Crypto ATM / kiosk operator in Turkey
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Turkey with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- CASP license from SPK (CMB) required under Crypto Assets Law (2024) — Law No. 7518
- Minimum paid-up capital of TRY 50M (~$1.5M USD) under CASP license
- MASAK AML/CFT supervision — CASPs classified as 'obliged entities'
- Customer asset segregation required under custody rules of CASP license
- KYC/AML protocols enforced by MASAK for all CASPs
- December 2024 AML legislative amendments enhance CASP requirements
- Cash-transaction reporting thresholds applicable under MASAK rules (specific threshold not stated in facts — infer Turkish currency-transaction reporting obligations apply to high-cash operators)
- Unlicensed operation carries criminal penalties under Crypto Assets Law
Key Restrictions
- Crypto cannot be used as payment for goods/services per CBRT regulation (April 2021) — ATM kiosks must not facilitate payment use cases
- Must establish a Turkish legal entity with Turkish-resident board members
- TRY 50M minimum paid-up capital requirement
- No specific kiosk/money-transmitter license class identified — ATM operators fall under general CASP licensing
- SPK/CMB licensing process takes 6-12 months
Key Risks
- High-cash AML risk profile of kiosks attracts heightened MASAK scrutiny
- CBRT ban on crypto payments creates ambiguity around cash-in/cash-out kiosk operations — could be interpreted as prohibited payment facilitation
- Thodex fraud (2021, $2B) has led to aggressive enforcement posture — unlicensed operators face criminal penalties
- Regulatory framework is new (2024) and secondary legislation still evolving — some operational details may be unclear
- No explicit kiosk-class exemption or tailored license — general CASP framework may impose requirements designed for exchanges, not kiosks
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
VASP: Crypto Asset Service Provider License from SPK under Crypto Assets Law (2024). TRY 50M (~$1.5M USD) minimum paid-up capital. Must establish Turkish entity with Turkish-resident board members. 6-12 months. One of world's highest crypto adoption rates.
SPK/CMB — Crypto Asset Service Provider licensing, prudential oversight
Crypto Assets Law (2024) — CASP licensing, investor protection, criminal penalties for unlicensed operation. Came after Thodex fraud (2021, CEO fled with ~$2B).
Law No. 7518: Official Gazette No. 32590, July 2, 2024 (establishes CASP status, CMB licensing, segregation).
CUSTODY: Included under CASP license; customer asset segregation required
EXCHANGE: CASP license — TRY 50M minimum. Crypto PAYMENTS banned (CBRT regulation, April 2021) — ban remains despite licensing framework. Criminal penalties for unlicensed operation.
CMB Resolutions/Communiqués: Govern licensing, capital (TRY 500M/~$13.7M for custodians), prohibitions (e.g., Sept 19, 2024).
Central Bank Regulation: Official Gazette No. 31456, April 16, 2021 (prohibits crypto as payment, no direct custody impact).
MASAK enforces AML for CASPs, including custody.
Capital Markets Board (CMB): The primary regulatory authority responsible for establishing regulatory measures, making decisions, and implementing sanctions related to crypto assets. The CMB grants operating licenses to crypto asset service providers (CASPs).
Financial Crimes Investigation Board (MASAK): Enforces anti-money laundering (AML) regulations concerning cryptocurrencies and classifies CASPs as "obliged entities" subject to strict AML and Know-Your-Customer (KYC) protocols.
AML Legislation Amendments: December 2024 updates enhance CASP requirements.
Capital Markets Board (CMB): Primary authority for licensing CASPs, enforcing operational rules, sanctions, and blocking unlicensed platforms (e.g., PancakeSwap in 2024).
Regulator/Prosecutor: Turkish prosecutors
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operators in Turkey must obtain a CASP license from SPK/CMB (TRY 50M minimum capital), establish a Turkish entity, comply with MASAK AML/CFT obligations, work around the CBRT payment ban which creates ambiguity for cash-in/cash-out models, and face criminal penalties if unlicensed; no kiosk-specific license class exists, so operators rely on the general CASP framework.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?