Crypto ATM / kiosk operator in Tonga
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Tonga with a local entity, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- Register as a 'reporting entity' under the Money Laundering and Terrorist Financing Act 2020 with the National Reserve Bank of Tonga (NRBT) or the Tonga Financial Intelligence Unit (TFIU) — no specific crypto license exists, but VASP activity (including crypto-to-fiat exchange by ATMs) triggers mandatory registration.
- Implement standard Customer Due Diligence (CDD): identify and verify name, date of birth, residential address, and national ID/passport for natural persons (to.aml.identification-and-verification-of-customer)
- Identify and verify beneficial owners (UBOs) for any legal-person customers (to.aml.identification-and-verification-of-beneficial)
- Understand the purpose and intended nature of the business relationship with each customer (to.aml.understanding-the-purpose-and-intended)
- Conduct ongoing monitoring of transactions for consistency with customer risk profile and source of funds (to.aml.ongoing-monitoring-continuously-monitoring-the)
- Apply Enhanced Due Diligence (EDD) for higher-risk situations: PEPs, complex/unusually large transactions, cross-border relationships, customers from high-risk jurisdictions (to.aml.enhanced-due-diligence-edd-applying)
- File Suspicious Transaction Reports (STRs) to the TFIU with no monetary threshold — any suspicion triggers a report (to.aml.no-monetary-threshold-strs-must)
- Comply with the 'tipping off' prohibition — cannot disclose to the customer that an STR has been filed (to.aml.tipping-off-prohibition-vasps-and)
- Maintain all records (CDD, transactions, business relationship, STRs) for at least 5 years after business relationship ends or date of occasional transaction (to.aml.duration-records-must-generally-be)
- Expect FATF Travel Rule obligations for virtual asset transfers (identifying sender and receiver information) — Tonga is an APG member committed to FATF Recommendation 15 (to.aml.fatf-standards-tonga-as-a)
Key Restrictions
- Cryptocurrencies are not recognized as legal tender in Tonga and are largely unregulated — the NRBT has issued multiple public warnings about the unregulated nature of crypto activities (to.enforcement.december-2023-the-nrbt-reiterated)
- No specific crypto/kiosk license exists; the operator must instead register as a 'reporting entity' under the MLTFA 2020 and comply with AML/CFT obligations (to.licensing.no-specific-crypto-license-is)
- If the ATM operator also engages in fiat money remittance or other traditional financial services, an additional money services business license or similar authorization from the NRBT is required (to.licensing.traditional-licensing-if-your-vasp)
- Must have a registered business presence in Tonga to operate lawfully (to.licensing.what-this-means-while-you)
- No specific cash-transaction reporting threshold is articulated in available facts — general STR obligations apply without monetary threshold
Key Risks
- Regulatory ambiguity: Tonga has not yet established a comprehensive regulatory framework specifically for virtual assets — enforcement actions to date are limited to public warnings, with no record of penalties against specific crypto businesses (to.enforcement.tonga-has-not-yet-established)
- Consumer-protection backlash risk: NRBT has publicly warned against crypto activities in 2021, 2022, and 2023, creating reputational/PR risk for operators (to.enforcement.december-2023-the-nrbt-reiterated)
- Small-jurisdiction implementation gap: Tonga is an APG member and expected to implement FATF Recommendation 15 (VASPs), but enforcement capacity is limited, creating compliance uncertainty (to.enforcement.tonga-is-a-member-of)
- Cash-heavy AML risk profile of ATM/kiosk model attracts elevated scrutiny under the broad EDD obligations — kiosks handling cash-in/cash-out are inherently higher risk and likely to trigger STR filing requirements frequently (to.aml.enhanced-due-diligence-edd-applying)
- No specific cash transaction reporting threshold (CTR) is defined — reliance on STR-only reporting creates operational ambiguity about when a cash transaction is reportable
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Virtual Asset (VA): Defined broadly to mean a digital representation of value that can be digitally traded or transferred and used for payment or investment purposes. It does not include digital representations of fiat currencies, securities, or other financial assets that are already covered by other laws.
