FinCEN Issues First Dedicated Warning on Illicit Activity Through Crypto Kiosks
FinCEN Issues First Dedicated Warning on Illicit Activity Through Crypto Kiosks
On August 4, 2025, the Financial Crimes Enforcement Network (FinCEN) issued its first dedicated notice, highlighting the risks associated with convertible virtual currency (CVC) kiosks, also known as cryptocurrency ATMs, and underscoring their role in facilitating illicit financial activity.
The alert builds on FinCEN’s prior guidance regarding money services businesses (MSBs) and CVC, but this notice is the first to focus specifically on kiosks as a distinct compliance risk.
Key Findings from FinCEN’s Notice
- Senior-Targeted Scams and Fraud: FinCEN identified a significant increase in scams exploiting senior citizens, with estimated losses exceeding USD $120 million in 2023, attributable to crypto kiosk transactions. Such schemes often involve social engineering, tech-support fraud, or romance scams, where victims are directed to purchase cryptocurrency at kiosks and send it to fraudulent addresses.
- Drug Proceeds Laundering: Analysis of Bank Secrecy Act (BSA) data revealed that kiosks are being used to launder suspected narcotics sale proceeds. Cash-intensive transactions—often in structured amounts to evade reporting thresholds—are converted into cryptocurrency, thereby obscuring the illicit origin of the funds.
- Ease of Abuse: The combination of cash-based funding, rapid settlement, and limited customer verification at certain kiosks makes them attractive to illicit actors. As FinCEN notes, the anonymity of such transactions is a key vulnerability.
Regulatory Implications for Financial Institutions
FinCEN reminds financial institutions that CVC kiosk operators qualify as “money transmitters” under 31 C.F.R. § 1010.100(ff)(5), and are therefore money services businesses subject to the full scope of BSA/AML obligations, including:
- Registration with FinCEN (31 C.F.R. § 1022.380)
- Implementation of an anti-money laundering (AML) program reasonably designed to prevent the MSB from being used to facilitate money laundering or terrorist financing (31 U.S.C. § 5318(h))
- Recordkeeping and reporting of certain transactions (31 C.F.R. § 1010.410)
- Suspicious activity reporting (SAR) requirements for transactions involving at least $2,000 and suspected to involve illicit activity (31 C.F.R. § 1022.320)
Red Flags and Compliance Considerations
FinCEN advises institutions to incorporate kiosk-specific typologies into their monitoring programs, including:
- Large or structured cash-to-crypto exchanges involving unrelated parties or inconsistent with a customer’s profile
- Use of known illicit wallet addresses or addresses linked to darknet marketplaces
- Multiple transactions in rapid succession at different kiosk locations
- IP addresses or geolocation data anomalies, such as kiosk transactions conducted far from the customer’s known residence or business
- Elderly customers making repeated high-value purchases at kiosks after contact with unknown third parties
Institutions must document these indicators and file SARs, referencing relevant typologies, wallet addresses, transaction hashes, and device identifiers, in accordance with FinCEN’s 2019 CVC Advisory (FIN-2019-A003) and subsequent guidance.
Practical Next Steps for Compliance Officers
- Review current AML/CFT program controls to ensure kiosk-related risks are addressed.
- Enhance customer due diligence (CDD) for kiosk operators and their customers, with special attention to beneficial ownership requirements under the Corporate Transparency Act where applicable.
- Coordinate with law enforcement and industry information-sharing groups (e.g., the 314(b) program) to identify emerging red flags.
- Update training materials to include kiosk-related fraud schemes, especially those targeting vulnerable populations.
Read the full notice here FinCEN Notice on the Use of Convertible Virtual Currency Kiosks for Scam Payments and Other Illicit
References
- 31 U.S.C. §§ 5311–5332 (Bank Secrecy Act)
- 31 C.F.R. §§ 1010.100(ff)(5), 1022.320, 1022.380 (FinCEN regulations on MSBs and SARs)
- FinCEN, Application of FinCEN’s Regulations to Certain Business Models Involving Convertible Virtual Currencies (May 9, 2019)
- FinCEN, Advisory on Illicit Activity Involving Convertible Virtual Currency (FIN-2019-A003)
- U.S. Department of Justice, Elder Justice Initiative resources on financial exploitation
Need legal help with your AML policy or other money business services? Contact us below.
