← Regulations / Tonga / Operating Models / Crypto ATM

Crypto ATM / kiosk operator in Tonga

Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.

Conditional AI-Generated · Unreviewed

Crypto ATM is conditionally permitted in Tonga with a local entity, subject to AML obligations and medium licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
Medium
Last updated
2026-07-13

AML Obligations

  • Register as a 'reporting entity' under the Money Laundering and Terrorist Financing Act 2020 with the National Reserve Bank of Tonga (NRBT) or the Tonga Financial Intelligence Unit (TFIU) — no specific crypto license exists, but VASP activity (including crypto-to-fiat exchange by ATMs) triggers mandatory registration.
  • Implement standard Customer Due Diligence (CDD): identify and verify name, date of birth, residential address, and national ID/passport for natural persons (to.aml.identification-and-verification-of-customer)
  • Identify and verify beneficial owners (UBOs) for any legal-person customers (to.aml.identification-and-verification-of-beneficial)
  • Understand the purpose and intended nature of the business relationship with each customer (to.aml.understanding-the-purpose-and-intended)
  • Conduct ongoing monitoring of transactions for consistency with customer risk profile and source of funds (to.aml.ongoing-monitoring-continuously-monitoring-the)
  • Apply Enhanced Due Diligence (EDD) for higher-risk situations: PEPs, complex/unusually large transactions, cross-border relationships, customers from high-risk jurisdictions (to.aml.enhanced-due-diligence-edd-applying)
  • File Suspicious Transaction Reports (STRs) to the TFIU with no monetary threshold — any suspicion triggers a report (to.aml.no-monetary-threshold-strs-must)
  • Comply with the 'tipping off' prohibition — cannot disclose to the customer that an STR has been filed (to.aml.tipping-off-prohibition-vasps-and)
  • Maintain all records (CDD, transactions, business relationship, STRs) for at least 5 years after business relationship ends or date of occasional transaction (to.aml.duration-records-must-generally-be)
  • Expect FATF Travel Rule obligations for virtual asset transfers (identifying sender and receiver information) — Tonga is an APG member committed to FATF Recommendation 15 (to.aml.fatf-standards-tonga-as-a)

Key Restrictions

  • Cryptocurrencies are not recognized as legal tender in Tonga and are largely unregulated — the NRBT has issued multiple public warnings about the unregulated nature of crypto activities (to.enforcement.december-2023-the-nrbt-reiterated)
  • No specific crypto/kiosk license exists; the operator must instead register as a 'reporting entity' under the MLTFA 2020 and comply with AML/CFT obligations (to.licensing.no-specific-crypto-license-is)
  • If the ATM operator also engages in fiat money remittance or other traditional financial services, an additional money services business license or similar authorization from the NRBT is required (to.licensing.traditional-licensing-if-your-vasp)
  • Must have a registered business presence in Tonga to operate lawfully (to.licensing.what-this-means-while-you)
  • No specific cash-transaction reporting threshold is articulated in available facts — general STR obligations apply without monetary threshold

Key Risks

  • Regulatory ambiguity: Tonga has not yet established a comprehensive regulatory framework specifically for virtual assets — enforcement actions to date are limited to public warnings, with no record of penalties against specific crypto businesses (to.enforcement.tonga-has-not-yet-established)
  • Consumer-protection backlash risk: NRBT has publicly warned against crypto activities in 2021, 2022, and 2023, creating reputational/PR risk for operators (to.enforcement.december-2023-the-nrbt-reiterated)
  • Small-jurisdiction implementation gap: Tonga is an APG member and expected to implement FATF Recommendation 15 (VASPs), but enforcement capacity is limited, creating compliance uncertainty (to.enforcement.tonga-is-a-member-of)
  • Cash-heavy AML risk profile of ATM/kiosk model attracts elevated scrutiny under the broad EDD obligations — kiosks handling cash-in/cash-out are inherently higher risk and likely to trigger STR filing requirements frequently (to.aml.enhanced-due-diligence-edd-applying)
  • No specific cash transaction reporting threshold (CTR) is defined — reliance on STR-only reporting creates operational ambiguity about when a cash transaction is reportable

