AUSTRAC suspends Cryptolink's 96 crypto ATMs over AML failures

AUSTRAC suspended Cryptolink Pty Ltd's registration for three months from August 9, forcing its 96 cryptocurrency ATMs offline after the operator failed to submit mandatory threshold transaction reports.

"While Cryptolink met the conditions stipulated in its enforceable undertaking, it subsequently failed to meet basic reporting obligations, particularly for threshold transaction reports," Brendan Thomas, CEO of AUSTRAC, said. "The company failed to submit these required reports or respond to AUSTRAC's request for information, thus we've deemed it too high risk to continue operating at present."

The suspension follows an enforceable undertaking accepted in October 2025 after AUSTRAC's Crypto Taskforce identified alleged contraventions including late reporting of large cash transactions and weaknesses in Cryptolink's anti-money laundering and counter-terrorism financing risk assessments. AUSTRAC also issued a $56,340 infringement notice at the time, which the company paid. Threshold transaction reports are triggered when a customer conducts a cash transaction of A$10,000 or more.

The action removes 96 of Australia's roughly 1,800 crypto ATMs from operation, about 5 percent of the national network. AUSTRAC's Crypto Taskforce, established in late 2024, found that 85 percent of transactions involving the 90 most frequent crypto ATM users were linked to scams or money-mule activity.

Cash-to-crypto terminals expose third-party wallet risk

Crypto ATMs allow customers to exchange physical banknotes for digital assets, creating a bridge between cash — whose origin can be difficult to establish — and cryptocurrency, which can be transferred rapidly across borders. A customer can insert banknotes and scan a wallet address supplied by another person, meaning the person at the terminal may not control the destination of the funds.

The receiving address is central to the risk. Identity verification at the point of sale does not establish who ultimately receives the value. A criminal may provide cash to an intermediary, a scam victim may convert funds under an offender's direction, or a money mule may use multiple terminals to distribute deposits across customer identities.

AUSTRAC's action against Cryptolink marks a shift from remediation to restriction. Completing an enforceable undertaking does not end supervisory scrutiny, and the three-month suspension removes the company's legal authority to operate its terminals while the regulator assesses continuing risk. The escalation — from taskforce creation in late 2024 to infringement notices in October 2025 to registration suspension in August 2026 — shows Australian authorities are moving beyond warnings toward enforcement in the crypto ATM space.

The regulatory pressure extends beyond Australia. Tennessee banned crypto ATMs in April 2026, and Canada has proposed similar restrictions, according to BitKE reporting. These parallel actions suggest crypto ATM operators face tightening compliance requirements across multiple jurisdictions, with cash-to-crypto conversion increasingly treated as a high-risk channel requiring enhanced due diligence.

For Cryptolink, the suspension means its 96 terminals — concentrated primarily in Queensland — must cease operations immediately. The company previously paid the $56,340 infringement notice and met the conditions of its enforceable undertaking, yet still failed to maintain basic reporting obligations. Thomas said AUSTRAC would "keep a close watch on the cryptocurrency sector, particularly businesses operating crypto ATMs, and will take action where we identify serious risks or non-compliance."

The broader implication for Australia's crypto ATM sector is clear: registration is not a one-time approval but a continuing obligation. Operators must maintain functioning controls after remedial periods, submit covered transaction reports promptly, and respond to regulatory information requests. Failure to do so carries operational consequences measured in months of lost revenue and network disruption.

This article is for informational purposes only and does not constitute investment advice.