Crypto ATM / kiosk operator in San Marino

Law No. 171 of December 17, 2019, "Regulations for Distributed Ledger Technologies and Blockchain for Business" (Legge 171/2019): This law defines DLT, virtual assets, and establishes the framework for Operators in Distributed Ledger Technologies (ODLTs).

BCRA Circular No. 64 of 15 September 2020, "Disciplining the activities of Operators in Distributed Ledger Technologies": This circular provides detailed implementation rules for Law 171/2019, specifying the requirements for obtaining authorization (registration) as an ODLT.

BCRA Circular No. 67 of 11 May 2021, "Amendments and additions to Circular No. 64 of 15 September 2020": This circular introduced updates and clarifications to the initial implementing regulations.

Decree No. 120 of 21 August 2019, "Provisions against money laundering and terrorist financing": This AML/CFT law is applicable to ODLTs and virtual asset service providers (VASPs).

Exchanges (Virtual Asset Exchange Providers): Entities operating a platform for the exchange of virtual assets for fiat currencies, or between one or more forms of virtual assets. This falls squarely under the ODLT/VASP authorization requirement.

If the payment processing involves the transfer, exchange, or facilitation of payments directly in virtual assets, or between virtual assets and fiat currency, the entity would be considered an ODLT/VASP and requires authorization.

Transferring virtual assets.

Participation in and provision of financial services related to an issuer's offer and/or sale of a virtual asset.

Providing other services related to virtual assets.

Legal Form & Establishment:

Must be a joint-stock company (Società per Azioni - S.p.A.) or a limited liability company (Società a responsabilità limitata - S.r.l.) established in San Marino.

Must have its registered office and effective management in San Marino.

Minimum Share Capital:

€300,000 for ODLTs providing services directly to the public (including VASPs like exchanges and custody providers) and holding client funds or virtual assets.

The BCRA may require a higher capital amount based on the complexity, scale, and risk profile of the proposed activities.

Capital must be fully paid up.

ODLTs are considered "financial intermediaries" under San Marino's AML/CFT legislation (Decree 120/2019) and are subject to all related obligations.

Implementing robust Customer Due Diligence (CDD) procedures for all clients (identifying and verifying identity, beneficial ownership).

Conducting risk assessments for business relationships and transactions.

Implementing comprehensive internal controls, policies, and procedures for AML/CFT.

Appointing an AML Officer and a Board-level AML Compliance Officer.

Establishing a Suspicious Transaction Reporting (STR) mechanism and reporting to the Financial Intelligence Agency (AIF).

Banca Centrale della Repubblica di San Marino (BCRSM) - The Central Bank of the Republic of San Marino. It is the primary financial regulator responsible for licensing, supervision, and ongoing oversight of virtual asset service providers.

Legge n. 200 del 19 dicembre 2023 – "Disposizioni per la prevenzione e il contrasto del riciclaggio e del finanziamento del terrorismo, nonché modifiche e integrazioni a leggi in materia di vigilanza prudenziale e di gestione delle crisi degli enti creditizi e finanziari."

Identification and Verification:

Natural Persons: Obtain and verify identity using reliable, independent source documents, data, or information (e.g., name, date of birth, place of birth, address, nationality, official identification number/document type).

Legal Persons/Arrangements: Obtain and verify legal name, legal form, address, proof of existence, powers that regulate and bind the legal person/arrangement, and names of individuals authorized to act on its behalf.

Beneficial Ownership (BO):

Identify the beneficial owner(s) (natural person(s) who ultimately own or control the customer and/or the natural person on whose behalf a transaction is being conducted).

For legal persons, this typically involves identifying natural persons holding more than 25% of shares or voting rights, or exercising control through other means.

Purpose and Intended Nature of Business Relationship: Obtain information on the purpose and intended nature of the business relationship or occasional transaction.

Conduct ongoing monitoring of the business relationship and transactions undertaken throughout the course of that relationship.

Risk-Based Approach (RBA): VASPs must implement a risk-based approach to AML/CFT, meaning they should:

Enhanced Due Diligence (EDD): Apply EDD in higher-risk situations, including but not limited to:

Relationships with Politically Exposed Persons (PEPs).

Complex, unusual, large transactions, and all unusual patterns of transactions that have no apparent economic or lawful purpose.

Transactions involving high-risk jurisdictions.

Use of new technologies or products that favor anonymity.

No Licensed DLT Service Providers (as of last major assessment): A key finding from the MONEYVAL (Council of Europe anti-money laundering body) "Fifth Round Mutual Evaluation Report on San Marino" published in July 2022 stated:

MONEYVAL Report (July 2022):

Title: MONEYVAL Fifth Round Mutual Evaluation Report on San Marino