Crypto ATM / kiosk operator in Thailand
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Thailand with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- AML/KYC mandatory under the Anti-Money Laundering Act (supervised by AMLO) — operators are treated as 'financial institutions' for AML purposes
- Mandatory CDD and ongoing transaction monitoring required
- Annual AML audits required
- Internal AML/CTF procedures must be documented and implemented
- Cash transaction reporting thresholds would apply under the AML Act — operators handling cash-in/cash-out must report large cash transactions to AMLO
- Operators must have AML/KYC framework as part of licensing submission package
Key Restrictions
- Crypto payments for goods/services are banned (2022 SEC + BOT joint guidance)
- Operator must be a Thai-registered legal entity with qualified directors/executives, a compliance officer, and local management
- Must hold a Digital Asset Exchange license (THB 50M minimum capital) or applicable category — kiosks involve exchange of cash for crypto, falling under exchange activity
- Higher capital may apply — custodial exchanges require THB 100M minimum paid-up capital deposited in a Thai bank
- Must consult with BOT before beginning operations
- Must comply with BOT-overseen risks including settlement, money laundering, cybersecurity, and consumer protection
- Net capital adequacy and customer asset segregation required
- IT/cybersecurity compliance required per Cybersecurity Act and PDPA
- Professional liability insurance and client fund protections required
Key Risks
- ["No specific kiosk/ATM license category exists — kiosk operators must fit into the Digital Asset Exchange license framework, creating structural ambiguity", "Cash-heavy model attracts enhanced AMLO scrutiny; cash transaction reporting obligations for physical kiosks are not explicitly defined in the facts", "Crypto payment ban may create ambiguity about whether cash-to-crypto at a kiosk is a 'payment'", "High capital requirement (THB 50M–100M) is a significant barrier for typical ATM/kiosk operators", "Tax treatment: crypto gains taxed as assessable income (0%-35% progressive PIT); operators may face withholding obligations", "Regulatory overlap between SEC and BOT creates dual supervision risk"]
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
SEC Thailand — Digital asset operator licensing (5 subcategories), enforcement
BOT — Payment systems, stablecoins, crypto payment ban (joint 2022 guidance)
Emergency Decree on Digital Asset Business B.E. 2561 (2018) — Digital asset exchange, broker, dealer, fund manager, advisory licensing
VASP: Digital Asset Operator License from SEC Thailand — 5 categories: Exchange (THB 50M), Broker (THB 25M), Dealer (THB 5M), Fund Manager (THB 5M), Advisory (THB 5M). ~15 licensed operators. Bitkub dominant exchange. ICO portal licensing separate. 6-12 months.
EXCHANGE: Digital Asset Exchange license — THB 50M (~$1.4M USD) minimum capital. Crypto payments banned (2022, SEC + BOT joint guidance). Utility tokens and investment tokens have different regulatory treatments.
CUSTODY: Included under Digital Asset Exchange license; customer asset segregation required. Net capital adequacy required.
Capital: Minimum paid-up capital deposited in a Thai bank, varying by license type and custody model (e.g., THB 100M for custodial exchanges).
AML/KYC: Mandatory under the Anti-Money Laundering Act (supervised by AMLO); requires internal procedures, customer due diligence, ongoing transaction monitoring, and annual audits. Operators are "financial institutions" for AML purposes.
Local Presence: Must be a Thai-registered legal entity with qualified directors/executives, a compliance officer, and local management.
Other: Accurate accounting, regular audits, IT/cybersecurity (per Cybersecurity Act and PDPA), risk management, business plan, professional liability insurance, and client fund protections.
Incorporate as a Thai entity and prepare documents: business plan, financials, IT security/risk policies, AML/KYC framework, team qualifications.
Submit full package to SEC for review (within 90 days).
SEC forwards recommendation to MOF, which approves/rejects within 60 days.
Total timeline: Several months; post-license, ongoing supervision by SEC.
Consult with the BOT before beginning operations
Comply with BOT-overseen risks including settlement, money laundering, cybersecurity, and consumer protection
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operators in Thailand must obtain a Digital Asset Exchange license (THB 50M–100M minimum capital), incorporate as a Thai entity, comply with AMLO AML/KYC obligations as financial institutions, and navigate SEC-BOT dual oversight, with no dedicated kiosk-specific license category.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?