Crypto ATM / kiosk operator in United States
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in United States with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- MSB registration with FinCEN (Form 107) under the Bank Secrecy Act — immediate requirement for any crypto kiosk operator
- State Money Transmitter Licenses (MTLs) in each state of operation — 49 states + DC required (Montana exempt); 18-36 months and $2M-$10M+ in bonds/fees for national coverage
- NY BitLicense (23 NYCRR Part 200) required for New York customers — 12-24+ month application process, $2M+ capital requirement
- California DFAL license required from DFPI for CA operations (effective July 1, 2026) — $100k/day penalties for non-compliance
- Cash Transaction Reports (CTRs) for cash-in/cash-out transactions over $10,000 in a business day
- Suspicious Activity Reports (SARs) for any suspicious transaction regardless of amount
- Travel Rule compliance for transactions over $3,000 — collection and transmission of originator/beneficiary information
- OFAC sanctions screening required for all transactions — mandatory blocking of OFAC-listed entities and jurisdictions
- Mandatory background checks for kiosk security measures
- Automated transaction monitoring systems required for cash-to-crypto conversion patterns
Key Restrictions
- Must register as a Money Services Business (MSB) with FinCEN immediately upon commencement
- Must obtain state MTL in each state where kiosks are physically located — no single national license exists
- NY operation requires BitLicense (separate from standard MTL), which is a 12-24+ month process
- Must geofence to comply with state-by-state licensing; cannot serve states where MTL not yet obtained
- Digital asset kiosks must follow strict security measures including mandatory background checks
- Cash-in limits and daily transaction caps may be imposed by state regulators on a per-kiosk basis
- Cannot offer crypto-to-crypto-only kiosk services without cash fiat on-ramp without potential additional securities/commodities considerations
- Tokens offered through kiosk must not be securities under the Howey Test (SEC jurisdiction) — operator must conduct token-by-token legal analysis
Key Risks
- High enforcement risk from FinCEN and state regulators for failure to obtain proper MTLs or BitLicense
- Criminal enforcement risk (DOJ) if AML/BSA compliance gaps are identified — money laundering, unlicensed money transmission
- State-by-state licensing patchwork creates significant operational complexity and regulatory exposure for multi-state operations
- New Jersey and other states actively auditing crypto income reporting and using automated tools to detect mismatches
- Consumer fraud exposure — $435M in crypto scam losses in NJ alone (2024) drives political pressure for stricter kiosk regulation
- CFTC and SEC secondary liability risk if kiosk facilitates trading in tokens classified as commodities derivatives or securities
- Executive Order 14390 targeting foreign scam centers increases scrutiny on cash-to-crypto channels
- Public and media perception risk — kiosks associated with scams targeting vulnerable populations
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
VASP: FinCEN MSB registration (immediate, Form 107) + state Money Transmitter Licenses in 49 states + DC (18-36 months for full coverage, $2M-$10M+ in bonds/fees). Montana is sole exemption.
FinCEN — AML/BSA, MSB registration, Travel Rule enforcement
Bank Secrecy Act (1970) — AML/CFT, MSB registration and reporting obligations
New York BitLicense (23 NYCRR Part 200) (2015) — NY-specific virtual currency business licensing
California DFAL (2025) — Digital Financial Assets Law — state crypto licensing
Financial Crimes Enforcement Network (FinCEN): Enforces AML/CFT under the Bank Secrecy Act (BSA), treating crypto firms as money services businesses since 2013 guidance.
State regulators: Examples include California's DFPI (Digital Financial Assets Law effective July 1, 2026, requiring licenses with $100k/day penalties); New Jersey Department of Banking and Insurance; New York's NYDFS (BitLicense regime); Connecticut (money transmitter laws).
Digital asset kiosks now must follow strict security measures, including mandatory background checks
Federal authorities filed a civil forfeiture complaint to reclaim $225.3 million in stolen digital funds in June 2025, according to the U.S. Department of Justice
New Jersey residents lost $435 million to cryptocurrency scams in 2024, ranking the state sixth among all states for total crypto fraud losses
On March 6, 2026, White House officials issued Executive Order 14390 targeting foreign scam centers and protecting local retail investors
The New Jersey Division of Taxation uses automated tools to identify mismatches between reported cryptocurrency income and federal 1099 forms
On December 15, 2025, U.S. Senators Elissa Slotkin and Jerry Moran introduced the Strengthening Agency Frameworks for Enforcement of Cryptocurrency (SAFE Crypto) Act to establish an inter-governmental task force to combat digital fraud
OFAC — Sanctions compliance for virtual currency transactions
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- high
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM / kiosk operators may operate in the US but must obtain FinCEN MSB registration immediately, secure state Money Transmitter Licenses in each state of operation (49 states + DC), obtain NY BitLicense for New York operations and California DFAL license for CA, implement CTR/SAR/Travel Rule/OFAC compliance, and adhere to mandatory kiosk security and background check requirements.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?