Stopping the $1.3 Billion Fraud Crisis — At Every Layer

Bitcoin ATMs let people convert cash to crypto directly — no exchange accounts, no custodial middlemen, bearer instrument to bearer instrument. That simplicity is worth protecting.

Scammers exploit irreversible transactions — we understand why regulators pay attention. But millions of robocalls and fraud call centres operating for under $100 show the real crisis starts upstream. Here's how we stop it at every level.

The Crisis in Numbers

Fraud losses are accelerating. The data reveals where the failure actually lies.

$1.3B

Total Scam Losses — Australia (2023)

+18% YoY

ACCC Scamwatch Annual Report 2023

$120M

Losses from over 65 year olds

Scamwatch / ACCC crypto reports

3.6M

Australians Affected by Card Fraud Annually

1 in 5 cardholders

ABA Consumer Survey 2023

$650

Median Loss per Scam Victim

Highest of any contact method

ACCC Consumer Sentinel Report

The Truth About Fraud

Every Scam Starts With a Phone Call.

Not a Bitcoin ATM. Scammers originate fraud through unregulated VoIP services and spoofed caller ID — then direct victims to cash out through any available payment method. The ATM is the last step, not the first.

Anatomy of a Scam: Follow the Chain

We strictly regulate the EXIT door but leave the FRONT DOOR wide open.

Step 1

Origination

Scammer purchases VoIP service for ~$100, easily bypassing weak identity checks. Fake name, hotel address, prepaid card — all accepted without meaningful scrutiny.

Ineffective KYC
Step 2

Transmission

Call enters Australian telecom network. STIR/SHAKEN attestation fails — caller ID spoofing is still trivially easy, allowing scammers to appear as the ATO, AFP, or Centrelink.

STIR/SHAKEN Failing
Step 3

The Hook

Victim receives spoofed call appearing to be from the ATO, Services Australia, or AFP. "You owe $5,000 in back taxes or face immediate arrest."

No Content Inspection
Step 4

Bank Withdrawal

Victim withdraws cash from their Australian bank. Banks may flag the transaction but rarely intervene — they are monitors, not guardians.

Monitors, Not Guardians
Step 5

Payment Exit

Cash is inserted at a Bitcoin ATM, wired, or converted to gift cards. This is the ONLY step facing proposed restrictions.

Heavily Regulated

Restricting Step 5 doesn't stop Step 1.

Banning Bitcoin ATMs does nothing to address the VoIP origination, spoofed caller ID, or the social engineering that drives victims to withdraw cash in the first place. The fraud pipeline continues through gift cards and bank wires.

The Regulatory Asymmetry

A side-by-side comparison of how we regulate the tools that enable fraud versus the tools that are blamed for it.

The Front Door: Telco & VoIP Providers

How scammers reach their victims

  • No AML program required; KYC is superficial and easily bypassed
  • No SAR (Suspicious Activity Report) filing obligations
  • No AUSTRAC registration required for basic services
  • No state or territory licensing needed
  • ~$100 setup cost, minimal effective identity screening
  • $0 annual compliance cost for fraud enablement
  • Caller ID spoofing trivially enabled by default

The Exit Door: Bitcoin ATMs

Where regulation is concentrated

  • Full AML/KYC program mandatory under AUSTRAC
  • SMR (Suspicious Matter Reports) required by law
  • AUSTRAC registered as a Digital Currency Exchange
  • State-level licensing and compliance obligations
  • Photo ID + facial verification technology
  • Real-time transaction monitoring and blocking
  • $500K–$2M+ annual compliance cost
Requirement Telco / VoIP Providers Bitcoin ATMs (ByteFederal)
AML Program Not required Mandatory (AUSTRAC)
Suspicious Matter Reports Not required Required by law
AUSTRAC Registration Not required Mandatory (DCE)
Identity Verification Minimal / bypassed Photo ID + facial biometrics
Annual Compliance Cost ~$0 $500K–$2M+
Caller ID / Transaction Fraud Easily exploited Monitored and blocked

Bitcoin ATM operators spend 5,000x more on compliance than VoIP providers — yet VoIP is where every scam begins.

