Why Choose Australia for Crypto Licensing?
Australia offers the most institutionally credible crypto licensing pathway in the Asia-Pacific region outside Singapore and Hong Kong. The Australian Financial Services Licence is internationally recognised as a gold-standard authorisation, the tax-treaty network covers more than 40 jurisdictions, and the country operates under English common law with a transparent regulator that publishes detailed guidance. Two AUD-denominated stablecoins are already in market under ASIC’s distribution exemption.
AFSL Credibility Compounds in Institutional Sales Cycles
The Australian Financial Services Licence sits in the same regulatory tier as the Singapore MAS Major Payment Institution licence and the Hong Kong SFC VATP licence in the eyes of global institutional counterparties. Two responsible managers, full Chapter 7 conduct obligations, statutory breach reporting under section 912DAA, and AFCA membership combine into a credential that materially shortens institutional due diligence for the next round of B2B counterparty conversations.
For operators selling to family offices, super funds, or international asset managers, the AFSL is the regulatory door-opener that AUSTRAC registration alone is not.
Statutory DAP Regime Replaces Regulatory Improvisation
The Corporations Amendment (Digital Assets Framework) Act 2026 received Royal Assent on and commences .[1] Australia is the first major common-law APAC jurisdiction to enact a statutory crypto-platform framework that integrates with the existing financial services licensing regime rather than running alongside it. The “same risk, same regulation” principle adapts the AFSL framework to digital asset platforms and tokenised custody platforms, rather than creating a separate parallel regime.
For operators planning a multi-year build, the statutory framework provides legal certainty that VARA’s Rulebook-amendment cycle and the SFC’s circular-based regime do not.
AUD Stablecoin and Tokenised RWA Precedents
ASIC Corporations (Stablecoin Distribution Exemption) Instrument 2025/631 was made on (commenced ) and as made named AUDM, issued by Catena Digital Pty Ltd, as the first AUD-denominated stablecoin operative under the AFSL distribution exemption. AUDF, issued by Forte Securities Australia Pty Limited, was added by ASIC Corporations (Amendment) Instrument 2025/679, registered and commencing , so two AUD-denominated stablecoins now sit inside the exemption; the Instrument sunsets .[2]
Project Acacia is the Reserve Bank of Australia and Digital Finance Cooperative Research Centre joint research programme on tokenised asset settlement. Industry participants were selected on ; testing covered 24 use cases (19 pilot + 5 proof-of-concept) across Hedera, Redbelly Network, R3 Corda, Canvas Connect, and EVM-compatible networks; the final report was published by the RBA and DFCRC on .[3] In practice, this means an AUD stablecoin issuer arriving in Australia in 2026 lands into an ecosystem with live precedents, ASIC relief mechanisms via legislative instrument, and direct regulator engagement on tokenised settlement infrastructure: a depth of operational context that emerging jurisdictions cannot match.
Deep Tax-Treaty Network Reduces Withholding Friction
Australia’s tax-treaty network is among the deepest globally. The ATO confirms comprehensive treaties with more than 40 jurisdictions, including the US, UK, Germany, France, Japan, Singapore, Hong Kong, South Korea, and India.[4] For an Australian-domiciled crypto operator paying interest, royalties, or service fees to overseas counterparties, or receiving the same, treaty rates often reduce the standard 10 percent interest withholding, 30 percent royalty withholding, and 30 percent unfranked dividend withholding to single digits.
Compared with offshore jurisdictions where withholding leakage can erode 5–15 percent of cross-border cash flows, the treaty depth is a quantifiable structural advantage.
Regulatory Framework
Australia regulates crypto businesses through two operative regulators and a third statutory regime that commences in . AUSTRAC supervises anti-money-laundering obligations under the AML/CTF Act 2006; ASIC supervises any crypto product that qualifies as a financial product under Chapter 7 of the Corporations Act 2001; and the Digital Asset Platform regime takes effect .