Exchange between virtual assets and fiat currencies.
No specific "crypto license" is issued. Instead, if your business activity falls under the definition of a VASP (which exchanges, custody providers, and payment processors dealing with virtual assets invariably do), you will be treated as a "reporting entity" under the Money Laundering and Terrorist Financing Act 2020.
What this means: While you don't apply for a specific "Tonga Crypto License," you must register your business in Tonga, notify the relevant supervisory authority (likely the NRBT or FIU, depending on the specifics and which body is designated for VASP oversight under the Act's implementation), and demonstrate full compliance with AML/CFT obligations.
Registration Regime (AML/CFT focused): For VASPs, Tonga operates more of a registration and compliance oversight regime rather than a bespoke licensing regime. VASPs are categorized as "reporting entities" under the MLTFA 2020.
Money Laundering and Terrorist Financing Act 2020:
Traditional Licensing: If your VASP business also conducts activities that fall under traditional financial services (e.g., money remittance using fiat currency), then you would also need to seek appropriate licenses from the National Reserve Bank of Tonga for those specific activities.
Money Laundering and Terrorist Financing Act 2018 (as amended): This is the foundational law establishing the AML/CFT framework, defining offenses, setting out reporting obligations, and granting powers to authorities. It likely includes definitions that capture VASPs or their activities.
Identification and Verification of Beneficial Owners (UBOs): Taking reasonable measures to identify and verify the identity of the ultimate beneficial owners of the customer, especially for legal entities and trusts.
Understanding the Purpose and Intended Nature of the Business Relationship: Gathering information about the customer's intended activities and the purpose for which the VASP's services will be used.
Ongoing Monitoring: Continuously monitoring the business relationship and transactions to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile, including, where necessary, the source of funds.
Enhanced Due Diligence (EDD): Applying enhanced measures for higher-risk situations, such as:
No Monetary Threshold: STRs must be filed regardless of the amount of the transaction.
"Tipping Off" Prohibition: VASPs and their employees are prohibited from disclosing to the customer or a third party that an STR has been or will be filed.
Duration: Records must generally be kept for a period of at least five (5) years after the business relationship has ended or after the date of an occasional transaction.
FATF Standards: Tonga, as a member of the Asia/Pacific Group on Money Laundering (APG) (a FATF-style regional body), is expected to implement FATF Recommendations, including Recommendation 15 (New Technologies) and its interpretative note, which specifically addresses VASPs and the "Travel Rule" (requiring VASPs to obtain and transmit originator and beneficiary information for virtual asset transfers above a certain threshold).
December 2023: The NRBT reiterated warnings about crypto investments, noting their unregulated nature and high risks, following a trend of public advisories. This was part of their general consumer protection mandate.
June 2022: The NRBT issued a comprehensive warning about the risks of virtual assets, emphasizing that they are not legal tender in Tonga and are unregulated.
February 2021: A warning was issued regarding crypto scams and the inherent risks of dealing with unregulated entities.
Tonga has not yet established a comprehensive regulatory framework specifically for virtual assets, which means that enforcement actions related to licensing or specific crypto laws are limited.
Tonga is a member of the Asia/Pacific Group on Money Laundering (APG), indicating its commitment to AML/CFT standards. However, the implementation of these standards for virtual assets is an ongoing challenge for many small jurisdictions.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a Crypto ATM/kiosk operator may operate in Tonga by registering as a "reporting entity" under the MLTFA 2020 (no specific crypto/kiosk license), maintaining a local business presence, and complying with all AML/CFT obligations (CDD, EDD for cash-heavy operations, STRs with no threshold, recordkeeping for 5+ years), but faces regulatory ambiguity and NRBT consumer-protection warnings against unregulated crypto activities.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?