Follow the Money

When you look at actual fraud losses by payment method, Bitcoin ATMs are a fraction of the total.

Fraud Losses by Payment Method — Australia

Bank Transfer Fraud $2.74B
Investment Scams (online) $1.3B
Credit & Debit Card Fraud $677M
Gift Card / Voucher Fraud $63M
Bitcoin ATMs $23M

Only 0.48% of total scams reported

98.8%

Legitimate

of all crypto ATM transactions in Australia are lawful and serve genuine financial needs

The source of fraud is unregulated telecommunications. The exit point is heavily regulated crypto infrastructure. Restricting the exit doesn't stop the scam — it just redirects victims to gift cards and bank wires.

Credit & Debit Card Scams

Credit Card Fraud: The Silent Epidemic

Card fraud dwarfs Bitcoin ATM losses yet receives a fraction of the regulatory scrutiny. Unlike crypto transactions — which are traceable on a public blockchain — card fraud is often untraceable once funds are withdrawn as cash.

$677M

Card fraud losses reported in Australia

Widely under-reported

AFCA / ABA 2023

3.6M

Australians affected by card fraud annually

1 in 5 cardholders

ABA Consumer Survey 2023

$187

Average loss per card fraud incident

Growing year on year

ACCC Scamwatch 2023

29x

Card fraud losses vs Bitcoin ATM losses

Yet faces less scrutiny

AFCA / Scamwatch comparison

Card-Not-Present Fraud

Online & Remote Transactions

The dominant form of card fraud in Australia. Stolen card details are used to make online purchases or phone-based transactions where the physical card is not required. Largely enabled by data breaches and phishing.

Accounts for ~85% of all card fraud in Australia

Phishing & Smishing

Fake Bank & ATO Messages

SMS or email messages impersonating Commonwealth Bank, ANZ, Westpac, NAB, or the ATO trick victims into entering card details on fake websites. Over 74,000 phishing reports lodged with Scamwatch in 2023.

74,000+ phishing reports to Scamwatch in 2023

Card Skimming

Physical ATM & EFTPOS Devices

Devices secretly attached to ATMs, petrol stations, and EFTPOS terminals capture card data and PINs. Despite chip-and-PIN technology, skimming remains a significant threat, particularly at unmonitored standalone machines.

Traditional ATMs are prime skimming targets

Authorised Push Payment

Scammer-Directed Card Payments

Victim is socially engineered into making a card payment directly to a scammer — often through fake investment platforms, fake rental listings, or romance scams that accept card payments as the initial deposit.

Scams Prevention Framework Act now covers this

Identity Takeover

New Cards via Stolen Identity

Fraudsters use stolen personal data — TFNs, Medicare numbers, driver's licence — to apply for new credit cards in the victim's name. Often discovered only when the victim's credit report is checked months later.

Contact IDCARE 1800 595 160 immediately

Data Breach Exploitation

Stolen Card Data from Breaches

Large-scale data breaches — such as the Optus and Medibank incidents — exposed millions of Australians' personal details. This data fuels card fraud for years afterward as it circulates on dark web marketplaces.

Optus + Medibank breaches: 9.8M+ Australians affected

Key Distinction

Unlike Bitcoin ATM transactions — which are permanently recorded on a public, auditable blockchain and require AUSTRAC-compliant identity verification — credit card fraud proceeds are often untraceable and unrecoverable once converted to cash or moved offshore. Yet Bitcoin ATMs face significantly more regulatory pressure than the card payment system that enables 29x more fraud.

Solutions That Actually Work

Pipeline solutions for a pipeline problem. Every intervention point strengthens consumer protection without removing legitimate financial access.

Solution 01

ACMA Caller ID Verification Mandate

Mandate that all Australian telcos and VoIP providers implement full STIR/SHAKEN attestation with real-time call blocking for unauthenticated spoofed numbers. Close the origination gap.

52B+

Scam calls blocked globally where implemented

Solution 02

AUSTRAC VoIP Registration

Extend AUSTRAC registration obligations to VoIP providers operating in Australia. Require AML programs, SMR filing, and meaningful identity verification at point of account creation.