Australia Crypto Licensing Defined
Australian crypto licensing is the combined regulatory authorisation required to operate a digital asset business with a geographical link to Australia. It comprises: AUSTRAC registration under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (Digital Currency Exchange registration today, expanding to Virtual Asset Service Provider registration from ); an ASIC Australian Financial Services Licence (AFSL) under the Corporations Act 2001 (Cth) where the crypto product is a financial product; and from , a Digital Asset Platform or Tokenised Custody Platform authorisation under the Corporations Amendment (Digital Assets Framework) Act 2026 (Cth). Crypto assets are taxed as CGT assets by the Australian Taxation Office and digital currency supplies have been GST-exempt since .
Dual-Regulator Structure (and the Third Statutory Layer)
AUSTRAC is the Australian Transaction Reports and Analysis Centre, the financial intelligence unit established under the Australian Transaction Reports and Analysis Centre Act and operating the AML/CTF supervisory regime under the AML/CTF Act 2006.[5] AUSTRAC operates the AUSTRAC Online enrolment and registration portal. Its enforcement powers include registration refusal, suspension or cancellation, civil penalty proceedings, and criminal referral. Daily penalties of up to 60 penalty units (AUD 19,800 per day from ) apply to unregistered Digital Currency Exchange conduct.
ASIC is the Australian Securities and Investments Commission, the corporate, markets, financial services, and consumer credit regulator established under the ASIC Act 2001 and operating principally under the Corporations Act 2001.[6] ASIC’s active crypto guidance corpus comprises Information Sheet 225 Digital assets: Financial products and services (updated ), Regulatory Guide 105 AFS licensing: Organisational competence, RG 133 Funds management and custodial services: Holding assets, and RG 166 AFS licensing: Financial requirements.[7] The ASIC eLicensing system was retired and replaced by the ASIC Regulatory Portal for all AFSL applications and variations.
Treasury, the RBA, and the ATO complete the regulatory architecture. Treasury is policy lead on the DAP regime and released the Statement on Developing an Innovative Australian Digital Asset Industry on ,[8] followed by the exposure draft of the Treasury Laws Amendment (Regulating Digital Asset, and Tokenised Custody, Platforms) Bill 2025 on with consultation closing .[9] The Reserve Bank of Australia ran Project Acacia Phase 2 (industry participants selected ; final report published ) on tokenised settlement and wholesale CBDC.[3] The ATO administers tax, classifying crypto as a CGT asset under Tax Determination TD 2014/26.[10]
Recent Regulatory Developments
- : Corporations Amendment (Digital Assets Framework) Act 2026 receives Royal Assent, introducing the statutory DAP and TCP regimes with commencement and full supervision approximately October 2028 after a six-month transition.[1]
- : ASIC issues a class no-action letter that supersedes and extends the 29 October 2025 letter: the window to lodge an AFSL application or variation runs to , and the position is widened to digital-asset businesses operating under, or entering into, authorised representative arrangements with an AFS licence holder and intermediary authorisation arrangements. Australian Market Licence and clearing and settlement facility applicants were already inside the October 2025 letter; June extended their deadline.[7]
- : AML/CTF program, governance, and CDD reforms commence for existing reporting entities under the AML/CTF Amendment Act 2024; existing DCEs auto-roll into VASP status; AML/CTF compliance officer requirement begins.[11]
- : Project Acacia final report published by the RBA and DFCRC (media release mr-26-13), covering 24 use cases (19 pilot, 5 proof-of-concept) tested across Hedera, Redbelly Network, R3 Corda, Canvas Connect, and EVM-compatible networks.[3]
- : Binance Australia Derivatives ordered to pay AUD 10 million in ASIC v Oztures Trading Pty Ltd [2026] FCA 509 for client misclassification, on top of AUD 13.1 million in client compensation paid in 2023 and the 2023 AFSL surrender.[12]
- : BPS Financial ordered to pay AUD 14 million in ASIC v BPS Financial Pty Ltd (Penalty) [2026] FCA 18 for unlicensed financial services in respect of the Qoin Wallet, treated as a non-cash payment facility.[13]
- : ASIC publishes updated INFO 225 with 18 worked examples of digital asset classification (up from 13), plus a class no-action letter offering interim AFSL relief through conditional on lodging an application by that date; superseded on .[7]
- : Treasury releases the DAP exposure draft.[9]
- : Full Federal Court dismisses ASIC’s Finder Wallet appeal in ASIC v Wallet Ventures Pty Ltd [2025] FCAFC 93, confirming that Finder Earn is not a debenture.[14]
- : Full Federal Court overturns Block Earner financial-product finding in ASIC v Web3 Ventures Pty Ltd [2025] FCAFC 58.[15]
- : High Court grants ASIC special leave to appeal the Block Earner decision; substantive appeal pending as of .
