Heard at a Bitcoin ATM

Changes to KYC in 2025 by MiCA: 15,000 eur KYC

Philip
Specialist

KYC changes at Bitcoin ATMs: Everything you need to know

The world of regulations and legislation is undergoing changes that have a huge impact on how devices such as Bitcoin ATMs are used. In this article, we will explain the most important aspects related to KYC (Know Your Customer), EU regulations (especially MiCA), and how this may affect your future transactions.

Table of Contents

  1. What is KYC and why is it important?
  2. MiCA – key changes in cryptocurrency regulations
  3. Existing limits at Bitcoin ATMs: What is changing?
  4. Next stages of change: March 2025 to September 2025
  5. Why did Bitcoin ATM.com extend the "Secure Transactions" period?
  6. What does the VASP vs. CASP license mean?
  7. How do you protect yourself from full KYC?
  8. Frequently Asked Questions (FAQ)
  9. Summary

What is KYC and why is it important?

KYC (Know Your Customer) is a set of procedures that financial institutions—including cryptocurrency exchanges and Bitcoin ATMs operators —implement to verify the identity of their customers. According to the latest data from the Financial Action Task Force (FATF, 2022, p. 11) and a report by the European Commission (2021, p. 5), the proper implementation of KYC plays a key role in combating financial crime and money laundering, particularly in the area of cryptocurrencies and digital assets.

MiCA - key changes in cryptocurrency regulations

MiCA (Markets in Crypto-Assets) is an EU regulation governing the issuance and provision of services related to crypto-assets. MiCA entered into force on June 29, 2023—some of its provisions (concerning asset-backed tokens and e-money) apply from June 30, 2024, and the regulation will be fully applicable from December 30, 2024.

  • Main goal: Ensure transparency, safety and consumer protection in the cryptocurrency market.
  • Why it matters. The MiCA imposes strict requirements for cryptocurrency service providers, including the requirement for full identity verification in most cases.

Cryptocurrency regulations in the EU are entering a new phase. In this article, we explain what is actually changing in KYC at Bitcoin ATMs, what is already in force, and what may come into force in the future—and why there are still differences between countries.

Existing limits at Bitcoin ATMs: What is changing?

The change, initially planned for December 30, 2024, was supposed to completely change the KYC limits. However, in the final stretch, some amendments were made, and there are also differences depending on the country.

Changes in selected countries

  • Follow developments via our newsletter. Update as of December 16, 2025: Following the veto of the bill by Polish President Karol Nawrocki, the situation is developing rapidly.
  • 🇧🇬 Bitcoin ATMs Bulgaria, 🇭🇷 Bitcoin ATMs Croatia, 🇨🇾 Bitcoin ATMs in Cyprus, 🇨🇿 Bitcoin ATMs in the Czech Republic, 🇷🇴 Bitcoin ATMs in Romania, 🇸🇰 Bitcoin ATMs in Slovakia, 🇬🇷 Bitcoin ATMs in Greece
    • After January 1, 2025: No additional changes.
    • End of 2025/beginning of 2026: MiCA is directly applicable throughout the EU, but member states must adapt their national laws and supervisory practices accordingly. As a result, the timing of MiCA's practical application may vary from country to country. Until the new regulatory requirements come into force, you can continue to use our services as before. We will inform you in advance of any required updates. Update as of December 16, 2025: No changes at this time.
  • 🇮🇹 Bitcoin ATMs Italy, 🇸🇮 Bitcoin ATMs in Slovenia
    • The full KYC system is already in place, with no new changes.
  • 🇧🇦 Bosnia, 🇧🇷 Brazil, 🇨🇱 Chile, 🇲🇰 Northern Macedonia, 🇵🇪 Peru, 🇺🇦 Ukraine
    • MiCA regulations do not apply here. For now, there are no immediate changes, but we encourage you to follow our newsletter for possible future regulations.

Although MiCA will apply throughout the EU from December 30, 2024, in practice, some countries have provided for transition periods for entities operating legally before that date. Depending on the country, this period may last until July 1, 2026, at the latest, or until CASP authorization is obtained (or refused), hence the possible differences in the pace of KYC implementation.

