Australia Puts Crypto ATM Providers 'On Notice' Over Money Laundering Concerns

Australia’s financial crimes watchdog has placed crypto ATM operators “on notice,” warning many such machines may be helping criminals launder money or defraud victims.

The Australian Transaction Reports and Analysis Centre (AUSTRAC) said its crypto taskforce, formed last December, uncovered "worrying trends and indicators of suspicious activity" tied to crypto ATMs, including links to scams and fraud, in a statement released Monday.

Crypto ATMs—also known as kiosks—are physical machines that allow users to buy or sell cryptos like Bitcoin using cash or cards, often without the same identity checks used in traditional finance.

"We want to ensure crypto ATM providers have robust practices to minimise the risk that their machines can be used to launder dirty money or to scam and defraud innocent people,” said AUSTRAC CEO Brendan Thomas.

AUSTRAC’s taskforce—made up of regulatory, enforcement, and intelligence specialists—initially focused on crypto ATMs but has since expanded its scope to address industry-wide compliance issues.

Under Australia’s Anti-Money Laundering and Counter-Terrorism Financing Act, all DCEs—including those operating crypto ATMs—must register with AUSTRAC, perform KYC checks, monitor transactions, and file Suspicious Matter Reports as well as reports for cash transactions over $10,000.

Australia now hosts over 1,648 crypto ATMs—the highest count in the Asia-Pacific region—up from just 23 in 2019, with Sydney alone accounting for 348, Coin ATM Radar shows.

AUSTRAC's warning comes as U.S. lawmakers race to tighten guardrails around crypto kiosks as fraud cases surge, many involving elderly victims.

Illinois Senator Dick Durbin last month introduced the Crypto ATM Fraud Prevention Act, seeking to cap daily transaction limits at the crypto ATMs and require mandatory refunds for scam victims who report fraud within 30 days.

Nebraska, meanwhile, has passed the Controllable Electronic Record Fraud Prevention Act, mandating fraud warnings and refund rights for users who report the fraud within 90 days.

Edited by Sebastian Sinclair