- : AML/CTF Amendment Act 2024 receives Royal Assent, extending the regulated services to crypto-to-crypto exchange, virtual asset transfers, safekeeping, and Tranche 2 designated non-financial businesses (effective ).[11]
Regulatory Overlap
| Regime | Trigger | Practical consequence |
|---|---|---|
| AML/CTF Act 2006 | Providing a designated service with a geographical link to Australia | Mandatory AUSTRAC enrolment and registration; AML/CTF program; CDD; threshold and suspicious reporting; sanctions screening |
| Corporations Act 2001 (Chapter 7) | Offering a “financial product”: yield, derivatives, tokenised securities, managed staking, asset-referenced stablecoins, non-cash payment facilities | AFSL or operation under an authorised representative; design and distribution obligations; AFCA membership for retail offerings |
| Digital Assets Framework Act 2026 | Operating a digital asset platform that holds client tokens (DAP) or a tokenised custody platform (TCP), from | Tailored AFSL with DAP/TCP authorisation; financial requirements; facility guide and contract; ASIC standard-setting via legislative instrument |
| Privacy Act 1988 | Holding personal information of Australian customers | Australian Privacy Principles compliance; statutory tort for serious privacy invasions (from ); tiered civil penalties |
| Security of Critical Infrastructure Act 2018 | Designated as a critical infrastructure asset (financial services sector, including substantial exchange operators) | Mandatory cyber-incident reporting within 12 hours; positive security obligations |
Court Decisions Shaping the Perimeter
Between 2024 and 2026 the Federal Court has produced a coherent body of crypto-asset case law that defines the financial-product boundary. ASIC’s first-instance liability win in ASIC v Web3 Ventures Pty Ltd [2024] FCA 64[16] was overturned on appeal in [2025] FCAFC 58, narrowing the “managed investment scheme” reading for fixed-yield crypto products. The Full Court also dismissed ASIC’s Finder Wallet appeal in [2025] FCAFC 93, rejecting the “debenture” characterisation.
ASIC’s wins came on different ground: the Qoin Wallet as a non-cash payment facility (ASIC v BPS Financial Pty Ltd [2024] FCA 457; penalty [2026] FCA 18), the Kraken margin product as a credit facility under design and distribution obligations (ASIC v Bit Trade Pty Ltd [2024] FCA 953; penalty [2024] FCA 1422),[17] and Binance Australia Derivatives client misclassification ([2026] FCA 509). The editorial position: the Federal Court has imposed a high evidentiary bar on ASIC’s expansionary readings of “managed investment scheme” and “debenture”, while affirming a wide reading of “credit facility”, “non-cash payment facility”, and the DDO regime.
Operators planning yield, structured products, or margin functionality should expect ASIC scrutiny on the perimeter but a court that will require precise statutory fit.
Regulatory Transition: AUSTRAC DCE to VASP and Current Regime to DAP/TCP
Australia is mid-transition on two regulatory axes simultaneously. AUSTRAC is expanding its Digital Currency Exchange registration into a broader Virtual Asset Service Provider regime in two waves on and . Separately, the statutory Digital Asset Platform regime commences with full supervision approximately October 2028 after a six-month transition window.
The AUSTRAC Transition (DCE to VASP)
The AML/CTF Amendment Act 2024 received Royal Assent on and replaces the narrow “digital currency” concept with the broader “virtual asset” term from FATF.[11] Three categories of designated services come into scope, on two effective dates:
- From (existing reporting entities including DCEs): reformed AML/CTF program, governance, and CDD obligations commence; the AML/CTF compliance officer requirement begins; and existing DCEs auto-roll into VASP status. The new virtual asset designated services are NOT yet in scope on this date.
