Australia’s financial intelligence regulator has suspended Cryptolink Pty Ltd’s virtual asset service provider registration for three months, forcing the company’s 96 cryptocurrency ATMs offline from August 9. AUSTRAC said the operator failed to meet fundamental reporting requirements despite previous regulatory intervention. The suspension turns repeated AML/CTF compliance failures into a direct interruption of Cryptolink’s Australian operations.
Cryptolink operates crypto ATMs that allow customers to exchange physical cash for digital assets, a channel AUSTRAC considers particularly exposed to financial crime. The regulator said it continues to have concerns about the company’s ability to manage high-risk transactions through its machines. Cash-to-crypto infrastructure has become a priority supervisory area as Australian authorities confront scams, money laundering and money-mule activity involving physical terminals.
Reporting Failures Trigger Three-Month Suspension
AUSTRAC said Cryptolink failed to submit required threshold transaction reports and did not respond to a request for information. Australian reporting entities must file a TTR when providing a designated service involving A$10,000 or more in physical currency, generally within 10 business days. For a business built around converting cash into cryptocurrency, timely reporting of large transactions forms a core part of its regulatory obligations.
The latest action follows enforcement in October 2025, when AUSTRAC issued Cryptolink a A$56,340 infringement notice and accepted a court-enforceable undertaking after identifying alleged late reporting and weaknesses in its money-laundering and terrorism-financing risk assessments. Cryptolink paid the notice and subsequently met the undertaking’s conditions. The new suspension stems from later compliance failures rather than an unresolved breach of the earlier undertaking.
That sequence highlights the continuing nature of AML compliance. Remediation can address identified deficiencies, but operators must continue filing reports, maintaining risk controls and responding to supervisory requests after an enforcement action closes. AUSTRAC concluded that Cryptolink’s subsequent reporting failures made the business too high-risk to continue operating during the suspension period.
Crypto ATMs Remain Under Heightened Scrutiny
Cryptolink’s suspension comes amid a wider AUSTRAC campaign targeting cryptocurrency ATM risks. Data collected from nine providers showed that users aged over 50 accounted for almost 72% of transactions by value, while a separate taskforce assessment estimated that 85% of transactions made by the 90 most prolific crypto ATM users involved proceeds from scams and money-mule activity. The findings have pushed crypto ATMs from a niche compliance issue into a focused financial-crime enforcement priority.
The scale of the sector has also increased rapidly. AUSTRAC estimated almost 150,000 crypto ATM transactions annually, moving about A$275 million, with approximately 99% involving cash deposits used to purchase cryptocurrencies. In June 2025, the regulator imposed measures on operators including A$5,000 cash limits, enhanced customer due diligence, scam warnings and stronger transaction monitoring. Australia is increasingly treating physical crypto access points as infrastructure requiring tighter controls rather than simply another form of digital-asset trading.
The immediate issue is demonstrating compliance while its registration remains suspended. AUSTRAC said it will monitor the company during the three-month period and continue scrutinizing crypto ATM providers more broadly. The case establishes that repeated reporting failures can escalate beyond financial penalties to the temporary loss of an operator’s ability to conduct business.
