Crypto ATM / kiosk operator in Philippines
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Philippines with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Registration as a VASP with BSP under Circular 1108 — cash-heavy kiosk operations fall under VASP licensing.
- Minimum capitalization of PHP 50 million (~$900K USD) for VASP license.
- If also deemed a CASP by SEC (e.g., offering crypto-to-crypto exchange at kiosk), minimum ₱100 million paid-up capital with SEC registration.
- Mandatory AML/CTF compliance under the Anti-Money Laundering Act (AMLA) supervised by AMLC.
- Submission of regular reports to SEC and AMLC with detailed documentation 30 days prior to any activity (if CASP-registered).
- Cash Transaction Reporting (CTR) obligations apply — threshold likely PHP 500,000 (standard PH CTR threshold under AMLA) for cash-in/cash-out transactions; confirm specific BSP/AMLC guidance for VASP kiosks.
- Enhanced due diligence (EDD) expected for cash-intensive operations given high money-laundering risk profile of physical kiosks.
- IT risk management and cybersecurity requirements per BSP Circular 1108 custody provisions.
- Proof-of-reserve and audit obligations if stablecoin-based kiosk operations are involved.
Key Restrictions
- New VASP licenses from BSP are frozen indefinitely as of 2025 (moratorium), with priority given to existing licensees — effectively blocking new entrants.
- 60% Filipino ownership may apply to the VASP entity.
- Physical incorporation in the Philippines is required (local entity mandatory).
- Cash-in/cash-out kiosks must comply with BSP consumer protection rules and may be subject to sandbox piloting before full approval.
- If kiosk offers crypto-to-crypto exchange or token-related services, SEC CASP registration (₱100M capital) may also be required, creating dual BSP + SEC regulatory burden.
- Geo-blocking of Philippine users is enforced against unlicensed operators — kiosks must be licensed to avoid enforcement (NTC website/app blocking).
- Stablecoin-related kiosk operations are permitted but not classified as fiat; subject to BSP VASP oversight.
Key Risks
- BSP VASP license moratorium indefinitely frozen — new operators may be unable to obtain a license in the near term, making entry practically infeasible.
- Aggressive SEC enforcement against unlicensed crypto operators (Binance geo-blocking, August 2025 advisories targeting ~50 platforms including major names) sets precedent for enforcement against unlicensed kiosk operators.
- Dual BSP/SEC regulatory uncertainty — kiosk operator may be classified differently (pure VASP vs CASP) leading to conflicting or overlapping requirements.
- Cash-heavy ATM model carries elevated AML/CTF risk scrutiny; AMLC may impose stricter reporting or audit requirements.
- NTC website/app blocking powers extend to kiosk software/apps — operators risk service disruption if compliance gaps are found.
- Public advisory and enforcement pattern suggests regulators are actively monitoring and will publicly name violators.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
SEC Philippines — Securities token oversight, warnings against unlicensed offerings
BSP Circular 1108 (2021) — VASP licensing framework
VASP: VASP License from BSP (Circular 1108/2021). PHP 50M (~$900K USD) minimum capitalization. 6-12 months. BSP imposed moratorium on new VASP licenses in 2022 to assess existing licensees; partially lifted 2024. Coins.ph and PDAX are major licensed operators. 60% Filipino ownership may apply.
EXCHANGE: VASP license — PHP 50M minimum capitalization. High crypto adoption driven by remittances and gaming/play-to-earn (Axie Infinity).
Crypto asset service providers (CASPs) must register with the Philippine Securities and Exchange Commission (SEC) and maintain a minimum capital of ₱100 million with physical incorporation in the Philippines
Strict compliance with anti-money laundering (AML) procedures is mandatory
CASPs must submit regular reports to the SEC and the AML Council with detailed documentation 30 days prior to any activity
New VASP licenses are frozen indefinitely as of 2025, prioritizing existing licensees.
Potentially securities under Section 3 of the Securities Regulation Code (SRC) if they involve investment contracts with profit expectations; purely pegged, collateral-backed, or algorithmic stablecoins without profit elements fall outside SRC and default to BSP oversight.
Oversight splits: BSP handles custody, exchanges, on/off-ramps, and payment roles via Circular 1108; Securities and Exchange Commission (SEC) governs issuance, marketing, and trading under its Crypto-Asset Service Provider (CASP) regime.
SEC public advisory and enforcement (no specific circular cited; referenced as prior CASP violation): https://bravenewcoin.com/insights/philippines-sec-targets-major-crypto-exchanges-in-regulatory-crackdown
Entities: ~50 platforms including Coinbase, Gemini, and overlaps like OKX/Bybit/KuCoin (unlicensed virtual asset service providers/VASPs).
Violation: Operating without BSP authorization (BSP Circular No. 1108 for VASP regulations); non-compliance with AMLA via AMLC oversight.
Penalty: NTC directive to ISPs for website/mobile app blocks (effective by December 25, 2025 via PLDT/Smart/Globe); part of broader risk controls for money laundering/terrorist financing.
BSP request to NTC; BSP Circular No. 1108: https://cryptorank.io/news/feed/17b0b-50-crypto-platforms-targeted-as-philippines-tightens-rules
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operation in the Philippines requires a BSP VASP license (PHP 50M minimum capital) under Circular 1108, but a moratorium on new VASP licenses (indefinitely frozen as of 2025) makes new entry practically infeasible; if offering exchange/token services, dual SEC CASP registration (₱100M capital) may also apply, and aggressive enforcement against unlicensed operators is well-established.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?