Folio 05 Insights Article

Digital Currency ExchangeVirtual Asset Service Provider

Crypto ATMs in Australia after the A$5,000 cap

AUSTRAC registers virtual asset service providers; it does not license them. On 3 June 2025 it used that registration as the lever, putting a common set of operating conditions on crypto ATM operators: an A$5,000 cap on cash in and cash out per customer transaction, mandatory on-screen scam warnings, enhanced customer due diligence and stronger transaction monitoring. AUSTRAC did not ban the machines, and it had refused to renew at least one ATM operator's registration the month before. Since roughly 30 June 2026 the register is public, so a conditioned registration is visible to any counterparty or buyer. Everything here is stated as of July 2026; the pillar sits in our AUSTRAC registration guide.

A registration, not a licence - and conditions ride on it

Start with the vocabulary, because it governs everything that follows. AUSTRAC operates registers, not a licensing regime. A crypto ATM operator holds a registration on what is now the virtual asset service provider (VASP) register - the successor to the digital currency exchange (DCE) register, renamed in the 31 March 2026 reform, with existing DCE registrations converted across automatically. It is an anti-money-laundering registration, not a financial-services licence.

When AUSTRAC assesses a registration it has three outcomes: approved, approved with conditions, or refused. Conditions are not a separate penalty track - they are a term of the registration itself. They attach to the registered entity, travel with it, and bind whoever controls it. Since the VASP register went public in mid-2026, AUSTRAC flags conditioned registrations openly, with a warning marker on the register entry.

What AUSTRAC imposed on 3 June 2025

On 3 June 2025 AUSTRAC announced that it had put crypto ATM operators on notice and imposed a common set of conditions on their registrations. The trigger was the machines' role in scams and fraud: cash goes in one side, crypto leaves the other, and victims of investment and romance scams are frequently walked to a machine by the person defrauding them. The conditions target that cash-to-crypto choke point directly.

The crypto-ATM condition set (3 June 2025)

  • An A$5,000 cash cap

    A limit of A$5,000 on cash deposits and cash withdrawals per customer transaction, capping the amount a scam victim can move through a single machine at once.

  • Mandatory scam warnings

    Operators must display prominent warnings to customers about the risk of scams before a cash-to-crypto transaction completes.

  • Enhanced customer due diligence

    Stronger identification and know-your-customer checks on machine users, above the baseline CDD every registrant already owes.

  • Robust transaction monitoring

    Monitoring capable of detecting and reporting suspicious patterns across the machine fleet, not just the single transaction in front of the operator.

Why the cap, and how big the fleet is

The conditions are aimed at a market that grew faster than almost anywhere else. AUSTRAC's own figures trace the fleet from 23 machines in 2019 to more than 1,200 in 2024 and upwards of 1,800 by June 2025, making Australia the world's third-largest crypto ATM market. It projected roughly 150,000 transactions and about A$275 million in value flowing through the machines each year.

The cap does not stand alone. Cash-accepting operators remain subject to the standing obligation to file a threshold transaction report for any cash transaction of A$10,000 or more, and the December 2024 cross-agency taskforce that first put ATMs under scrutiny sat behind the June conditions. AUSTRAC framed the exercise as protecting customers across a sector of roughly 400 registered digital currency exchanges, not shutting the cash-to-crypto channel down.

The crypto-ATM enforcement timeline (as of July 2026)

Date Event What it meant
Date 6 Dec 2024 Event Cross-agency crypto ATM taskforce announced What it meant AUSTRAC moves on the cash-in machines across a sector of roughly 400 registered DCEs
Date 6 May 2025 Event Harro's Empires refused renewal What it meant A crypto ATM operator refused re-registration at its three-year gate
Date 3 Jun 2025 Event Operating conditions imposed What it meant A$5,000 cash cap, scam warnings, enhanced CDD and monitoring on ATM operators
Date 30 Jun 2026 Event VASP register made public What it meant Conditions and their register markers now visible to counterparties and buyers

The expectation reaches past ATM operators

The condition set was written for crypto ATMs, but AUSTRAC did not draw a hard line around them. In the same 3 June 2025 notice it said it expects other cash-accepting virtual asset businesses to consider adopting similar limits. That is not a rule and not a fixed threshold - it is a stated supervisory expectation - but it signals where AUSTRAC's thinking on cash-to-crypto sits, and a buyer weighing any cash-accepting operator should read it as a live risk to the business model.

