Cryptolink's Shutdown Is AUSTRAC's Dry Run for a Blanket Crypto ATM Ban

Australia's financial crime regulator has shown the crypto ATM industry it doesn't need new legal powers to shut a major operator down — it can already do it with the ones it has.

AUSTRAC suspended Cryptolink Pty Ltd's registration as a Virtual Asset Service Provider for three months, effective August 9, taking the company's 96 Bitcoin ATMs offline across Sydney, Melbourne, and Brisbane. The regulator said Cryptolink had met the terms of an enforceable undertaking it signed in October 2025, then failed to submit required threshold transaction reports and did not respond to a follow-up information request. AUSTRAC CEO Brendan Thomas said the company was "deemed too high risk to continue operating at present."

The rationale is notable for what it isn't. AUSTRAC didn't allege a sophisticated laundering scheme. It cited a failure to file threshold transaction reports — the standard filing triggered by cash transactions of A$10,000 or more — and silence in response to a regulator's request. Those are baseline compliance functions, not edge cases.

This is the second time AUSTRAC has acted against Cryptolink. Its Cryptocurrency Taskforce, formed in late 2024, found late reporting and weak risk assessments at the company and accepted an enforceable undertaking in October 2025, alongside an A$56,340 infringement notice that Cryptolink paid. That undertaking was supposed to close the gap. AUSTRAC had also imposed a sector-wide A$5,000 cash-transaction limit on crypto ATM deposits and withdrawals in June 2025, part of a broader tightening that predates this suspension by more than a year. When a company that already survived one enforcement round lapses again, the regulator is left with a narrower set of explanations, and none of them favor leniency.