Australia’s financial crime watchdog has ordered Cryptolink’s Bitcoin ATM network offline for three months, citing unresolved compliance concerns under anti-money laundering rules.

According to the Australian Transaction Reports and Analysis Centre (AUSTRAC), the suspension of Cryptolink’s Virtual Asset Service Provider (VASP) registration—effective for a three-month period starting Sunday—means the company’s crypto ATMs will not be permitted to operate during that time. The move comes as Australian regulators have intensified scrutiny of crypto ATM activity, including alleged misuse by criminals.

Key takeaways

AUSTRAC suspended Cryptolink’s VASP registration for three months, taking its crypto ATMs out of service during the suspension.
The regulator cited failures to meet basic reporting obligations, especially threshold transaction reports, and said the company did not respond to information requests.
AUSTRAC said it remains concerned about the ability to manage “high-risk transactions” through crypto ATMs (CATMs).
The action follows prior enforcement steps in 2025, including an enforceable undertaking tied to alleged late reporting and risk assessment gaps.

AUSTRAC suspends Cryptolink’s ability to operate

AUSTRAC CEO Brendan Thomas said Monday that Cryptolink’s VASP registration has been suspended for three months, beginning Sunday. In practical terms, the suspension prevents Cryptolink’s Bitcoin ATMs from operating because the company lacks active authorization to provide virtual asset services during the period.

AUSTRAC also pointed to specific compliance shortfalls. The regulator said Cryptolink failed to satisfy core reporting requirements, “particularly threshold transaction reports.” AUSTRAC added that the company did not respond to the regulator’s request for information—an issue that, in AUSTRAC’s framing, compounded the broader monitoring and oversight concerns.

“As part of our continued focus on digital currency as a money laundering risk, AUSTRAC has ongoing concerns about the company’s ability to manage high-risk transactions through its CATMs,” Thomas said.

Why regulators are targeting crypto ATMs

Australia has the highest concentration of crypto ATMs across the Asia-Pacific region, and regulators have been focused on how these machines can be exploited for illicit activity. AUSTRAC’s latest action underscores that the compliance expectations for crypto ATM operators are not merely formalities; they are intended to prevent gaps in reporting and oversight that can enable money laundering.

Late 2024 onward, authorities have increasingly discussed criminal use of crypto ATMs, including cases involving the targeting of vulnerable users. Against that backdrop, the operational suspension of a major ATM operator signals that regulators are willing to use enforcement tools that immediately restrict market access when compliance standards are not met.

Enforcement history: from an undertaking to a paid infringement notice

AUSTRAC’s decision does not arrive in isolation. The suspension follows steps taken in 2025 after issues were identified during Cryptolink’s compliance review process.

In October 2025, Cryptolink entered an enforceable undertaking with AUSTRAC after its Cryptocurrency Taskforce identified alleged breaches. AUSTRAC cited issues including late transaction reporting and shortcomings in Cryptolink’s risk assessments. The undertaking was accompanied by further enforcement: AUSTRAC also issued a $56,340 infringement notice, which Cryptolink paid.

While the October 2025 undertaking and infringement notice reflect earlier remedial and punitive measures, Monday’s suspension indicates AUSTRAC still viewed compliance performance as insufficient—particularly around reporting to AUSTRAC and responsiveness to information requests.

What the suspension means for users and the ATM footprint

Cryptolink operates 96 ATMs in Australia, enabling customers to exchange cash for Bitcoin. The network includes machines in major cities such as Sydney, Melbourne, and Brisbane.

During the three-month suspension window, these ATMs will be prevented from operating because AUSTRAC has removed the company’s ability to run as a VASP under its registration. That restriction affects not just new transactions but also ongoing consumer access to crypto acquisition through ATM channels.

Cointelegraph contacted Cryptolink for comment, but the company’s response was not included in the information provided with AUSTRAC’s announcement.

What to watch next

Crypto ATM operators in Australia—and users who rely on them—will be looking closely at whether Cryptolink can address AUSTRAC’s specific concerns around threshold reporting, high-risk transaction controls, and regulatory engagement. The suspension ends after three months, but the key question is whether the underlying compliance gaps that AUSTRAC described are actually resolved in time to restore authorization.