- From (new VASP services): virtual asset transfers on behalf of customers, virtual asset safekeeping (custody), and participation in or financial services related to the offer or sale of virtual assets all become designated services. Tranche 2 designated non-financial businesses (lawyers, accountants, real estate agents, dealers in precious stones) also enter the AML perimeter on the same date.
- From : the FATF Recommendation 16 travel rule becomes effective for virtual asset transfers.
The 2025 AML/CTF Rules consolidate the former Part A risk assessment and Part B customer identification procedures into unified “AML/CTF policies”.[18] Existing reporting entities have a three-year transition window to to migrate to the new initial CDD obligations.
The DAP/TCP Transition (Current Regime to Statutory Framework)
The Corporations Amendment (Digital Assets Framework) Act 2026 introduces two new categories of financial product under Chapter 7 of the Corporations Act 2001:
- A digital asset platform (DAP) is a facility for possessing digital tokens on trust for clients, including exchanges.
- A tokenised custody platform (TCP) is a specialised custodial platform for tokenised real-world assets, the digital twin of an off-chain asset such as real estate, equities, or carbon credits.
A low-value exemption applies to a DAP that holds no more than AUD 5,000 per client AND facilitates less than AUD 10 million in transactions over a rolling 12-month period AND does not hold financial products under any DAP in its group AND has lodged notice with ASIC.[19] An incidental/insignificant exemption applies to businesses where digital asset activity is genuinely ancillary to a non-financial-services business.
Financial requirements are not hard-coded in the Act. They are delegated to ASIC standard-setting via legislative instrument, expected to be consulted on during the 18-month implementation window (approximately October 2026 to April 2027). Practitioner expectation is alignment with RG 166’s existing custodial settings (AUD 10 million NTA for substantive custodial DAPs).
Key Deadlines
| Milestone | Date | Impact |
|---|---|---|
| AUSTRAC reformed obligations commence for existing reporting entities | AML/CTF program, governance, and CDD reforms apply; DCEs auto-roll into VASP status; AML/CTF compliance officer mandatory in Australia | |
| ASIC class no-action letter window (extended 25 June 2026) | An AFSL application or variation must be lodged by this date to retain interim relief | |
| New VASP designated services commence (transfers, custody, offer/sale services) | Newly regulated VASPs must enrol with AUSTRAC; travel rule effective; Tranche 2 services in scope | |
| Final enrolment/registration deadline for newly regulated entities | Operating an unregistered VASP after this date triggers daily penalties up to AUD 19,800≈ $14K | |
| DAP/TCP regime commences | DAPs and TCPs become financial products; six-month transition begins | |
| Full DAP/TCP supervision | Approximately | Conduct obligations apply in full; ASIC begins enforcement |
| Initial CDD transition for existing reporting entities ends | All entities on the consolidated 2025 Rules framework |
Practical implications. Existing AUSTRAC DCEs must (i) refresh their AML/CTF program, governance, and CDD frameworks to meet the reformed 2025 Rules by and appoint a locally resident AML/CTF compliance officer by the same date; (ii) extend that AML/CTF program to cover the new virtual asset designated services (crypto-to-crypto exchange, transfers, custody, offer/sale) before ; (iii) if their product touches custody, yield, derivatives, tokenised securities, or asset-referenced stablecoins, lodge an AFSL application by to preserve the class no-action letter; and (iv) plan for DAP authorisation by mid-2027.
New entrants in 2026 should target a parallel AUSTRAC enrolment + AFSL application + entity formation + banking onboarding sequence rather than a sequential one.
License Types and Activities Covered
Australia has no single “crypto licence”. It has a layered authorisation perimeter: AUSTRAC registration is universal for any service with a geographical link to Australia; ASIC’s AFSL is required where the crypto product is a financial product under the Corporations Act; an Australian Market Licence is required if the platform meets the “financial market” definition; and from 2027 the DAP and TCP authorisations apply.
