Crypto ATM / kiosk operator in Netherlands
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Netherlands with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- CASP authorization under MiCA via DNB/AFM required — covers custody and exchange activities
- DNB AML/CFT supervision under Wwft (Anti-Money Laundering and Anti-Terrorist Financing Act)
- KYC/verification of identity for each cash-in / cash-out transaction at the kiosk
- Ongoing transaction monitoring obligations under Wwft
- Suspicious transaction reporting (onward reporting to FIU-Netherlands) under Wwft
- Fit-and-proper / UBO integrity screening as part of licensing process with DNB/AFM
- Cash transaction reporting threshold: applicable thresholds under Dutch implementation of EU cash-control rules (likely €10,000 cash transaction reporting to FIU) — cash kiosks must verify and report
- Compliance with Sanctions Act (Sanctiewet) screening obligations
Key Restrictions
- Must obtain CASP authorization under MiCA via AFM (conduct) and DNB (AML/CFT); pre-MiCA DNB-only registration path closed after June 30, 2025 transitional period
- Local entity incorporation required (Dutch-incorporated VASP/CASP or EU-passported entity)
- High UBO integrity screening hurdle — DNB historically rejected ~90% of pre-MiCA VASP applications
- Physical kiosks likely trigger additional cash-handling regulations under Dutch/EU anti-money laundering cash-control rules
- Non-compliance risk: strict enforcement precedent (fines on unregistered platforms like Binance, Coinbase); several exchanges previously withdrew from Netherlands
Key Risks
- DNB historically high rejection rate (~90%) for VASP registrations — similar scrutiny expected for MiCA CASP licensing, especially for cash-intensive models
- Regulatory ambiguity: cash-to-crypto kiosk is not explicitly addressed in MiCA categories; may need to classify activities as 'exchange of cryptoassets for funds' and 'placement/execution of orders', both licensed activities
- Enforcement precedent: strict fines on unregistered operators; DNB and AFM actively monitor and penalize non-compliance
- Cash-based model raises elevated AML/terrorist-financing risk profile; regulator skepticism likely given the rejection rate for even online-only VASPs
- Operational complexity of complying with cash-transaction reporting obligations across all kiosk locations
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
DNB — VASP registration (~90% rejection rate pre-MiCA), AML/CFT supervision
MiCA Regulation (EU) (2023) — CASP authorization, comprehensive crypto regulation
WWFT (Anti-Money Laundering and Anti-Terrorist Financing Act) (2018) — Pre-MiCA VASP AML registration with DNB — rigorous WWFT compliance
VASP: CASP authorization under MiCA via DNB/AFM. Pre-MiCA DNB registration had ~90% rejection rate. Substantial UBO integrity screening. Several exchanges withdrew from Netherlands.
CUSTODY: CASP authorization — custody is a licensed MiCA activity
EXCHANGE: CASP authorization under MiCA; rigorous UBO integrity screening
AFM: Licenses and supervises crypto-asset service providers under MiCAR; opened its digital portal for MiCAR license applications as of April 22, 2024
DNB: Maintains the register of crypto service providers and oversees AML/CFT compliance under the Wwft
Transitional period ended June 30, 2025: Existing CASPs could operate under prior rules while applying for MiCA licenses; only licensed entities allowed post-transition.
De Nederlandsche Bank (DNB): Central bank; handles AML/CTF registration for crypto service providers (exchanges, custodians), monitors compliance, supervises stablecoin issuers under MiCA, and enforces Wwft/Sanctions Act. Requires fit-and-proper tests, business plans, and policies for registration.
Dutch Authority for the Financial Markets (AFM): Supervises conduct, handles MiCA license applications/notifications for CASPs (opened portal April 22, 2024), and applies Financial Supervision Act (Wft) if crypto qualifies as financial instruments.
Wwft (Dutch Money Laundering and Anti-Terrorist Financing Act): Implements 5AMLD (effective May 21, 2020); mandates DNB registration for exchanges and custodian wallets, with KYC, transaction monitoring, and suspicious activity reporting. Non-compliance risks fines/imprisonment.
Markets in Crypto-Assets Regulation (MiCA/MiCAR): EU-wide (enacted 2024, licenses effective December 30, 2024); AFM processes applications, promotes transparency; DNB focuses on stablecoins.
Dutch Financial Supervision Act (Wft/FSA): Applies if crypto is a security or e-money.
Legal and encouraged with oversight: Trading/owning crypto permitted; providers must register with DNB (pre-MiCA) or obtain AFM MiCA licenses post-2025. AFM advises new providers to apply directly for MiCA rather than DNB registration.
Strict enforcement: Fines on unregistered platforms (e.g., Binance, Coinbase).
Crypto-friendly: Clear framework supports innovation while aligning with EU norms.
AFM MiCA portal: Referenced in CMS guide (applications since April 2024).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operators may operate in the Netherlands only after obtaining full CASP authorization under MiCA (via AFM/DNB) with a local Dutch entity, meeting rigorous AML/KYC obligations under Wwft including cash-transaction and suspicious-activity reporting, and passing strict UBO integrity screening; the pre-MiCA DNB-only registration path closed June 30, 2025.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?