Crypto kiosk: Simple Essential Guide (2026)

A shop that accepts crypto for its own goods is in a different position from a business that runs a crypto kiosk. The federal notice below is the main source I verified, and I label my own reasoning where it appears. The useful news is that the obligations are specific and listed in FinCEN’s own materials, which means an operator can build a compliance checklist from them instead of guessing.

Crypto kiosk: What FinCEN Says About Kiosk Operators

In Notice FIN-2025-NTC1, dated August 4, 2025, FinCEN describes crypto kiosks as ATM-like devices that let customers exchange fiat currency for virtual currency and the reverse, usually placed in high-traffic spots such as convenience stores and gas stations.

It says operators generally facilitate money transmission between a convertible virtual currency exchanger and a customer’s wallet, or act as exchangers themselves, and are therefore money services businesses (MSBs) under the Bank Secrecy Act. Any non-exempt person engaged in money transmission must register with FinCEN within 180 days of starting. The notice adds that FinCEN registration is not a license, endorsement or certification of legitimacy (FinCEN Notice FIN-2025-NTC1).

How Registration Works

FinCEN’s MSB page says registration is done by filing Form 107, one form per MSB regardless of branches or agents. The initial filing is due within 180 days after the business is established, and renewal is every 24 months, filed by December 31. It lists re-registration triggers such as a transfer of more than 10 percent of voting power or equity.

Records, including a copy of the filed form and an ownership list, must be kept for five years. The page says money transmission has no dollar threshold (FinCEN). It also describes civil penalties of up to $5,000 per violation, with each day counted separately, and criminal penalties for operating without complying (FinCEN).

The page doesn’t mention state licensing, so that is a separate check with your state regulator.

Ongoing Duties

A written AML program. FinCEN’s MSB guide says it must fit the business’s risk profile and include policies and internal controls, a designated compliance officer, training, and independent review (FinCEN MSB guide).
Suspicious activity reports. A SAR is required for suspicious activity of $2,000 or more, filed within 30 days of detection, and copies are kept for five years (FinCEN MSB guide).
Currency transaction reports. Required for cash of more than $10,000 by the same person in a day, with multiple transactions aggregated, filed within 15 days (FinCEN MSB guide).
Funds transfer records. The guide lists records for money transfers of $3,000 or more (FinCEN MSB guide).
The notice’s filing key term. The notice says to put “FIN-2025-CVCKIOSK” in SAR field 2 and in the narrative (FinCEN).

The Scam Numbers in the Notice

The notice cites FBI Internet Crime Complaint Center data for 2024: more than 10,956 complaints involving crypto kiosks, about $246.7 million in reported victim losses, with complaints up about 99% and losses up about 31% from 2023 (FinCEN). It cites the FTC saying people aged 60 and over were more than three times as likely as younger adults to report a kiosk-related loss. It also cites a 2021 New Jersey report that found more than a third of kiosk companies operating in that state had not registered with FinCEN as MSBs.

Red Flags the Notice Lists

A customer sends multiple payments just below a reporting threshold, from several kiosk locations or machines.
Multiple customers deposit to one address from distant locations, or multiple accounts link to one phone number or wallet.
Limited-history customers make large deposits that are quickly moved or swapped.
An older customer with no prior crypto activity makes high-value kiosk transactions.
A kiosk business is not registered with FinCEN as an MSB, lacks state licenses, or fails to collect customer and transaction information.

These red flags are from the notice (FinCEN). The notice has no separate operator recommendations section, so reading them as a monitoring checklist is my suggestion.

Crypto Kiosk Money Transmitter Licensing: An Example With Assumed Numbers

The notice says kiosk fees can run 7–20%. On an assumed $500 transaction, that is $35 to $100 in fees. For SAR monitoring, suppose one customer makes three payments of $700 in a day across two machines. The total is $2,100, which is above the $2,000 SAR threshold in aggregate, so a monitoring system should look at aggregate patterns and not only single transactions.

Item	Assumed value
Transaction	$500
Fee at 7%	$35
Fee at 20%	$100
Three $700 payments	$2,100 total

One State’s Kiosk Rules, Turned Into System Settings

FinCEN’s page does not cover state licensing, and California shows what a state layer can look like. Its Digital Financial Assets Law was signed on October 13, 2023, requires most digital financial asset businesses to hold a DFPI license starting July 1, 2025, limits kiosk fees and adds disclosures. The DFPI also reports that a Los Angeles County court upheld the $1,000 per customer daily cap against an industry challenge (California DFPI).

A June 2025 consent order shows how the cap is enforced in practice. The DFPI found that an operator’s kiosks on several occasions accepted more than $1,000 from a customer with the same name on the same day, and that receipts did not identify the exchange used to calculate the spread. The order set a $300,000 penalty, with $51,700 in restitution credited against it, leaving $248,300 payable in three installments of $48,300, $100,000 and $100,000, plus compliance reports every 60 days for a year (DFPI consent order).

The useful lesson is that both failures are system settings, not judgment calls. In my suggestion, an operator in any state can do three things: ask the state regulator for its daily limit and receipt rules, set the machine to stop at that limit using a customer identity match, and test the receipt template against the written disclosure list. With the earlier example of three $700 payments, a $1,000 cap would stop the second payment, since $700 + $700 = $1,400 is above $1,000. Rules in other states differ, so this is one example and not a national standard.

My Reasoning, Not an Authority

This is my own view. A business that sells goods and takes crypto as payment does not convert cash to crypto for others, so the kiosk obligations above look like a different situation to me. They differ and change, so the state regulator’s current rules are the place to look.

A Starting Checklist

Confirm your status with a lawyer who handles MSB rules before placing a machine.
Register within 180 days and calendar the 24-month renewal.
Write the AML program and name a compliance officer.
Check state licensing with your regulator, since FinCEN’s page doesn’t cover it.
Set monitoring for aggregate and below-threshold patterns, using the red flags above.

Crypto Kiosk Money Transmitter Licensing: Questions Answered

Is FinCEN registration the only requirement? The notice describes the federal baseline.

Does hosting a kiosk carry the same duties as operating one? FinCEN’s MSB page exempts a person who is an MSB solely because it serves as an agent of another MSB from registering (FinCEN).

Sources

This article offers general information and my own opinions, not financial, tax, or legal advice. The figures in worked examples are assumed. Laws, tax rules, and products change and can differ by location, so check current official sources and talk to a qualified professional about your own situation.

Operating a Crypto Kiosk Isn’t Like Any Other Small Business