Crypto ATM / kiosk operator in Switzerland
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Switzerland with a local entity, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- Must join a FINMA-recognized SRO (e.g., VQF, SO-FIT, AOOS) which supervises AML compliance — this is the typical path for smaller crypto businesses (SRO membership 1-3 months, no minimum capital).
- KYC mandatory for cash transactions exceeding CHF 1,000 per month per customer; must verify identity and prove ownership of non-custodial wallets.
- Enhanced Due Diligence (EDD) required for high-risk clients (e.g., PEPs), unusual transactions, or third-party involvement including ongoing risk reviews and client segmentation.
- Collect personally identifiable information (PII) for all customers to prevent fraud, identity theft, and money laundering.
- Retain client identification data, beneficial owner details, and transaction records for at least 10 years per AMLA standards.
- Implement internal controls, staff training, and transaction monitoring (including blockchain analytics for amounts over CHF 1,000).
- Conduct regular risk-based reviews to keep data current.
- Report suspicious activity to MROS (Money Laundering Reporting Office Switzerland).
- Swiss Travel Rule obligations apply under AMLA for crypto transfers.
Key Restrictions
- SRO membership is the minimum regulatory path for a crypto ATM / kiosk operator (exchange activity) — no dedicated 'kiosk' or 'money transmitter' license exists; the activity is regulated as VASP financial intermediation.
- If the operator holds client crypto assets (e.g., temporarily in a hot wallet before dispensing), a banking license or FinTech license (CHF 300K capital, no lending, deposits up to CHF 100M) may be required — this could significantly increase the licensing burden for cash-out ATMs.
- FINMA applies technology-neutral regulation: the economic function determines the license requirement, not the use of crypto or kiosks.
- No minimum capital for SRO-based path, but a FinTech license (CHF 300K) or banking license (CHF 10M+) may be triggered by custody of client assets or deposit-taking.
Key Risks
- Custody trigger risk: If the ATM kiosk holds crypto in its own wallet before dispensing cash (or vice versa), FINMA may deem this 'custody of client assets,' requiring a banking/FinTech license — significantly raising entry barriers.
- High-cash AML profile: Cash-intensive kiosk operations attract enhanced FINMA scrutiny; any compliance gaps may result in enforcement actions or license revocation.
- SRO supervision variability: Different SROs may apply different levels of scrutiny; choosing the wrong SRO can lead to regulatory friction.
- FINMA guidance evolution: FINMA's AML updates (e.g., 2021 lowered thresholds for crypto) could further tighten requirements for cash-to-crypto transactions.
- No dedicated kiosk framework: The operator must self-classify under existing financial intermediary categories, creating legal uncertainty around exact obligations.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
FINMA is Switzerland's integrated financial market supervisor (FINMASA Art. 6): it licenses banks, FinTech licence holders, securities firms and DLT trading facilities, supervises AML compliance, and issued the ICO Guidelines (2018) and the stablecoin guidance (06/2024).
Financial intermediaries under AMLA Art. 2(3) without a FINMA licence, the usual route for smaller crypto businesses, must join one of the 10 FINMA-recognised self-regulatory organisations (AMLA Art. 14(1)), which include VQF, SO-FIT, AOOS, PolyReg and ARIF.
The Anti-Money Laundering Act of 10 October 1997 (AMLA/GwG, SR 955.0) sets identification, due-diligence and suspicious-activity reporting duties for financial intermediaries, including crypto service providers; the travel rule itself rests on AMLO-FINMA Art. 10 as applied by FINMA Guidance 02/2019.
Switzerland has no single crypto or VASP licence: by activity, firms need SRO membership under AMLA Art. 14, a FinTech licence (deposits up to CHF 100 million, minimum capital at least CHF 300,000), a banking licence (minimum capital CHF 10 million), a securities-firm licence (FinIA Art. 41) or a DLT trading facility licence (FMIA Art. 73a).
