Risk Radar

Risk Monitor / high

AUSTRAC Removes 45 Remittance and VASP Registrations: What Australia’s AML Crackdown Means

AUSTRAC says it cancelled, suspended or refused renewal of 45 remittance and virtual-asset service provider registrations over the past year, citing inactivity, insolvency, registration failures and ML/TF risk.

September 9, 2026Last updated 10:30 UTC2 min read

Australia’s financial-intelligence regulator has disclosed a broad cleanup of its remittance and virtual-asset service provider registers.

AUSTRAC says it cancelled, suspended or refused renewal of 45 registrations during the past year.

The affected population spans remittance and VASP businesses, so the figure should not be reported as “45 crypto exchanges banned.”

Why AUSTRAC removed registrations

The regulator listed multiple reasons, including businesses that lacked operational capacity, were dormant or inactive, had not provided designated services for extended periods, were insolvent, held the wrong registration, failed to notify AUSTRAC of material changes or presented significant money-laundering or terrorism-financing risk.

These are very different failure modes. A dormant business and a business presenting significant ML/TF risk should not be treated as equivalent enforcement cases.

Registration vs licence

AUSTRAC registration is part of Australia’s AML/CTF perimeter. It is not the same as an Australian Financial Services licence.

This matters because Australian digital-asset firms can face separate obligations under AUSTRAC registration, ASIC licensing and future digital-asset framework requirements.

Why the action matters to exchanges

For a crypto exchange or VASP, loss or suspension of registration can create direct market-access risk.

Potential effects include service restrictions, banking-partner pressure, customer migration, mandatory remediation and enforcement referral.

AUSTRAC also says people behind some businesses were referred to law enforcement.

Insolvency is part of registration risk

One notable reason AUSTRAC cited is insolvency.

That connects operational viability with AML registration status. A business that cannot demonstrate ongoing operating capacity may not remain a viable registered VASP simply because it once obtained registration.

Broader Australian tightening

The AUSTRAC disclosure arrives while ASIC is separately moving digital-asset businesses toward a September 30 licensing transition deadline.

Together, the two frameworks reinforce that registration, licensing and actual operating capability are separate compliance requirements.

Evidence Status

Confirmed / Official Regulator

  • 45 registrations affected.
  • Actions included cancellation, suspension and refused renewal.
  • Population includes remittance and VASP businesses.
  • Reasons include inactivity, insolvency, incorrect registration and significant ML/TF risk.
  • Some individuals were referred to law enforcement.

Developing

  • Full business-by-business list.
  • Customer impact at each VASP.
  • Follow-on enforcement.
  • Any related criminal proceedings.

Risk Assessment

High regulatory / market-access significance.

What to Watch Next

AUSTRAC register changes, named enforcement actions, exchange notices, banking restrictions, law-enforcement referrals and coordination with ASIC licensing.

FAQ

Did Australia ban 45 crypto exchanges?

No.

What kinds of actions did AUSTRAC take?

Cancellation, suspension and refusal to renew registrations.

Why were registrations removed?

Reasons included inactivity, insolvency, registration defects and significant ML/TF risk.

Is AUSTRAC registration the same as an AFSL?

No.

Can a VASP lose registration without a hack?

Yes.

Why is this High risk?

Because registration status directly affects lawful market access and service continuity.