← Regulations / El Salvador / Operating Models / Crypto ATM

Crypto ATM / kiosk operator in El Salvador

Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.

Conditional AI-Generated · Unreviewed

Crypto ATM is conditionally permitted in El Salvador with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • VASPs must implement a full AML/CFT program under the Ley Contra el Lavado de Dinero y de Activos (LCLDA) and the Ley de Regulación de los Proveedores de Servicios de Activos Virtuales (LRPVAS), with detailed norms (NPLDFT) issued by the SSF.
  • Customer identification: Obtain and verify identity using reliable independent source documents (national ID card, passport) — full name, DOB, nationality, address, and unique ID for natural persons.
  • Legal entity customers: Verify legal name, legal form, address, proof of incorporation, articles of association, names of directors and beneficial owners, and authorized signatories.
  • Beneficial ownership: Identify and verify individuals who ultimately own or control 25% or more of the entity.
  • Risk-based customer classification: VASPs must classify customers as low, medium, or high risk and apply Enhanced Due Diligence (EDD) for high-risk customers.
  • EDD measures include additional identifying information, more frequent updates, source-of-funds/wealth verification, and senior management approval.
  • Politically Exposed Persons (PEPs) are always high-risk and require EDD including senior management approval and source-of-wealth determination.
  • Ongoing transaction monitoring: Regularly review customer relationships to ensure transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile.
  • Keep customer information up-to-date, especially for high-risk customers; monitor for changes in beneficial ownership or risk profile.
  • Cash-transaction reporting thresholds are governed under the LCLDA regime — cash-intensive operations (ATM/kiosk) trigger heightened scrutiny and reporting obligations to the SSF.

Key Restrictions

  • A license from the Comisión Nacional de Activos Digitales (CNAD) is required to operate as a Digital Asset Service Provider (DASP) under the Digital Assets Issuance Law (Ley de Emisión de Activos Digitales).
  • The LRPVAS (Law for the Regulation of Virtual Asset Service Providers, June 2023) establishes a specific licensing regime for VASPs, including exchange and custody services — crypto ATM operators fall under this regime.
  • Operators must comply with the Norms for the Prevention of Money Laundering (NPLDFT) issued by the SSF.
  • Bitcoin is legal tender in El Salvador, which may create additional obligations to accept Bitcoin payments and integrate with the Chivo Wallet ecosystem for certain economic agents.
  • The CNAD does not regulate Bitcoin-as-legal-tender transactions (those fall under the Bitcoin Law); however, ATM operators exchanging cash for crypto (including Bitcoin) involve Bitcoin as a commodity/asset in the exchange context, bringing them under CNAD/LRPVAS scope.

Key Risks

  • Enforcement framework is still nascent — the CNAD became operational only in 2023, so licensing processes and supervisory expectations may still be evolving.
  • High-cash AML risk profile of crypto ATMs will attract enhanced scrutiny from SSF and CNAD; cash-intensive models face elevated ML/TF risk classification.
  • Pro-Bitcoin government stance creates regulatory ambiguity — the Bitcoin Law mandates acceptance of Bitcoin as legal tender, but crypto ATM operators exchanging cash for crypto may fall into gaps between the Bitcoin Law and the Digital Assets Issuance Law.
  • Chivo Wallet's well-documented security and fraud issues (2021–2022) signal that consumer-protection and AML failures in crypto-facing services attract negative press and government intervention.
  • No specific cash-transaction reporting threshold (e.g., $10,000 equivalent) was found in the provided facts specific to crypto ATMs — operators must verify exact threshold amounts under LCLDA implementing regulations.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

Comisión Nacional de Activos Digitales (CNAD): (National Commission of Digital Assets)

[primary] bcr.gob.sv [primary] ssf.gob.sv [secondary] leyes.io — Bitcoin Law
licensing 60% confidence

Role: Established by the Digital Assets Issuance Law, CNAD is a specialized body responsible for regulating the issuance, public offering, and transfer of digital assets (excluding Bitcoin as legal tender). This includes overseeing tokenized securities and ensuring investor protection in the digital asset market.

[primary] bcr.gob.sv [primary] ssf.gob.sv [secondary] leyes.io — Bitcoin Law
licensing 60% confidence

Ley de Emisión de Activos Digitales (Digital Assets Issuance Law)

[primary] bcr.gob.sv [primary] ssf.gob.sv [secondary] leyes.io — Bitcoin Law
licensing 60% confidence

Establishes a comprehensive legal framework for the issuance, public offering, and transfer of digital assets (excluding Bitcoin, which is legal tender).

[primary] bcr.gob.sv [primary] ssf.gob.sv [secondary] leyes.io — Bitcoin Law
licensing 60% confidence

Creates the National Commission of Digital Assets (CNAD) as the primary regulator for these activities.

[primary] bcr.gob.sv [primary] ssf.gob.sv [secondary] leyes.io — Bitcoin Law
licensing 60% confidence

Ley Bitcoin (Bitcoin Law)

[primary] bcr.gob.sv [primary] ssf.gob.sv [secondary] leyes.io — Bitcoin Law
licensing 60% confidence

Established Bitcoin as legal tender alongside the US Dollar.

