Crypto ATM / kiosk operator in Sweden
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Sweden with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- Registration/authorization required with Finansinspektionen (SFSA) as a CASP under MiCA; transition for pre-MiCA registrants until 30 Jun 2026.
- Conduct KYC by obtaining customer information before any transaction (cash-in or cash-out).
- Perform risk assessments of products/services, customers, distribution channels, and geographic factors for ML/TF risks.
- Apply enhanced due diligence (EDD) where risks are higher — cash-intensive ATM/kiosk operations inherently trigger higher risk, requiring EDD.
- Report suspicious transactions to the Swedish Financial Intelligence Unit (FIU) under the AML Act (SFS 2017:630).
- Comply with EU sanctions integrated via FI; monitor OFAC SDN and EU sanctions lists.
Key Restrictions
- Must obtain CASP authorization from Finansinspektionen under MiCA (effective 30 June 2024) — crypto ATM operators are CASPs.
- Must be registered/authorized with FI; pre-MiCA registrants have a transition period until 30 June 2026.
- Local entity incorporation in Sweden is required for authorization as a CASP under Swedish implementation of MiCA.
- Cash-transaction reporting thresholds under the AML Act likely apply (exact threshold amount not specified in facts — operator should confirm with FI).
- Swedish Tax Agency (Skatteverket) classifies crypto as taxable financial instruments; ATM operator must report transaction data for customers' capital gains tax purposes.
Key Risks
- High AML risk profile (cash-intensive kiosks) means intensive FI scrutiny; any compliance gap risks license revocation or criminal liability under Money Laundering Crimes Criminal Code.
- Transition period uncertainty — pre-MiCA registrants must fully upgrade to MiCA-compliant authorization by 30 June 2026 or cease operations.
- Cash-to-crypto ATM operations may trigger classification under the former Currency Exchange Act (SCEA) legacy rules — need legal analysis on residual applicability.
- No explicit cash-transaction reporting threshold (CTR) amount found in provided facts; operator must directly confirm CTR obligations with FI to avoid inadvertent non-compliance.
- Tax reporting obligations (Skatteverket) create administrative burden — operator may need to report every transaction to facilitate customer capital gains calculation.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Swedish Financial Supervisory Authority (Finansinspektionen / SFSA): Primary regulator for supervising CASPs, licensing issuers of e-money/asset-referenced tokens, enforcing MiCA, AML/KYC, and consumer protection; appointed national competent authority via act effective June 30, 2024.
Swedish Tax Agency (Skatteverket): Handles taxation, classifying crypto as taxable financial instruments (not currency); mandates reporting of transactions for capital gains tax.
Primary laws: Swedish Anti-Money Laundering and Terrorist Financing Law (AML Act, SFS 2017:630); Money Laundering Crimes Criminal Code; former Currency Exchange Act (SCEA, 1996:1006, now amended/reduced post-MiCA); Lag med kompletterande bestämmelser till EU:s förordning om marknader för kryptotillgångar (2024:1159, effective 30 Dec 2024).
EU alignment: MiCA directly effective; CASPs now under direct AML Act regulation; prior SCEA expansions (effective 1 Jan 2020) imposed stricter-than-EU AML on virtual currency exchanges and custodians.
Registration/authorization required with FI; transition for pre-MiCA registrants until 30 Jun 2026.
Conduct KYC by obtaining customer information before transactions.
Perform risk assessments of products/services, customers, distribution channels, and geographic factors for money laundering/terrorist financing.
Apply enhanced due diligence where risks are higher.
Certain International Sanctions Act (1996:95): riksagen.se (via FI link)
EU sanctions: Integrated via FI; OFAC SDN: https://sanctionssearch.ofac.treas.gov
FI sanctions page: https://www.fi.se/en/bank/eu-sanctions/
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operators are permitted in Sweden but must obtain CASP authorization from Finansinspektionen (SFSA) under MiCA, conduct mandatory KYC/EDD for cash transactions, comply with the Swedish AML Act (SFS 2017:630), report transactions for tax purposes to Skatteverket, and incorporate locally.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?