Crypto ATM / kiosk operator in Poland

Current (Registration): Poland operates a registration regime for VASPs under its AML Act. This means entities must register their activities with GIIF and comply with AML/CTF obligations. It is not a full "licensing" regime in the sense of prudential supervision (e.g., capital adequacy, operational risk, consumer protection oversight by KNF) like banks or investment firms currently face. The focus is purely on preventing money laundering and terrorist financing.

Virtual currency exchange service: This includes exchanging virtual currencies for fiat currencies and vice-versa, as well as exchanging one virtual currency for another. This category explicitly covers exchanges.

The applicant must be a Polish legal entity (e.g., Spółka z ograniczoną odpowiedzialnością - limited liability company, or Spółka akcyjna - joint-stock company).

At least one individual from the management board of the Polish legal entity must have their residence in Poland or possess a Polish citizenship.

Internal AML/CTF Procedures: Develop and implement robust internal anti-money laundering and counter-terrorist financing procedures, including a risk assessment specific to the business and its clients.

AML Officer: Appoint a designated individual responsible for AML/CTF compliance (AML Officer or Compliance Officer).

Customer Due Diligence (CDD): Implement procedures for identifying and verifying the identity of clients, including beneficial owners, and understanding the purpose and nature of business relationships. This involves collecting identity documents, verifying data, and screening against sanctions lists.

Ongoing Monitoring: Conduct ongoing monitoring of client relationships and transactions to detect suspicious activities.

Transaction Monitoring: Implement systems to monitor transactions for unusual patterns or thresholds.

Reporting: Report suspicious transactions and activities to GIIF.

Record-keeping: Maintain records of client identification data and transactions for at least 5 years.

Training: Provide regular AML/CTF training for relevant employees.

Under the current Polish AML Act, there are NO specific minimum capital requirements solely for VASP registration. This is a significant difference from traditional financial licenses.

Fit & Proper Criteria (Management/Owners):

Individuals intending to perform activities in the field of virtual currencies, as well as members of the management board and beneficial owners, must:

Have no criminal record for intentional financial crimes (e.g., money laundering, terrorist financing, fraud, tax offenses).

Legal Entity / Local Presence:

The management board members (or individuals managing the business) and beneficial owners must meet "fit and proper" criteria.

Requirement: Entities providing services related to virtual currencies, including "holding virtual currencies, including offering services to their users that consist of maintaining virtual currency instruments or access keys on their behalf," are considered Virtual Asset Service Providers (VASPs). These entities are obliged to register in the Register of Activities in the Field of Virtual Currencies (Rejestr Działalności w Zakresie Walut Wirtualnych).

Conditions for Registration:

The applying entity must be a legal person, an organizational unit without legal personality, or a natural person conducting business activity.

Individuals involved in management or ownership must not have been convicted of specific financial crimes or money laundering offenses.

Proof of knowledge and experience in the field of virtual currencies (e.g., certificate of completion of training, professional experience) is required.

Regulatory Body: The register is maintained by the Minister of Finance.

Purpose: This registration primarily serves AML/CFT purposes, ensuring that service providers implement appropriate customer due diligence (KYC), transaction monitoring, and suspicious activity reporting measures. It is not a comprehensive prudential license.

Current Status: The current Polish AML Act does not explicitly mandate specific rules for the segregation of client assets for virtual currency custodians. While good practice and general commercial law principles might suggest segregation, there is no direct regulatory requirement specific to crypto custody in the current AML framework.

Requirement: Under MiCA, entities wishing to provide custody and administration of crypto-assets will need to obtain an authorization from their competent national authority (likely the Polish Financial Supervision Authority – KNF). This authorization will be passportable across the EU.

Regulatory Body: The KNF will be the primary national competent authority for MiCA in Poland.

Requirement: MiCA explicitly mandates the segregation of client crypto-assets and funds. Article 67 specifies that CASPs providing custody services must:

Future (MiCA - Licensing): The EU's Markets in Crypto-Assets Regulation (MiCA) will introduce a comprehensive licensing regime for a broader range of crypto-asset services across the EU. MiCA will come into full effect in December 2024 for most provisions. Once MiCA is fully applicable, entities providing crypto-asset services (CASPs) as defined under MiCA will need to obtain a license from a national competent authority (in Poland, likely KNF) and will be subject to more extensive prudential, organisational, and consumer protection requirements, including capital requirements.

Future MiCA Impact: MiCA will introduce capital requirements for Crypto-Asset Service Providers (CASPs), ranging from €50,000 to €150,000 depending on the type of services provided.