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 60% confidence

Virtual Asset (VA): Defined broadly to mean a digital representation of value that can be digitally traded or transferred and used for payment or investment purposes. It does not include digital representations of fiat currencies, securities, or other financial assets that are already covered by other laws.

licensing 60% confidence

No specific "crypto license" is issued. Instead, if your business activity falls under the definition of a VASP (which exchanges, custody providers, and payment processors dealing with virtual assets invariably do), you will be treated as a "reporting entity" under the Money Laundering and Terrorist Financing Act 2020.

licensing 60% confidence

What this means: While you don't apply for a specific "Tonga Crypto License," you must register your business in Tonga, notify the relevant supervisory authority (likely the NRBT or FIU, depending on the specifics and which body is designated for VASP oversight under the Act's implementation), and demonstrate full compliance with AML/CFT obligations.

licensing 60% confidence

Registration Regime (AML/CFT focused): For VASPs, Tonga operates more of a registration and compliance oversight regime rather than a bespoke licensing regime. VASPs are categorized as "reporting entities" under the MLTFA 2020.

licensing 60% confidence

Traditional Licensing: If your VASP business also conducts activities that fall under traditional financial services (e.g., money remittance using fiat currency), then you would also need to seek appropriate licenses from the National Reserve Bank of Tonga for those specific activities.

aml 40% confidence

Money Laundering and Terrorist Financing Act 2018 (as amended): This is the foundational law establishing the AML/CFT framework, defining offenses, setting out reporting obligations, and granting powers to authorities. It likely includes definitions that capture VASPs or their activities.

aml 40% confidence

Identification and Verification of Customer Identity:

aml 40% confidence

Identification and Verification of Beneficial Owners (UBOs): Taking reasonable measures to identify and verify the identity of the ultimate beneficial owners of the customer, especially for legal entities and trusts.

aml 40% confidence

Understanding the Purpose and Intended Nature of the Business Relationship: Gathering information about the customer's intended activities and the purpose for which the VASP's services will be used.

aml 40% confidence

Ongoing Monitoring: Continuously monitoring the business relationship and transactions to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile, including, where necessary, the source of funds.

aml 40% confidence

Enhanced Due Diligence (EDD): Applying enhanced measures for higher-risk situations, such as:

aml 40% confidence

No Monetary Threshold: STRs must be filed regardless of the amount of the transaction.

aml 40% confidence

"Tipping Off" Prohibition: VASPs and their employees are prohibited from disclosing to the customer or a third party that an STR has been or will be filed.

aml 40% confidence

Duration: Records must generally be kept for a period of at least five (5) years after the business relationship has ended or after the date of an occasional transaction.

aml 40% confidence

FATF Standards: Tonga, as a member of the Asia/Pacific Group on Money Laundering (APG) (a FATF-style regional body), is expected to implement FATF Recommendations, including Recommendation 15 (New Technologies) and its interpretative note, which specifically addresses VASPs and the "Travel Rule" (requiring VASPs to obtain and transmit originator and beneficiary information for virtual asset transfers above a certain threshold).

enforcement 60% confidence

December 2023: The NRBT reiterated warnings about crypto investments, noting their unregulated nature and high risks, following a trend of public advisories. This was part of their general consumer protection mandate.

enforcement 60% confidence

Tonga is a member of the Asia/Pacific Group on Money Laundering (APG), indicating its commitment to AML/CFT standards. However, the implementation of these standards for virtual assets is an ongoing challenge for many small jurisdictions.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a Crypto ATM/kiosk operator may operate in Tonga by registering as a "reporting entity" under the MLTFA 2020 (no specific crypto/kiosk license), maintaining a local business presence, and complying with all AML/CFT obligations (CDD, EDD for cash-heavy operations, STRs with no threshold, recordkeeping for 5+ years), but faces regulatory ambiguity and NRBT consumer-protection warnings against unregulated crypto activities.

Questions this verdict aims to answer

  • What money-transmitter / kiosk-specific license is required?
  • What cash-transaction reporting thresholds apply?
  • What enhanced-KYC obligations attach to cash-in / cash-out?