South Africa

South Africa's crypto ATM market is legal, licensed, and barely tapped: 300 CASP licences approved since 2023, duty-free EU imports, and KYC required from the first rand.

● Legal and accessible

Operating a crypto ATM in South Africa is legal, and the licence that makes it possible is genuinely attainable.

300 / 512

CASP licences approved since June 2023

6–12 mo

Realistic end-to-end licensing timeline

Travel Rule threshold: KYC applies from the first rand

Since June 2023, the Financial Sector Conduct Authority (FSCA) has licensed Crypto Asset Service Providers (CASPs) under the existing Financial Advisory and Intermediary Services (FAIS) Act. Of 512 applications received by December 2025, 300 were approved and only 14 declined. The supply-side picture is close to ideal: a clear, stable framework, preferential EU import terms under the EU–SADC EPA, roughly 13 million crypto holders, and only a few dozen machines in the entire country. The constraint to design for is anonymity: the Travel Rule applies from the first rand, so the high-margin no-KYC tier that once drove ATM volumes elsewhere is largely unavailable.^1,2,5

Last updated: July 2026

A Clear Framework: Crypto as a Financial Product under FAIS

South Africa chose integration over invention. In October 2022, the FSCA declared crypto assets to be financial products under the FAIS Act, which brought any business providing financial services related to crypto (trading platforms, wallet providers, intermediaries) inside the existing licensing perimeter. CASP licensing opened on 1 June 2023, and crypto businesses were separately classified as accountable institutions under the Financial Intelligence Centre Act (FICA) in December 2022, placing them under the AML/CFT regime that governs banks. Crypto is not legal tender: the South African Reserve Bank does not recognise crypto assets as currency, but holding, trading and exchanging them through a licensed provider is fully lawful.^1,4

A crypto ATM operation, exchanging cash for crypto and vice versa, is an intermediary service on crypto assets and therefore falls inside the CASP perimeter. Machines already operate openly in Cape Town, Johannesburg, Pretoria and Durban. One verification note for market entry: South Africa has no separate "ATM licence," and the FSCA has not issued kiosk-specific guidance, so an entering operator should confirm with counsel (and against the FSCA's public CASP register) that its specific machine model and flow of funds sits within its licence categories. Enforcement is real: the FSCA has opened over 80 investigations into unlicensed CASP activity and warns that unlicensed operation will be met with enforcement action, with penalties reaching R10 million or ten years' imprisonment.^1,2,3

Getting Licensed: The FSCA CASP Route

The licence is a Financial Service Provider (FSP) authorisation covering crypto asset services, issued by the FSCA. Applicants must meet "fit and proper" requirements: a credible business plan and operational framework, demonstrated crypto competence, a Key Individual and Compliance Officer who have passed the regulatory examinations (the exam exemption expired for good on 30 June 2025), and registration with the Financial Intelligence Centre. There is no statutory minimum capital; applicants must instead demonstrate financial soundness and liquidity.^1,3,4

“Of 512 applications received since June 2023, 300 were approved, 14 declined and 121 voluntarily withdrawn. Strip those out, and the message is clear: applicants who complete the process almost always succeed.”
FSCA CASP LICENSING, DECEMBER 2025

The declines that did occur were for weak business plans and unproven competence, bars that a professional ATM operator clears by design. As in most markets on our legislation map, GENERAL BYTES as a hardware and software vendor is not itself performing a licensable activity; it is the in-country operator of the machines who must hold the CASP licence.^1,2

AML and KYC: FICA, Directive 9, and the End of Full Anonymity

This is where South Africa scores lowest for the classic ATM business model. As accountable institutions under FICA, CASPs must run full customer due diligence, transaction monitoring and suspicious-transaction reporting. The Financial Intelligence Centre's Directive 9 brought the FATF Travel Rule into force on 30 April 2025: originator and beneficiary information must accompany crypto transfers, with data collection applying from a threshold of zero rand. Simplified due diligence exists for small transactions, with significantly stricter identity verification required above roughly R5,000 (about USD 270). That's a narrow window, not an anonymity tier.^4,6

Operators should therefore design for identification at the machine from day one and build the economics on convenience, cash access and reach rather than on an anonymity premium. The compensating factor is competitive: every operator faces the same rules, prevailing ATM fees in South Africa run at 8–12%, and the country's large cash economy keeps the underlying use case, cash-to-crypto conversion, structurally strong.⁷

