Crypto ATM / kiosk operator in Poland
Physical kiosks that exchange cash for crypto (and sometimes vice versa). High-cash AML risk profile.
Crypto ATM is conditionally permitted in Poland with a local entity, subject to AML obligations and medium licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Medium
- Last updated
- 2026-07-13
AML Obligations
- VASP registration with GIIF (Minister of Finance) under the Polish AML Act before commencing operations.
- Customer Due Diligence (CDD) / KYC — identify and verify identity of clients including beneficial owners before any transaction.
- Screening against sanctions lists as part of CDD procedures.
- Ongoing monitoring of client relationships and transactions.
- Transaction monitoring systems for unusual patterns or thresholds.
- Suspicious transaction reporting (STR/SAR) to GIIF.
- Appointment of a designated AML/CTF Compliance Officer.
- Development and implementation of internal AML/CTF procedures and a business-specific risk assessment.
- Record-keeping of client identification data and transactions for at least 5 years.
- Regular AML/CTF training for relevant employees.
- Proof of knowledge and experience in the field of virtual currencies (certificate of training or professional experience) required for registration.
- Organizational units / management must have no criminal record for intentional financial crimes (money laundering, terrorist financing, fraud, tax offenses).
Key Restrictions
- Operator must be a Polish legal entity (e.g., Sp. z o.o. or S.A.) registered in Poland.
- At least one management board member must reside in Poland or hold Polish citizenship.
- Management board members and beneficial owners must meet fit-and-proper criteria (no criminal record for financial crimes).
- No specific minimum capital requirements currently under the AML Act, but MiCA will introduce capital requirements (€50k–€150k depending on service type) from December 2024.
- Under MiCA (from 30 December 2024), custody of client crypto-assets will require explicit segregation and an agreement with clients — applies if ATM kiosk operator also holds/wallets crypto.
- Current AML Act does not mandate specific client asset segregation rules for VASPs; operators should clarify custodial arrangements.
Key Risks
- High-cash AML risk profile (cash-in/cash-out at kiosks) is a natural focus for GIIF enforcement and could trigger enhanced scrutiny.
- No explicit cash-transaction reporting threshold in the Polish AML Act for VASPs was found in the provided facts — ambiguity on whether traditional cash transaction reporting obligations apply.
- Transition from current registration regime (AML Act) to full MiCA licensing (KNF-supervised) creates regulatory uncertainty and potential for re-application or supplemental authorization in late 2024.
- Current regime lacks prudential supervision; operators may face compliance gaps when MiCA rules come into force (capital, IT security, business continuity).
- Operator must demonstrate proof of knowledge/experience in virtual currencies — a subjective assessment that could be a barrier for new entrants.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Poland's pre-MiCA regime is the register of virtual-currency activity under Arts 129m–129z of the AML Act of 1 March 2018, kept for the Minister of Finance by the Director of IAS Katowice (not GIIF); it has accepted no new entries since 30 December 2024, and since 1 July 2026 an entry confers no right to provide crypto-asset services.
Under Art 2(1) pkt 12 of the AML Act of 1 March 2018 (Dz.U. 2025 poz. 644), obliged institutions include businesses providing exchange between virtual currencies and means of payment, exchange between virtual currencies, and intermediation in either exchange.
Virtual-currency activity under the AML Act of 1 March 2018 may be carried on by a natural person, a legal person or an organisational unit without legal personality (Art 129n(1)); a Polish company is not required, although the register has accepted no new entries since 30 December 2024.
At least one individual from the management board of the Polish legal entity must have their residence in Poland or possess a Polish citizenship.
Internal AML/CTF Procedures: Develop and implement robust internal anti-money laundering and counter-terrorist financing procedures, including a risk assessment specific to the business and its clients.
AML Officer: Appoint a designated individual responsible for AML/CTF compliance (AML Officer or Compliance Officer).
Customer Due Diligence (CDD): Implement procedures for identifying and verifying the identity of clients, including beneficial owners, and understanding the purpose and nature of business relationships. This involves collecting identity documents, verifying data, and screening against sanctions lists.
Ongoing Monitoring: Conduct ongoing monitoring of client relationships and transactions to detect suspicious activities.
Transaction Monitoring: Implement systems to monitor transactions for unusual patterns or thresholds.
Reporting: Report suspicious transactions and activities to GIIF.
Record-keeping: Maintain records of client identification data and transactions for at least 5 years.
Training: Provide regular AML/CTF training for relevant employees.
The AML Act of 1 March 2018 sets no minimum capital requirement for entry in the virtual-currency register: Arts 129n–129o require only a clean criminal record and knowledge or experience; the register has accepted no new entries since 30 December 2024.
Evidence fact pl.licensing.fit-proper-criteria-managementowners not found (may have been renamed).
