if exchange will be regulate ... local exchange pass over all this shit.
coinsafe with ATM integrate in software is an answer like mycelium or localbitcoin.
read the bitlicence draft.
if ANY new york resident (customer) uses ANY service ANYWHERE on the planet then that service will need to pay for a bitlicence, insurance, employe a compliance officer (or pay one to get trained).
so if you own a bitcoin business anywhere, expect lawsky to suddenly want to be your "customer" no matter what blocks you put in place, purely to get you to buy his licence.
and thats just one of the pitfalls