AUSTRAC Shuts Down Bitcoin ATM Operator as Elderly Australians Lose Millions to Crypto ATM Scams

The Enforcement Action That Exposed a Hidden Crisis

AUSTRAC has banned an Australian bitcoin ATM operator and imposed strict new transaction limits on the sector — exposing a crisis that regulators say is disproportionately destroying the finances of Australians in their 60s and 70s.

The enforcement action, announced by AUSTRAC CEO Brendan Thomas, follows months of surveillance by a dedicated Cryptocurrency Taskforce that found crypto ATMs across Australia are being systematically exploited by scammers targeting older Australians.

The numbers are stark. Of the approximately 150,000 transactions processed through Australia's 1,800-plus crypto ATMs each year, moving an estimated $275 million AUD, the majority involve Australians over 50. The 60 to 70 age group alone accounts for 29 per cent of all transactions by value — and a disproportionate number of those users are scam victims.

What AUSTRAC's Taskforce Found

The findings came after AUSTRAC's Cryptocurrency Taskforce collected transaction data from nine crypto ATM providers across Australia.

What they uncovered was alarming. Australians over 50 account for more than 72 per cent of all crypto ATM transactions by value. Of those, the 60–70 age group is the single largest user cohort — and evidence indicates many are being directed to these machines by scammers, not making voluntary investment decisions.

"The taskforce has uncovered disturbing trends which have confirmed that cryptocurrency ATMs are being used for scam and fraud-related transactions," Thomas said.

"It is a huge concern that people in this demographic are over-represented as customers using cash to purchase cryptocurrency and that a large number of 60- to 70-year-old users are victims of scam activity."

In one documented case, a woman in her 70s deposited over $430,000 AUD into crypto ATMs after falling victim to a combination of romance and investment scams.

The Operator AUSTRAC Shut Down: Harro's Empires

AUSTRAC's most significant enforcement action was the refusal to renew the registration of South Australian operator Harro's Empires, which operates four Bitcoin ATMs across the Greater Adelaide area.

AUSTRAC determined the business was "exhibiting ongoing risks that its crypto ATMs could be exploited" and declined to renew its registration under the Anti-Money Laundering and Counter-Terrorism Financing Act.

"This action draws a clear line in the sand and serves as a warning to other digital currency exchange providers that aren't meeting their responsibilities under the AML/CTF Act," Thomas said.

The shutdown of Harro's Empires marks one of the clearest uses of regulatory power to remove a crypto ATM operator from the market over scam-related risk.

The New Rules: What's Changed for Every Crypto ATM in Australia

Beyond the Harro's Empires shutdown, AUSTRAC imposed a suite of new operating conditions on Australian crypto ATM providers:

• A $5,000 cash transaction limit on deposits and withdrawals
• Enhanced customer due diligence obligations
• Mandatory on-machine scam warnings
• Requirements for more robust transaction monitoring

AUSTRAC also called on all digital currency exchange providers that accept cash — not just ATM operators — to voluntarily adopt the $5,000 limit to reduce their exposure to money laundering and scam activity.

The AFP-led Joint Policing Cybercrime Coordination Centre (JPC3) has developed educational materials now being placed physically near crypto ATMs to warn potential victims before transactions occur.

Why Crypto ATMs Are a Preferred Tool for Scammers

Scammers direct victims to crypto ATMs for three reasons that make them almost impossible to defend against once a victim is under psychological control:

1. Speed. Cash converts to cryptocurrency within minutes — far faster than bank wire transfers that might trigger fraud alerts.
2. Irreversibility. Once a crypto transaction is confirmed, it cannot be recalled. Unlike a bank transfer, there is no reversal mechanism.
3. Bypass of bank safeguards. Deposits to crypto ATMs in cash circumvent standard bank fraud detection systems entirely, since no bank account is involved until the victim withdraws the cash.

The combination creates an almost frictionless pathway for criminals to extract money from victims before family members, bank staff, or authorities can intervene.

Australia's Crypto ATM Explosion

The scale of the problem is partly a product of extraordinary growth. In 2019, just 23 crypto ATMs operated in Australia. By 2022, that number had grown to 60. Today, there are more than 1,800 — a growth rate of more than 15 times in just two years.

Australia now has more registered digital currency exchange providers — over 400 — than the United Kingdom has in total. Only around 40 of those hold an ASIC licence.

Approximately 99 per cent of all crypto ATM transactions are cash deposits used to buy cryptocurrency, mostly Bitcoin, Tether, and Ethereum.

Warning Signs: When to Stop at a Crypto ATM

• You were instructed to use the ATM by someone you met online or over the phone
• You are under time pressure to complete the transaction immediately
• The person directing you has asked you to keep the transaction secret
• You received an unexpected call claiming to be from the ATO, a bank, or law enforcement
• You are being asked to pay a debt, fine, or fee through cryptocurrency
• The wallet address you've been given was provided by someone else
• You have recently been in contact with a romantic or investment partner you haven't met in person

How to Protect Yourself From Crypto ATM Scams

1. No government agency will ever ask you to pay via crypto ATM. This includes the ATO, Centrelink, the AFP, courts, and banks. Full stop.
2. Stop and call someone you trust. Before depositing cash at any crypto ATM, call a family member, a bank, or a friend. Scammers rely on isolation — breaking that isolation is often enough to stop the transaction.
3. Check AUSTRAC's register. Legitimate crypto ATM operators must be registered with AUSTRAC. You can verify registration at the AUSTRAC website before using any machine.
4. Report to Scamwatch immediately. If you suspect you have been directed to a crypto ATM as part of a scam, report at scamwatch.gov.au and contact your bank to stop any further transactions.
5. Report cybercrime via ReportCyber. If funds have been transferred, report immediately to police via cyber.gov.au/report to increase the chance of investigative action.

"Crypto can be a high-risk investment," AUSTRAC CEO Thomas acknowledged, "but I would warn anybody who is asked to use one of these machines to send funds to someone to stop and think twice, as once your money is gone it is almost impossible for authorities to retrieve it."

Sources

• AUSTRAC Media Release — Scams, fraud and other illicit activity: AUSTRAC puts crypto ATM operators on notice
• Financial Newswire — AUSTRAC in crypto clamp down, nixing Bitcoin ATM operator's rego (June 2025)
• Decrypt — AUSTRAC Tightens Grip on Crypto ATMs After Spike in Illicit Activity
• Cryptopolitan — Australia imposes $3,250 limit on crypto ATM transactions
• AUSTRAC — Cryptocurrency ATM Scams (consumer guidance)