Crypto ATM / kiosk operator in Vietnam
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Vietnam with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- VASPs must conduct updated KYC for transactions equivalent to at least USD 1,000, verifying customer identities (vn.licensing.vasps-must-conduct-updated-kyc)
- Programmed AML/KYC processes with anti-tampering logs, secure key management, and transaction monitoring for STR detection are required (vn.licensing.platforms-require-programmed-amlkyc-processes)
- Data retention on Vietnam servers for 10 years, including transaction history, originator/beneficiary details (e.g. wallet addresses), IP/device logs, and account info (vn.licensing.vasps-must-retain-data-on)
- Internal AML/CTF policies required including counter-proliferation financing, risk management, and market surveillance as part of licensing (vn.licensing.the-framework-mandates-vasps-to)
- Systems must achieve Level 4 cybersecurity (highest standard) — encryption, intrusion detection, continuous monitoring to support CDD (vn.licensing.systems-must-achieve-level-4)
- No explicit STR filing mechanism detailed in pilot docs, but AML/CTF policies imply reporting via MPS/SBV coordination (vn.licensing.no-explicit-str-filing-mechanism)
- Enhanced KYC integrated into IT systems with audit trails; personnel qualified in finance and IT required (vn.licensing.licensing-demands-detailed-internal-procedures)
Key Restrictions
- Crypto ATM/kiosk operators fall under the VASP licensing framework led by MOF with SSC, SBV, and MPS oversight — no dedicated kiosk-specific license exists yet; general VASP license applies (vn.licensing.ministry-of-finance-mof-lead, vn.licensing.state-securities-commission-ssc-licensing)
- Foreign investors require a single VND account at a licensed local bank; all transactions must use VND — no foreign currency transactions for crypto (vn.licensing.foreign-investors-require-a-single)
- Data must be retained on Vietnam servers for 10 years (vn.licensing.vasps-must-retain-data-on)
- The pilot program (five-year duration) only began in 2026; prior to 2026 VASPs were not explicitly regulated — operators operate under a temporary/pilot regime (vn.licensing.prior-to-2026-vasps-were)
- No explicit cash-transaction reporting threshold is specified in the pilot docs for cash-in/cash-out; the USD 1,000 KYC threshold is the closest analogue (vn.licensing.vasps-must-conduct-updated-kyc)
Key Risks
- No dedicated kiosk/money-transmitter license exists — kiosks must fit a general VASP framework designed for securities-like exchanges, creating regulatory ambiguity for cash-based models (vn.licensing.ministry-of-finance-mof-lead)
- Enforcement precedent: ONUS platform operators were arrested (7–9 arrests) in March 2026 for fraud and money laundering via crypto operations — signals active MPS enforcement risk (vn.enforcement.entity-targeted-onus-cryptocurrency-platform, vn.enforcement.outcome-at-least-79-arrests)
- Cash-intensive operations carry elevated AML risk under MPS scrutiny; no explicit cash reporting threshold creates compliance uncertainty
- Pilot program (Resolution No. 05/2025/NQ-CP) is temporary — regulatory permanence and long-term licensing terms are uncertain
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Ministry of Finance (MOF) — Lead authority
State Securities Commission (SSC) — Licensing review and compliance monitoring
State Bank of Vietnam (SBV) — Financial oversight
Ministry of Public Security (MPS) — Cybersecurity and financial integrity
The framework mandates VASPs to apply AML/CTF obligations as part of licensing, treating crypto exchanges as market infrastructure akin to securities exchanges. This includes internal policies for AML/CFT, counter-proliferation financing, risk management, and market surveillance.
Oversight involves MOF (lead), SSC (receiving applications), SBV (financial integrity), and MPS (AML, cybersecurity).
Prior to 2026, VASPs were not explicitly regulated under AML laws, but the pilot program (five-year duration) now enforces compliance to prevent illicit flows.
Key reference: Resolution No. 05/2025/NQ-CP (September 9, 2025) establishes the licensing regime with AML/CTF as a core objective; Decision No. 96/QD-BTC details procedures, including AML appraisals.
VASPs must conduct updated KYC for transactions equivalent to at least USD 1,000, verifying customer identities to mitigate fraud, money laundering, and terrorist financing.
Licensing demands detailed internal procedures for KYC, integrated into IT systems with audit trails, alongside personnel qualified in finance and IT.
Foreign investors require a single VND account at a licensed local bank; all transactions use VND.
Systems must achieve Level 4 cybersecurity (highest standard), including encryption, intrusion detection, and continuous monitoring to support CDD.
VASPs must retain data on Vietnam servers for 10 years, including transaction history, originator/beneficiary details (e.g., wallet addresses), IP/device logs, and account info.
Platforms require programmed AML/KYC processes with anti-tampering logs, secure key management, and transaction monitoring for STR detection.
No explicit STR filing mechanism is detailed in pilot docs, but AML/CTF policies imply reporting via MPS/SBV coordination during licensing appraisals and operations.
Entity Targeted: ONUS cryptocurrency platform (including tokens VNDC, ONUS, and HNG), operated by Vương Lê Vĩnh Nhân (Eric Lê/Vuong Le Vinh Nhan) and associates. Violation Type: Fraud via token price manipulation, deceptive marketing, misleading promotions, artificial trading to control supply/demand, property appropriation, and money laundering using platform infrastructure. Penalty Amount: Not yet finalized; investigation targets billions of dollars in mobilized funds and investor losses (preliminary estimates in billions of USD).
Outcome: At least 7–9 arrests (including Vương Lê Vĩnh Nhân and 6–8 accomplices); over 140 individuals summoned; platform operations dismantled; charges filed for fraud and money laundering.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operators may operate under Vietnam's new VASP pilot licensing regime (Resolution No. 05/2025/NQ-CP) but face high licensing burden (MOF/SSC/SBV/MPS oversight), mandatory local entity, 10-year data localization, USD 1,000 KYC threshold for cash transactions, Level 4 cybersecurity requirements, and active enforcement risk (ONUS arrests in March 2026).
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?