branch under Malawi's company laws.
Key Risks
- High enforcement risk: the RBM has consistently warned the public against crypto use, and while no penalties have been issued to date, the regulatory environment is hostile — not permissive.
- Regulatory ambiguity: no specific crypto-licensing regime exists, leaving operators exposed to potential future enforcement or sudden regulatory changes.
- The Virtual Assets Service Providers (VASP) Bill was passed in late 2023 but is not yet fully implemented; compliance requirements under the new regime are unclear.
- Cash-for-crypto kiosk operations carry heightened AML/CFT scrutiny risk under general AML laws, with no clear guidance on how cash-transaction thresholds apply.
- Criminal law risk: crypto used as a vehicle for fraud could attract police investigations and criminal prosecutions beyond regulatory penalties.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
The Reserve Bank of Malawi has consistently advised the public against dealing in cryptocurrencies, citing their unregulated nature, price volatility, and potential for use in illicit activities (money laundering, terrorist financing).
Crucially, the RBM has explicitly stated that cryptocurrencies are not recognized as legal tender in Malawi.
This means that while individuals may engage in crypto transactions, these activities operate outside any specific regulatory oversight or consumer protection mechanisms for virtual assets.
Absence of Dedicated VASP Legislation:
There is currently no specific law or regulation in Malawi that defines "virtual assets" or "virtual asset service providers" (VASPs) for the purpose of licensing or registration.
This means there are no specific licenses for crypto exchanges, custody providers, or crypto-focused payment processors.
AML/KYC (Anti-Money Laundering/Know Your Customer):
While there are no crypto-specific AML/KYC regulations, Malawi has a robust general AML/CFT framework. The Financial Intelligence Unit (FIU) Malawi is the primary authority for AML/CFT.
Key Law: The Proceeds of Serious Crime and Money Laundering Act, 2006 (as amended). This act establishes the general framework for combating money laundering and terrorist financing.
Financial Intelligence Unit (FIU) Malawi Official Website: http://fiu.mw/ (Here you can find their reports, advisories, and the relevant legislation.)
Local Presence: N/A for crypto-specific licensing. However, any company operating and generating revenue in Malawi is generally required to be registered as a local entity or a branch of a foreign company under Malawi's company laws.
Non-Recognition: Virtual assets are not recognized as legal tender or regulated financial instruments.
Risk Warnings: The authorities primarily focus on issuing public warnings about the high risks associated with virtual assets, including price volatility, fraud, cybercrime, money laundering, and lack of consumer protection.
No Licensing/Supervision: There is no regulatory body licensing or supervising virtual asset service providers (VASPs) or crypto exchanges.
Companies wishing to operate in Malawi, regardless of their business, must undergo general company registration with the Registrar of Companies. However, this is for general business operations, not specific to virtual assets or their regulation.
Any entity operating as a Virtual Asset Service Provider (VASP), which would include services like exchange, transfer, and safekeeping/administration of virtual assets (i.e., custody), would fall under the purview of Anti-Money Laundering and Combating the Financing of Terrorism (AML/CFT) laws.
FATF Recommendations: Malawi, through ESAAMLG, is subject to FATF recommendations, including Recommendation 15 on Virtual Assets and VASPs. This recommendation pushes for countries to license or register VASPs for AML/CFT purposes.
Regulator Name: Reserve Bank of Malawi (RBM)
Entity Targeted: General Public / Unregulated Crypto Activities. Violation Type: Operating or engaging in unregulated financial activities; lack of legal tender status. Penalty Amount: N/A (warnings, not penalties).
RBM's Consistent Stance: The Reserve Bank of Malawi has repeatedly stated that cryptocurrencies are not legal tender in Malawi and are not regulated by the RBM. They have warned the public about the inherent risks, including volatility, cyber-attacks, and potential for fraud, as these assets operate outside the regulated financial system.
Emerging Regulatory Framework: Malawi has been working towards establishing a regulatory framework for virtual assets. In late 2023, the National Assembly passed the Virtual Assets Service Providers (VASP) Bill. This bill aims to regulate virtual assets and virtual asset service providers, bringing them under the supervision of the Financial Intelligence Authority (FIA) and potentially the Reserve Bank of Malawi in the future.
"Malawi Passes Virtual Assets Service Providers Bill to Regulate Crypto Market" (November 2023) - This indicates future potential for enforcement, but actual enforcement actions under this new law would typically follow its full implementation and operationalization.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operations are permitted in Malawi only in a legal grey area without specific licensing, but the operator must register as a local company, comply with general AML/CFT obligations under the Proceeds of Serious Crime and Money Laundering Act supervised by the FIA, and operate without legal-tender recognition or consumer protections, with a pending VASP bill expected to bring formal regulation.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?