Bitaroo: Bitcoin trading, automation and custody in Australia

Bitaroo is an Australian bitcoin-only service with two execution models. Express buys bitcoin directly from Bitaroo at a dealer quote. Trade matches customers through a BTC/AUD order book and adds maker or taker commission. Both sit alongside custodial and self-custody products; the presence of a self-custody Wallet in the app does not make the trading Account self-custodial.[5][29]

The choice between the two recurring-buy screens changes execution and costs. A schedule on Trade creates market orders; the same broad saving habit on Buy uses Bitaroo’s quoted price. Cancelling either schedule requires its own active-order control. A recurring bank payment to Auto Buy details is another instruction, so stopping the exchange schedule alone does not necessarily stop money arriving from the bank.[6][8][7]

Open Trade orders can be cancelled with the X control or modified through the pencil icon beneath the order book; the documented modification dialog changes price or quantity. The reviewed documentation did not establish a numerical maximum for concurrent orders. Keep that distinction separate from the five-key API limit, which counts credentials rather than trades.[10][24]

Illustrative A$5,000 Investor fill: maker A$7.50 (×0.15%); taker A$9.50 (×0.19%), excluding transfers and price impact.[3]

Express advertises no separate buying or selling fee because Bitaroo deals at its own rate. That quote can differ from the order book. Compare the final bitcoin or AUD amount for the intended size, including any cash deposit charge, rather than treating a zero displayed commission as a zero-cost conversion.[5]

Vault fees accrue daily and are collected on unlocking; a quoted annual rate is a storage cost, not a return. Internal locks and unlocks have no separate transfer charge. Unlocking bitcoin deposited directly from an external wallet incurs a miner fee. This matters especially when an inactive trading balance is moved into Vault automatically.[31][2]

AUD comes from an Australian bank account in the customer’s legal name; joint accounts are permitted. Each customer has unique PayID and bank details, so the standard deposit route does not require a reference number. Bitaroo accepts PayID/NPP/Osko and ordinary EFT; it excludes international transfers and RTGS. Using Auto Buy details changes what happens after the deposit arrives.[13][7]

The selected on-chain option is a fee preference, not a guarantee of inclusion in a particular block. Batch also has a dispatch schedule before blockchain confirmation begins. A Lightning send can fail because of route or receiving-capacity constraints; the help page says pending attempts may take 24–48 hours to resolve, with the full sent amount returned if the attempt fails.[15][17]

Since July 2026 Bitaroo asks customers to verify that a source or destination wallet is self-custodial and under their control. Its SHAZAM workflow supports signed messages, an extended public key, a multisig descriptor or a small test transaction. Unverified on-chain withdrawals are held and can be completed or cancelled; Lightning destinations that cannot pass the self-custody checks are not sent. A generic wallet address is therefore insufficient evidence that a transfer will be permitted.[21]

Auto Withdraw sends a configured amount when the available BTC balance reaches a threshold; selecting All is required if the intended amount equals or exceeds the threshold. This can complement recurring buys, but it also creates an independent outgoing-transfer instruction. Review the destination, fee choice and threshold together before leaving it active.[16]

Bitaroo states that customer fiat and bitcoin remain customer property in segregated accounts and will not fund its operations. These are the provider’s public custody representations, not an independent audit or an established insolvency recovery percentage. The inspected material did not identify an insurance policy with a customer claim limit or a government guarantee for the BTC balance.[4]

The dormant-account clause allows BTC to move automatically into Vault after 39 consecutive inactive days, following an email warning. Storage fees then apply. This is more consequential than a login timeout: the asset changes custody product and release process. Vault’s marketing page suggests avoiding dormancy through a transaction at least monthly, but the contractual trigger is 39 days.[2][27]

Vault withdrawal starts with an unlock request. After 48 hours, an email confirmation code becomes available; after confirmation the team publishes a further processing window of up to two business days. This is unsuitable to treat as instant trading liquidity. The dedicated blockchain address helps inspect holdings, but an address balance alone does not demonstrate every legal liability or all company reserves.[30][27]

Wallet self-custody places recovery responsibility on the customer. Its 12-word phrase can restore the wallet on another compatible implementation; Bitaroo says it holds no copy. The app’s Wallet supports on-chain sending and receiving, while Lightning and fiat conversion belong to the Account. Bitcoin must move into that custodial Account before sale. Linking the Wallet for verification also lets Bitaroo see its addresses and public activity.[29]

The account-opening guide accepts individuals aged 16 or older who are Australian citizens or residents, hold an Australian bank account and provide an accepted identity document. Accepted passports or driving licences span a published country list; citizenship from an accepted document country is not, by itself, Australian eligibility. Only one individual account is permitted. Company, trust and SMSF applications are separate, with business structures reviewed case by case.[32]