$0

Current annual AML compliance cost for VoIP operators

Solution 03

Bank Intervention at Step 4

Require Australian banks to implement active scam intervention protocols. Trained staff should flag and pause withdrawals where scam patterns are detected, not just monitor them.

67%

Of victims who said their bank could have intervened

Solution 04

Scamwatch Integration at ATM

ByteFederal Australia already integrates Scamwatch advisory data. Real-time warnings are displayed at the ATM when transactions match known scam patterns identified by the ACCC.

84%

Scam prevention rate with proactive customer outreach

Solution 05

Mandatory Scam Awareness at ATM

Every ByteFederal Australia ATM displays prominent fraud warnings. Customers sending to new addresses are shown full-screen scam awareness prompts before confirming transactions.

100%

ATMs display mandated ACCC scam warnings

Solution 06

Sector-Wide Data Sharing

Establish an Australian crypto ATM industry database, jointly reported to the ACCC and AUSTRAC, enabling real-time blacklisting of wallet addresses and transaction patterns linked to known fraud operations.

4,700+

Scam reports to ACCC that could seed the database

Fraud is a pipeline problem — it requires a pipeline solution.

No single layer can stop fraud alone. By strengthening every intervention point, we protect consumers without removing the financial tools they depend on.

ByteFederal Australia's Five-Layer Defence

While regulators debate upstream solutions, we're protecting customers right now.

KYC & Identity Verification

Government-issued photo ID verification with liveness detection for every transaction. No anonymous usage permitted.

Safety Team Monitoring

Safety Team and support team review transactions for signs of duress, coaching or phone-guided behaviour.

Mandatory Kiosk Warnings

Age-sensitive, on-screen scam education displayed before every transaction. Customers over 60 see enhanced warnings about common government impersonation scams.

Anti-Fraud Terms of Service

Terms explicitly prohibit coerced transactions. Customers must affirmatively confirm they are not being directed by a third party.

Proactive Outreach to 65+ Customers

Through proactive outreach to customers aged 65+, ByteFederal Australia stops the majority of potential fraud before funds are sent.

Australian Crisis Contacts & Resources

If you believe you are being scammed or have already sent money, contact these organisations immediately. Crypto transactions cannot be reversed — act now.

Scam Reporting

Scamwatch — ACCC

Australia's national scam reporting hub. Report scams, access real-time alerts, and get recovery advice.

scamwatch.gov.au

www.scamwatch.gov.au

Report online 24/7

Cybercrime

ACSC — ReportCyber

Report cyber-enabled fraud, hacking, identity theft. The Australian Cyber Security Centre provides free recovery guidance.

1300 CYBER1

www.cyber.gov.au/report

Mon–Fri 8AM–6PM AEST

Identity Theft

IDCARE

Australia and New Zealand's national identity and cyber support service. Free specialist case managers for identity recovery.

1800 595 160

www.idcare.org

Mon–Fri 8AM–5PM AEST

Police Report

AFP / State Police

File an official police report for fraud. Creates a legal record and may assist with recovery efforts and prosecutions.

000 (Emergency)

www.afp.gov.au/crimes/fraud

000 available 24/7

Financial Complaints

AFCA — Your Bank

Call the fraud number on the back of your bank card immediately. AFCA handles disputes if your bank fails to act on a fraud claim.

Back of card — NOW

www.afca.org.au

Act within hours

Mental Health Support

Lifeline & Beyond Blue

Scams cause real trauma and financial distress. You are not alone — free, confidential support is available 24/7.

13 11 14

www.beyondblue.org.au

24/7 available

Financial Guidance

ASIC MoneySmart

Free financial guidance from Australia's corporate regulator. Covers investment scams, crypto risks, and how to recover from financial fraud.

moneysmart.gov.au

www.moneysmart.gov.au

Free online resource

Consumer Protection

ACCC

The Australian Competition and Consumer Commission enforces consumer protection laws and coordinates national scam prevention through Scamwatch.

1300 302 502

www.accc.gov.au

Mon–Fri 9AM–5PM AEST

Stop the Signal. Stop the Theft.

If someone is asking you to use a Bitcoin ATM to pay a fine, fee, or tax debt — stop immediately. It is a scam. Contact our team or report it to Scamwatch right now.