Australia: The Region's Largest ATM Market, Days Into What Looks Like a Dry Run for a Ban

Australia is the region's largest crypto ATM market — and, days after regulators suspended its biggest operator, may also be the closest to a sector-wide ban.

● Orange

~2,100 Crypto ATMs (APAC's largest market)

96 Machines suspended (Cryptolink, Aug 2026)

A$5,000 Sector-wide cash transaction cap

Operating a crypto ATM in Australia is legal, and this is genuinely one of the largest markets covered anywhere in this series: Australia hosts the highest number of crypto kiosks in the Asia-Pacific region and the third-highest in the world, with counts ranging from roughly 1,800 to 2,100 machines depending on the source and month.^1,2 The single most significant enforcement action in this market's history to date came in August 2026: on 9 August, AUSTRAC (Australia's financial-crime regulator) suspended the Virtual Asset Service Provider registration of Cryptolink Pty Ltd, the country's largest crypto ATM operator, taking all 96 of its machines across Sydney, Melbourne, and Brisbane offline for three months, with the suspension due to run until 9 November 2026 and Cryptolink remaining offline at the time of writing.^3,4 AUSTRAC's own CEO, Brendan Thomas, said Cryptolink was "deemed too high risk to continue operating at present," and at least one industry analysis has explicitly framed this suspension as a live dry run for a broader, sector-wide shutdown power AUSTRAC is about to receive.^3,4 That broader power is genuinely significant: the AML/CTF Amendment Bill 2026, introduced to the House of Representatives on 12 March 2026, would let the AUSTRAC CEO restrict or prohibit any reporting entity's use of a "high-risk mechanism" — crypto ATMs are the specific example used throughout the government's own explanatory materials — by legislative instrument, without first needing to build an individual enforcement case.⁴ The advantage is a large, proven, currently-legal market; the obstacle is that Australia has spent the past 18 months moving methodically from warnings, to a sector-wide cash cap, to individual enforcement, to a suspension of the market's largest operator, with legislative power for an outright ban now before Parliament.^5,6 As in most markets on our legislation map, General Bytes as a hardware and software vendor is not itself performing a licensable activity; it is the in-country operator of the machines who must maintain AUSTRAC registration and comply with its conditions. For GENERAL BYTES, Australia is the market in this series where the gap between "currently legal" and "actively being wound down by regulatory design" is narrowest right now.

Last updated: August 2026

Regulatory Framework and Its Evolution

Crypto ATM operators in Australia register with AUSTRAC as Digital Currency Exchange (DCE) providers, a Virtual Asset Service Provider category under the Anti-Money Laundering and Counter-Terrorism Financing Act — historically a fragmented, patchwork oversight regime built on existing financial-services and AML law rather than a bespoke crypto statute.⁷ AUSTRAC's tightening has followed a clear, escalating sequence: a March 2025 warning to operators about AML non-compliance; a June 2025 sector-wide cap of A$5,000 on cash transactions per deposit or withdrawal, alongside mandatory stricter customer due diligence and scam-warning signage at every machine; an October 2025 enforceable undertaking and A$56,340 infringement notice against Cryptolink specifically, following findings of late reporting and weak risk assessment by AUSTRAC's Cryptocurrency Taskforce (formed late 2024); and finally the August 2026 suspension once that undertaking failed to resolve the underlying compliance gaps.^5,8,3

Date	What happened
Jun 2025	A$5,000 sector-wide cash-transaction cap takes effect for DCE providers
Oct 2025	AUSTRAC enforceable undertaking and A$56,340 fine against Cryptolink
Nov 2025	Corporations Amendment (Digital Assets Framework) Bill 2025 introduced
12 Mar 2026	AML/CTF Amendment Bill 2026 introduced — would let AUSTRAC restrict “high-risk mechanisms”
9 Aug 2026	AUSTRAC suspends Cryptolink's VASP registration; 96 machines taken offline
9 Nov 2026	Cryptolink suspension scheduled to end

Running in parallel, Australia is separately overhauling its entire digital-asset regulatory architecture: the Corporations Amendment (Digital Assets Framework) Bill 2025, introduced to Parliament in November 2025, would bring Digital Asset Platforms and tokenised custody providers under AFSL (Australian Financial Services Licence) requirements for the first time, layered on top of AUSTRAC's existing AML/CTF role rather than replacing it.⁹ AUSTRAC has set 1 July 2026 as a major compliance milestone under the reformed AML/CTF Act specifically: newly regulated entities must have a compliance officer in place, transaction monitoring is mandatory, and the Travel Rule takes effect from that date.

