Why Choose Australia for Crypto Licensing?
Australia combines AUSTRAC registration with a full financial-services licence, the Australian Financial Services Licence, and a legislated digital-asset platform regime. It has comprehensive tax treaties with 47 jurisdictions,[44] operates under English common law, and has a regulator that publishes detailed guidance.
Two stablecoins, AUDM and AUDF, are named in ASIC’s stablecoin distribution exemption, and ASIC’s later class relief covers distributors of other stablecoins that meet its eligibility conditions.
AFSL Credibility Compounds in Institutional Sales Cycles
The Australian Financial Services Licence sits in the same regulatory tier as the Singapore MAS Major Payment Institution licence and the Hong Kong SFC VATP licence in the eyes of global institutional counterparties. Two responsible managers, full Chapter 7 conduct obligations, statutory breach reporting under section 912DAA, and AFCA membership combine into a credential that materially shortens institutional due diligence for the next round of B2B counterparty conversations.
For operators selling to family offices, super funds, or international asset managers, the AFSL is the regulatory door-opener that AUSTRAC registration alone is not.
Statutory DAP Regime Replaces Regulatory Improvisation
The Corporations Amendment (Digital Assets Framework) Act 2026 received Royal Assent on and commences , the day after the 12 months beginning on the day of assent, as its commencement table records (ASIC’s pages give 9 April 2027).[1][42][43] The Act brings digital asset platforms and tokenised custody platforms into the existing AFSL framework on a “same risk, same regulation” basis, rather than creating a separate parallel regime.
For operators planning a multi-year build, the platform obligations sit in primary legislation, with ASIC setting detailed standards by legislative instrument.[42]
AUD Stablecoin and Tokenised RWA Precedents
ASIC Corporations (Stablecoin Distribution Exemption) Instrument 2025/631 was made on (commenced ) and as made named a single stablecoin, AUDM, with Catena Digital Pty Ltd as its Named Stablecoin Issuer. AUDF, with Forte Securities Australia Pty Limited as its Named Stablecoin Issuer, was added by ASIC Corporations (Amendment) Instrument 2025/679, registered and commencing , so from that date the Instrument names two stablecoins; it sunsets .[2]
ASIC Corporations (Stablecoin and Wrapped Token Relief) Instrument 2025/867, registered , separately extends distributor relief to eligible stablecoins that meet its issuer-licensing, redemption, reserve, and reporting conditions.[2]
Project Acacia is the Reserve Bank of Australia and Digital Finance Cooperative Research Centre joint research programme on tokenised asset settlement. Industry participants were selected on ; testing covered 24 use cases (19 pilot + 5 proof-of-concept) across Hedera, Redbelly Network, R3 Corda, Canvas Connect, and EVM-compatible networks; the final report was published by the RBA and DFCRC on .[3] In practice, this means an AUD stablecoin issuer arriving in Australia in 2026 lands into an ecosystem with named-stablecoin precedents, ASIC relief mechanisms via legislative instrument, and direct regulator engagement on tokenised settlement infrastructure: a depth of operational context that emerging jurisdictions cannot match.
A 47-Jurisdiction Tax-Treaty Network Reduces Withholding Friction
Treasury lists comprehensive income tax treaties with 47 jurisdictions, including the US, UK, Germany, France, Japan, Singapore, South Korea, India, China, and New Zealand; Hong Kong is not among them.[44] For an Australian-domiciled crypto operator paying or receiving interest, royalties, or dividends across borders, a treaty can reduce the standard 10 percent interest, 30 percent royalty, and 30 percent unfranked dividend withholding rates, by an amount that depends on the treaty and the recipient.[4]
Compared with offshore jurisdictions that have few or no comprehensive tax treaties, this coverage reduces withholding leakage on cross-border payments.
Regulatory Framework
Australia regulates crypto businesses through two operative regulators and a third statutory regime that commences in . AUSTRAC supervises anti-money-laundering obligations under the AML/CTF Act 2006; ASIC supervises any crypto product that qualifies as a financial product under Chapter 7 of the Corporations Act 2001; and the Digital Asset Platform regime takes effect .
Australia Crypto Licensing Defined
Australian crypto licensing is the combined regulatory authorisation required to operate a digital asset business with a geographical link to Australia. It comprises: AUSTRAC registration under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (Virtual Asset Service Provider registration, with existing Digital Currency Exchange registrations carried over automatically on );[34] an ASIC Australian Financial Services Licence (AFSL) under the Corporations Act 2001 (Cth) where the crypto product is a financial product; and from , a Digital Asset Platform or Tokenised Custody Platform authorisation under the Corporations Amendment (Digital Assets Framework) Act 2026 (Cth). Crypto assets are taxed as CGT assets by the Australian Taxation Office, and supplies of digital currency have been input-taxed, with no GST charged, since .
Dual-Regulator Structure (and the Third Statutory Layer)
AUSTRAC is the Australian Transaction Reports and Analysis Centre, the financial intelligence unit established under the former Financial Transaction Reports Act 1988, continued in existence by section 209 of the AML/CTF Act 2006, and operating the AML/CTF supervisory regime under that Act.[5] AUSTRAC operates the AUSTRAC Online enrolment and registration portal. Its enforcement powers include registration refusal, suspension or cancellation, civil penalty proceedings, and criminal referral. Providing a registrable virtual asset service while unregistered contravenes section 76A of the AML/CTF Act. The base offence under section 76A(3) carries up to two years’ imprisonment, 500 penalty units, or both; specified repeat contraventions carry higher tiers of up to four years’ imprisonment, 1,000 penalty units, or both, and up to seven years’ imprisonment, 2,000 penalty units, or both. Section 76A is also a civil penalty provision under which a court may order a body corporate to pay up to 100,000 penalty units; AUSTRAC may instead issue an infringement notice of 60 penalty units for a body corporate.[37] A Commonwealth penalty unit is AUD 364 for offences committed from .[40]
ASIC is the Australian Securities and Investments Commission, the corporate, markets, financial services, and consumer credit regulator established under the ASIC Act 2001 and operating principally under the Corporations Act 2001.[6] ASIC’s active crypto guidance corpus comprises Information Sheet 225 Digital assets: Financial products and services (updated ), Regulatory Guide 105 AFS licensing: Organisational competence, RG 133 Funds management and custodial services: Holding assets, and RG 166 AFS licensing: Financial requirements.[7] The ASIC eLicensing system was retired and replaced by the ASIC Regulatory Portal for all AFSL applications and variations.
Treasury, the RBA, and the ATO complete the regulatory architecture. Treasury is policy lead on the DAP regime and released the Statement on Developing an Innovative Australian Digital Asset Industry on ,[8] followed by the exposure draft of the Treasury Laws Amendment (Regulating Digital Asset, and Tokenised Custody, Platforms) Bill 2025 on with consultation closing .[9][19] The Reserve Bank of Australia ran Project Acacia Phase 2 (industry participants selected ; final report published ) on tokenised settlement and wholesale CBDC.[3] The ATO administers tax, classifying crypto as a CGT asset under Tax Determination TD 2014/26.[10]
Recent Regulatory Developments
- : Corporations Amendment (Digital Assets Framework) Act 2026 receives Royal Assent, introducing the statutory DAP and TCP regimes with commencement , subject to exemptions and a six-month licensing transition: under section 1732 the amendments are deferred during that period while the responsible person lacks the relevant AFSL authorisation, and an application made during the transition extends the deferral until the day after ASIC decides.[1][42]
- : ASIC issues a class no-action letter that supersedes and extends the 29 October 2025 letter: it sets as the last day to lodge an AFSL application or variation, with additional specified authorised-representative and intermediary-authorisation routes. Australian Market Licence and clearing and settlement facility applicants must notify ASIC and attend a licensing pre-meeting by that date, then apply within 12 months of notification. All routes remain subject to the letter’s eligibility conditions and exclusions.[35][7]
- : The High Court unanimously allows ASIC’s Block Earner appeal in ASIC v Web3 Ventures Pty Ltd [2026] HCA 21. The Earner product is a financial investment facility and a derivative, requiring an AFSL; the penalty appeal is remitted to the Full Federal Court.[33]
- : AML/CTF program, governance, and CDD reforms commenced for existing reporting entities under the AML/CTF Amendment Act 2024; DCE registrations in force immediately before this date carried over automatically into VASP registrations; AML/CTF compliance officer requirement began.[11][34]
- : Project Acacia final report published by the RBA and DFCRC (media release mr-26-13), covering 24 use cases (19 pilot, 5 proof-of-concept) tested across Hedera, Redbelly Network, R3 Corda, Canvas Connect, and EVM-compatible networks.[3]
- : Binance Australia Derivatives ordered to pay AUD 10 million in ASIC v Oztures Trading Pty Ltd [2026] FCA 509 for client misclassification, on top of AUD 13.1 million in client compensation paid in 2023 and the 2023 AFSL surrender.[12]
- : BPS Financial ordered to pay AUD 14 million in ASIC v BPS Financial Pty Ltd (Penalty) [2026] FCA 18 for unlicensed financial services in respect of the Qoin Wallet, treated as a non-cash payment facility.[13]
- : ASIC publishes updated INFO 225 with 18 worked examples of digital asset classification (up from 13), plus a class no-action letter offering interim AFSL relief through conditional on lodging an application by that date; superseded on .[7]
- : Treasury releases the DAP exposure draft.[9]
- : Full Federal Court dismisses ASIC’s Finder Wallet appeal in ASIC v Wallet Ventures Pty Ltd [2025] FCAFC 93, confirming that Finder Earn is not a debenture.[14]
- : Full Federal Court overturns the Block Earner financial-product finding made at first instance on ([2024] FCA 64) in ASIC v Web3 Ventures Pty Ltd [2025] FCAFC 58.[15][16]
- : High Court grants ASIC special leave to appeal the Block Earner decision. The appeal was decided on .[33]
- : AML/CTF Amendment Act 2024 received Royal Assent, extending the regulated services to crypto-to-crypto exchange, virtual asset transfers, safekeeping, and Tranche 2 designated non-financial businesses. The later transitional rules deferred specified obligations for the new virtual asset services until , when the Tranche 2 businesses also entered the AML perimeter.[11][34]
Regulatory Overlap
| Regime | Trigger | Practical consequence |
|---|---|---|
| AML/CTF Act 2006 | Providing a designated service with a geographical link to Australia | Mandatory AUSTRAC enrolment and registration; AML/CTF program; CDD; threshold and suspicious reporting; sanctions screening |
| Corporations Act 2001 (Chapter 7) | Offering a “financial product”: yield, derivatives, tokenised securities, managed staking, asset-referenced stablecoins, non-cash payment facilities | AFSL or operation under an authorised representative; design and distribution obligations; AFCA membership for retail offerings |
| Digital Assets Framework Act 2026 | Operating a digital asset platform that holds client tokens (DAP) or a tokenised custody platform (TCP), from , subject to exemptions and a six-month licensing transition | Tailored AFSL with DAP/TCP authorisation; financial requirements; facility guide and contract; ASIC standard-setting via legislative instrument |
| Privacy Act 1988 | Holding personal information of Australian customers | Australian Privacy Principles compliance; statutory tort for serious privacy invasions (from )[49]; tiered civil penalties |
| Security of Critical Infrastructure Act 2018 | Designated as a critical infrastructure asset (financial services sector, including substantial exchange operators) | Mandatory cyber-incident reporting: within 12 hours of becoming aware of an incident with a significant impact on the asset’s availability, or 72 hours for one with a relevant impact; positive security obligations[51] |
Court Decisions Shaping the Perimeter
The High Court’s judgment in ASIC v Web3 Ventures Pty Ltd [2026] HCA 21 reversed the Full Federal Court’s financial-product conclusion for Block Earner. The Earner product was both a facility for making a financial investment under section 763B and a derivative under section 761D of the Corporations Act, requiring an AFSL. ASIC did not appeal the separate managed-investment-scheme issue, which the High Court did not decide.[33] The Full Court’s earlier Finder Wallet decision, [2025] FCAFC 93, concerned whether a different product was a debenture.[14]
Other ASIC wins concerned the Qoin Wallet as a non-cash payment facility (ASIC v BPS Financial Pty Ltd [2024] FCA 457; penalty [2026] FCA 18), the Kraken margin product as a credit facility under design and distribution obligations (ASIC v Bit Trade Pty Ltd [2024] FCA 953; penalty [2024] FCA 1422),[17] and Binance Australia Derivatives client misclassification ([2026] FCA 509). Product classification depends on the statutory tests and the actual arrangement. A fixed return does not by itself take a crypto-yield product outside the AFSL perimeter.[33]
Operators planning yield, structured products, or margin functionality should expect ASIC scrutiny on the perimeter but a court that will require precise statutory fit.
