Crypto ATMs increasingly used for scams and money laundering: AUSTRAC

Australia Broadcast Center

2 days ago

Australians are losing millions of dollars each year to scams linked to cryptocurrency ATMs and older people have been the group most caught up in illicit activity through the machines.
Financial crimes agency AUSTRAC has now intervened — introducing sweeping industry-wide controls after uncovering links to scams, money laundering and other illegal activity.
The regulator has also refused to renew one crypto ATM (CATM) operator's registration.
Cryptocurrency ATMs are located across the country — in petrol stations, convenience stores, supermarkets and takeaway shops.
They allow users to convert cash into digital currencies like Bitcoin, which is transferred to a digital wallet. Some machines also let users cash out their cryptocurrency.
With banks under growing pressure to crack down on scams and money laundering, authorities warn crypto ATMs are being exploited by criminals.
Following a three-month analysis of data from nine crypto ATM operators, AUSTRAC has confirmed the machines are being used for scam and fraud-related transactions.
The ABC understands the regulator was able to trace some transactions to scam hotspots in Asia and Europe, as well as groups linked to organised crime.
Crypto ATM operators will now face a $5,000 limit on cash deposits and withdrawals, in a effort to limit the financial fallout of scams.
AUSTRAC will also enforce enhanced customer due diligence requirements, mandatory scam warnings and more robust transaction monitoring obligations on the operators.
The new controls come as fresh data from the Australian Federal Police (AFP) reveals Australians are losing millions of dollars each year to scams involving crypto ATMs.
"These conditions are designed to help protect individuals from scams by deterring criminals from directing them to a crypto ATM, as well as to protect businesses from criminal exploitation," AUSTRAC chief executive Brendan Thomas told ABC News.
"In light of the risks and harms, we consider it absolutely necessary to ensure the sector meets minimum standards and reduces the criminal misuse of crypto ATMs.
"We will continue to monitor the effectiveness of these conditions and adjust them if needed."
As part of the compliance crackdown, AUSTRAC has refused to renew the registration of Harro's Empires, a small South Australian crypto ATM operator.
The company has been ordered to shut down its four machines, after the agency found ongoing risks that its machines could be exploited by criminals.
"This action draws a clear line in the sand and serves as a warning to other digital currency exchange providers that aren't meeting their responsibilities under the Anti-Money Laundering and Counter-Terrorism Financing Act," Mr Thomas said.
Australians lost $3 million to scams involving crypto ATMs in the 12 months to January, according to reports made to the Australian Cyber Security Centre.
Of the 150 reported incidents, the most common scams were investment scams (63), extortion emails (35), and romance scams (24). Most victims were women over 51.
However, total losses are likely to be far higher, as many victims do not report these crimes.
"Australia is certainly a key target, given we have high levels of savings and wealth," AFP assistant commissioner for cyber command Richard Chin told ABC News.
Mr Chin said that once cash is converted into cryptocurrency and sent to a digital wallet, it's nearly impossible to retrieve.
The scammer instructed the man to make several bank withdrawals and deposit the money into crypto ATMs. His funds could not be recovered.
"That money goes into an elaborate web of global money laundering and ultimately ends up back with the criminal organisations orchestrating these scams and running them at an industrial scale around the world."
Australia has the third-highest number of crypto ATMs in the world, behind the United States and Canada — making it the fastest-growing market globally.
In 2019, there were just 23 machines nationwide. Today, there are more than 1,800.
"The speed of the growth has concerned us," Mr Thomas told ABC News.
"We're worried that growth may be based on illicit activity and people being scammed.
"We're not only worried about people being victims of scams, we're also concerned about drug purchases and other money laundering activities occurring through cryptocurrency ATMs."
AUSTRAC estimates around $275 million flows through these machines each year across roughly 150,000 transactions.
The vast majority — around 99 per cent — are cash deposits used to purchase cryptocurrencies, primarily Bitcoin, Tether and Ethereum.
Based on its analysis, AUSTRAC believes one in 10 transactions may be linked to illegitimate activity, including drug trafficking, scams, and organised crime.