Individuals intending to perform activities in the field of virtual currencies, as well as members of the management board and beneficial owners, must:
The AML Act (Art 129n) requires that a natural person running virtual-currency activity, or the partners, representatives and management of a legal entity, its managers and beneficial owner, have no final conviction for listed intentional offences — including against economic trading, money and securities, property, documents, for profit — or an intentional fiscal offence.
Evidence fact pl.licensing.legal-entity-local-presence not found (may have been renamed).
The management board members (or individuals managing the business) and beneficial owners must meet "fit and proper" criteria.
Under Art 2(1) pkt 12 of Poland's AML Act of 1 March 2018 (consolidated Dz.U. 2025 poz. 644), businesses providing virtual-currency exchange, intermediation or account-keeping (custody) services are obliged institutions, and Art 129m makes that activity conditional on entry in the register of virtual-currency activity; the register has accepted no new entries since 30 December 2024.
Evidence fact pl.aml.conditions-for-registration not found (may have been renamed).
Under Art 129n(1) of Poland's AML Act (consolidated Dz.U. 2025 poz. 644), virtual-currency activity may be carried on by a natural person, a legal person or an organisational unit without legal personality.
Art 129n of Poland's AML Act (consolidated Dz.U. 2025 poz. 644) bars from virtual-currency activity anyone finally convicted of listed offences (incl. offences against property, economic trading and money circulation, or intentional fiscal offences); the clean-record rule extends to partners, management-board members, persons directing the activity and beneficial owners.
Under Art 129o of Poland's AML Act (consolidated Dz.U. 2025 poz. 644), natural persons carrying on virtual-currency activity must have knowledge or experience in it, deemed met by completing a training course on its legal or practical aspects or by at least one year of documented work in that activity.
The competent organ for Poland's register of virtual-currency activity is the minister responsible for public finance (AML Act Art 129p), who by ordinance of 25 October 2021 (Dz.U. 2021 poz. 1964) designated the Director of the Revenue Administration Regional Office (IAS) in Katowice to keep the register.
Entry in Poland's register of virtual-currency activity (AML Act Arts 129m–129z) is a regulated-activity entry, not a prudential licence: its statutory conditions are a clean criminal record (Art 129n) and knowledge or experience (Art 129o), the register has taken no new entries since 30 December 2024, and IAS Katowice states that entry does not authorise acting as a MiCA crypto-asset service provider.
Poland's AML Act of 1 March 2018 (consolidated Dz.U. 2025 poz. 644) contains no client-asset segregation rule for virtual-currency custodians; segregation is required of crypto-asset service providers by MiCA Art 75(7), applicable since 30 December 2024, but no CASP is authorised in Poland (ESMA interim register, last update 31 Aug 2026), so the rule reaches Polish clients only through CASPs authorised in other member states.
Requirement: Under MiCA, entities wishing to provide custody and administration of crypto-assets will need to obtain an authorization from their competent national authority (likely the Polish Financial Supervision Authority – KNF). This authorization will be passportable across the EU.
The KNF was to be Poland's MiCA competent authority under the Act on the crypto-asset market, but that act was vetoed three times (1 Dec 2025, 12 Feb 2026, 11 Jun 2026) and as of 14 October 2026 no Polish authority is designated for crypto-asset service providers; the KNF is competent only for e-money-token issuers (KNF communiqué updated 23 Jun 2026).
Requirement: MiCA explicitly mandates the segregation of client crypto-assets and funds. Article 67 specifies that CASPs providing custody services must:
Poland has no MiCA implementing act as of 14 October 2026: the Act on the crypto-asset market passed the Sejm three times (prints 1424, 2064, 2529) and was vetoed by the President on 1 Dec 2025, 12 Feb 2026 and 11 Jun 2026; each override vote failed (5 Dec 2025, 17 Apr 2026, 4 Sep 2026). No Polish competent authority is designated for crypto-asset service providers, so no Polish CASP authorisation can be obtained (Ministry of Finance, 9 June 2026); KNF would have been the authority under the vetoed acts.
Future MiCA Impact: MiCA will introduce capital requirements for Crypto-Asset Service Providers (CASPs), ranging from €50,000 to €150,000 depending on the type of services provided.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — Crypto ATM/kiosk operators are permitted in Poland under a VASP registration regime with GIIF under the AML Act, but must be a Polish legal entity, appoint a local-resident manager, comply with full AML/KYC/CTF obligations, and prepare for the transition to MiCA licensing under KNF supervision from December 2024.
Questions this verdict aims to answer
- What money-transmitter / kiosk-specific license is required?
- What cash-transaction reporting thresholds apply?
- What enhanced-KYC obligations attach to cash-in / cash-out?