Regulatory Transition: AUSTRAC DCE to VASP and Current Regime to DAP/TCP
Existing AUSTRAC Digital Currency Exchange registrations carried over automatically into Virtual Asset Service Provider registrations on . The deferral of specified AML/CTF obligations for the new virtual asset services ended on ; other transitional arrangements remain relevant.[34] Separately, the statutory Digital Asset Platform regime commences , subject to exemptions and a six-month licensing transition to about October 2027: under section 1732 the amendments are deferred during that period while the responsible person lacks the relevant AFSL authorisation, and an application made during the transition extends the deferral until the day after ASIC decides.[42]
The AUSTRAC Transition (DCE to VASP)
The AML/CTF Amendment Act 2024 received Royal Assent on and replaced the narrow “digital currency” concept with the broader “virtual asset” term from FATF.[11] The registration roll-over and the start of the deferred obligations were separate steps:
- On , reformed AML/CTF program, governance, and CDD obligations commenced for existing reporting entities, subject to applicable CDD transitional arrangements; the AML/CTF compliance officer requirement began. DCE registrations in force immediately before that date carried over automatically into VASP registrations under section 6 of the Transitional Rules 2026. Section 12 deferred specified obligations for the new virtual asset services until 1 July, rather than excluding those services entirely from the legislation.[34]
- On , the section 12 deferral ended for registrable virtual asset services other than exchange between virtual assets and fiat currency (item 50A). It covered AML/CTF programs, CDD, reporting, transfers of value, and specified record keeping. The new services include crypto-to-crypto exchange, customer transfers, safekeeping (custody), and offer/sale-related financial services. Tranche 2 designated non-financial businesses (lawyers, accountants, real estate agents, dealers in precious stones) also entered the AML perimeter on that date.[34]
- On , the FATF Recommendation 16 travel rule became effective for virtual asset transfers.[34]
The transitional enrolment deadline of applied under section 13 to a person that provided or began providing a registrable virtual asset service other than item 50A before , and at that time did not provide or begin providing any other kind of designated service. It was not a general enrolment deadline for every VASP.[34]
Section 14 provided a limited exception to the registration requirement for services other than exchange between virtual assets and fiat currency (item 50A). Services provided on or before qualified under section 14(1) only if a registration application was submitted by . Under section 14(2), a person may provide a non-item 50A service while awaiting a decision only if the application was submitted before that provision and no later than 29 July, and AUSTRAC has not given written notice of its decision to register or refuse registration. This does not exempt other unregistered operators or applications submitted after that deadline.[34]
The 2025 AML/CTF Rules consolidate the former Part A risk assessment and Part B customer identification procedures into unified “AML/CTF policies”.[18] Existing reporting entities have a three-year transition window to to migrate to the new initial CDD obligations.
The DAP/TCP Transition (Current Regime to Statutory Framework)
The Corporations Amendment (Digital Assets Framework) Act 2026 introduces two new categories of financial product under Chapter 7 of the Corporations Act 2001:
- A digital asset platform (DAP) is a facility for possessing digital tokens on trust for clients, including exchanges.
- A tokenised custody platform (TCP) is a specialised custodial platform for tokenised real-world assets, the digital twin of an off-chain asset such as real estate, equities, or carbon credits.
A low-value exemption applies to a DAP whose client holdings do not exceed AUD 5,000 per client when tokens are added AND whose transactions in the last 12 months do not exceed AUD 10 million AND under which no financial products are held by any DAP in its group AND whose operator has lodged notice with ASIC.[42] A separate exemption covers advising a person about the existence of a DAP or TCP, or arranging for them to use one, where this is done in the ordinary course of a business of which it is not a significant part.[42]
Financial requirements are not hard-coded in the Act. They are left to ASIC: its 18-month implementation roadmap of 20 April 2026 schedules consultation on standards, including financial requirements modelled on RG 166, in months 1 to 6, and the instruments setting them in months 6 to 12 (roughly October 2026 to April 2027).[43] Practitioner expectation is alignment with RG 166’s existing custodial settings (AUD 10 million NTA for substantive custodial DAPs).
Key Deadlines
| Milestone | Date | Impact |
|---|---|---|
| AUSTRAC reformed obligations commenced for existing reporting entities | AML/CTF program, governance, and CDD reforms applied, subject to CDD transitional arrangements; existing DCE registrations carried over automatically into VASP registrations; AML/CTF compliance officer mandatory in Australia[34] | |
| ASIC class no-action letter window (extended 25 June 2026) | Last date to qualify through the AFSL application route or other specified arrangements; afterwards relief continues only for operators that qualified, until their route-specific end event[35] | |
| Deferred obligations for new virtual asset services began | Section 12 deferral ended for non-item 50A services, including crypto-to-crypto exchange, transfers, custody, and offer/sale-related services; travel rule effective; Tranche 2 services in scope[34] | |
| Transitional enrolment and registration application deadline | Section 13 enrolment deadline for qualifying new-service-only operators; section 14 registration application deadline for its limited exceptions. Qualifying non-item 50A applicants may still provide services pending a written decision under the conditions explained above.[34] | |
| DAP/TCP regime commences | DAPs and TCPs become financial products, subject to exemptions; six-month licensing transition begins | |
| DAP/TCP transition period ends | About | Without an application during the six months, the amendments apply once the transition ends; for an applicant, from the day after ASIC decides |
| Initial CDD transition for existing reporting entities ends | All entities on the consolidated 2025 Rules framework |
Practical implications. Former AUSTRAC DCE registrants now hold VASP registration. They must maintain AML/CTF policies and governance under the reformed rules applicable since , an AML/CTF compliance officer in Australia, and CDD arrangements consistent with any applicable transition. Their policies must cover the new virtual asset services they provide under the obligations applicable since , including crypto-to-crypto exchange, transfers, custody, and offer/sale-related services.[34]
ASIC’s letter is not a general grace period for financial products. It excludes crypto lending/earn products, non-cash payment facilities other than stablecoins, and digital-asset derivatives other than wrapped tokens. Only activity already provided in Australia on or before qualifies. For the AFSL application route, the letter set as the last date to lodge; retail-service applicants must be AFCA members. Specified representative and intermediary routes have separate requirements. Foreign companies must meet the registration and local-agent conditions. Relief ends on the applicable event stated in the letter, which ASIC may revise or withdraw; it does not prevent third-party action.[35]
New entrants in 2026 should target a parallel AUSTRAC enrolment + AFSL application + entity formation + banking onboarding sequence rather than a sequential one.
License Types and Activities Covered
Australia has no single “crypto licence”. It has a layered authorisation perimeter: AUSTRAC registration is universal for any service with a geographical link to Australia; ASIC’s AFSL is required where the crypto product is a financial product under the Corporations Act; an Australian Market Licence is required if the platform meets the “financial market” definition; and from 2027 the DAP and TCP authorisations apply.
Covered Activities
- AUSTRAC Virtual Asset Service Provider (VASP) registration, formerly DCE. Digital Currency Exchange registration has been mandatory since for exchange between fiat currency and digital currency with a geographical link to Australia.[36] DCE registrations in force immediately before carried over automatically into VASP registrations on that date. The section 12 deferral of specified obligations for the new services ended on , covering crypto-to-crypto exchange, virtual asset transfers, safekeeping, and offer/sale-related financial services. Crypto ATMs and OTC desks are in scope.[34]
- ASIC Australian Financial Services Licence (AFSL). Required where the crypto product meets the Corporations Act definition of a “financial product”: derivatives, managed investment schemes, securities, non-cash payment facilities, or “facilities for making a financial investment” under section 763B. Relevant authorisations: deal in financial products, provide financial product advice (general or personal), operate a registered managed investment scheme, make a market, provide custodial or depository services.
- Australian Market Licence (AML) under Part 7.2 of the Corporations Act. Required where a crypto exchange meets the “financial market” definition: a facility through which offers to acquire or dispose of financial products are regularly made. The superseding letter provides conditional no-action treatment only where the operator notified ASIC and attended a licensing pre-meeting by ; it then has 12 months from that notification to apply. The letter’s eligibility conditions and exclusions also apply.[35]
- Clearing and Settlement Facility Licence (CSFL) under Part 7.3. Required for facilities providing regular clearing or settlement of transactions in financial products.
- DAP and TCP authorisations (from ). Tailored AFSL authorisations under the new framework. A DAP is a facility for possessing digital tokens on trust for clients; a TCP is a custodial platform for tokenised real-world assets.
