AUSTRAC registration is the legal baseline for any platform selling crypto to Australians. Without it, a digital currency exchange (DCE) cannot lawfully operate in this country. Most investors know this in principle, but few think through what actually happens when AUSTRAC pulls that registration. The process is more abrupt than many expect, and the protections for retail customers are thinner than they should be.
Why AUSTRAC can cancel a registration
Under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (AML/CTF Act), AUSTRAC's Chief Executive Officer has the power to cancel or suspend a DCE's registration for several reasons. These include failing to maintain adequate AML/CTF programs, not reporting suspicious matters on time, poor customer identification practices, and providing false or misleading information during the registration process.
AUSTRAC can also act if a business or its key personnel are no longer considered fit and proper. This is a broad discretion. A conviction for a relevant offence, a finding of serious misconduct, or simply a pattern of non-compliance can all qualify. The regulator is not required to wait for a criminal prosecution before moving. An administrative cancellation can happen faster and with a lower evidentiary threshold.
In practice, AUSTRAC typically sends a notice of intention to cancel before taking final action, giving the exchange an opportunity to respond. But this window is short, often as little as 28 days, and if the regulator has already formed the view that the business poses a money-laundering or terrorism-financing risk, it can impose an interim suspension immediately while the process plays out.
What happens to your funds
Here is the uncomfortable reality: AUSTRAC deregistration does not automatically freeze your funds or trigger a compensation scheme. Australia has no equivalent of the Financial Claims Scheme for crypto assets. If a platform loses its registration and then enters administration or insolvency, retail customers join the queue of unsecured creditors.
Several factors compound this risk. Many exchanges hold customer crypto in commingled wallets, meaning your coins are pooled with other users' assets rather than held in segregated accounts. If the exchange collapses before you can withdraw, untangling your specific holdings from the general pool is legally complicated and practically slow. Administrators dealing with crypto insolvencies have repeatedly found that the on-chain record does not neatly map to customer balances in the exchange's internal ledger.
The better-run platforms, including several of the major AUSTRAC-registered Australian exchanges, do maintain segregated cold storage for customer assets. But there is no regulatory requirement to do so under current law. Australia's digital asset platform reforms are expected to introduce stronger custody obligations, but those rules are not yet fully in force. For a closer look at how those upcoming obligations are taking shape, the details on crypto exchange licensing in Australia are worth reading before you place significant funds anywhere.
The withdrawal window: what to do immediately
If you see credible reporting that a platform is under AUSTRAC scrutiny or facing a show-cause notice, time matters. Here is a practical sequence:
- Withdraw to a self-custody wallet. Move your crypto off the exchange to a hardware or software wallet that you control. Do not wait to see how the situation resolves.
- Withdraw AUD to your bank account. Clear any fiat balances first. These are often more liquid to recover than crypto in an insolvency.
- Download your transaction history. Export a full CSV of your trading history, deposits, and withdrawals. If the platform goes dark, you will need this for ATO reporting and any future creditor claim.
- Note the date and AUD value. For CGT purposes, forced withdrawals and insolvency events have specific tax treatment. Keep a record of the market value on the day you withdraw.
If the platform has already suspended withdrawals before you act, your options narrow considerably. You may need to lodge a proof of debt with any appointed administrator and wait, potentially for years, for a distribution. Creditor recovery rates in crypto exchange insolvencies have historically been low.
How to assess the risk before it becomes a problem
Checking the AUSTRAC reporting entities roll takes about 30 seconds. Any registered DCE will appear there with its current status. Make a habit of checking before depositing large sums, particularly on platforms you have not used before.
Beyond the register, look for platforms that publish regular proof-of-reserves audits. These are not mandatory in Australia yet, but several reputable exchanges publish them voluntarily. A platform with transparent on-chain reserves and a track record of AML/CTF compliance is materially lower-risk than one that operates quietly with minimal public disclosure.
The broader Australian regulatory reforms moving through Treasury are also relevant here. The proposed digital asset platform licensing framework is designed to impose minimum standards around custody, capital adequacy, and governance. Once those rules are finalised and in force, AUSTRAC deregistration will likely be a more severe event because it will simultaneously trigger consequences under the new licensing regime as well. For a full overview of how those reforms are progressing, the 2026 guide to Australia's digital asset platform reforms covers the timeline and what investors can expect.
The ATO angle
A platform being deregistered or collapsing does not make your tax obligations disappear. The ATO treats the loss of crypto assets through an exchange insolvency as a capital loss event, but the timing and calculation of that loss depend on whether the assets are genuinely lost or merely frozen while an administration is ongoing.
If an administrator later distributes some assets back to you, that distribution is a separate CGT event. Keeping detailed records throughout the process is not optional. The ATO's data-matching program will have records of your deposits and the exchange's transaction data, even if the platform itself no longer exists.
Given how quickly a deregistration situation can escalate, good record-keeping is arguably the single most important habit an Australian crypto investor can build. It protects you in an insolvency, keeps you compliant with the ATO, and gives you the paper trail you need if you ever need to lodge a creditor claim.
The bigger picture
AUSTRAC deregistration is a low-probability but high-impact event. Most registered Australian exchanges operate compliantly and will never face this scenario. But the lack of a consumer compensation backstop means the downside for customers is severe when it does happen. The practical takeaways are straightforward: use exchanges that are verifiably registered, diversify across platforms if you hold large amounts, and maintain self-custody of any holdings you cannot afford to lose access to.
Regulatory risk in Australian crypto is real and evolving. Understanding what the rules actually require of platforms, and what happens when those requirements are not met, is one of the more useful things an investor in this space can do.