Australia requires ID checks for crypto withdrawals

AUSTRAC guidance effective July 1 requires regulated crypto exchanges and virtual asset service providers in Australia to collect and verify payer and payee identities and related transfer data before making transferred virtual assets available. The guidance applies to domestic and international value transfers and sets no minimum amount for the requirement.

The guidance implements the Travel Rule for virtual asset transfers. A value transfer chain begins when a reporting entity accepts a customer’s instruction to move virtual assets. The ordering institution must collect and verify the payer’s identity, obtain the payee’s full name and assemble tracing information about the transfer. Relevant transfer-message data must be passed to other businesses involved in the chain as required by the guidance.

A beneficiary institution that receives funds must check whether incoming information is complete and accurate before making the transferred value available to the recipient. Missing or unclear details can delay availability while institutions resolve or verify the required data.

AUSTRAC specifies that a new value transfer chain starts each time an instruction to transfer value is accepted. Funds received into an account or custodial wallet that are later moved again can trigger fresh Travel Rule obligations. Reporting entities must therefore gather and retain transfer data at the point of instruction for repeat movements.

Transfers involving self-hosted wallets are handled differently. A transfer to a self-hosted wallet is exempt from sending Travel Rule data to another business in the chain, but the ordering institution must still collect and verify payer information, capture payee details and record tracing information. A beneficiary institution receiving funds from a self-hosted wallet must obtain payer and tracing information and, if it does not already hold it, the payee’s full name before making assets available. Businesses must adopt policies to determine whether a wallet is custodial or self-hosted and assess whether a custodial wallet controller is licensed or registered where applicable.

The guidance covers services that accept instructions to transfer virtual assets or make transferred virtual assets available, including custody, crypto-to-crypto exchange and other services linked to the offer or sale of virtual assets connected to Australia. AUSTRAC deferred some AML/CTF obligations for new registrable virtual asset services until July 1, 2026, but the Travel Rule requirements described above are effective from July 1, 2024.

Operationally, reporting entities must integrate wallet classification, transaction monitoring, secure-message handling and record-keeping into live deposit and withdrawal flows. Platforms may add recipient or wallet information fields and extended review steps when they need to classify a destination, resolve missing details or confirm whether a counterparty can receive transfer-message data securely.

Users can continue to hold assets in private self-custody, but transfers that cross the regulated bridge between exchanges and self-hosted wallets are likely to involve identity and tracing questions at the exchange boundary. The guidance requires exchanges and other reporting entities to collect and route the information specified by AUSTRAC before or alongside on-chain settlement.