Crypto ATM / kiosk operator in Seychelles
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Seychelles with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Licensing under the Virtual Asset Service Providers Act, 2022 (VASP Act 2022) is mandatory — a VASP license from the Financial Services Authority (FSA) Seychelles is required.
- AML/CFT compliance under the Anti-Money Laundering and Countering the Financing of Terrorism Act, 2020 (AML/CFT Act 2020) applies, including mandatory CDD for all customers.
- Customer identification and verification: natural persons require name, residential address, date of birth, nationality, and official ID; legal persons require name, legal form, proof of existence, directors/partners, and registered address.
- Beneficial ownership identification: identify and verify beneficial owners owning/controlling >25% of the customer.
- Enhanced Due Diligence (EDD) required for PEPs, high-risk jurisdictions (per FATF or domestic framework), complex/unusually large transactions, and specific high-risk virtual asset activities.
- Source of funds and source of wealth must be identified for higher-risk customers or transactions.
- Suspicious Transaction Reports (STRs) must be filed immediately with the Financial Intelligence Unit (FIU) when there is knowledge, suspicion, or reasonable grounds to suspect proceeds of crime or terrorist financing.
- No-tipping-off prohibition applies — VASPs must not disclose to customers that an STR has been or will be filed.
- Record-keeping: CDD records, transaction records (amount, currency, type of virtual asset, dates, parties) must be maintained.
- Cash-transaction reporting thresholds are implied via EDD obligations for large/complex transactions but no specific USD/SCR threshold is stated in the provided facts.
Key Restrictions
- A local entity (incorporation in Seychelles) is required to obtain a VASP license from the FSA.
- Operation without a VASP license exposes the operator to public warnings, cease-and-desist orders, and potential license revocation or legal action by the FSA.
- VASP licensees must comply with the AML/CFT Act 2020 and FIU Act 2006 — no unlicensed crypto-to-fiat or crypto-to-crypto exchange at kiosks is permitted.
- The FSA has a track record of issuing public warnings and cease-and-desist orders against unlicensed financial services operators, including those in the crypto/forex space.
Key Risks
- Enforcement risk: FSA actively issues public warnings, cease-and-desist orders, and revokes licenses for unlicensed or non-compliant operators — there is precedent for aggressive enforcement.
- Regulatory ambiguity: The provided facts do not specify a dedicated kiosk/ATM license category or cash-transaction reporting threshold in SCR, creating uncertainty for cash-intensive operations.
- High-risk classification: Cash-based crypto kiosks are inherently high-risk; EDD obligations will apply to essentially all cash transactions, increasing compliance burden.
- Lack of explicit kiosk-specific rules may mean operators must fit into the general VASP license, which was not designed for physical cash-kiosk operations.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Virtual Asset Service Providers Act, 2022 (VASP Act 2022): This is the cornerstone legislation specifically regulating VASPs. It mandates licensing, registration, and compliance with AML/CFT obligations for entities engaged in virtual asset services.
Anti-Money Laundering and Countering the Financing of Terrorism Act, 2020 (AML/CFT Act 2020): This is the overarching AML/CFT legislation in Seychelles, applying to all designated non-financial businesses and professions (DNFBPs) and financial institutions, which now explicitly includes VASPs. The VASP Act builds upon and references the requirements of this broader AML/CFT Act.
Financial Intelligence Unit Act, 2006 (as amended): This Act establishes the Financial Intelligence Unit (FIU) and outlines its powers and responsibilities, including receiving and analyzing suspicious transaction reports.
Exchange between virtual assets and fiat currencies.
Exchange between one or more forms of virtual assets.
Identification and Verification of Customers:
Natural Persons: Obtain and verify identity through reliable, independent source documents, such as name, residential address, date of birth, nationality, and official identification numbers.
Legal Persons/Arrangements: Obtain and verify identity information such as name, legal form, proof of existence, powers that regulate the legal person, names of directors/partners, and the address of the registered office or place of business.
Beneficial Ownership Identification: Identify and verify the identity of the beneficial owner(s) of the customer. For legal persons, this typically involves identifying individuals who ultimately own or control more than 25% of the entity.
Enhanced Due Diligence (EDD): Apply EDD for higher-risk scenarios, including:
Transactions with Politically Exposed Persons (PEPs).
Business relationships or transactions with persons from high-risk jurisdictions identified by FATF or the domestic AML/CFT framework.
Complex, unusually large transactions, and all unusual patterns of transactions that have no apparent economic or lawful purpose.
Specific virtual asset activities deemed higher risk.
Identifying the source of funds and source of wealth when dealing with higher-risk customers or transactions.
Reporting Obligation: A VASP must immediately report to the FIU when it knows, suspects, or has reasonable grounds to suspect that funds or other assets are proceeds of a criminal activity, or are related to terrorist financing, or other money laundering activities.
No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or third parties that a suspicious transaction report has been or will be made.
CDD Records: All records obtained through CDD procedures (e.g., copies of identification documents, account files, business correspondence).
Transaction Records: Records of all domestic and international transactions, including the amount, currency, and type of virtual asset, transaction dates, and parties involved.
Regulator Name: Financial Services Authority (FSA) Seychelles
Issuing Public Warnings: Against entities operating without a license or misrepresenting their licensing status in Seychelles, often encompassing investment schemes, forex, and implicitly, crypto-related activities.
Cease and Desist Orders: Mandating unauthorized entities to stop operations.
License Revocations/Suspensions: For non-compliance within the broader financial services sector, which can indirectly affect entities dealing with virtual assets.
Entity Targeted: Numerous entities falsely claiming to be licensed or operating without proper authorization. While not always explicitly "crypto," many involve fraudulent investment schemes, forex trading, or brokerage services that often interact with digital assets. Violation Type: Operating without a license, misrepresentation of licensing status, unauthorized financial services activities, potential fraud. Penalty Amount: N/A (no monetary fine typically disclosed for these warnings, but the entity is ordered to cease operations and public is warned). Outcome: Public awareness, cessation of unauthorized activities (if complied), potential further legal action if non-compliant.
Entity Targeted: Various financial services providers (e.g., International Business Companies, Payment Service Providers, Capital Market Services licensees) that either failed to comply with regulatory requirements or voluntarily surrendered their licenses due to inability to meet new standards (including AML/CFT). While not always explicitly "crypto-VASP" licenses, non-compliance in the broader financial sector can affect entities that provided related services. Violation Type: Non-compliance with regulatory requirements (including AML/CFT), failure to maintain minimum capital, failure to provide required documentation, voluntary surrender of license. Penalty Amount: N/A (the primary "penalty" is the loss of operating license). Outcome: Entity can no longer operate in Seychelles under that license, removal from public registers, potential liquidation.
Outcome: Public awareness, cessation of unauthorized activities (if complied), potential further legal action if non-compliant.
Outcome: Entity can no longer operate in Seychelles under that license, removal from public registers, potential liquidation.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operators are permitted in Seychelles but must obtain a VASP license from the FSA under the VASP Act 2022, establish a local entity, and comply with full AML/CFT obligations (CDD, EDD, STRs to the FIU), though no specific kiosk-dedicated license category or cash-transaction threshold in SCR is explicitly defined in the available facts, creating some regulatory ambiguity.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?