What Does NOT Require Registration
- Native proof-of-stake staking by the asset holder. ASIC’s INFO 225 clarifies that native staking is typically not a financial product, although managed staking and staking-as-a-service typically are (often as managed investment schemes or facilities for making a financial investment).[7]
- Operating public, permissionless ledgers. Exempted under the DAP regime.
- Certain aspects of staking arrangements. Exempted under the DAP regime, subject to conditions.
- Wrapped-token arrangements. Treated as exempted in defined circumstances under the DAP regime, although wrapped tokens at large are typically derivatives per INFO 225.
- Bitcoin and similar payment tokens (in isolation). Characterised by ASIC as unlikely to be financial products, though the analysis changes for products built on top of them (yield, derivatives, managed schemes).
- Introducing clients to a platform in the ordinary course of business. Advising a person about the existence of a DAP or TCP, or arranging for them to use one, is exempt where it is done in the ordinary course of a business and is not a significant part of it.[42]
DAO, DeFi, and Tokenised RWA Treatment
ASIC’s updated INFO 225 includes 18 worked examples covering tokenised real estate, tokenised securities, gold-linked tokens, wrapped tokens, and managed staking. Tokenised securities are financial products by direct extension of Chapter 7; tokenised real estate is typically a managed investment scheme; gold-linked tokens are typically derivatives or asset-referenced stablecoins.
ASIC’s enhanced regulatory sandbox under ASIC Corporations (Concept Validation Licensing Exemption) Instrument 2020/389 supports bespoke tokenisation experiments, and ASIC’s relief power under sections 926A and 911A allows targeted exemptions for novel structures. Tokenised RWA platforms are the most natural fit for the forthcoming TCP authorisation.
Tokenised securities and RWA
Australia regulates a token by what it represents, not by the technology it runs on. Where a tokenised asset is a financial product, the Corporations Act 2001 applies and an AFSL is required from ASIC, with interim no-action treatment only for operators that qualified under the June 2026 letter and still meet the scope and conditions described above.[35]
Requirements
Australian crypto licensing requirements depend on the regime. AUSTRAC has no minimum capital but requires beneficial ownership disclosure, fit-and-proper testing, and an AML/CTF program. The AFSL brings the RG 166 financial requirements, which rise sharply for custodial business (AUD 10 million NTA), and ASIC’s expectation of at least two responsible managers with documented competence;[41] an Australian company also needs the resident director and registered office the Corporations Act requires.
| Requirement | AUSTRAC Registration | ASIC AFSL |
|---|---|---|
| Australian-resident director | Required for an Australian company (s 201A); a registered foreign company needs a local agent instead | Same; RG 105 adds responsible-manager expectations |
| Registered office in Australia | Required | Required |
| AML/CTF compliance officer in Australia | Required from | n/a (RG 78 breach reporting applies) |
| Beneficial ownership disclosure | Required | Required |
| Minimum capital | None | No general AFSL capital floor; where RG 166 section C applies, AUD 50,000 surplus liquid funds when client money or property is AUD 100,000 or more; custodial requirements separate (AUD 10 million NTA for custodians)[20]≈ $35K SLF; $7M custodial |
| Responsible managers | n/a | ASIC expects at least 2 (RG 105.49); usually 3 years’ relevant experience in the past 5, or 5 in 8 under Option 2 |
| Fit-and-proper assessment | Directors, key personnel, beneficial owners | Directors, RMs, beneficial owners |
| AML/CTF program | Required | Required where AFSL holder also has AML obligations |
| Professional indemnity insurance | Not required | RG 126 PI cover required for retail AFSL holders |
| AFCA membership | n/a | Mandatory for retail-client AFSL holders |
| Minimum directors | 1 (Pty Ltd); 3 for a public company, at least 2 of them Australian-resident | Same |
| Foreign ownership | Permitted; FIRB approval may be required at thresholds | Same |
Fit-and-Proper Assessment
AUSTRAC applies fit-and-proper tests to directors, key personnel, and beneficial owners as part of registration. National criminal history checks (typically dated within 6 months) are mandatory, with foreign police checks required where the individual has resided overseas. ASIC’s fit-and-proper analysis under section 913B is broader: it covers the licensee, its responsible managers, and “controllers” of the licensee.
Section 913B(1)(b) lets ASIC refuse a licence where there is reason to believe an officer will not comply with general obligations under section 912A. The common mistake is treating fit-and-proper as a box-tick exercise: ASIC’s substantive assessment includes prior regulatory dealings, civil judgements, and the quality of the licensee’s own due diligence on its directors.
Local Presence and Substance
At least one director ordinarily resident in Australia is required for proprietary companies under section 201A of the Corporations Act 2001; public companies require two Australian-resident directors. A registered office in Australia is required for both. From the AML/CTF compliance officer must be an Australian resident where the services are provided through a permanent establishment in Australia.[37] Responsible managers are not statutorily required to reside in Australia, but ASIC scrutinises substance over form: RMs domiciled offshore without active engagement with the Australian business have been challenged in licensing reviews. Experienced applicants treat the RM identification process as the critical-path item and begin sourcing 6–12 months before lodgement, because the AFSL evidentiary bar on RM competence (RG 105) is meaningful and contractor RMs run AUD 50,000 to 150,000 per year per RM.
AML/CFT, Travel Rule, and Sanctions
The AML/CTF program (consolidated “AML/CTF policies” under the 2025 Rules) must include enterprise-wide risk assessment, customer identification procedures, ongoing customer due diligence, transaction monitoring, threshold transaction reporting (TTRs for physical-currency transactions of AUD 10,000 or more), suspicious matter reporting (SMRs), and international funds transfer instruction (IFTI) reporting, which moves to reports of international value transfer services from .[37][38] The FATF Recommendation 16 travel rule has applied to virtual asset transfers since .[34]
AUSTRAC Rule 5-3 (2025 Rules) extends sanctions screening obligations from money, property, and virtual assets to “any assets”. Sanctions compliance must cover DFAT’s consolidated list, UN sanctions under the Charter of the United Nations Act 1945, and targeted financial sanctions under the Autonomous Sanctions Act 2011.
Capital and Financial Requirements (AFSL detail)
AFSL holders providing custodial or depository services in their own right must meet the financial requirements in ASIC Corporations (Financial Requirements for Custodial or Depository Service Providers) Instrument 2023/648 and RG 166 Appendix 4: net tangible assets (NTA) of the greater of AUD 10 million or 10% of average revenue, with at least 50% held in cash or cash equivalents and 100% in liquid assets.[20] An incidental provider, whose custody serves its other financial services and earns less than 10% of its financial-services revenue, needs NTA of the greater of AUD 150,000 or 10% of average revenue if it holds the assets itself, and nil for the custody service if they are held by a licensed custodian meeting the AUD 10 million test or by an eligible custodian.[20]
Responsible entities, IDPS operators, and corporate directors of retail CCIVs face NTA of the greater of AUD 150,000, 0.5% of the average value of fund assets (up to AUD 5 million), or 10% of average revenue where a qualifying custodian holds the assets, and the greater of AUD 10 million or 10% of average revenue where it does not.[20]
Outsourcing custody does not by itself make an operator an incidental provider: the purpose and revenue tests in RG 166.284 must also be met.[20] The real constraint for most operators is not the regulatory test itself, it is the cost of capital on the AUD 10 million NTA lock-up, which at a 3–5% yield deficit against the operator’s cost of capital implies AUD 300,000 to 500,000 per year in opportunity cost.
Application Process
The Australian application process has two parallel tracks: AUSTRAC enrolment and registration via AUSTRAC Online (4–12 weeks for clean applications) and ASIC AFSL application via the ASIC Regulatory Portal (5–8 months from a complete lodgement). ASIC’s service charter aims to decide 70% of complete applications within 150 days and 90% within 240 days;[39] requests for further information, particularly on responsible manager evidence, push individual files towards the longer end.
Application language: English.
Pre-application engagement: ASIC offers pre-lodgement meetings on novel applications and digital-asset-specific queries; AUSTRAC offers pre-enrolment guidance through AUSTRAC Online support. Use both.
Entity Formation
Forming an Australian entity is the first step: see the full Australia company formation guide. This guide assumes an Australian proprietary company under the Corporations Act 2001. Confirm at least one Australian-resident director, secure a registered office, allocate share capital, and complete ASIC company registration. Tax residency analysis (incorporated in Australia, or central management and control in Australia) should be settled before share issuance.
AUSTRAC Enrolment and Registration
Enrol with AUSTRAC Online and apply for VASP registration. Required documentation: business structure, beneficial ownership disclosure, AML/CTF program, risk assessment, national criminal history checks for key personnel. AUSTRAC fit-and-proper assessment runs in parallel. Re-registration cycle is three years.
Annual compliance reporting is moving to financial years: the current reporting period is to , with submission from to .[32]
AFSL Preparation (specialist work)
Where the product is a financial product: prepare the proof pack for the ASIC Regulatory Portal. This includes business description, financial resources statement (including NTA documentation), organisational expertise statement, responsible manager profiles (ASIC expects at least two RMs meeting RG 105), compliance arrangements, risk management framework, conflicts of interest policy, dispute resolution arrangements, and auditor appointment. The AFSL application has been mandatory through the Regulatory Portal since .
AFSL Lodgement and Assessment
Lodge through the Regulatory Portal. ASIC’s service charter aims to decide 70% of complete applications within 150 days and 90% within 240 days; plan for 5–8 months from a complete lodgement. ASIC’s first review pass typically produces a request for further information within 8–12 weeks. The largest sources of RFI are responsible manager evidence and the financial resources statement. Engage proactively with the case officer; ASIC’s review is iterative.
Banking and Operational Onboarding (parallel)
Open client-money and operational banking with an Australian Authorised Deposit-taking Institution (ADI), and if relevant, an overseas correspondent bank for AUD/USD/EUR flows. AFCA membership for retail-client AFSL holders.
Compliance Documentation and Go-Live
Finalise AML/CTF policies under the 2025 Rules consolidation. Meet the travel-rule obligations applicable since .[34] Run the breach-reporting framework under section 912DAA and RG 78. The AFSL is granted as a written instrument; ASIC publishes the licensee on the public register.
Prepare the annual AUSTRAC compliance report for the applicable reporting period; under the current timetable, reports are submitted within three months after the reporting period ends.[32]
Australia-specific AML/CTF policies, the enterprise-wide ML/TF/PF risk assessment, the responsible-manager competence pack, and the AFSL financial-resources statement are drafted within the licensing engagement by the independent specialist introduced for the case. The compliance documentation is the most time-intensive component of any Australian AFSL application: 8 to 16 weeks of specialist work that cannot be shortcut with generic templates. Discuss your scope →
Required Documents
Required documents for Australian crypto licensing span four categories: corporate and constitutional documents for the Australian entity, personal documents for directors, responsible managers, and beneficial owners, an extensive compliance documentation pack, and business plan with three-year financial projections. ASIC’s Regulatory Portal and AUSTRAC Online accept lodgement digitally, with all supporting evidence uploaded as part of the structured application form.