Banking: Warming, but Cash-Intensive Businesses Face Scrutiny

South Africa offers a sophisticated, internationally connected banking system, and the sector's posture toward crypto has shifted from historical de-risking to active engagement. Absa, one of the country's largest banks, is building institutional crypto custody, and major banks increasingly serve licensed CASPs. A held FSCA licence materially improves bankability. The practical caveat is the cash: an ATM network is a cash-intensive business, and South African banks apply heightened AML scrutiny to cash-handling clients. Operators should plan the banking relationship (and cash-in-transit logistics) in parallel with licensing, and expect a longer onboarding than a purely digital CASP would face.^5,8

Importing Hardware: The EU–SADC EPA Advantage

For a Czech manufacturer, South Africa is one of the easier long-haul destinations. The EU–SADC Economic Partnership Agreement gives EU-origin goods preferential (often zero) customs duty, provided a valid certificate of origin accompanies the shipment. Import VAT of 15% applies but is reclaimable by a VAT-registered business. Cape Town is the preferred entry port for European cargo, and clearance through a registered customs broker typically takes one to two business days. Two administrative items to verify per machine model: the correct HS classification, and whether an NRCS Letter of Authority or ICASA type approval is required for the unit's electronic and wireless components. That's routine paperwork, best handled by the clearing agent before the first shipment. One operational note unique to South Africa: plan for load-shedding (scheduled power cuts) with UPS backup at machine sites.^9,10

Import duty (EU origin) Preferential, often 0%, under the EU–SADC EPA with a valid certificate of origin	Import VAT 15%, reclaimable by a VAT-registered business
Licence capital requirement None set in statute; applicants must demonstrate financial soundness and liquidity	Penalty for unlicensed operation Up to R10 million or ten years' imprisonment

The Next 24 Months: COFI, Exchange Control, and an Open Field

The direction of travel is more regulation of the same kind, not reversal. The FSCA's roadmap runs toward the Conduct of Financial Institutions (COFI) Bill by 2027, which will consolidate the regime, and work is under way to integrate crypto into South Africa's exchange-control framework, the item most worth watching for a cash-based business. Supervision is intensifying rather than hardening: the FSCA ran 30 AML/CFT inspections of CASPs in 2025/26, plans 35 more in 2026/27, and in August 2025 stood up a standing industry forum (CASEF) for regular dialogue with the sector. That's the behaviour of a regulator that wants a compliant industry, not a smaller one.^2,4

The demand side is compelling. South Africa counts roughly 13 million crypto holders and about 2 million active traders, crypto is spent at mainstream retailers such as Pick n Pay, and Sub-Saharan Africa received over $205 billion in on-chain value in the year to June 2025, up 52%, the third-fastest-growing region globally, with bitcoin at 74% of South African retail volume. Against that, the country hosts only somewhere between roughly 10 and 60 crypto ATMs (sources diverge; verify against CoinATMRadar before publication), about one machine per million inhabitants, in premium locations like Sandton City.^3,7,11

“South Africa is a near-term market, not a wait-and-see one. The recommended path: target the 300 already-licensed CASPs that lack a physical cash on-ramp, alongside retail and mall operators who already host machines. The regulatory work is done, and the field is still open.”

Sources and references

1. FSCA CASP licensing update (statistics as of 12 December 2025) — DLA Piper Africa · FSCA statement
2. Licensing outcomes and enforcement — Moonstone · Business Report
3. CASP licence requirements, penalties, 2026 compliance — Tech In Africa · FSCA licensing requirements overview
4. Regulatory framework, FICA and Travel Rule (Directive 9) — Sumsub: SA crypto regulations · Notabene: Travel Rule South Africa
5. Banking sector engagement (Absa, institutional custody) — Chainalysis: SSA 2024
6. KYC thresholds in practice — Bitcoin ATM overview (Wikipedia)
7. ATM fees, locations and market state — SA Shares: Bitcoin ATMs in South Africa · CoinATMRadar: South Africa
8. Adoption and holder estimates — Gofaizen & Sherle: SA crypto licence
9. EU–SADC EPA and import mechanics — AfroTools: SA import duty guide 2026 · European Commission: South Africa
10. Compliance certificates for electronics (NRCS / ICASA) — SARS Customs and Excise · JLog: import duty guide
11. Regional growth data — Chainalysis: SSA 2025

Legal Disclaimer: This article by GENERAL BYTES is for informational purposes only and does not constitute formal legal, financial, or investment advice. South Africa's regulatory regime continues to evolve, including the forthcoming COFI Bill and exchange-control integration. Always consult specialised local legal counsel and confirm current FSCA and FIC requirements before considering market entry.