[primary] bcr.gob.sv [primary] ssf.gob.sv [secondary] leyes.io — Bitcoin Law
aml 60% confidence

Ley Contra el Lavado de Dinero y de Activos (LCLDA)

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Purpose: This is the foundational AML/CFT law in El Salvador, applicable to a wide range of obliged entities. VASPs fall under its scope, requiring them to implement robust AML/CFT programs.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Ley de Regulación de los Proveedores de Servicios de Activos Virtuales (LRPVAS)

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Purpose: This is the most specific and comprehensive law directly addressing VASPs. It establishes a licensing regime for VASPs and explicitly lays out their AML/CFT obligations, consumer protection measures, and prudential requirements. It covers services such as virtual asset exchange, transfer, custody, and participation in financial services related to virtual asset issuance.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Normas para la Prevención del Lavado de Dinero y Activos y del Financiamiento del Terrorismo (NPLDFT)

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Issued by: Superintendencia del Sistema Financiero (SSF)

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Purpose: These norms provide detailed requirements for supervised entities (including those handling virtual assets under the SSF's purview) regarding the implementation of AML/CFT policies, procedures, and controls.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Identification and Verification:

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Natural Persons: Obtain and verify identity using reliable independent source documents (e.g., valid national identity card, passport). This includes full name, date of birth, nationality, address, and unique identification number.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Legal Entities: Obtain and verify legal name, legal form, address, proof of incorporation, articles of association, names of directors and beneficial owners, and authorized signatories.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Beneficial Ownership: Identify and verify the identity of beneficial owners (individuals who ultimately own or control 25% or more of the entity) for legal entities.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Purpose and Nature of the Relationship: Understand the purpose and intended nature of the business relationship or occasional transaction. This includes understanding the source of funds or wealth, especially for high-value transactions.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Regularly review the customer relationship to ensure that transactions are consistent with the VASP's knowledge of the customer, their business, and risk profile.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Keep customer information up-to-date, especially for high-risk customers.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Monitor for changes in beneficial ownership or customer risk profile.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

VASPs must classify customers based on their AML/CFT risk (low, medium, high) and apply enhanced due diligence (EDD) measures for higher-risk customers.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

EDD measures may include obtaining additional identifying information, requiring more frequent updates, verifying the source of funds/wealth, and obtaining senior management approval for the relationship.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
aml 60% confidence

Politically Exposed Persons (PEPs) are always considered high-risk and require EDD, including senior management approval and establishing the source of wealth/funds.

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv
enforcement 60% confidence

Comisión Nacional de Activos Digitales (CNAD) - National Commission of Digital Assets:

[secondary] reuters.com — Salvadorans Complain Bitcoin App Faults After Adoption 2021 09 08 [secondary] hrf.org — The Many Problems Of El Salvadors Bitcoin Experiment [primary] cnad.gob.sv
enforcement 95% confidence

Role: Created by the Digital Assets Issuance Law (Ley de Emisión de Activos Digitales), enacted in January 2023. CNAD is the primary regulator for the issuance, offering, and trading of digital assets (excluding Bitcoin, which is governed by the Bitcoin Law as legal tender). It grants licenses to Digital Asset Service Providers (DASPs).

[secondary] reuters.com — Salvadorans Complain Bitcoin App Faults After Adoption 2021 09 08 [secondary] hrf.org — The Many Problems Of El Salvadors Bitcoin Experiment [primary] cnad.gob.sv
enforcement 60% confidence

New Laws, New Regulation: The most significant development is the creation of the Digital Assets Issuance Law and the CNAD in early 2023. This law establishes licensing requirements for digital asset service providers. Enforcement will primarily occur as the CNAD begins to fully implement its mandate, licenses entities, and addresses non-compliance with these new rules.

[secondary] reuters.com — Salvadorans Complain Bitcoin App Faults After Adoption 2021 09 08 [secondary] hrf.org — The Many Problems Of El Salvadors Bitcoin Experiment [primary] cnad.gob.sv
enforcement 60% confidence

Digital Assets Issuance Law & CNAD Licensing:

[secondary] reuters.com — Salvadorans Complain Bitcoin App Faults After Adoption 2021 09 08 [secondary] hrf.org — The Many Problems Of El Salvadors Bitcoin Experiment [primary] cnad.gob.sv
enforcement 60% confidence

Entity Targeted: Digital Asset Service Providers (DASPs) operating or wishing to operate in El Salvador. Violation Type: Non-compliance with licensing requirements, investor protection rules, and other provisions of the Digital Assets Issuance Law. Penalty Amount: Not yet publicly reported for specific cases, but the law provides for fines, suspension, or revocation of licenses.

[secondary] reuters.com — Salvadorans Complain Bitcoin App Faults After Adoption 2021 09 08 [secondary] hrf.org — The Many Problems Of El Salvadors Bitcoin Experiment [primary] cnad.gob.sv
enforcement 60% confidence

Outcome: The CNAD is now the authority for licensing and supervising new digital asset issuances and providers. Any "enforcement" in the future will likely be against entities that fail to secure or maintain these licenses, or violate investor protection rules.

[secondary] reuters.com — Salvadorans Complain Bitcoin App Faults After Adoption 2021 09 08 [secondary] hrf.org — The Many Problems Of El Salvadors Bitcoin Experiment [primary] cnad.gob.sv
aml 60% confidence

Promulgation: June 2023

[primary] ssf.gob.sv [primary] fiscalia.gob.sv [primary] bcr.gob.sv

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — Crypto ATM/kiosk operators may operate in El Salvador but must obtain a CNAD license under the Digital Assets Issuance Law and the LRPVAS (VASP Law, June 2023), comply with comprehensive AML/CFT obligations under the LCLDA and SSF norms (NPLDFT), implement risk-based customer due diligence including EDD for high-risk and PEP customers, and establish local incorporation; however, the specific cash-transaction reporting thresholds for crypto ATMs are not clearly defined in available sources, and the regulatory framework is still maturing.

Questions this verdict aims to answer

  • What money-transmitter / kiosk-specific license is required?
  • What cash-transaction reporting thresholds apply?
  • What enhanced-KYC obligations attach to cash-in / cash-out?