AUSTRAC Suspends Cryptolink Bitcoin ATM Registration for Three Months

Australia's financial intelligence agency AUSTRAC has suspended the registration of Bitcoin ATM operator Cryptolink for three months over reporting failures. The order took effect on Sunday, so all 96 of the company's machines are offline nationwide for now. It is the second enforcement action against Cryptolink in less than a year.

AUSTRAC's Decision

AUSTRAC, Australia's financial crime watchdog, announced the suspension of Cryptolink's registration as a Virtual Asset Service Provider (VASP). CEO Brendan Thomas said the company failed to meet basic reporting requirements, for example it did not submit threshold transaction reports and ignored the agency's requests for information. Technically the order is a suspension rather than a full cancellation, but in practice Cryptolink's machines cannot legally operate for the entire term.

Legally the company remains a registered business, but without an active VASP status it cannot lawfully offer cash-to-crypto exchange services. All 96 machines will physically stay put in shopping centers and gas stations, but none of them will accept cash until November.

Under Australia's anti-money laundering rules, operators of cash-based crypto services must report transactions of 10,000 Australian dollars or more to AUSTRAC. That is the exact requirement the company had been systematically missing in recent months, according to the regulator, while also failing to answer official requests for explanation.

"As part of our continued focus on digital currency as a money laundering risk, AUSTRAC has ongoing concerns about the company's ability to manage high-risk transactions through its ATMs."

- Brendan Thomas, CEO of AUSTRAC, statement from August 10, 2026

A History of Breaches

This is not the first time AUSTRAC has pressured Cryptolink. In October 2025, the company signed an enforceable undertaking with the regulator after its Cryptocurrency Taskforce found breaches, namely late transaction reporting and gaps in customer risk assessments. AUSTRAC also issued a $56,340 infringement notice at the time, which Cryptolink paid without dispute.

Under last year's undertaking, Cryptolink was expected to tighten internal controls and regularly confirm compliance to the regulator. Judging by the current suspension, the company only partly met those obligations, and some reports never got filed at all.

AUSTRAC's Cryptocurrency Taskforce exists specifically to counter illicit use of digital assets and regularly reviews registered operators across the country. Cryptolink came under renewed scrutiny as a direct result of those routine checks.

The agency's position has not shifted: without proper reporting, machines that swap cash for crypto stay a convenient channel for money laundering. A repeat breach from the same operator looks worse to regulators than a one-off case.

Scale of the Network

Cryptolink runs 96 Bitcoin ATMs across Australia, making it one of the largest operators of its kind in the country. Customers can exchange cash for Bitcoin without a bank, simply by walking up to a machine in a shopping center or gas station. For many users it remains the simplest way to buy crypto without a bank account or exchange verification.

Smaller amounts usually require nothing more than a phone number, while larger transactions call for a scanned ID. That gap in verification thresholds is exactly what AUSTRAC points to as the opening for abuse.

• The heaviest concentration of machines sits in Sydney, Melbourne and Brisbane.
• Every transaction above a set threshold must be reported to AUSTRAC.
• Australia has more crypto ATMs than any other country in the Asia-Pacific region.

In Australia, any crypto ATM operator must register with AUSTRAC before launching a network, or its machines count as illegal from day one.

That scale is exactly what draws regulatory attention: the more machines run unchecked, the higher the combined risk for the financial system. A single company with dozens of locations nationwide can process far more questionable transactions than a small local operator.

A Wider Crackdown on Crypto ATMs

Australian authorities have been ramping up pressure on crypto ATM operators since late 2024, after the first wave of complaints about machines being used to scam elderly victims. AUSTRAC has repeatedly said cash transactions through these devices are hard to trace with standard banking tools, and the machines often become the final stop for money obtained through fraud.

The most common scenario involves so-called investment scams, where a victim is convinced to deposit cash through an ATM for a supposedly quick profit. The cash converts to crypto instantly and moves to a scammer's wallet, making it nearly impossible to recover.

Judging by AUSTRAC's own language, the campaign is unlikely to stop at Cryptolink. The regulator openly talks about its continued focus on digital currency as a money laundering risk and keeps monitoring every registered operator across the country.

In Ukraine, cash-to-crypto swaps mostly happen through online exchangers rather than physical machines, where users can quickly buy Bitcoin with hryvnia at the current rate without visiting a physical location.

The contrast is telling: while Australia can freeze an entire network of physical machines at once, most Ukrainian exchange services operate online and have no single point a regulator could shut down with one order.

Cryptolink's suspension runs through November 2026. The company can apply to restore its registration once the term ends, but only if it fixes the reporting gaps regulators flagged. Cointelegraph reached out to Cryptolink for comment and had not received a response at the time of publication.