← Regulations / Saudi Arabia / Operating Models / Crypto ATM

Crypto ATM / kiosk operator in Saudi Arabia

Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.

Conditional AI-Generated · Unreviewed

Crypto ATM is conditionally permitted in Saudi Arabia with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • Subject to SAMA's AML/CFT supervision under Royal Decree M/20 (AML/CFT): General transaction reporting obligations apply.
  • Cash-transaction reporting thresholds would follow SAMA/AML rules; no specific crypto-ATM threshold identified — must comply with standard cash transaction reporting under Saudi AML law.
  • Enhanced KYC obligations for cash-in/cash-out transactions likely apply given the 'high-cash AML risk profile', but no crypto-specific E-KYC rules are published due to the overall ban on public crypto.
  • All transactions must be monitored and suspicious activity reports filed with the Financial Intelligence Unit (FIU) under the AML/CFT framework.

Key Restrictions

  • 2018 Standing Committee Declaration (SAMA/CMA/MOF) declares virtual currencies illegal and unlicensed — this is the foundational restriction.
  • No standardized VASP or crypto-specific license exists for retail exchanges, custody, or payment processing — crypto ATM operations fall outside approved perimeters.
  • The only recognized pathway to operate crypto-related activities is via SAMA's Regulatory Sandbox; full public operations without sandbox approval are illegal.
  • SAMA has issued ongoing warnings against Bitcoin and has stated no oversight or support for such activities.
  • MOF 2019 warning confirms crypto trading is outside the legal framework.
  • Entity must be locally incorporated (LLC or similar) with UBO disclosure before sandbox application.

Key Risks

  • High enforcement risk: SAMA and CMA have declared virtual currencies illegal — operating a crypto ATM could trigger legal action, penalties, or criminal liability.
  • Regulatory ambiguity: No crypto-specific framework exists for cash-to-crypto kiosks; sandbox pathway is untested for this specific operating model.
  • Banking/commercial risk: Local banks and payment providers may refuse to service crypto ATM operators due to SAMA warnings.
  • Reputational exposure: Saudi authorities publicly warn against crypto trading; consumer-facing ATM operations could attract negative regulatory attention.
  • No segregation or insurance requirements exist — operational risk for cash held on-site is unaddressed by regulation.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

No standardized licenses: There is no broadly public VASP (Virtual Asset Service Provider) or crypto-specific license for retail exchanges, custody, or payment processing; activities like crypto trading, wallet services, or brokerage fall outside approved perimeters without explicit regulatory approval.

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

Limited permitted activities: Under SAMA's 2023 Payment Service Provider Regulations (enabled by the 2022 Law of Payments and Payment Providers), related services such as digital banking, electronic payment processing, P2P lending/investment, asset/wealth investment, crypto/blockchain applications, and BNPL may qualify indirectly, but not pure crypto trading or custody.

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

Exchanges and custody: Require entry via SAMA's Regulatory Sandbox as the primary (and currently only recognized) route for testing and potential approval; full operations demand ongoing compliance verification.

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

Primarily a licensing regime with sandbox entry: Business registration alone (e.g., via Ministry of Investment - MISA portal) is insufficient; it precedes a preliminary sandbox application to SAMA for crypto-related activities. No "one-click" registration substitutes for licensing, and unlicensed operations face administrative penalties, unannounced inspections, and potential legal action.

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

Entity setup first: Legally register a company (e.g., LLC), disclose UBOs/shareholding, define business objects, then seek sandbox admission; foreign firms may operate if activities align with SAMA approvals.

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

Register entity and obtain investment license via MISA portal (upload documents, select authorized activity).

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

Submit preliminary application to SAMA Regulatory Sandbox electronically (full documentation on solvency, audits, AML systems, business model).

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

Undergo review/testing (up to 1 year); meet ongoing reporting, security, and client protection standards.

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

Post-sandbox: Secure full operational approval; continuous audits required.

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 60% confidence

2018 Standing Committee Declaration (via SAMA/CMA): Virtual assets illegal/unlicensed.

[primary] sama.gov.sa [primary] sama.gov.sa — RegulatorySandbox [primary] https://misa.gov.sa[1
licensing 20% confidence

2018 Standing Committee declaration (SAMA/CMA/MOF): Virtual currencies illegal. (https://www.lightspark.com/knowledge/is-crypto-legal-in-saudi-arabia)

licensing 20% confidence

SAMA warnings against Bitcoin (ongoing): No oversight or support. (https://zipmex.com/blog/is-crypto-mining-legal-in-saudi-arabia/) ; (https://freemanlaw.com/cryptocurrency/saudi-arabia/)

licensing 20% confidence

MOF 2019 warning: Outside legal framework. (https://timesofindia.indiatimes.com/world/middle-east/saudis-bitcoin-trading-laws-2025-what-traders-and-businesses-need-to-know/articleshow/124017628.cms)

licensing 20% confidence

Royal Decree M/20 (AML/CFT): General transaction reporting. (https://zipmex.com/blog/is-crypto-mining-legal-in-saudi-arabia/)

licensing 20% confidence

Custodial License Requirements: None exist, as no licenses are issued for cryptocurrency practices; entities claiming otherwise face legal action.

licensing 20% confidence

Insurance/Bonding Requirements: Not mandated, as crypto activities are unlicensed and prohibited.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
low

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — Crypto ATM/kiosk operation in Saudi Arabia is not clearly permitted as a standalone activity; the only potential pathway is via SAMA's Regulatory Sandbox, but this is untested for cash-to-crypto kiosks and the 2018 Standing Committee Declaration declares virtual currencies illegal, creating fundamental legal risk.

Questions this verdict aims to answer

  • What money-transmitter / kiosk-specific license is required?
  • What cash-transaction reporting thresholds apply?
  • What enhanced-KYC obligations attach to cash-in / cash-out?