Corporate Documents
ASIC company registration (Form 201), constitution or replaceable rules, share register, register of members, registered office details, ABN registration with the ATO, and TFN registration. For foreign-controlled entities, FIRB notification or approval where applicable. The Corporations Act 2001 requires at least one Australian-resident director for proprietary companies and two for public companies (section 201A).
Personal Documents (Directors, Responsible Managers, UBOs)
Certified copies of passports for all directors, RMs, and beneficial owners. National Police Certificates dated within 6 months. Foreign police checks for individuals who have resided overseas. Bankruptcy and insolvency check (AFSA). Statutory declarations of solvency. CVs and evidence of regulated-industry experience for RMs (under RG 105, usually three years’ relevant experience in the past five, or five in the past eight where knowledge is individually assessed). Where an individual has held a financial services position in the prior 5 years, references, and conduct evidence from the prior licensee.
Compliance Documentation
The compliance documentation is the most heavily scrutinised component of any Australian AFSL application. Each of these documents is drafted within the licensing engagement by the independent specialist introduced for the case: bespoke and Australia-specific, not templates adapted from other jurisdictions. Each document must reflect the applicant’s specific business model, risk profile, and operational structure.
Under the AML/CTF Amendment Act 2024 and 2025 Rules, the former Part A risk assessment and Part B customer identification procedures consolidated into unified “AML/CTF policies”. For Australian crypto operators, the policies must reflect the reformed rules applicable since (AML/CTF program, governance, CDD subject to applicable transition; compliance officer in Australia) and cover the new virtual asset services the operator provides under the obligations applicable since (crypto-to-crypto exchange, transfers, custody, offer/sale).[34]
AUSTRAC’s supervisory focus is whether the policies are tailored to the specific business, not adapted from templates. The most common cause of RFI is generic policy language that does not reflect the operator’s actual customer base and transaction patterns.
Mandatory under the 2025 Rules. AUSTRAC’s view is that risk assessment must be granular: customer categories, jurisdictional exposure with named higher-risk countries, product risk by feature (custody, yield, derivatives), and channel risk (web, API, in-person, agent network). The assessment must be refreshed at least annually and trigger reviews on material business change.
Documented appointment of the AML/CTF compliance officer (Australian resident from ), with role description, governance reporting line, and escalation pathway.
AUSTRAC Rule 5-3 (2025 Rules) extends sanctions screening obligations to “any assets” rather than just money, property, and virtual assets. Procedures must address screening at customer onboarding, ongoing rescreening on list updates, transaction screening, and the handling of true matches (freeze, report to DFAT). Australian sanctions are administered separately from US OFAC sanctions; operators serving US-resident customers must run both screens.
The 2025 Rules introduce new initial CDD obligations replacing the prior ACIP framework. Existing reporting entities have a transition window to to migrate. KYB procedures for institutional customers must verify control structures, ultimate beneficial owners (typically 25% threshold), source of funds and source of wealth for higher-risk relationships.
Rules-based and behavioural monitoring covering threshold transactions, suspicious patterns, and FATF-defined typologies.
Australia’s travel rule has applied to virtual asset transfers since . The originating VASP must collect and transmit originator name, account/wallet identifier, and address; beneficiary VASP must collect and verify beneficiary information. Cross-border transfers face the additional layer of correspondent-VASP relationships. Existing reporting entities should maintain a tested travel-rule solution in production.
Procedures for reporting physical-currency transactions of AUD 10,000 or more (TTRs), international funds transfer instructions (IFTIs), and statistical reports.
Threshold for SMR (reasonable suspicion), internal escalation, AUSTRAC reporting timeline (24 hours for terrorism financing; 3 business days for other suspicions).[37]
Procedures for completing the annual AUSTRAC compliance report. The next reporting period runs from to , with submission from to ; later financial-year reports follow the same three-month post-period window.[32]
Australian Privacy Principles compliance, data breach response plan under the Notifiable Data Breaches scheme, and (where applicable) statutory tort risk management. The tort for serious invasions of privacy was introduced by the Privacy and Other Legislation Amendment Act 2024, which passed Parliament in and received assent on ; the tort commenced on .[49][50]
ASIC’s reportable situations regime is substantively broader than the prior breach regime. RG 78 enumerates the categories of reportable situations including significant breaches of core obligations, conduct that constitutes gross negligence, and reportable situations relating to other licensees and individual financial advisers. The 30-calendar-day clock starts when the licensee knows or ought reasonably to know the situation has arisen.
Business Plan and Financial Projections
Three-year financial projections covering revenue, expenses, capital expenditure, and cash flow. NTA documentation showing compliance with the relevant RG 166 requirement (base AFSL, custodial, responsible entity tiers). Funding evidence (capital injection, parent company support, debt). Operating model description including business lines, customer segments, jurisdictional reach, and growth assumptions.
Technology and Operational Documentation
IT infrastructure description (architecture, hosting, third-party providers). Cybersecurity framework aligned with ISO 27001 or equivalent. Business continuity and disaster recovery plans. Custody procedures (hot/cold wallet segregation, key management, multi-signature controls). Outsourcing arrangements and material service provider register. Data protection and incident response plans.
Costs and Pricing
Australian crypto licensing costs are concentrated in professional advisory work and capital lock-up rather than government fees. ASIC online body-corporate AFSL application fees range from AUD 2,233 (wholesale clients, low-complexity products) to AUD 7,537 (retail clients, high-complexity products) under Schedule 1 of the Corporations (Fees) Regulations 2001, and ASIC lists them as fees for service that are not indexed annually;[21] AUSTRAC has no government fee for VASP registration. For custodial AFSL holders the dominant first-year cost is the AUD 10 million NTA capital lock-up rather than any government fee.
Government / Regulator Fees
| Fee | Amount (AUD) | Frequency | Notes |
|---|---|---|---|
| AUSTRAC VASP registration (formerly DCE) | Nil | Once at registration; 3-year re-registration | No government fee |
| AUSTRAC industry contribution levy | Variable | Annual | Applies only to larger leviable entities; smaller crypto operators are typically below the threshold |
| ASIC AFSL application: body corporate (online, wholesale clients, low complexity) | 2,233≈ $1,600 | Once at lodgement | Per ASIC fee schedule; fee for service, not indexed annually; paper lodgement higher |
| ASIC AFSL application: body corporate (online, retail clients, low complexity) | 3,721≈ $2,600 | Once at lodgement | Retail-client tier; ASIC has no separate medium-complexity tier |
| ASIC AFSL application: body corporate (online, retail clients, high complexity) | 7,537≈ $5,300 | Once at lodgement | Highest online body-corporate tier; paper lodgement AUD 11,305 |
| ASIC annual industry funding levy | Activity-dependent | Annual | Flat or graduated levy for each applicable subsector; no universal minimum for AFSL holders[52] |
| AFCA membership | 415.57 including GST | Annual, 2026–27 | Registration fee; additional user charges and complaint fees can apply. Membership is required for retail AFSL business[53] |
Fee schedule note: the AFSL application amounts above match ASIC’s schedule in force from , which lists them as fees for service that are not indexed annually. ASIC levies depend on the relevant subsectors and annual regulatory costs; published estimates are not final invoices. AFCA charges its annual registration fee plus applicable user and complaint fees.[21][52][53]
Total Cost Summary
| Statutory charge (AUSTRAC, ASIC, AFCA) | Amount (AUD) |
|---|---|
| AUSTRAC VASP registration, formerly DCE | Nil |
| AUSTRAC industry contribution levy (annual; larger leviable entities only, and smaller crypto operators sit below the threshold) | Variable |
| ASIC AFSL application fee, body corporate online, wholesale low complexity through retail high complexity (fee for service, not CPI-indexed; paper lodgement higher) | 2,233–7,537≈ $1,600–5,300 |
| ASIC industry funding levy (annual; each applicable subsector) | Variable; excluded from the subtotal[52] |
| AFCA annual registration, 2026–27 (if a member; additional charges excluded) | 415.57 including GST[53] |
| Known fee subtotal, Year 1 (AFSL application plus AFCA registration) | 2,648.57–7,952.57; add ASIC/AUSTRAC levies and any additional AFCA charges[21][52][53] |
| Recurring regulatory charges | AFCA annual registration at the applicable year’s rate, plus variable levies and additional AFCA charges; no fixed all-in annual fee[52][53] |
| Build item (cost quoted per case) | Amount (AUD) |
|---|---|
| Australian Pty Ltd formation (ASIC registration plus legal and agent fees) | 600–2,500≈ $420–1,800 |
| Legal advisory, AFSL application (specialist regulatory counsel; complex applications run higher) | 30,000–80,000≈ $21K–56K |
| Compliance documentation (AML/CTF policies, risk assessment, sanctions framework, travel rule; bespoke Australia-specific drafting) | 25,000–60,000≈ $18K–42K |
| Responsible manager sourcing or contracting, one contracted RM (annual; ASIC expects at least two RMs, and each further contracted RM adds the same; in-house RMs cost less but require recruitment) | 50,000–150,000≈ $35K–110K |
| Compliance audit, statutory audit plus AFSL compliance review (annual) | 10,000–30,000≈ $7,000–21K |
| AML/CTF compliance officer, Australian resident (annual salary; a senior officer commands the higher end) | 60,000–150,000≈ $42K–110K |
| PI insurance, retail AFSL per RG 126 (annual) | 8,000–25,000≈ $5,600–18K |
| Typical build, Year 1 (quoted per case) | 183,600–497,500≈ $130K–350K |
| Typical build, annual (Year 2 onwards) | 128,000–355,000≈ $90K–250K |
| Held, not spent (in neither total) | Amount (AUD) | Notes |
|---|---|---|
| Capital lock-up: custodial AFSL (NTA) | 10,000,000≈ $7M | Permanent; opportunity cost approximately 300,000–500,000 per year≈ $210K–350K per year |
| Capital lock-up: incidental custody provider holding the assets itself | From 150,000≈ $110K | Greater of AUD 150,000 or 10% of average revenue; nil for the custody service where a qualifying custodian holds the assets |
The opportunity cost of capital is the single largest hidden cost. The foregone return on the custodial NTA lock-up is typically larger than the entire annual ongoing operating cost of the regulated framework, and is the principal driver of the sub-custody outsourcing decision.
