Crypto ATM / kiosk operator in Trinidad and Tobago
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Trinidad and Tobago with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- License under the Virtual Asset Business Act, 2022 (VABA, 2022) — mandatory for all VASPs including crypto ATM operators
- Customer identification and verification (CDD): obtain full legal name, date of birth, residential address, nationality, and unique ID number (e.g. passport/national ID) for individuals; legal name, place of business, registration number, and constitutional documents for legal persons
- Beneficial ownership identification and verification for legal persons/arrangements
- Purpose and intended nature of business relationship assessment
- Ongoing transaction monitoring to ensure consistency with customer risk profile
- Enhanced Due Diligence (EDD) for PEPs, complex/unusually large transactions, transactions involving high-risk jurisdictions, and transactions involving anonymity-enhancing virtual assets
- Suspicious Transaction Reports (STRs) to the Financial Intelligence Unit of Trinidad and Tobago (FIUTT) — mandatory when there is knowledge, suspicion, or reasonable grounds to suspect ML/TF or other criminal activity, filed promptly
- No tipping-off prohibition regarding STR filings
- Record-keeping: customer CDD records, transaction records (amount, type, date, originating/beneficiary addresses), analysis records, and copies of STRs
- Sanctions screening against UN Consolidated Sanctions List, OFAC SDN List, EU sanctions lists, and domestic lists under the Anti-Terrorism Act
- PEP screening and enhanced due diligence
Key Restrictions
- Must be licensed as a Virtual Asset Service Provider under the Virtual Asset Business Act, 2022
- Must be locally incorporated or registered in Trinidad and Tobago to obtain VABA licensing
- Cryptocurrencies are not legal tender in Trinidad and Tobago — CBTT has stated they are generally unregulated under existing financial services laws outside the VABA framework
- Cash transactions are subject to AML/CFT obligations under the Anti-Money Laundering and Countering the Financing of Terrorism Act, Chap 11:13 and Proceeds of Crime Act, Chap 11:27
- Physical kiosk locations must comply with local business registration and any zoning/operational requirements
Key Risks
- High AML/CFT risk profile due to cash-in/cash-out nature of crypto ATMs — triggers EDD obligations and heightened scrutiny from FIUTT
- CBTT has consistently warned that crypto assets are unregulated and not legal tender — public advisories create reputational risk even where VABA licensing exists
- Secondary sanctions risk from OFAC/EU sanctions lists — VASPs must screen against these even though local law primarily mandates UN lists, due to USD/EUR banking dependencies
- Enforcement precedent is limited — CBTT and TTSEC have issued warnings but actual enforcement actions against VASPs are nascent under the new VABA regime
- Cross-border correspondent banking relationships may be jeopardized if kiosk operator is deemed high-risk by international bank partners
- Asset forfeiture and imprisonment (up to 25 years for TF offences) possible under Proceeds of Crime Act and Anti-Terrorism Act for non-compliance
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Virtual Asset Business Act, 2022 (VABA, 2022): This is the foundational law for virtual assets and VASPs, defining what constitutes a "virtual asset" and "virtual asset business" and establishing the regulatory framework. It mandates licensing and compliance with AML/CFT obligations for VASPs.
Anti-Money Laundering and Countering the Financing of Terrorism Act, Chap 11:13: This is the overarching AML/CFT legislation that applies to all financial institutions, including VASPs under the VABA. It sets out the general requirements for AML/CFT compliance, including CDD, STRs, and record-keeping.
Proceeds of Crime Act, Chap 11:27: This Act criminalizes money laundering and the financing of terrorism, providing the legal basis for prosecuting such offenses and seizing assets.
Financial Intelligence Unit Act, Chap 72:01: This Act establishes the Financial Intelligence Unit (FIU) as the central national agency for receiving, analyzing, and disseminating suspicious transaction reports and other financial intelligence.
Identification and Verification of Customers:
For Individuals: Obtain and verify the customer's full legal name, date of birth, residential address, nationality, and a unique identification number (e.g., passport number, national ID card number). Verification must be done using reliable, independent source documents, data or information.
For Legal Persons/Arrangements (e.g., companies, trusts): Obtain and verify the legal name, principal place of business, registration number, articles of incorporation, bylaws, and other relevant constitutional documents.
Beneficial Ownership: VASPs must identify and take reasonable measures to verify the identity of the beneficial owner(s) of the customer, including for legal persons and arrangements. This involves understanding the ownership and control structure of the customer.
Purpose and Intended Nature of Business Relationship: Understand the purpose and intended nature of the business relationship or transaction (e.g., why is the customer using VASP services, what types of virtual assets will be involved, expected transaction volumes).
Ongoing Monitoring: Continuously monitor the business relationship and transactions to ensure they are consistent with the VASP's knowledge of the customer, their business, and risk profile. This includes keeping customer information and beneficial ownership up-to-date.
Politically Exposed Persons (PEPs): Implement enhanced scrutiny for customers who are PEPs (domestic or foreign) or their family members or close associates. This includes obtaining senior management approval for establishing business relationships with PEPs and taking reasonable measures to establish the source of wealth and source of funds.
Enhanced Due Diligence (EDD): Apply EDD in situations identified as high-risk, such as:
Relationships with PEPs.
Cross-border correspondent relationships.
Complex, unusually large transactions, and all unusual patterns of transactions that have no apparent economic or lawful purpose.
