AUSTRAC and Crypto in 2026: DCE Oversight, Enforcement, and What It Means

What it is

The Australian Transaction Reports and Analysis Centre (AUSTRAC) is Australia’s financial intelligence unit and anti-money laundering and counter-terrorism financing (AML/CTF) regulator. Established in 1989, it operates under the AML/CTF Act, with a mandate to detect, deter, and disrupt financial crime. Since 2018, AUSTRAC has required Digital Currency Exchange (DCE) providers to register and comply with AML/CTF obligations, making it one of the earlier adopters of crypto-specific oversight.

Crypto framework and stance

AUSTRAC’s crypto framework rests on the AML/CTF Act, which was amended in 2017 to bring DCEs into the regulatory perimeter. From 3 April 2018, any entity exchanging fiat and digital currencies, or digital currencies for other digital currencies, must enroll on the DCE Register and meet AML/CTF program, customer identification, suspicious matter reporting, and record-keeping requirements. AUSTRAC expects DCEs to implement the travel rule—sharing originator and beneficiary information for transactions over AUD 1,000—consistent with FATF standards. In 2026, Australia is advancing Tranche 2 reforms, which will extend these obligations to a broader range of crypto services, including custody providers and NFT marketplaces, signalling a stricter, more comprehensive approach.

Notable actions

AUSTRAC’s enforcement track record demonstrates its willingness to penalise non-compliant crypto operators. The most prominent action involved the cancellation of Binance Australia Derivatives’ Australian Financial Services Licence in 2023, after concerns over inadequate AML controls. While the AFSL fall is under ASIC’s remit, AUSTRAC’s parallel investigation highlighted systemic compliance failures. Multiple DCE registrations have been suspended or refused for failing to meet AML programme and reporting standards. AUSTRAC also probed FTX Australia, scrutinising its transaction monitoring and customer due diligence processes. Its travel rule guidance, issued in 2022, clarified expectations around beneficiary information for crypto transfers, warning that non-compliance would draw enforcement action. These cases underscore AUSTRAC’s readiness to police the sector severely.

Key figures

Brendan Thomas, AUSTRAC’s CEO since early 2024, leads the agency’s push to tighten crypto oversight. His tenure has focused on expanding enforcement capacity and collaborating with international partners like the SEC and FCA to track cross-border crypto crime. Thomas has publicly stressed that registration is “not a passive badge” and that DCEs must proactively uplift their AML systems or face consequences.

What it means for users and builders

For crypto businesses operating in or from Australia, AUSTRAC registration is mandatory, not optional. Failure to register attracts civil penalties of up to AUD 555,000 for individuals and AUD 2.22 million for corporations, alongside potential criminal sanctions. Registered DCEs must maintain robust AML/CTF programmes, identify and verify customers, report suspicious matters, and comply with travel rule requirements. For users, this means Australian exchanges generally have higher KYC standards, though it also legitimises the on-ramp. The looming Tranche 2 reforms will capture a wider array of crypto services, so custody providers, DeFi protocols with Australian nexus, and NFT platforms should prepare for registration and compliance duties. Builders who ignore these rules risk enforcement and market exclusion.

Outlook

AUSTRAC will likely intensify its supervisory posture through 2026 and beyond. The Tranche 2 legislative push, coupled with high-profile enforcement precedents, signals a zero-tolerance stance on non-compliance. Expect more on-site inspections, travel rule audits, and cross-agency co-operation. For the crypto sector, the path to operating in Australia runs through rigorous AML/CTF accountability, making compliance infrastructure a prerequisite for market entry.

DeFi Intel publishes editorial research, not financial advice. Do your own research and consult a licensed advisor for your situation.

Frequently asked questions

Does AUSTRAC regulate crypto?

Yes. Under the AML/CTF Act, AUSTRAC requires Digital Currency Exchange providers to register and comply with AML/CTF obligations, including customer due diligence, suspicious matter reporting, and travel rule adherence.

Is Bitcoin a security according to AUSTRAC?

AUSTRAC does not classify assets as securities; that falls to ASIC. However, any platform exchanging Bitcoin or other digital currencies must register as a DCE if it operates in Australia, regardless of the asset’s securities status.

What crypto cases has AUSTRAC brought?

AUSTRAC has suspended or refused multiple DCE registrations for non-compliance, investigated FTX Australia, and contributed to the enforcement actions that led to the cancellation of Binance Australia Derivatives’ licence in 2023. It has also issued travel rule guidance with explicit warnings.