What a conditioned registration means when you buy

For a buyer, conditions are the part of an AUSTRAC registration that changes the deal. Because they are a term of the registration and not a separate order, they do not fall away when ownership changes - there is no AUSTRAC change-of-control approval that re-issues the registration clean. Whoever ends up controlling the entity inherits the A$5,000 cap, the warnings, the enhanced CDD and the monitoring, along with the cost of running all four.

The register makes this legible. Since it went public you can read a target's entry before you sign, see whether it is approved or approved with conditions, and price the condition set as an operating constraint rather than discovering it afterward. The honest reading is that a conditioned registration is a narrower asset than a clean one, and its value should reflect that.

The renewal gate is where conditions bite hardest. Every AUSTRAC registration runs on a three-year cycle, and renewal is a fresh assessment on the same fitness criteria - AUSTRAC refused three renewals on a single day in January 2026, and it refused Harro's Empires the year before. A buyer inherits the seller's renewal date and the seller's compliance record going into it.

We walk through that post-closing gate in our guide to buying an AUSTRAC-registered business, and note that the live dual-registration lot is a DCE and IRD entity rather than a dormant shell.

A$5,000
cap on cash in and cash out per crypto-ATM transaction (3 Jun 2025)
1,800+
crypto ATMs in Australia by June 2025 - the world's third-largest fleet
~A$275m
projected value moving through the machines each year
A$10,000
cash threshold transaction report obligation that still applies

FAQ

Frequently asked questions

01 What is the A$5,000 crypto ATM cap in Australia?

On 3 June 2025 AUSTRAC imposed conditions on crypto ATM operators' registrations, including an A$5,000 limit on cash deposits and withdrawals per customer transaction, alongside mandatory scam warnings, enhanced customer due diligence and stronger transaction monitoring. It is a condition on the registration, not a change to the Act. Stated as of July 2026 - verify before relying.

02 Did AUSTRAC ban crypto ATMs?

No. AUSTRAC did not ban the machines. It attached operating conditions to the registrations behind them and, separately, refused to renew at least one operator's registration - Harro's Empires, in May 2025. The channel remains legal for operators that hold a current, compliant registration.

03 Do the conditions apply to crypto businesses that are not ATM operators?

The condition set was written for crypto ATMs. In the same June 2025 notice AUSTRAC said it expects other cash-accepting virtual asset businesses to consider similar limits - a stated supervisory expectation, not a fixed rule. Any cash-accepting operator should treat it as a live risk. Stated as of July 2026.

04 If I buy a crypto ATM operator, do the conditions come with it?

Yes. Conditions are a term of the registration, and there is no AUSTRAC change-of-control approval that re-issues a registration clean. Whoever controls the entity inherits the conditions and the cost of meeting them. Since the VASP register is public, you can read them on the target's entry before you sign.

Tell us what you need

Buying a conditioned AUSTRAC registration?

Tell us what you want the entity to do and who its controllers will be. We read the target's register entry, price the condition set as an operating constraint, and sequence the 14-day notifications and the three-year renewal around the deal. One Australian dual-registered entity is available now. Pricing on request.

Editorial note

Editorial disclaimer

Reviewed by Daniel Marsh. Last reviewed: 12 July 2026. This article is general information only, not legal, regulatory, tax, investment or financial advice. The 3 June 2025 crypto ATM conditions, the market figures, the enforcement dates and the public-register status are stated as of July 2026 from austrac.gov.au. AUSTRAC's conditions, expectations and the reform timeline can change; verify the current position on the register and the relevant AUSTRAC notice before relying on any dated claim.