Why hasn't Bitomat.com made changes yet?

According to legal analyses and interpretations, Bitomat.com and other VASP-licensed entities do not yet need to implement full KYC until March 2025 in some countries (see the images above for details). This is due to the fact that:

  • VASP-licensed entities are not directly subject to the Travel Rule, which enforces full identification.
  • For CASPs (companies already licensed under the new rules), full KYC applies earlier.
  • Starting identification before obtaining a MiCA license could violate GDPR/data protection regulations.

The effect? Until March 2025, you can still enjoy partial or full non-verification at Bitcoin ATMs, provided your daily amount does not exceed €990.

What does the VASP vs. CASP license mean?

Comparison: VASP vs. CASP
Element VASP CASP
License requirements Less stringent; entities are still using the pre-MiCA system. A more extensive licensing process that complies with new MiCA regulations.
KYC Possibility to delay full customer verification until March 2025. Mandatory broader customer verification from the beginning of operations.
Travel Rule obligation Limited; Travel Rule will fully affect VASPs only after the official transition to CASP. It is subject to full implementation of Travel Rule from the moment it is licensed.
Impact on users Users can continue to use Secure Transactions (under 990 EUR per day). Customers must quickly adapt to the new requirements (the end of security).
Regulatory perspective Temporary; until MiCA regulations are fully implemented, requirements are less stringent. Target model for EU regulation; greater emphasis on transparency and AML prevention.
  • VASP (Virtual Asset Service Provider) - the "old" model for licensing cryptocurrency services in some EU countries.
  • CASP (Crypto-Asset Service Provider) - a "new" licensing model introduced by MiCA that requires compliance with much stricter regulatory standards, including broader KYC.

In practice:

  • Entities operating as VASPs still have time to implement full KYC.
  • CASP-licensed entities already have to implement MiCA requirements (including extensive customer verification).

Frequently Asked Questions (FAQ)

1. Can I still safely buy cryptocurrencies until March 2025?
Transactions equal to or exceeding 1,000 EUR require scanning an ID document on the device. If the same person buys or sells cryptocurrency on a single day in multiple transactions totaling 15,000 EUR or more, we consider these transactions to be related and will also require a scan of an ID document in such cases. In special cases, such as attempts to conceal one’s face during a transaction, we reserve the right to request a scan of an identification document even for smaller amounts.

2. Why will it be so difficult to maintain security once MiCA takes effect?
MiCA harmonizes regulations across the EU, requiring user verification. This is primarily related to AML (Anti-Money Laundering) regulations and the protection of users against abuse.

3. Will Bitomat.com always require KYC in the future?

Ultimately—in line with EU regulatory trends—the scope of identification requirements will expand, and it will become increasingly difficult to ensure complete transaction security.

4. Do other countries outside the EU have similar regulations?
Yes and no. Each country may have its own regulations on cryptocurrencies. In non-EU regions, MiCA does not apply, but many countries are introducing or considering similar regulations.

Summary

Upcoming changes to KYC (Know Your Customer)—particularly those driven by MiCA regulations—will have a huge impact on the security of cryptocurrency users. Bitcoin ATMs, which until now have offered a relatively high level of privacy, will gradually be required to implement full verification. MiCA applies directly throughout the EU, but member states must adapt their national regulations and supervisory practices accordingly. As a result, the timing of MiCA’s practical implementation may vary from country to country. Until the new regulatory requirements take effect, you can continue to use our services as before. We will notify you in advance of any required updates.

  • Follow the Bitomat.com blog and other trusted news sources to stay up-to-date on legal updates and news in the cryptocurrency world.

Thanks to this article, you already know what awaits you in the context of KYC at Bitcoin ATMs. please visit Bitomat.com/blog for the latest articles, tips and updates!

Want to get started right away? Check out our map Bitcoin ATMs and see where else you can make transactions while adhering to current security limits.

Thank you for reading the article! If you have additional questions or want to share your opinion, please leave a comment below.

The legal and regulatory status described in this article is current as of December 16, 2025 . Due to the dynamic nature of cryptocurrency regulations, the rules may vary from country to country.

Other blogs