Timeline
End to end, an AUSTRAC-only operator should plan for about 2–5 months and an operator that needs an AFSL for about 7–12 months, on the stage table below. Within that, AUSTRAC review has typically taken 4–12 weeks. The AML/CTF Act gives AUSTRAC 90 days, counted from the latest of the application date, the last day information it requested under section 76Q is provided, and the day of any section 76S submission; AUSTRAC may extend the period once by up to 30 days by written notice before it ends, and otherwise an undecided application is taken to be refused.[37] ASIC’s service charter aims to decide 70% of complete AFS licence applications within 150 days and 90% within 240 days, roughly 5 and 8 months;[39] complex applications (responsible entity, market making, or first-time digital asset operators) can take longer. The AFSL preparation should run in parallel with entity formation and AUSTRAC registration rather than in sequence.
| Stage | Duration | Cumulative |
|---|---|---|
| Entity formation (ASIC company registration, ABN, TFN) | 2–4 weeks | 2–4 weeks |
| AUSTRAC enrolment + registration (after entity formation) | 4–12 weeks | 6–16 weeks |
| AFSL proof-pack preparation (parallel from week 1) | 8–16 weeks | 8–16 weeks |
| AFSL lodgement and ASIC assessment | 5–8 months | 7–12 months |
| Banking onboarding (parallel) | Case by case | Within total |
| Compliance documentation finalisation and go-live readiness | 2–4 weeks | 8–20 weeks on the AUSTRAC route; within the AFSL total |
| Total realistic timeline (AUSTRAC-only operator) | About 2–5 months | About 2–5 months |
| Total realistic timeline (AFSL-required operator) | About 7–12 months | About 7–12 months |
ASIC’s service charter aims to decide 70% of complete AFS licence applications within 150 days and 90% within 240 days,[39] which is the 5–8 month planning range used here; complex applications (responsible entity, market making, first-of-kind tokenisation products) can exceed it. The mandatory move to the ASIC Regulatory Portal shortened the form-handling cycle but has not materially reduced substantive review time. In practice, the binding constraint is the iteration cycle on responsible manager evidence and the financial resources statement: these typically attract 1 to 3 RFI rounds, each adding 4–8 weeks.
For operators using the AFSL application route under ASIC’s class no-action letter, the letter set the filing deadline at .[35] A 5–8 month planning estimate from a late-September filing extends into late February to late May 2027, so it does not guarantee a decision before . The deadline is not a promise of processing time.
Taxation
Australia is a standard-rate corporate jurisdiction with crypto-specific clarity; the input-taxed GST treatment of digital currency and the 47-jurisdiction tax-treaty network improve the effective economics. Corporate income tax is 25% only where aggregated turnover is below AUD 50 million and no more than 80% of assessable income is base rate entity passive income; otherwise the standard rate is 30%.[54] Crypto is taxed as a CGT asset; supplies of digital currency have been input-taxed, with no GST charged, since .
| Tax | Rate | Crypto Application |
|---|---|---|
| Corporate Income Tax | 25% (base rate entity) / 30% | Applies to all crypto business income; base rate threshold requires aggregated turnover < AUD 50m AND ≤ 80% passive income |
| Capital Gains Tax | Marginal rate for individuals; 25%/30% for companies | Crypto is a CGT asset under TD 2014/26; individuals’ 50% discount (assets held > 12 months) applies to gains accruing before 1 July 2027, then cost-base indexation and a 30% minimum tax |
| Goods and Services Tax (GST) | 10% standard rate | Input-taxed (no GST charged) for supplies of digital currency since |
| Withholding Tax: interest | 10% | Treaty rates often reduce to 5% or 0% |
| Withholding Tax: royalties | 30% | Treaty rates often reduce to 5–10% |
| Withholding Tax: dividends (unfranked) | 30% | Treaty rates often reduce |
| Payroll tax | Variable (state-based, 4–6.85%) | Applies above state-specific thresholds |
| Stamp Duty | Variable (state-based) | Generally not applicable to crypto transactions |
Crypto Asset Taxation Specifics (ATO Treatment)
The ATO classifies crypto as a CGT asset under Tax Determination TD 2014/26, not as foreign currency under TD 2014/25.[10] Disposals are CGT events (A1 for direct disposals, C2 for losses), with the 50% individual CGT discount applying for assets held over 12 months to gains that accrue before ; from that date the Treasury Laws Amendment (Tax Reform No. 1) Act 2026 replaces it with cost-base indexation and a 30% minimum tax for Australian resident individuals and trusts.[45] The personal-use asset exemption applies only where the asset cost less than AUD 10,000 and was used mainly for personal consumption.
Trading-stock treatment applies for businesses where crypto is held as inventory. Staking rewards are typically assessable as ordinary income at fair market value when received; mining income is ordinary income; airdrops and chain splits attract specific ATO guidance.
Input-Taxed GST Treatment of Digital Currency
Since , under Schedule 1 of the Treasury Laws Amendment (2017 Measures No. 6) Act 2017 (Cth), digital currency has been treated like money for GST: a supply of digital currency in exchange for money or digital currency to an Australian resident located in Australia is an input-taxed financial supply, so no GST is charged on it.[48] This places digital currency on the same footing as fiat for GST purposes and avoids the double-GST outcome that would otherwise arise on crypto trading. Services connected with digital currency (custody, exchange, transmission) are GST-applicable where supplied to Australian recipients.
CRS and CARF Reporting
Australia has implemented the OECD Common Reporting Standard (CRS). In the December 2025 MYEFO, the Government announced that the Crypto-Asset Reporting Framework (CARF) will commence in 2027, with first international exchanges in 2028. The parallel domestic crypto tax reporting regime is also announced to commence in 2027, with first reports to the ATO in 2028.[25] The OECD Global Forum places Australia in its first-exchanges-by-2028 cohort.[26] The ATO’s crypto-assets data-matching program covers data from the 2014–15 to 2025–26 financial years.[31]
Pillar Two (Global Minimum Tax)
Australia has enacted domestic Pillar Two legislation (Taxation (Multinational–Global and Domestic Minimum Tax) Act 2024). The 15% Global Minimum Tax (GloBE) applies to multinational groups with annual revenue of EUR 750 million or more in at least two of the four preceding fiscal years:[46] a threshold unlikely to affect standalone Australian-domiciled VASPs but relevant to subsidiaries of larger crypto groups.
Ongoing Compliance & Post-Registration
Australian registration and licensing create a permanent compliance infrastructure obligation. AUSTRAC requires threshold transaction and suspicious matter reporting, AML/CTF policy maintenance, and travel-rule operationalisation from . ASIC AFSL holders face the section 912A general obligations regime, the 30-day reportable situations regime under section 912DAA, annual financial statements, and audit.
AUSTRAC requires annual compliance reporting within three months after the applicable financial-year reporting period ends.[32]
Annual Reporting Obligations
AUSTRAC: the current reporting period is to , with submission from to , and later financial-year reports due within three months after the reporting period ends.[32] ASIC: annual financial statements and auditor’s report under the Corporations Act; AFSL compliance certificate; FS70 financial statements (where applicable); FS71 audit opinion.
CCIVs and registered managed investment schemes face additional reporting. ATO: annual income tax return; quarterly BAS for GST-registered entities; and CRS reports where applicable. Under the Government’s announced timetable, CARF commences in 2027 with first international exchanges in 2028; the parallel domestic crypto tax reporting regime commences in 2027 with first reports to the ATO in 2028.[25]
Renewal Fees and Supervision Fees
AUSTRAC registration must be renewed every three years. ASIC AFSL holders pay the levy for each relevant industry subsector, using its flat or graduated formula. AFCA annual registration costs AUD 415.57 including GST in 2026–27; user and complaint fees are separate.[52][53] Recurring costs typically include the AML/CTF compliance officer salary (AUD 60,000 to 150,000), annual audit (AUD 10,000 to 30,000), PI insurance (AUD 8,000 to 25,000 for retail AFSL), and registered office and company secretary fees.
Regulatory Inspections
AUSTRAC conducts thematic reviews focused on customer due diligence, transaction monitoring, and SMR/TTR quality. ASIC conducts thematic reviews and targeted surveillance, with documented enforcement focus on crypto exchanges, derivatives, and consumer-facing yield products. Both regulators have used their information-gathering powers (AUSTRAC section 167 notices; ASIC section 33 notices) extensively against crypto operators. Operators should maintain audit-ready documentation across all designated services and AFSL authorisations.
Enforcement
AUSTRAC penalties: civil penalty orders under section 175 of the AML/CTF Act of up to 100,000 penalty units for a body corporate; for unregistered virtual asset services, the base section 76A(3) offence of up to two years’ imprisonment, 500 penalty units, or both (higher tiers of four years or 1,000 penalty units and seven years or 2,000 penalty units apply to specified repeat contraventions), or an infringement notice of 60 penalty units for a body corporate.[37] The penalty unit is AUD 364 for offences committed from .[40] ASIC penalties under the Corporations Act: for civil penalty provisions, individual maximum is the greater of 5,000 penalty units or three times the benefit; corporate maximum is the greater of 50,000 penalty units, three times benefit, or 10% of annual turnover capped at 2.5 million penalty units.[22]
Criminal liability is available under section 911A for unlicensed financial services. Recent crypto-sector enforcement penalties: AUD 14 million (BPS Financial / Qoin, ); AUD 10 million (Binance Australia Derivatives, ); AUD 8 million (Bit Trade / Kraken, ); AUD 13.1 million client compensation (Binance Australia, 2023).
Critical Infrastructure (SOCI) Obligations
The Security of Critical Infrastructure Act 2018 applies to crypto platforms meeting the “critical infrastructure asset” definition in the financial services sector, including stored-value facility operators and substantial exchange operators above thresholds. Where the asset class is subject to mandatory cyber-incident reporting, an incident with a significant impact on the asset’s availability must be reported within 12 hours of becoming aware of it, and one with a relevant impact within 72 hours.[51] Positive security obligations apply once designated. SOCI applicability should be assessed on launch and refreshed annually.
Advertising and Promotion Rules
ASIC’s design and distribution obligations regime (Part 7.8A of the Corporations Act) applies to issuers and distributors of financial products to retail clients. Target market determinations must be prepared and reviewed periodically. Promotion of unlicensed financial services to Australian retail clients is a criminal offence under section 911A. Influencer promotion of crypto products has been an active ASIC enforcement area since 2023: operators using affiliate or influencer marketing should document financial product analysis and target market determinations for each product.