Bitaroo’s AML policy requires identification and permits additional risk-based documentation. Bank withdrawals must be to the customer’s own-name bank account. Higher deposit limits, API access and a verified self-custody destination are distinct checks; passing ordinary onboarding does not automatically satisfy all three. The reviewed public sources did not establish a universal promised approval time for every complex account.[33][14][24][21]

A status incident and a customer-specific hold are different problems. Include the order or transfer identifier, asset, time and relevant blockchain hash in a support request. Bitaroo’s terms leave customers responsible for checking pending, failed or cancelled transactions. No telephone channel authorised to place emergency trades was established, and a ticket acknowledgement does not confirm that an order was cancelled.[35][2]

Withdrawal restrictions are optional and off until configured. They require 2FA, send change notifications and operate alongside the platform’s own controls, with the tighter restriction governing. A user-imposed 24-hour amount limit is therefore different from the deposit-limit page’s statement that ordinary AUD/BTC withdrawals have no general daily cap. Account reviews and specific product locks can still prevent a withdrawal.[22][14]

The service terms name Bitaroo Pty Ltd, ABN 11 629 701 953. Its AML policy describes Australian AML/CTF obligations. AUSTRAC now publishes a virtual-asset-provider register, but the individual Bitaroo entry was not independently retrievable in this review. An ABN identifies a business; it is not, by itself, permission for a financial product or an assurance of solvency.[2][33][40]

AUSTRAC’s April 2026 announcement explains the transition from digital-currency-exchange terminology to virtual-asset service providers and the expansion of financial-crime oversight. That regime should not be presented as an insurance policy for a trading account. Bitaroo’s own terms say it does not hold a licence to give financial advice. No broader investment-advice permission is asserted here.[40][2]

Bitaroo describes itself as wholly Australian owned and operating since 2020. Its product scope remains Bitcoin rather than an extensive token catalogue. The company page uses a broad community claim without a dated, auditable active-trader figure. No current volume or funded-account measure was established that would justify placing it among the largest global exchanges.[1]

Pay BPAY bill payments and Skippy premium onboarding are retired; historical bill payments remain in Reports.[3][26]

Operator

Bitaroo Pty Ltd

Exchange model

Centralised

Service scope

Australian BTC/AUD order book, Express dealing and related Bitcoin custody services.

Client types

Retail clients; Institutional clients

Pricing publication

Public and quoted pricing

Pricing scope

Public order-book commissions and transfer tariffs; Express conversion at a dealer quote.

Funding scope

Domestic AUD bank transfers; verified eligible Bitcoin on-chain and Lightning transfers.

Custody and asset handling

Trading Account and Vault custodial; Guardian and Wallet have customer-controlled keys.

Client eligibility

Australian citizens or residents meeting identity and bank-account requirements; separate business, trust and SMSF review.

Support

Web tickets and status page; published human response windows can span business days.

Authorisation and registration scope

Australian operator and AML policy established; individual AUSTRAC register entry not independently verified.

Exchange metadata checked 21 Oct 2026Source 1Source 2Source 32Source 3Source 29Source 28Source 34Source 40

Account → Reports offers financial-year statements and separate histories for buys, sells, deposits, withdrawals, card loads, Vault activity and other supported activity. Report Builder combines selected activities into a CSV with chosen columns, date ranges and local time, UTC or both. These records help reconcile transfers against trades; they are not a calculation of an individual’s tax liability. Continuing self-service access after account closure was not established.[26]

API keys require a verified account, a dedicated video review and authenticator-app 2FA; email 2FA is insufficient. Keys are created on the website, not in Express, with at most five active keys. The published review target is two business days. This is account access for software, distinct from the public market-data display.[24]

Read-Only keys cannot trade. Full Access keys can place or cancel orders, but the standard API does not provide withdrawals. Deletion takes effect immediately; changing an access level requires a new key. After a password reset or change, key management pauses for 24 hours while existing keys keep working. Contact support if a compromised key cannot be revoked during that pause. Blocking an account revokes keys and cancels open orders.[25]

No first-party AI decision-making or copy-trading service was established. A third-party trading script granted Full Access can still change market exposure without withdrawing funds. Revoking its key stops future API access; inspect remaining orders and completed fills separately instead of assuming that software disconnection reverses trading activity.[25][10]

Spend converts bitcoin into a digital prepaid Visa balance, with Apple Pay and Google Pay described as supported. The help centre publishes a maximum A$980 load per card and shows the conversion rate before confirmation. Its claim of no load or spending fee does not make the conversion rate equal to the order-book price. A loaded card cannot be reloaded, transferred or redeemed for cash. Existing card balance and transaction records are managed through the card account.[37][38][39]

Bitaroo’s referral guide explicitly says it does not pay monetary referral rewards. A referral link is therefore not evidence of withdrawable cashback, a deposit bonus or trade credit.[36]