AUSTRAC and Crypto: What Every Australian Exchange User Needs to Understand
AUSTRAC is Australia’s anti-money-laundering and counter-terrorism-financing regulator, and it is the regulator most directly involved with cryptocurrency in Australia today. Every Australian crypto exchange is required to be registered with AUSTRAC, and AUSTRAC’s reporting obligations now flow through to crypto users in ways that catch most retail investors by surprise. This guide explains AUSTRAC’s role in the Australian crypto market, what the registration regime actually means for users, the reporting thresholds you need to know, and where AUSTRAC’s powers are heading.
What AUSTRAC is
AUSTRAC is the Australian Transaction Reports and Analysis Centre — the federal agency responsible for collecting financial intelligence and enforcing anti-money-laundering and counter-terrorism-financing laws in Australia. It was established in 1989 and has historically focused on banks, casinos and remittance businesses. Since 2018 it has also had explicit jurisdiction over cryptocurrency exchanges.
The 2018 digital currency exchange registration regime
In April 2018, Australia became one of the first jurisdictions in the world to introduce a dedicated registration regime for cryptocurrency exchanges. Under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (as amended), any business that exchanges digital currency for fiat currency, or fiat for digital currency, on a commercial basis to Australian customers must be registered with AUSTRAC.
Registration is not the same as licensing. AUSTRAC does not assess an exchange’s solvency, internal controls or trading practices. It is exclusively concerned with anti-money-laundering and counter-terrorism-financing compliance. AUSTRAC registration tells you nothing about whether the exchange is well-run; it tells you only that the exchange has agreed to operate within the AML/CTF framework.
What registered exchanges must do
Registered exchanges are required to: implement customer identification procedures (KYC); monitor customer activity for suspicious matters; report threshold transactions (cash transactions of AUD $10,000 or more); report suspicious matters within 24 hours; report international funds-transfer instructions of any amount; and maintain detailed records of all activity for at least seven years.
These obligations are passed through to users in the form of identity verification, restrictions on certain activity, and the data-matching agreement that means AUSTRAC and the ATO share information.
The threshold transaction report
Under the AML/CTF Act, exchanges must report threshold transactions of AUD $10,000 or more in cash. The threshold has historically applied to physical cash transactions, but interpretation around crypto-to-fiat conversions of AUD $10,000+ is now well-established — exchanges file threshold transaction reports for large fiat movements connected to crypto activity.
Threshold transaction reports are routine; they do not necessarily indicate any suspicion of wrongdoing. They are part of the broader financial intelligence infrastructure AUSTRAC uses to identify patterns of concern.
Suspicious matter reports
A suspicious matter report is filed when an exchange has reasonable grounds to suspect that an activity may be connected to money laundering, terrorism financing, tax evasion, fraud or other serious crime. These reports are confidential and the customer is not informed that one has been filed.
The activities that trigger suspicious matter reports include: large round-number transactions inconsistent with the customer’s profile; structured transactions designed to fall below reporting thresholds; transactions linked to known high-risk jurisdictions; transactions involving previously identified high-risk wallets; and any activity inconsistent with the customer’s stated purpose for the account.
The travel rule
Australia has adopted the Financial Action Task Force’s travel rule for cryptocurrency. Under this rule, when crypto is transferred between exchanges, originator and beneficiary information must travel with the transfer. The implementation of the travel rule in Australia is still being worked out at the operational level, but it points towards a future where withdrawals and deposits between exchanges carry meaningful identifying information.
What AUSTRAC registration is not
AUSTRAC registration is not consumer protection. It does not protect customer funds if the exchange fails. It does not impose solvency requirements, capital requirements or fit-and-proper-person tests on exchange operators. It does not require exchanges to segregate customer funds. It is purely an AML/CTF compliance regime.
For consumer protection, the relevant regulator is ASIC, which has been working through the Australian Treasury on a separate licensing regime for crypto asset platforms — one that would impose licensing, solvency and fit-and-proper-person requirements on top of the AUSTRAC AML/CTF framework. As of the time of writing that regime is still in consultation.
Practical implications for Australian users
Three practical points. First, an AUSTRAC-registered exchange is the only legal place for an Australian to buy crypto with AUD on a commercial basis. Using an unregistered platform is using an exchange that is operating outside the Australian regulatory framework. Second, all material activity on a registered exchange is potentially visible to AUSTRAC and, through data-matching, to the ATO. Third, AUSTRAC registration does not protect your funds — that still depends on the exchange’s own custody and solvency practices.
Where AUSTRAC is heading
Two trends. First, more aggressive enforcement of suspicious matter reporting — AUSTRAC has been visibly more active in penalising firms that fail to file timely reports. Second, broader scope — the AUSTRAC remit is expanding through tranche 2 of the AML/CTF Act amendments to cover lawyers, accountants and real estate agents, which will indirectly increase the volume of crypto-related reporting through professional service intermediaries.
Verdict
AUSTRAC is the foundational regulator for Australian crypto, and AUSTRAC registration is the minimum bar an exchange has to clear to operate. Australian users should default to AUSTRAC-registered exchanges, understand that all material activity is potentially reportable, and not confuse AUSTRAC registration with the kind of consumer protection that comes from ASIC licensing or APRA prudential regulation. The latter is what is missing from the Australian crypto landscape and what the dedicated licensing regime under Treasury consultation is intended to provide.
Related guides
- Australian crypto regulation
- The complete guide to cryptocurrency regulation in australia
- The australian defi regulatory landscape
- ASIC and Crypto: The Regulator’s Powers, the AFSL Question and Where It Is Heading
- Crypto-Friendly Banks in Australia: Which Banks Actually Let You Move Money to Exchanges?
- Binance Australia: What Happened, What Still Works and Whether to Use It in 2026
Frequently asked questions
What is AUSTRAC?
AUSTRAC is Australia’s anti-money-laundering and counter-terrorism-financing regulator. Since 2018 it has had specific jurisdiction over cryptocurrency exchanges, which must be registered with AUSTRAC to operate in Australia.
Does AUSTRAC registration protect my crypto funds?
No. AUSTRAC is an AML/CTF regulator, not a consumer-protection regulator. Registration does not impose solvency or custody requirements. It does not protect customer funds if the exchange fails.
What transactions are reported to AUSTRAC?
Cash transactions of AUD $10,000 or more are routinely reported as threshold transaction reports. Suspicious matters are reported within 24 hours. International funds-transfer instructions of any amount are reported.
Does AUSTRAC share data with the ATO?
Yes. AUSTRAC and the ATO have data-matching agreements covering crypto activity on registered Australian exchanges. The ATO receives transaction-level information that it cross-references against tax returns.
Can I use an unregistered crypto exchange in Australia?
An unregistered exchange operating in Australia would be operating outside the AML/CTF framework. Using one carries meaningful regulatory and counterparty risk and should be avoided.
Important Australian disclosure — The information in this article is general and educational only. It does not constitute personal financial product advice and should not be relied on as such. Cryptocurrency products are highly volatile and many crypto exchanges or platforms operating in Australia are not licensed by ASIC. You should consider whether crypto suits your objectives, financial situation and needs before making any decision. Tax treatment varies by individual circumstance — consult a registered tax agent or financial adviser, and refer to the official guidance at ato.gov.au and moneysmart.gov.au.