Banking
De-banking is a documented issue for Australian fintech firms, digital currency exchanges, and remittance providers. The Council of Financial Regulators examined the issue in 2022, and the Government response acknowledged that banks remain commercial enterprises that manage their own risks and resources.[27][23] Bank acceptance and end-to-end timing are assessed case by case.
The Council of Financial Regulators’ advice on debanking, given to the Treasurer in late August 2022 and published in ,[27] and the Government’s response committed to voluntary data collection from the four major banks, “in principle” 30-day notice and reason-giving requirements, and capability uplift in the DCE, fintech, and remittance sectors.[23] The Treasury’s Statement on Developing an Innovative Australian Digital Asset Industry re-committed to working with the four major banks on debanking.[8] Debanking remains an operational risk to plan for.
Public application requirements from major Australian banks cover company registration, business activity and purpose, directors and beneficial owners, identity, addresses, and source of wealth or funds.[28][29][30] Providing a complete file gives the bank the information it needs for assessment; neither AUSTRAC registration nor AFSL status guarantees acceptance.
Client-money trust accounts for AFSL holders must be held with an Australian Authorised Deposit-taking Institution (ADI) under the Corporations Act unless ASIC grants relief: INFO 225 indicates ASIC may consider case-by-case relief where alternative protections are demonstrated. What the AFCA framework does not provide is a banking-access guarantee: AFCA covers banking conduct disputes for customers, but it does not compel a bank to take on a particular customer.
Jagelski & Partners’ banking partner network includes 90+ institutions across Australia, foreign bank branches operating in Australia, and specialist banking platforms in adjacent jurisdictions. A licence without banking access is a certificate on the wall.
Explore Banking SolutionsFATF Status & International Standing
Australia is a founding member of the Financial Action Task Force and is on neither FATF list published after the June 2026 plenary.[47] Its last full mutual evaluation dates from 2015; the AML/CTF Amendment Act 2024 and the Tranche 2 reforms that took effect on address the gap it identified on designated non-financial businesses and professions.
EU Market Access
An Australian licence (AUSTRAC, AFSL, or DAP) does not confer EU passporting rights. MiCA contains no third-country equivalence regime: there is no mechanism for the European Commission to recognise a non-EU licence as equivalent. MiCA Article 61 permits third-country firms to serve EU clients only where the client initiates the service at its own exclusive initiative. ESMA’s Guidelines on reverse solicitation under MiCA (ESMA35-1872330276-2030, published , applicable from ) interpret the exemption restrictively.[24]
ESMA’s guidelines list signs that a firm is likely to be regarded as soliciting, judged on all the facts: advertising, promotions, and influencer or affiliate campaigns aimed at EU clients, and a website in an EU language that is not customary in international finance.[24] A firm that solicits EU clients cannot rely on the exemption, which offers no route to systematic EU market access.
For a detailed analysis of what constitutes solicitation and the documentation requirements, see Reverse Solicitation Under MiCA →.
Advantages and Limitations
Australia offers institutional-grade regulatory credibility, a 47-jurisdiction tax-treaty network, and an English common law system; it pays for that in long AFSL timelines, persistent debanking risk, and the AUD 10 million custody capital threshold. The trade-offs are well understood and consistently surfaced in client jurisdiction selection conversations: choose Australia for credibility, not for speed.
- AFSL credibility carries weight in institutional sales. The AFSL is a full financial-services licence that institutional counterparties can verify on ASIC’s public register.
- Tax-treaty network reduces withholding leakage. Comprehensive treaties with 47 jurisdictions can reduce withholding tax on cross-border interest, royalties, and dividends.[44]
- Digital currency input-taxed for GST since 2017. No double-GST exposure on crypto trading flows, with services connected with digital currency taxed on standard principles.
- Statutory DAP framework provides legal certainty. The Corporations Amendment (Digital Assets Framework) Act 2026 integrates with the AFSL regime rather than running alongside it; “same risk, same regulation” provides predictability.
- AUD stablecoin and tokenised RWA precedents established. Two stablecoins, AUDM and AUDF, are named in ASIC’s stablecoin distribution exemption, with wider class relief for eligible stablecoins since December 2025; Project Acacia produced a mature wholesale CBDC and tokenised settlement evidence base.
- The AFSL route takes most of a year. About 7–12 months end to end, including 5–8 months of ASIC assessment from a complete lodgement; complex applications take longer. Mitigation: Lodge AFSL applications in parallel with AUSTRAC enrolment and entity formation, not in sequence. The ASIC class no-action window protects only operators that qualified by ; a business that did not qualify needs its AFSL before it provides the service.
- No EU passporting. An Australian licence does not provide MiCA equivalence or passporting rights to the EU/EEA. Mitigation: Operators targeting EU clients can obtain a separate CASP authorisation in an EU member state (full market access via passporting) or, for services provided at the client’s own exclusive initiative only, may fall within the narrow reverse solicitation exemption under MiCA Article 61.
- Custodial AFSL requires AUD 10 million NTA lock-up. Opportunity cost of approximately AUD 300,000 to 500,000 per year. Mitigation: where custody is only incidental to other services, the RG 166 requirement falls to the greater of AUD 150,000 or 10% of average revenue, or to nil for the custody service where a qualifying custodian holds the assets.
- Debanking risk remains material. Banks retain commercial risk discretion, and acceptance is assessed case by case. Mitigation: prepare the business-activity, ownership and control, identity, address, and source-of-wealth or source-of-funds evidence banks request, and treat AUSTRAC registration as a separate legal operating condition rather than a banking guarantee.
- Regulator-by-litigation approach has produced uncertainty. ASIC’s mixed record in Block Earner, Finder Wallet, BPS Financial, and Bit Trade leaves perimeter questions unsettled. Mitigation: Use ASIC’s pre-lodgement and no-action engagement mechanisms; obtain external legal opinions on product classification for novel structures; assess crypto-yield products against the High Court’s [2026] HCA 21 reasoning.
How Australia Compares
Australia’s natural comparators are the other Tier-1 Regulated APAC jurisdictions: New Zealand, Hong Kong, and Singapore. Each operates under a substantial financial regulator with internationally recognised standards; each diverges meaningfully on timeline, capital, tax, and banking access. Estonia is the EU cross-tier reference for operators weighing EU passporting against APAC institutional credibility.
| Factor | Australia | New Zealand | Hong Kong | Singapore |
|---|---|---|---|---|
| Licence Type | AUSTRAC VASP (ex-DCE) + ASIC AFSL + (from 8 April 2027) DAP/TCP | FSPR registration + AML/CFT compliance | SFC VATP + HKMA Stablecoin Issuer + C&ED MSO | MAS Digital Payment Token (DPT) under PSA; MPI licence |
| Regulator | AUSTRAC + ASIC | FMA + DIA | SFC + HKMA + C&ED | MAS |
| Timeline | About 2–5 months for AUSTRAC registration; 7–12 months with an AFSL | FSPR 4–6 months | VATP 12–18 months | More than a year before MAS review; total longer |
| Min. Capital | None (AUSTRAC); AFSL: no general floor, AUD 10m NTA for custodians≈ $7M custodial | None (FSPR) | HKD 5m paid-up; required liquid capital is the higher of HKD 3m and the basic amount (VATP)≈ $640K paid-up; $380K liquid floor | SGD 250,000 (MPI)≈ $200K |
| Year 1 all-in (statutory fees + typical build) | AUD 186,249–505,453 subtotal; add variable levies, additional AFCA charges, and capital lock-up≈ $130K–350K | NZD 41,048–126,048≈ $23K–71K | HKD 6.39m–17.25m operating; capital and liquidity tested separately≈ $810K–2.2M operating | SGD 1.03m–2.7m; capital and MPI deposit held separately≈ $810K–2.1M |
| Corporate Tax | 30% (25% BRE) | 28% | 16.5% standard; 8.25% concessional first HKD 2m | 17% standard; partial exemptions |
| Local Presence | AU-resident director + AML officer + RMs | NZ-resident director (or AU-resident director of an AU company) + in-house compliance officer | HK-resident officers | SG-resident director + executive officer |
| EU Passporting | No | No | No | No |
| FATF Status | Member; clear | Member; clear | Member; clear | Member; clear |
| Institutional Credibility | High; the AFSL is a full financial-services licence and a door-opener in institutional sales | High; FATF-clear, common-law property treatment of crypto (Ruscoe v Cryptopia) | High; Tier-1 financial centre, SFC brand strong for institutional flow | High; MAS grants DPT licences selectively after an evidence-driven review |
| Banking Access | Difficult; de-banking documented; acceptance and timing assessed case by case | Difficult; major banks have de-risked crypto; offshore-facing structures effectively closed | Moderate; easier for licensed VATPs since the 2023 HKMA circular | Moderate; licensed DPT operators: indicative onboarding 2–6 months, subject to bank acceptance |
| Best For | Institutional-grade custody, AUD stablecoin issuers, tokenised RWA platforms, AFSL-credentialled exchanges | Substantively NZ-facing operators wanting a FATF-clear registration route | Established exchanges and stablecoin issuers targeting APAC institutional and retail flow | Institution- and accredited-investor-focused DPT operators valuing MAS supervisory credibility |
Compare every crypto jurisdiction side by side →
Among the four APAC peers in the table, Australia’s AFSL route costs less in Year 1 than the Hong Kong and Singapore licences while still being a full financial-services licence. New Zealand is materially cheaper and faster than the AFSL route, though an FSPR registration is a lighter credential than a full financial-services licence; Hong Kong’s VATP regime is a full SFC licence, but its HKD 5m paid-up capital floor and separate liquid-capital requirement are significant.
Singapore’s MAS regime is the closest peer on credibility and sets demanding local-substance expectations. Australia’s distinguishing features are the statutory DAP framework built into the AFSL regime and the AUD stablecoin precedent under ASIC relief; on treaty coverage it trails Singapore (94 comprehensive agreements in force) and Hong Kong (51 comprehensive agreements in force). For EU passporting, a MiCA CASP authorisation in an EU member state, such as Estonia, remains the route.
When Australia Is the Right Choice
Choose Australia if:
- You are building institutional-grade custody for APAC, Australian, or New Zealand investors and need the AFSL credibility to support institutional onboarding.
- You are issuing an AUD-denominated stablecoin and want to follow the AUDM/AUDF precedent under ASIC’s distribution exemption regime.
- You are tokenising real-world assets (real estate, equities, carbon credits) for Australian retail or wholesale investors and need the forthcoming TCP authorisation framework.
- You need treaty coverage with Australia’s 47 treaty partners for cross-border flows, and the GST treatment of digital currency is material to product economics.
Consider alternatives if:
- Substance is the binding constraint: Dubai VARA is lighter on substance hurdles; its timeline is not reliably shorter than the AFSL route.