Customers residing in or transactions involving high-risk jurisdictions identified by the FATF or other relevant bodies.
Transactions involving anonymity-enhancing virtual assets.
Trigger: Any VASP that knows, suspects, or has reasonable grounds to suspect that a transaction (attempted or completed), virtual asset, or funds are linked to money laundering, terrorist financing, or other criminal activity, must file an STR.
Reporting Body: Financial Intelligence Unit (FIU) of Trinidad and Tobago.
Timeline: Reports must be submitted promptly, typically within a few working days of forming the suspicion, and in accordance with FIU guidelines.
No Tipping-Off: VASPs and their employees are prohibited from disclosing to the customer or any third party that an STR has been or will be filed, or that an investigation is being conducted.
Customer Records: All records obtained during CDD, including identification documents, verification data, beneficial ownership information, and the assessment of the purpose and nature of the business relationship.
Transaction Records: Detailed records of all virtual asset transactions, including the amount, type of virtual asset, date, time, originating and beneficiary addresses (or equivalent identifiers), and any other relevant transaction data. These records must be sufficient to reconstruct individual transactions.
Analysis Records: Records of any analysis undertaken concerning complex, unusual, or large transactions, and the findings of such analysis.
STRs: Copies of all suspicious transaction reports filed, along with supporting documentation.
FATF Standards: The FATF recommends that countries ensure VASPs are subject to AML/CFT obligations, including sanctions screening. Non-compliance with OFAC/EU sanctions, even by entities outside those jurisdictions, is often viewed negatively by international regulators and financial institutions.
Sanctioned Entity Screening Obligations:
Implement Robust Know Your Customer (KYC) and Customer Due Diligence (CDD) procedures: This includes identifying and verifying the identity of customers and beneficial owners.
Screen against Sanctions Lists: Regularly screen customers, counterparties, and transactions against:
UN Consolidated Sanctions List: This is legally binding for T&T.
OFAC Specially Designated Nationals (SDN) List and other OFAC lists: Essential due to the dominance of the USD in global finance and the extraterritorial reach of OFAC.
EU Sanctions Lists: Important for similar reasons if dealing with EU counterparties or currencies.
Domestic Lists: Any individuals or entities designated under T&T's Anti-Terrorism Act or similar legislation.
Ongoing Monitoring: Continuously monitor transactions for red flags indicative of sanctions evasion or illicit activity.
Politically Exposed Persons (PEPs) Screening: Identify and apply enhanced due diligence to PEPs, their family members, and close associates, as PEPs often present a higher risk for corruption and sanctions evasion.
High-Risk Jurisdictions: Jurisdictions identified by FATF as having strategic AML/CFT deficiencies (e.g., those on the FATF "grey list" or "black list") warrant enhanced due diligence and potentially restrictions.
Global Reach of Virtual Assets: Virtual asset transactions are inherently global. A VASP in T&T could inadvertently facilitate transactions with individuals or entities sanctioned by the US or EU, leading to secondary sanctions risks or enforcement actions by these foreign authorities if there's a nexus to their jurisdiction (e.g., a US person involved, US-domiciled technology, or USD stablecoins).
International Correspondent Banking: VASPs often rely on traditional financial institutions (banks) for fiat on-ramps/off-ramps, payroll, etc. These banks are almost universally subject to OFAC and EU sanctions due to their international operations, especially their dealings in USD or EUR. Non-compliance by a VASP could lead to banks de-risking or terminating services.
Regulator Name: Central Bank of Trinidad and Tobago (CBTT)
Key Points: The CBTT has consistently warned against the use of cryptocurrencies due to high volatility, potential for fraud, money laundering, lack of consumer protection, and the absence of regulatory oversight. They maintain that crypto assets are not legal tender in Trinidad and Tobago.
Regulator Name: Financial Intelligence Unit of Trinidad and Tobago (FIUTT)
Regulator Name: Trinidad and Tobago Securities and Exchange Commission (TTSEC)
Anti-Terrorism Act, Chap. 12:07: This act provides for measures against terrorism and includes provisions for implementing UN Security Council Resolutions related to terrorism and its financing, including the freezing of assets of designated terrorist entities and individuals.
Proceeds of Crime Act, Chap. 11:27: This act deals with money laundering offences, confiscation of criminal proceeds, and related matters, which can indirectly support sanctions enforcement by targeting illicit financial flows.
Financial Intelligence Unit of Trinidad and Tobago Act, Chap. 72:01: Establishes the FIU, which plays a crucial role in receiving, analyzing, and disseminating suspicious transaction reports (STRs) and suspicious activity reports (SARs) related to ML, TF, and other financial crimes, including sanctions violations.
Imprisonment: Individuals found guilty of offences under the Anti-Terrorism Act or Proceeds of Crime Act can face significant prison sentences. For example, terrorism financing offences carry terms of imprisonment of up to 25 years.
Fines: Substantial monetary penalties can be imposed on both individuals and corporate entities.
Asset Forfeiture: Proceeds of crime, including virtual assets, can be confiscated.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operators are permitted in Trinidad and Tobago but must obtain a VASP license under the Virtual Asset Business Act 2022, which imposes a full suite of AML/CFT obligations including CDD, EDD, STR filing to the FIUTT, sanctions screening, and record-keeping, and requires local incorporation.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?