Covered Activities
- AUSTRAC Digital Currency Exchange (DCE) registration. Required since for any business providing a designated service with a geographical link to Australia. From , existing DCE registrations automatically roll into VASP status with reformed AML/CTF program, governance, and CDD obligations. From , the regulated perimeter expands to the new virtual asset designated services: crypto-to-crypto exchange, virtual asset transfers, virtual asset safekeeping, and offer/sale-related financial services. Crypto ATMs and OTC desks are in scope.
- ASIC Australian Financial Services Licence (AFSL). Required where the crypto product meets the Corporations Act definition of a “financial product”: derivatives, managed investment schemes, securities, non-cash payment facilities, or “facilities for making a financial investment” under section 763B. Relevant authorisations: deal in financial products, provide financial product advice (general or personal), operate a registered managed investment scheme, make a market, provide custodial or depository services.
- Australian Market Licence (AML) under Part 7.2 of the Corporations Act. Required where a crypto exchange meets the “financial market” definition: a facility through which offers to acquire or dispose of financial products are regularly made. ASIC’s INFO 225 class no-action letter provides parallel relief for AMLs where an intention to apply is notified.
- Clearing and Settlement Facility Licence (CSFL) under Part 7.3. Required for facilities providing regular clearing or settlement of transactions in financial products.
- DAP and TCP authorisations (from ). Tailored AFSL authorisations under the new framework. A DAP is a facility for possessing digital tokens on trust for clients; a TCP is a custodial platform for tokenised real-world assets.
What Does NOT Require Registration
- Native proof-of-stake staking by the asset holder. ASIC’s INFO 225 clarifies that native staking is typically not a financial product, although managed staking and staking-as-a-service typically are (often as managed investment schemes or facilities for making a financial investment).[7]
- Operating public, permissionless ledgers. Exempted under the DAP regime.
- Certain aspects of staking arrangements. Exempted under the DAP regime, subject to conditions.
- Wrapped-token arrangements. Treated as exempted in defined circumstances under the DAP regime, although wrapped tokens at large are typically derivatives per INFO 225.
- Bitcoin and similar payment tokens (in isolation). Characterised by ASIC as unlikely to be financial products, though the analysis changes for products built on top of them (yield, derivatives, managed schemes).
- Genuinely ancillary digital asset activity. Where digital asset activity is genuinely ancillary to a non-financial-services business, the DAP regime’s incidental/insignificant exemption applies.
DAO, DeFi, and Tokenised RWA Treatment
ASIC’s updated INFO 225 includes 18 worked examples covering tokenised real estate, tokenised securities, gold-linked tokens, wrapped tokens, and managed staking. Tokenised securities are financial products by direct extension of Chapter 7; tokenised real estate is typically a managed investment scheme; gold-linked tokens are typically derivatives or asset-referenced stablecoins.
ASIC’s enhanced regulatory sandbox under ASIC Corporations (Concept Validation Licensing Exemption) Instrument 2020/389 supports bespoke tokenisation experiments, and ASIC’s relief power under sections 926A and 911A allows targeted exemptions for novel structures. Tokenised RWA platforms are the most natural fit for the forthcoming TCP authorisation.
Tokenised securities and RWA
Australia regulates a token by what it represents, not by the technology it runs on. Where a tokenised asset is a financial product, the Corporations Act 2001 applies and an AFSL is required from ASIC, with the INFO 225 no-action window (above) the route to interim relief.
The honest point: registering or operating as a digital-asset exchange does not authorise dealing in tokenised securities. Those need an AFSL under the Corporations Act, and the standalone Digital Asset Platform and Tokenised Custody Platform categories are enacted but not yet in force: the Corporations Amendment (Digital Assets Framework) Act 2026 received Royal Assent on and commences . Where the structure is a fund rather than a single security, see our fund licensing work.