- You need EU passporting: Estonia or another EU MiCA jurisdiction provides MiCA CASP authorisation with full EEA market access.
- Your business targets Hong Kong retail clients: consider the Hong Kong SFC VATP regime. A Hong Kong licence does not permit serving Mainland Chinese residents, and any other target market needs its own local-law assessment.
- You are a sole-trader or small operator whose activity would need an AFSL: New Zealand FSPR registration is materially cheaper and faster than the AFSL route.
Australia Company Formation
Form an Australian Pty Ltd with an Australian-resident director, registered office, ABN, and TFN registration, and full FIRB analysis where required.
Open an Australian Crypto Business Account
Banking onboarding for AUSTRAC-registered virtual asset service providers and ASIC AFSL holders, across Australian ADIs, foreign bank branches, and specialist platforms.
Not sure which column is you? Ask Emma. She compares these jurisdictions in seconds, in your language.
Common Mistakes in Australia Applications
ASIC’s published guidance and AUSTRAC’s enforcement record point consistently to a small set of recurring application errors. The Federal Court’s case law and ASIC’s INFO 225 updates flag the same misconceptions in the perimeter analysis. Across the AFSL and AUSTRAC tracks, the highest-frequency mistakes cluster around responsible managers, financial resources, product classification, and substance.
- Misclassifying the product against the financial-product perimeter. Operators frequently assume that a “fiat–crypto on-ramp” sits outside ASIC’s scope and that AUSTRAC registration is sufficient. INFO 225’s October 2025 update lists 18 worked examples; any product offering yield, derivatives, managed staking, asset-referenced stablecoins, or non-cash payment functions is typically a financial product and triggers the AFSL.[7]
- Treating responsible manager identification as a downstream task. ASIC expects at least two responsible managers who meet RG 105, usually with three years’ relevant experience in the past five, and accepts one only in limited cases.[41] Sourcing qualified RMs with digital-asset-relevant experience takes months and is the single most common AFSL bottleneck. Where one RM brings regulated financial-services experience and another digital-asset operational experience, the application has to show how together they cover every authorisation sought.
- Underestimating the financial resources statement. The custodial NTA (AUD 10 million) is the headline figure, but the surrounding documentation (three-year cash flow projections, capital injection evidence, cash-needs analysis under Option 1 of RG 166) is itself 4–8 weeks of specialist work. Generic templates from other jurisdictions do not pass.
- Generic AML/CTF policies adapted from another jurisdiction. AUSTRAC’s substantive assessment is whether the policies reflect the operator’s actual customer base, jurisdictional exposure, and product mix. Policies adapted from a Singapore MAS, MiCA, or BVI template attract RFIs and rejection. The 2025 Rules consolidation requires Australia-specific risk-assessment language.
- Missing the ASIC class no-action letter window. ASIC’s letter supersedes the letter. Its AFSL application route covers only eligible operators that lodged by . Starting the relevant activity in 2026 does not qualify: the letter requires that activity to have begun in Australia by . Do not rely on this window for excluded lending/earn products or derivatives other than wrapped tokens.[35]
- Foreign-resident directors and RMs without substance. ASIC scrutinises whether an Australian-resident director and Australia-domiciled RMs are genuinely engaged with the business. Nominee or pass-through structures attract RFIs and substance questions during AFSL assessment.
Frequently Asked Questions
Yes, if you provide a registrable virtual asset service with a geographical link to Australia under the AML/CTF Act 2006.[37] Digital Currency Exchange registration for exchange between fiat currency and digital currency has been mandatory since . DCE registrations in force immediately before carried over automatically into VASP registrations on that date. Reformed AML/CTF obligations and the compliance officer requirement also began then, subject to applicable transitional arrangements.[34]
The section 12 deferral for the new virtual asset services ended on . These services include crypto-to-crypto exchange, virtual asset transfers, custody, and offer/sale-related financial services. Crypto ATMs and OTC desks are in scope. Under section 14(2), a non-item 50A service may be provided pending a decision only if the registration application was submitted before that provision and by , and AUSTRAC has not given written notice of its decision to register or refuse registration. Item 50A covers exchange between virtual assets and fiat currency.[34] Providing a registrable virtual asset service while unregistered contravenes section 76A: it is an offence and a civil penalty provision, and AUSTRAC may instead issue an infringement notice of 60 penalty units (AUD 21,840 for a body corporate at the AUD 364 penalty unit that applies from ).[37][40]
When the crypto product meets the Corporations Act definition of a “financial product”: derivatives, managed investment schemes, securities, asset-referenced stablecoins, non-cash payment facilities, or “facilities for making a financial investment” under section 763B. ASIC’s updated INFO 225 () lists 18 worked examples covering tokenised securities, yield-bearing stablecoins, managed staking, wrapped tokens, gold-linked tokens, and tokenised real estate.
Bitcoin and similar payment tokens in isolation are typically not financial products, but products built on top of them (yield, derivatives, managed schemes) typically are.
Not on its own. Australia is technology-neutral: a tokenised asset is regulated by what it represents, so if it is a financial product the Corporations Act 2001 applies and an AFSL is required from ASIC. ASIC’s updated INFO 225 (, media release 25-250MR) adds worked examples for tokenised securities, tokenised bonds, and tokenised real estate, while the separate June 2026 no-action letter set as the last date for eligible operators to qualify through its AFSL application route, and only operators that qualified by then keep its relief, until their route-specific end event. The relevant activity must have begun in Australia by ; the letter’s product exclusions and other conditions apply.[35]
Registering or operating as a digital-asset exchange does not authorise dealing in tokenised securities. The standalone Digital Asset Platform and Tokenised Custody Platform categories are enacted but not yet in force: Royal Assent , commencing . Where the wrapper is a fund, the fund licensing guide scopes the route.
Yes, where it provides designated services with a geographical link to Australia. The entity must enrol with AUSTRAC, meet local AML/CTF compliance officer requirements (from ), and operate as a registered foreign company under the Corporations Act with an ABN. An Australian proprietary company is usually simpler: it meets the substance expectations of ASIC and the ATO more easily, and its corporate framework is straightforward. Pure foreign-entity operation is feasible but creates substance and banking friction.
AUSTRAC’s review has typically taken 4 to 12 weeks for clean applications, and longer where remediation, further information, or fit-and-proper questions arise; end to end, with entity formation and go-live, plan for about 2 to 5 months. The statutory 90-day decision period runs from submission via AUSTRAC Online, or afresh from the last day requested information is provided, and can be extended once by up to 30 days.[37] Timing depends on the completeness of the beneficial ownership disclosure, AML/CTF program quality, criminal history checks for key personnel, and substance documentation. The registration renewal cycle is three years. Existing DCE registrations carried over automatically on ; no fresh application was required solely for that change. Their AML/CTF policies must cover the new services they provide under the obligations applicable since .[34]
The DAP regime is a new statutory licensing framework introduced by the Corporations Amendment (Digital Assets Framework) Act 2026, which received Royal Assent and commences . It introduces two new categories of financial product: a digital asset platform (a facility for possessing digital tokens on trust for clients, including exchanges) and a tokenised custody platform (a custodial platform for tokenised real-world assets).
The regime applies subject to exemptions and a six-month licensing transition: under section 1732 the amendments are deferred during that period while the responsible person lacks the relevant AFSL authorisation, and an application made during the transition extends the deferral until the day after ASIC decides.[42] The regime adapts the existing AFSL framework: “same risk, same regulation”.
On , the High Court unanimously allowed ASIC’s appeal in ASIC v Web3 Ventures Pty Ltd [2026] HCA 21. Block Earner’s Earner product was a financial investment facility under section 763B and a derivative under section 761D, requiring an AFSL. This reversed the Full Federal Court’s 2025 financial-product conclusion. The High Court remitted ASIC’s penalty appeal to the Full Federal Court. It did not decide the managed-investment-scheme issue, which ASIC had not appealed. Operators must assess their own product against the statutory tests; a fixed yield does not establish an exemption.[33]
For an AFS licensee providing custodial or depository services in its own right (not as an incidental provider), the net tangible asset requirement under RG 166 and Instrument 2023/648 is the greater of AUD 10 million or 10% of average revenue. At least 50% must be held in cash or cash equivalents, with 100% in liquid assets.
An incidental provider, whose custody serves its other financial services and earns under 10% of its financial-services revenue, needs the greater of AUD 150,000 or 10% of average revenue if it holds the assets itself, and nil for the custody service if a licensed custodian meeting the AUD 10 million test or an eligible custodian holds them.[20] AUSTRAC has no minimum capital requirement.
Separate known fees from variable levies. An online body-corporate AFSL application costs AUD 2,233 to 7,537. AFCA annual registration is AUD 415.57 including GST in 2026–27 where membership applies. ASIC levies depend on the relevant subsectors, and additional AFCA user and complaint fees can apply. AUSTRAC registration is free; its industry contribution can apply to larger entities. There is no fixed all-in annual regulatory fee.[21][52][53]
The build around that is quoted per case, with an indicative planning range of AUD 183,600 to 497,500 in Year 1: legal advisory (AUD 30,000–80,000), compliance documentation (AUD 25,000–60,000), one contracted responsible manager (AUD 50,000–150,000 a year; ASIC expects at least two RMs, and each further contracted RM adds the same), entity formation, audit, and PI insurance. From Year 2 the indicative build range is AUD 128,000 to 355,000. The dominant cost for custodial AFSL holders is neither: the AUD 10 million NTA capital lock-up is held rather than spent, and, on our planning assumption of a 3 to 5% yield deficit against its cost of capital, carries an opportunity cost of about AUD 300,000 to 500,000 per year.
Yes. The Corporations Act 2001 requires at least one Australian-resident director for proprietary companies (section 201A); public companies require two Australian-resident directors. A registered office in Australia is required for both. From , the AML/CTF compliance officer must also be an Australian resident where the services are provided through a permanent establishment in Australia (section 26J(3)).[37] Responsible managers under the AFSL framework are not strictly required to reside in Australia, but ASIC’s substance assessment under RG 105 expects active engagement with the Australian business: nominal RMs domiciled offshore attract scrutiny during licensing review.
ASIC’s INFO 225 () clarifies that native proof-of-stake staking by the asset holder is typically not a financial product. Managed staking and staking-as-a-service are typically financial products, often as managed investment schemes or facilities for making a financial investment under section 763B.
From a tax perspective, the ATO treats staking rewards as assessable ordinary income at fair market value when received, with subsequent disposals attracting CGT. Operators offering managed staking products to retail customers must hold an AFSL with the relevant authorisation and comply with the design and distribution obligations regime.
