Spain will require identity verification at cryptocurrency ATMs, ending the anonymous use of the machines ahead of a Financial Action Task Force (FATF) mutual evaluation, according to Cryptopolitan.

The policy shift places Spain among a growing group of European jurisdictions tightening oversight of virtual asset service providers (VASPs) as the global standards body prepares to assess the country's anti-money-laundering framework for digital assets.

What is FATF asking of member states?

The Paris-based FATF, which sets global standards for anti-money-laundering and counter-terrorist-financing controls, requires member jurisdictions to license or register virtual asset service providers under its updated Recommendation 15. The standard also obliges countries to apply customer due diligence measures equivalent to those imposed on banks and other financial institutions.

Crypto ATMs have emerged as a flashpoint within that framework. The machines allow users to exchange cash for digital tokens with limited or no identification, a feature that has drawn scrutiny from regulators in multiple European markets, including the United Kingdom, Germany and Austria.

How will Spain enforce the change?

Under the reported framework, crypto ATM operators in Spain must register with the Bank of Spain and apply know-your-customer checks at the point of transaction. The country's existing registry of cryptoasset service providers, maintained under national anti-money-laundering law, will serve as the compliance backbone.

The specifics of the implementation, including the timeline and the form of the registration requirement, are expected to be set out through regulatory technical standards or supervisory guidance in the coming months. The Bank of Spain and the Ministry of Economy have not publicly detailed the rollout.

What is the FATF evaluation context?

FATF conducts periodic mutual evaluations of member states, deploying teams of examiners drawn from other jurisdictions to assess both technical compliance with the body's 40 recommendations and the effectiveness of the country's regime in practice. The process typically culminates in a published report and can result in inclusion on the body's grey list for jurisdictions with significant deficiencies.

Grey-listing carries material consequences. Foreign banks have historically been reluctant to maintain correspondent relationships with institutions in listed jurisdictions, and capital flows can be affected. Spain, a eurozone member with deep integration into the global financial system, has not been listed in recent evaluation cycles but has faced questions over the supervision of virtual asset activity.

What does this mean for ATM operators?

For operators, the immediate consequence is operational. The crypto ATM sector in Spain remains a small market, with machines concentrated in urban centers and tourist areas. Operators that have already implemented basic transaction limits and phone-number verification will need to formalize customer identification and integrate with the central-bank registry.

Non-custodial flows, in which the user controls the wallet without going through a registered intermediary, will effectively be eliminated at compliant machines. The market for fully anonymous crypto purchases through ATMs, which has been a niche but persistent segment in Europe, will close in Spain.

The broader European regulatory environment supports the Spanish approach. The Markets in Crypto-Assets Regulation (MiCA), which took effect in stages through 2024 and 2025, requires authorization for cryptoasset service providers across the EU. The Transfer of Funds Regulation extends the so-called Travel Rule to cryptoasset transfers, requiring originator and beneficiary information to accompany transactions above certain thresholds.

When does compliance take effect?

The exact compliance deadline for Spanish ATM operators is not yet public, but the FATF evaluation cycle currently in progress creates a hard ceiling. Examiners typically schedule on-site visits months in advance, and operators that fail to register before the fieldwork phase begins risk enforcement action by the Bank of Spain or referral to the public prosecutor under Spain's anti-money-laundering statute.

Cryptocurrency ATMs globally number in the tens of thousands, with the United States accounting for the overwhelming majority. The Spanish fleet is small by comparison, and the country's policy shift is unlikely to affect global ATM deployment patterns. For European regulators watching the FATF process, however, the Spanish response offers a template for combining central-bank registration with transaction-level identity controls.