AUSTRAC suspends Cryptolink, forces 96 Bitcoin ATMs offline for three months

Australia’s financial crime regulator, AUSTRAC, has suspended Cryptolink’s registration for three months, shutting down the company’s network of 96 Bitcoin ATMs across the country from Aug. 9, citing failures to meet reporting obligations and to respond to an information request.

The suspension means Cryptolink cannot provide the registered virtual asset services covered by the regulatory order during the three-month period.

AUSTRAC CEO Brendan Thomas said the regulator remained concerned about the company’s ability to control transactions considered high risk.

“AUSTRAC has ongoing concerns about the company’s ability to manage high-risk transactions through its CATMs,” Thomas said.

The latest enforcement action is particularly significant because Cryptolink had already been given an opportunity to strengthen its compliance systems.

In October 2025, AUSTRAC issued Cryptolink an A$56,340 infringement notice and accepted a court-enforceable undertaking after its Cryptocurrency Taskforce identified alleged deficiencies involving late reporting of large cash transactions and weaknesses in the company’s money laundering and terrorism financing risk assessments. Cryptolink paid the infringement notice in full. AUSTRAC noted that payment of an infringement notice does not constitute an admission of liability.

Despite those earlier measures, the regulator said the company subsequently failed to meet basic reporting requirements and did not provide information requested by AUSTRAC.

For the regulator, that combination was enough to justify temporarily removing the Cryptolink Bitcoin ATMs network from operation.

Reporting failures put crypto ATM operator under pressure

The immediate issue behind the suspension is not simply the use of cryptocurrency itself but whether operators can provide regulators with the financial intelligence needed to identify suspicious activity.

Under Australian AML/CTF rules, businesses must submit threshold transaction reports when a transaction involves A$10,000 or more in physical currency. Those reports generally must be filed within 10 business days.

AUSTRAC said Cryptolink failed to meet those reporting obligations and also failed to answer a request for information that the regulator considered necessary to assess the operator’s compliance.

That is especially damaging for an ATM operator because cash-to-crypto transactions can create additional challenges for financial crime investigators. Unlike conventional online purchases funded through bank accounts, cash deposits can provide less immediate visibility into the origin of funds.

AUSTRAC’s previous enforcement action required Cryptolink to undergo independent reviews of its threshold transaction reporting, cash transaction controls and money laundering and terrorism financing risk assessment. The undertaking specifically required reviews covering transactions dating back to February 2021.

The regulator’s message is therefore broader than the fate of one company: previous compliance commitments do not shield an operator from further enforcement if authorities believe significant risks remain.

The suspension of the Cryptolink Bitcoin ATMs network demonstrates how quickly that principle can translate into operational consequences.

Australia is tightening the rules around crypto ATMs

Cryptolink’s suspension comes as Australia continues to impose tougher controls on an industry that has expanded rapidly.

AUSTRAC said in June 2025 that Australia’s crypto ATM network had grown from just 23 machines in 2019 to more than 1,200 in 2024. By October 2025, Home Affairs Minister Tony Burke said the number had reached about 2,000, making Australia the world’s third-largest crypto ATM market at the time.

But rapid growth has been accompanied by mounting concerns about criminal exploitation.

AUSTRAC’s Cryptocurrency Taskforce examined the activity of high-volume crypto ATM users and identified 90 people who were referred to law enforcement. The individuals included suspected scam victims, money mules and potential offenders.

AUSTRAC also found that the 90 most prolific users were associated with significant scam and money-mule activity. In October, Thomas said 85% of transactions by those high-volume users involved scam proceeds or money-mule activity.

The regulator responded by imposing additional safeguards on crypto ATM providers, including a A$5,000 limit on cash deposits and withdrawals, enhanced customer due diligence, mandatory scam warnings and stronger transaction monitoring.

The restrictions reflect a fundamental shift in Australia’s approach: regulators are no longer relying solely on operators to determine how much risk their businesses can tolerate. They are increasingly prescribing minimum controls for an industry considered particularly vulnerable to abuse.

The Cryptolink Bitcoin ATMs suspension is therefore part of a much larger regulatory experiment aimed at reducing the criminal use of crypto infrastructure without eliminating legitimate access to digital assets altogether.

Crypto ATM crackdown could reshape the sector

Australia’s approach is notable because it has stopped short of banning cryptocurrency ATMs outright.

Instead, authorities have opted for transaction limits, customer verification, scam warnings, reporting requirements and targeted enforcement. That strategy contrasts with New Zealand, which announced plans in 2025 to prohibit crypto ATMs as part of broader efforts to combat money laundering.

The Australian government has also moved to expand AUSTRAC’s powers. In October 2025, Burke announced proposed reforms that would allow the regulator’s CEO to restrict or prohibit high-risk products, services or delivery channels. The legislation was introduced into Parliament in March 2026.

Meanwhile, Australia’s reporting framework is evolving. AUSTRAC introduced updated transaction-reporting arrangements from July 1, 2026, saying the reforms were designed to improve the quality of information available to authorities investigating financial crime. The regulator said it received more than 2 million threshold transaction reports and more than 450,000 suspicious matter reports in the previous reporting period.

For operators, that means compliance is becoming an increasingly important part of the business model rather than a back-office obligation.

For consumers, the suspension sends an equally clear signal: using a crypto ATM does not place a transaction outside Australia’s financial crime controls.

The Cryptolink Bitcoin ATMs shutdown could ultimately prove to be a warning to the rest of the industry. AUSTRAC has already demonstrated that repeated compliance concerns can move from warnings and remediation plans to direct operational restrictions.

As Australia’s crypto ATM sector continues to develop, operators will face a choice between investing heavily in monitoring, reporting and customer protection or risking increasingly severe regulatory intervention.

For Cryptolink, that choice has already produced a three-month shutdown. For the wider market, the suspension suggests Australia’s crypto ATM era is entering a far more tightly regulated phase.