An Australian AUSTRAC registration or AFSL does not grant EU market access or passporting rights. MiCA Article 61 permits third-country firms to serve EU clients only where the client initiates the service at its own exclusive initiative, and ESMA’s guidelines (published 26 February 2025, applicable from 27 April 2025) list signs that a firm is likely to be regarded as soliciting, such as EU-targeted marketing or geo-targeted advertising, judged on all the facts; a firm that solicits EU clients cannot rely on the exemption. Operators seeking systematic EU market access should obtain a separate CASP authorisation in an EU member state.
Start your Australia crypto licence application
Jagelski & Partners scopes your written brief and introduces an independent specialist who runs the licensing application and banking work. Book a free assessment and we'll map your route to approval.
Not ready to submit a brief? Ask Emma first. She answers now and can collect your written brief for a specialist introduction.
References
Show all references
- Parliament of Australia, Corporations Amendment (Digital Assets Framework) Bill 2025: Explanatory Memorandum, aph.gov.au, accessed .
- Australian Securities and Investments Commission, ASIC Corporations (Stablecoin Distribution Exemption) Instrument 2025/631, as amended by ASIC Corporations (Amendment) Instrument 2025/679 (F2025L01233, registered 7 October 2025), legislation.gov.au; ASIC Corporations (Stablecoin and Wrapped Token Relief) Instrument 2025/867 (F2025L01512, registered 8 December 2025), legislation.gov.au, accessed .
- Reserve Bank of Australia and Digital Finance Cooperative Research Centre, Project Acacia Final Report, rba.gov.au, accessed .
- Australian Taxation Office, Tax treaties, ato.gov.au, accessed .
- AUSTRAC, Register with us as a remittance or virtual asset service provider, austrac.gov.au, accessed .
- Australian Securities and Investments Commission, FAQs: AFS licence applications, asic.gov.au, accessed .
- Australian Securities and Investments Commission, Information Sheet 225: Digital assets: Financial products and services (updated 29 October 2025) and Media Release 25-250MR, asic.gov.au, accessed ; ASIC, ASIC extends no-action position for digital asset businesses to 30 September 2026 and the superseding class no-action letter of 25 June 2026, asic.gov.au, accessed .
- Treasury, Developing an innovative Australian digital asset industry: Statement of 21 March 2025, treasury.gov.au, accessed .
- Treasury, Treasury Laws Amendment (Regulating Digital Asset, and Tokenised Custody, Platforms) Bill 2025: Exposure Draft (25 September 2025), treasury.gov.au, accessed .
- Australian Taxation Office, Crypto asset investments: guidance and TD 2014/26, ato.gov.au, accessed .
- Department of Home Affairs, Anti-Money Laundering and Counter-Terrorism Financing Amendment Act 2024: Overview, homeaffairs.gov.au, accessed .
- Australian Securities and Investments Commission, 26-055MR Binance Australia Derivatives ordered to pay AUD 10 million, asic.gov.au, accessed .
- Australian Securities and Investments Commission, 26-008MR BPS Financial to pay AUD 14 million in penalties over crypto Qoin Wallet, asic.gov.au, accessed .
- Federal Court of Australia, ASIC v Wallet Ventures Pty Ltd [2025] FCAFC 93, austlii.edu.au, accessed .
- Australian Securities and Investments Commission, 25-062MR Full Federal Court finds Block Earner did not engage in unlicensed conduct, asic.gov.au, accessed .
- Federal Court of Australia, ASIC v Web3 Ventures Pty Ltd [2024] FCA 64, austlii.edu.au, accessed .
- Federal Court of Australia, ASIC v Bit Trade Pty Ltd (No 2) [2024] FCA 1422, austlii.edu.au, accessed .
- AUSTRAC, AML/CTF transitional rules update: 2025 Rules consolidation, austrac.gov.au, accessed .
- Ashurst, Consulting on regulating digital asset platforms and tokenised custody platforms, ashurst.com, accessed .
- Australian Securities and Investments Commission, ASIC Corporations (Financial Requirements for Custodial or Depository Service Providers) Instrument 2023/648 and RG 166 (September 2023 edition: RG 166.69 surplus liquid funds; Appendix 2, Table 11; Appendix 4, RG 166.280–288 and Table 15), asic.gov.au, accessed .
- Australian Securities and Investments Commission, Fees for commonly lodged documents (AFS licence application fees from 1 July 2026, Corporations (Fees) Regulations 2001 Schedule 1 item 1), asic.gov.au, accessed .
- Australian Securities and Investments Commission, Fines and penalties, asic.gov.au, accessed .
- Treasury, Government response to Potential Policy Responses to De-banking in Australia (28 June 2023), treasury.gov.au, accessed .
- European Securities and Markets Authority, Guidelines on reverse solicitation under MiCA (ESMA35-1872330276-2030), , esma.europa.eu, accessed .
- Australian Government, Mid-Year Economic and Fiscal Outlook 2025–26, Appendix A, p. 179, budget.gov.au, accessed .
- OECD Global Forum on Transparency and Exchange of Information for Tax Purposes, Jurisdictions committed to implement the Crypto-Asset Reporting Framework, last updated (Australia among the 27 jurisdictions undertaking first exchanges by 2028), oecd.org, accessed .
- Council of Financial Regulators, Potential Policy Responses to De-banking in Australia, (advice provided to the Treasurer in late August 2022), cfr.gov.au, accessed .
- Commonwealth Bank of Australia, Business Transaction Account, commbank.com.au, accessed .
- National Australia Bank, Australian companies checklist, nab.com.au, accessed .
- Westpac, Business One, westpac.com.au, accessed .
- Australian Taxation Office, Crypto assets data-matching program protocol to 2025–26, updated , ato.gov.au, accessed .
- AUSTRAC, Annual compliance reports, updated , austrac.gov.au, accessed .
- High Court of Australia, Australian Securities and Investments Commission v Web3 Ventures Pty Ltd [2026] HCA 21, , paragraphs 9–10, 56, 74–75, hcourt.gov.au, accessed .
- Federal Register of Legislation, Anti-Money Laundering and Counter-Terrorism Financing Transitional Rules 2026, compilation No. 1 dated , sections 6–8 and 12–14, legislation.gov.au, accessed .
- Australian Securities and Investments Commission, Class no-action letter for digital asset businesses, 25 June 2026, paragraphs 1–17, asic.gov.au, accessed .
- Federal Register of Legislation, Anti-Money Laundering and Counter-Terrorism Financing Amendment Act 2017 (No. 130, 2017), section 2 commencement table (whole Act commenced , F2018N00019) and Schedule 1 Part 2 (digital currencies), legislation.gov.au, accessed .
- Federal Register of Legislation, Anti-Money Laundering and Counter-Terrorism Financing Act 2006, compilation No. 62 dated , section 5 (definitions of “registrable virtual asset service” and “threshold transaction”), Part 1A (AML/CTF programs and compliance officers, including section 26J), section 41 (suspicious matter reports: 24 hours for terrorism financing, otherwise generally 3 business days), section 46 (reports of international value transfer services), sections 76A and 76D (unregistered virtual asset services and offence tiers; 90-day decision period, extension and deemed refusal), section 175 (civil penalty orders) and section 186A (infringement notices), legislation.gov.au, accessed .
- AUSTRAC, AML/CTF transitional rules 2026 (IFTI reports continue under the pre-reform Act and Rules until the IVTS reporting transition date of 31 March 2029, or a substitute date no later than 30 September 2029), austrac.gov.au, accessed .
- Australian Securities and Investments Commission, ASIC service charter (AFS licence decisions: 70% of complete applications within 150 days, 90% within 240 days), asic.gov.au, accessed .
- Federal Register of Legislation, Crimes (Amount of a Penalty Unit) Instrument 2026 (F2026N00424), section 5 (AUD 364 for offences committed on or after 1 July 2026), legislation.gov.au, accessed .
- Australian Securities and Investments Commission, Regulatory Guide 105 AFS licensing: Organisational competence (June 2022), RG 105.49–105.51 and Table 1, asic.gov.au, accessed .
- Federal Register of Legislation, Corporations Amendment (Digital Assets Framework) Act 2026 (No. 38, 2026), section 2 and Schedule 1 items 67 (section 911A(2)(ja)–(jb)) and 98 (sections 1730–1732), legislation.gov.au, accessed .
- Australian Securities and Investments Commission, ASIC’s roadmap for digital assets law reform implementation, 20 April 2026, asic.gov.au, accessed .
- Treasury, Income Tax Treaties (47 jurisdictions; last updated 24 March 2026), treasury.gov.au, accessed .
- Federal Register of Legislation, Treasury Laws Amendment (Tax Reform No. 1) Act 2026 (No. 49, 2026, assented to 26 June 2026), Schedule 1 (CGT adjustments), legislation.gov.au, accessed .
- Federal Register of Legislation, Taxation (Multinational–Global and Domestic Minimum Tax) Act 2024 (No. 132, 2024), section 12 (Applicable MNE Group: annual revenue of EUR 750 million or more in at least 2 of the 4 preceding Fiscal Years), legislation.gov.au, accessed .
- Financial Action Task Force, Jurisdictions under Increased Monitoring and High-Risk Jurisdictions subject to a Call for Action, 19 June 2026, fatf-gafi.org, accessed .
- Australian Taxation Office, GST and digital currency, ato.gov.au, accessed .
- Office of the Australian Information Commissioner, Statutory tort for serious invasions of privacy (commencement on 10 June 2025; Schedule 2 of the Privacy Act), oaic.gov.au, accessed .
- Federal Register of Legislation, Privacy and Other Legislation Amendment Act 2024 (No. 128, 2024, assented to 10 December 2024), Schedule 2 (serious invasions of privacy), legislation.gov.au, accessed .
- Cyber and Infrastructure Security Centre, SOCI Act regulatory obligations (reporting cyber incidents with a relevant or significant impact on a critical infrastructure asset: 12 hours for a significant impact, 72 hours for a relevant impact, after becoming aware; only asset classes listed in the SOCI (Application) Rules must report), cisc.gov.au, accessed .
- Australian Securities and Investments Commission, Cost Recovery Implementation Statement 2025–26 (subsector-specific flat and graduated levies; estimates versus final regulatory costs), asic.gov.au, accessed .
- Australian Financial Complaints Authority, Scams Prevention Framework Membership (2026–27 annual AFCA registration fee, including GST), afca.org.au; Membership renewal and FY27 fees (annual, user and complaint fees), afca.org.au, accessed .
- Australian Taxation Office, Income Tax Rates Act 1986, section 23AA (both base rate entity conditions), ato.gov.au, accessed .