Getting Licensed: DCE Registration Today, a Genuine Ban Power Tomorrow

The current registration mechanics remain those of an ordinary AUSTRAC DCE/VASP provider: register, implement an AML/CTF programme, and file mandatory reports, including Threshold Transaction Reports for any cash transaction of A$10,000 or more, due within 10 business days.¹⁰ Cryptolink's suspension is directly instructive on what happens when this slips: the trigger was not a single large violation but a pattern of missed threshold-transaction reporting and an ignored AUSTRAC information request, which left the regulator unable to see large cash movements through the network and concluded the operator was too high-risk to continue.^4,10

The more fundamental change is the AML/CTF Amendment Bill 2026 itself: if passed as introduced, it would give the AUSTRAC CEO authority to restrict or prohibit a "high-risk mechanism" — with crypto ATMs used as the explicit worked example in the government's own materials — through a legislative instrument, sector-wide, without first proving an individual case against a specific operator.⁴ This would be a categorically different enforcement tool than anything used against Cryptolink so far: not licence suspension for one non-compliant firm, but a direct route to a blanket prohibition covering the entire business model nationally. As with the rest of our legislation map, this registration sits with the in-country operator of the machines, not with General Bytes as hardware and software vendor.

AML and KYC

Australia's current AML posture is already substantially tightened and getting more so: the A$5,000 cash-transaction cap introduced in June 2025 applies sector-wide, customer due diligence must be materially stricter than before, and mandatory scam-warning notices must be displayed at every physical machine.⁵ This places Australia firmly in the full-compliance, tightening-further category throughout this series, with no meaningful low-verification tier remaining. The severity of the underlying problem AUSTRAC is responding to is substantial: in a sample of the 90 most prolific crypto ATM users AUSTRAC examined, 85% were directly associated with scams or similar illicit activity, and elder-fraud losses through crypto ATMs reached roughly $389 million in 2025 across markets AUSTRAC and comparable regulators have examined.

Banking

Banking access for AUSTRAC-registered DCE providers has generally been workable in Australia's mature financial system, but the current enforcement climate should be expected to make banks more cautious with this specific sector, not less, given how publicly AUSTRAC has now escalated against the market's largest operator. Any operator's banking relationship should be treated as sensitive to the same compliance signals AUSTRAC itself is watching for — missed reporting, weak risk assessment — since a bank is likely to review its own risk appetite in step with regulatory sentiment here.

The Next 24 Months: Watch the AML/CTF Amendment Bill Directly

The single most consequential thing to track in Australia over the next 24 months is whether the AML/CTF Amendment Bill 2026 passes in a form that actually grants AUSTRAC the sector-wide restriction/prohibition power it currently seeks, and if so, whether AUSTRAC uses it against crypto ATMs specifically, the example the government has repeatedly and explicitly named.^4,6 Home Affairs Minister Tony Burke has stated publicly that most top users of crypto ATMs are tied to illicit operations, and has directly linked the sector to money laundering, scams, fraud, drug trade, and child exploitation in remarks to the National Press Club — language that signals a government building the political case for prohibition, not merely tighter licensing.⁶

For GENERAL BYTES, Australia is currently the single highest-stakes market in this entire series to monitor in real time. The Cryptolink suspension, industry commentary explicitly describing it as a rehearsal for something bigger, and a bill already before Parliament that would make a blanket ban technically straightforward together suggest the realistic planning horizon here is materially shorter than in almost any other market covered in this map. The practical recommendation is to track the AML/CTF Amendment Bill's progress directly and treat any existing Australian relationships as being at genuine risk of a sector-wide shutdown, not merely tighter compliance, within the next 24 months.

---

Sources and references

1. Australia's regional ATM leadership (2,100 terminals per CoinATMRadar, Oct 2025) — coindesk.com
2. ~1,800 machine count and Cryptolink's 96-machine share — decrypt.co
3. AUSTRAC suspension of Cryptolink, 9 August 2026, effective until 9 November 2026 — decrypt.co
4. Cryptolink suspension as "dry run" framing; AML/CTF Amendment Bill 2026 high-risk-mechanism power — blockhead.co
5. June 2025 A$5,000 cash cap, enhanced due diligence, scam-warning signage requirements — blockhead.co
6. Home Affairs Minister Burke's National Press Club remarks; proposed high-risk product powers — crypto.news
7. DCE/VASP registration as historical, fragmented oversight basis — transak.com
8. October 2025 enforceable undertaking and A$56,340 fine against Cryptolink — kucoin.com
9. Corporations Amendment (Digital Assets Framework) Bill 2025, AFSL licensing — transak.com
10. Threshold Transaction Report requirements (A$10,000, 10 business days) — techtimes.com

Legal Disclaimer: This article by GENERAL BYTES is for informational purposes only and does not constitute formal legal, financial, or investment advice. Australia's largest crypto ATM operator had its registration suspended by AUSTRAC in August 2026, and legislation that could enable a sector-wide restriction is currently before Parliament; always consult specialised local legal counsel and confirm the current AUSTRAC status before considering any change to market activity.