"Cryptocurrency as an industry represents a significant global money laundering risk.
"We see eye-watering sums of money moving across borders for drug purchases, and the proceeds are being scammed," Mr Thomas said.
The age profile of crypto ATM users has shocked regulators and closely aligns with the demographic most commonly targeted by international scams.
People over 50 account for nearly 72 per cent of crypto ATM transactions by value.
Those aged between 60 and 70 make up 29 per cent of all transaction value.
These findings are echoed by at least one Melbourne petrol station worker, who spoke to the ABC on condition of anonymity.
He said he typically sees two or three older people each week depositing cash into the on-site cryptocurrency ATM.
Most, he said, are on the phone receiving step-by-step instructions from someone on how to use the machine.
Most scam victims are first contacted online. Last year, Robert (whose name we've changed to protect his privacy) unwittingly became a money mule after applying for a work-from-home job he found online.
"They sent me a contract to sign — passport, driver's licence, bank account details, the lot," he said.
At first, he was asked to perform simple online tasks like writing product reviews. But later, he received instructions to withdraw money deposited by his 'employer' and put it into a crypto ATM.
"She told me to take a photo of the ATM when I got there," Robert recalled.
"Then she sent back photos with instructions on what buttons to press. I'd never used one of those machines before — it took me about half an hour to figure it out."
He was told to open a second account at another bank and over several weeks, he deposited thousands of dollars into a digital wallet through his local crypto ATM. Eventually, his banks flagged the activity.
"They said I might have been involved in something fraudulent. I was worried. I'm not that kind of person."
Robert reported the incident to the ACCC's Scamwatch, which advised him to cancel all forms of ID and cease contact with the scammers.
Crypto ATMs have made international headlines for the wrong reasons.
They've been effectively banned in countries like the United Kingdom and Singapore, and are heavily restricted in others.
In the US, lawmakers are considering new legislation to regulate the industry. Several lawsuits have already been filed, including one by the state of Iowa, which is suing operators Bitcoin Depot and CoinFlip for $US20 million ($31 million) over scam losses.
In Australia, AUSTRAC last year established a dedicated taskforce to investigate the sector and introduced new compliance requirements aimed at stopping misuse.
But Mr Thomas acknowledges that regulation hasn't kept pace with the industry's rapid growth.
He has called for broader regulation of the cryptocurrency sector to support legitimate operators and protect consumers.
"Our taskforce is working to understand the money laundering risks of cryptocurrency in Australia and is collaborating closely with industry to determine the controls we need," he said.
Global players such as CoinFlip, Localcoin, ByteFederal and Bitcoin Depot are competing for market share against local players in Australia's booming crypto ATM market.
Operators charge users commissions of up to 20 per cent per transaction, in addition to other fees.
The industry's peak body, the Digital Economy Council of Australia (DECA), acknowledges some ATMs are being exploited for scams and money laundering.
However, DECA chair Paul Derham argued most customers are legitimate traders simply trying to access digital assets in the face of banking restrictions.
"One of the challenges Australians face is that if they want to buy crypto, sometimes their banks won't let them.
"So they withdraw cash and go to a crypto ATM instead," said Mr Derham, who is also a lawyer representing several global ATM operators.
Mr Derham said while there are different views, broadly speaking the industry does not support transaction limits of $5,000. He said there would be additional compliance costs for businesses.
Mr Derham said customers may also use multiple CATMs to get around the new conditions.
"The industry would prefer to control these thresholds themselves using their own risk based approach — which they are legally required to do anyway.
"For example, if a person is considered low risk and has a long history with a CATM provider, they should have a higher threshold."
Asked whether the business would remain viable if they could no longer be used for scams and money laundering, Mr Derham said: "No-one's been able to crack the code to stop scams. Even Australia's biggest banks haven't been able to completely eliminate the risk.
"The reality is that some scams are being run by highly coordinated international networks — including state-backed actors — who are actively targeting vulnerable people."