Crypto-based assets that a bank or securities firm undertakes to hold available for a custody client, and that are attributable individually or by a clear co-ownership share, are treated as custody assets segregated from the bankruptcy estate (BankG Art. 16 no. 1bis, inserted by the DLT Act, in force 1 Aug 2021); FINMA Guidance 01/2026 (12 Jan 2026) covers custody risks.
Crypto exchange activity in Switzerland falls under existing licences by function: SRO membership under AMLA Art. 14 for financial intermediation only, a banking or FinTech licence for client deposits, a FinIA securities-firm licence for trading securities for clients, or a DLT trading facility licence under FMIA Art. 73a.
FINMA applies financial market law in a technology-neutral way, focusing on the economic function and purpose of a token ('substance over form') and following the principle 'same risks, same rules' (FINMA releases of 26 Aug 2019 and 11 Sep 2019).
The Anti-Money Laundering Act (AMLA/GwG, SR 955.0, of 10 October 1997) imposes identification, beneficial-owner, documentation and reporting duties (Arts. 3-9) on financial intermediaries, including crypto service providers that professionally accept, hold or help transfer third-party assets (Art. 2(3)); such non-bank intermediaries must join a recognised self-regulatory organisation (Art. 14), while banks and other Art. 2(2) institutions are supervised for AML by FINMA (Art. 12).
On 12 November 2020 FINMA announced an amendment to its Anti-Money Laundering Ordinance lowering the client identification threshold for cryptocurrency exchange transactions from CHF 5,000 to CHF 1,000; the rule (AMLO-FINMA Art. 51a) has applied since 1 January 2021.
Swiss financial intermediaries must identify the contracting party when one virtual-currency transaction, or several that appear linked, reach or exceed CHF 1,000 (AMLO-FINMA Art. 51a(1)); for cash or other anonymous payments, technical measures must prevent linked transactions exceeding that threshold within 30 days (Art. 51a(1bis)); transfers to external wallets require proof of the customer's ownership by suitable technical means (FINMA Guidance 02/2019).
AMLA Art. 6 requires financial intermediaries to clarify the background and purpose of a transaction or business relationship that appears unusual or carries increased risk; relationships with foreign politically exposed persons and their close associates always count as increased-risk (Art. 6(3)), and the frequency of controls follows the client's risk (Art. 6(1)).
Swiss financial intermediaries, including crypto service providers, must verify the identity of the contracting party from a document of evidentiary value when opening a business relationship (AMLA Art. 3(1)) and establish the beneficial owner (AMLA Art. 4).
AMLA Art. 8 requires financial intermediaries to take the organisational measures needed to prevent money laundering and terrorist financing, in particular adequate staff training and controls; AMLO-FINMA Art. 20 requires effective monitoring of business relationships and transactions, with an IT-based monitoring system for banks and securities firms.
Financial intermediaries must keep the records of transactions and AML clarifications, including client identification and beneficial-owner documents, for at least ten years after the business relationship ends or the transaction is completed (AMLA Art. 7(3)).
Swiss financial intermediaries must periodically review client documentation for currency and update it as needed, with frequency, scope and type set by the client's risk (AMLA Art. 7(1bis)); the duty applies equally to FINMA-supervised and SRO-affiliated intermediaries, including crypto service providers.
FINMA (Swiss Financial Market Supervisory Authority, FINMASA Art. 5) supervises banks, securities firms and other institutions under the financial market acts, issues guidance such as the ICO Guidelines of 16 February 2018 on token classification, and supervises AML compliance of Art. 2(2) intermediaries directly; non-bank intermediaries are supervised for AML by recognised SROs (AMLA Art. 12).
The Money Laundering Reporting Office Switzerland (MROS), run by the Federal Office of Police (fedpol), receives and analyses the suspicious activity reports that financial intermediaries, including blockchain service providers, must file under AMLA Art. 9 (AMLA Art. 23).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM / kiosk operators in Switzerland must join a FINMA-recognized SRO (VQF, SO-FIT, AOOS) for AML supervision as financial intermediaries (1-3 months), apply KYC for cash transactions over CHF 1,000/month, and may face a higher licensing burden (FinTech or banking license) if the kiosk structure involves custody of client crypto assets.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?