Crypto ATMs Face Shutdowns Amid Money Laundering Concerns
On 10 August 2026, Australian and international headlines reported that crypto ATMs are being forced to shut down due to mounting money laundering concerns, highlighting ongoing vulnerabilities in the intersection of physical infrastructure and digital assets (Nine.com.au [22]). In parallel, the Financial Action Task Force (FATF) announced a new decentralized finance (DeFi) regulatory framework, using a 'control or influence' test to determine AML obligations (The Crypto Times [29]).
For Australian compliance officers, fintech founders, and AML/CTF risk teams, these developments signal a tightening global regulatory environment and new operational risks for crypto businesses. The convergence of enforcement actions and evolving standards abroad is likely to shape expectations for domestic controls and reporting.
Crypto ATMs: A Persistent AML Blind Spot
The forced shutdown of crypto ATMs underscores the sector’s ongoing struggle with AML/CTF vulnerabilities. According to Nine.com.au [22], the closures are a direct response to concerns that these machines are being used to facilitate money laundering and other illicit activities. Crypto ATMs, which allow for the purchase and sale of digital assets using cash, have long been flagged by regulators as potential vectors for unmonitored, pseudonymous transactions.
Assessment: The move to shut down crypto ATMs in some jurisdictions is likely to be mirrored in others, especially as regulators around the world coordinate their approaches and share typologies of abuse. Australian compliance teams should be prepared for increased scrutiny of cash-to-crypto flows and may face pressure to enhance transaction monitoring and customer due diligence controls around similar services.
Key Risks Identified
- Cash-based transactions: Crypto ATMs often enable large, unreported cash deposits, making them attractive for illicit actors.
- Limited KYC controls: Some ATM operators have historically operated with minimal or no customer identification requirements.
- Cross-border exposure: Funds moved through ATMs can be rapidly transferred across jurisdictions, complicating tracing and reporting.
FATF’s New DeFi Framework: The ‘Control or Influence’ Test
On 10 August 2026, the FATF unveiled a new regulatory framework for decentralized finance (DeFi), introducing a 'control or influence' test to determine when DeFi projects and operators fall under AML/CTF obligations (The Crypto Times [29]).
The FATF’s approach pivots away from purely technical definitions of decentralization, instead focusing on whether a person or entity has sufficient control or influence over a protocol to be considered a Virtual Asset Service Provider (VASP) under AML rules. This includes the ability to set or change parameters, profit from fees, or otherwise direct the operation of a DeFi platform.
Assessment: This new standard is likely to have significant implications for Australian crypto businesses and fintechs leveraging DeFi protocols, as it lowers the threshold for regulatory responsibility. Even partial or indirect influence over a protocol could trigger AML/CTF obligations, including customer due diligence, suspicious matter reporting, and record-keeping.
What the 'Control or Influence' Test Means in Practice
- Developers who retain admin keys or can alter smart contract parameters may now be classified as VASPs.
- Entities earning revenue from platform fees could be deemed to have sufficient influence for AML purposes.
- Decentralized governance is not a safe harbor if a core team or founders retain significant practical control.
This approach aligns with the FATF’s risk-based philosophy and is expected to inform future guidance from AUSTRAC and other domestic regulators.
Global Enforcement and Regulatory Convergence
These developments are not occurring in isolation. The international trend is toward greater convergence of enforcement actions and regulatory standards in the crypto sector. UK authorities, for example, have flagged suspicious crypto investment activity and identity theft scams as growing threats (TradingView [18], WSFA [7], thestreet.com [60]).
Assessment: As international standards tighten, Australian crypto operators and compliance teams should anticipate increased information sharing and cross-border enforcement. The global crackdown on crypto-related AML risks is likely to lead to more harmonized regulatory expectations, including for entities operating in Australia but serving international clients.
Implications for Australian Compliance and Risk Teams
For Australian compliance officers and fintech leaders, these developments highlight several immediate priorities:
- Review exposure to crypto ATMs: Assess whether your business partners with or services ATM operators, and ensure robust KYC and AML controls are in place.
- Evaluate DeFi involvement: Determine if your organization or clients could be deemed to have control or influence over DeFi protocols under the new FATF test.
- Prepare for regulatory engagement: Expect AUSTRAC and other regulators to reference the FATF’s framework in future guidance and enforcement.
- Enhance transaction monitoring: Update typology libraries to account for new risks associated with cash-to-crypto and decentralized finance channels.
- Stay alert for typology shifts: As enforcement increases, illicit actors may migrate to less-regulated platforms or jurisdictions, requiring proactive risk assessments.
Conclusion: A New Era of Crypto AML Enforcement
The forced shutdown of crypto ATMs and the FATF’s new DeFi framework represent a significant tightening of the global AML perimeter around digital assets. For Australian compliance and risk teams, the message is clear: regulatory expectations are rising, and operational blind spots—whether in physical crypto infrastructure or decentralized protocols—are under increasing scrutiny. Proactive risk assessment and controls will be critical to staying ahead of both regulatory changes and evolving illicit finance threats.
This article was prepared by Valitros Intelligence, our automated news desk, from the public reporting linked above. It is general information, not legal or compliance advice.