Requirements
Australian crypto licensing requirements depend on the regime. AUSTRAC has no minimum capital but requires beneficial ownership disclosure, fit-and-proper testing, and an AML/CTF program. The AFSL imposes net tangible asset thresholds that scale dramatically for custodial business (AUD 10 million), requires at least two responsible managers with documented competence, and demands an Australian-resident director and registered office.
| Requirement | AUSTRAC Registration | ASIC AFSL |
|---|---|---|
| Australian-resident director | Required (Corporations Act 2001) | Required (and key personnel under RG 105) |
| Registered office in Australia | Required | Required |
| AML/CTF compliance officer in Australia | Required from | n/a (RG 78 breach reporting applies) |
| Beneficial ownership disclosure | Required | Required |
| Minimum capital | None | AUD 50,000 base NTA; AUD 10 million NTA for custodial AFSL≈ $36K base; $7.2M custodial |
| Responsible managers | n/a | Minimum 2; RG 105 “five years in last eight” experience standard |
| Fit-and-proper assessment | Directors, key personnel, beneficial owners | Directors, RMs, beneficial owners |
| AML/CTF program | Required | Required where AFSL holder also has AML obligations |
| Professional indemnity insurance | Not required | RG 126 PI cover required for retail AFSL holders |
| AFCA membership | n/a | Mandatory for retail-client AFSL holders |
| Minimum directors | 1 (Pty Ltd); 2 Australian-resident for public companies | Same |
| Foreign ownership | Permitted; FIRB approval may be required at thresholds | Same |
Fit-and-Proper Assessment
AUSTRAC applies fit-and-proper tests to directors, key personnel, and beneficial owners as part of registration. National criminal history checks (typically dated within 6 months) are mandatory, with foreign police checks required where the individual has resided overseas. ASIC’s fit-and-proper analysis under section 913B is broader: it covers the licensee, its responsible managers, and “controllers” of the licensee.
Section 913B(1)(b) lets ASIC refuse a licence where there is reason to believe an officer will not comply with general obligations under section 912A. The common mistake is treating fit-and-proper as a box-tick exercise: ASIC’s substantive assessment includes prior regulatory dealings, civil judgements, and the quality of the licensee’s own due diligence on its directors.
Local Presence and Substance
At least one director ordinarily resident in Australia is required for proprietary companies under section 201A of the Corporations Act 2001; public companies require two Australian-resident directors. A registered office in Australia is required for both. From the AML/CTF compliance officer must be in Australia. Responsible managers are not statutorily required to reside in Australia, but ASIC scrutinises substance over form: RMs domiciled offshore without active engagement with the Australian business have been challenged in licensing reviews. Experienced applicants treat the RM identification process as the critical-path item and begin sourcing 6–12 months before lodgement, because the AFSL evidentiary bar on RM competence (RG 105) is meaningful and contractor RMs run AUD 50,000 to 150,000 per year per RM.
AML/CFT, Travel Rule, and Sanctions
The AML/CTF program (becoming consolidated “AML/CTF policies” under the 2025 Rules) must include enterprise-wide risk assessment, customer identification procedures, ongoing customer due diligence, transaction monitoring, threshold transaction reporting (TTRs for transactions over AUD 10,000), suspicious matter reporting (SMRs), and international funds transfer instruction (IFTI) reporting. From the FATF Recommendation 16 travel rule applies to virtual asset transfers.
AUSTRAC Rule 5-3 (2025 Rules) extends sanctions screening obligations from money, property, and virtual assets to “any assets”. Sanctions compliance must cover DFAT’s consolidated list, UN sanctions under the Charter of the United Nations Act 1945, and targeted financial sanctions under the Autonomous Sanctions Act 2011.
Capital and Financial Requirements (AFSL detail)
AFSL holders providing custodial or depository services in their own right must meet the financial requirements in ASIC Corporations (Financial Requirements for Custodial or Depository Service Providers) Instrument 2023/648 and RG 166 Appendix 4: net tangible assets (NTA) of the greater of AUD 10 million or 10% of average revenue, with at least 50% held in cash or cash equivalents (minimum AUD 150,000), 100% in liquid assets, and daily monitoring with immediate breach notification.[20] Incidental custody providers face NTA of the greater of AUD 150,000 or 10% of average revenue.
Responsible entities, IDPS operators, and corporate directors of retail CCIVs face NTA of the greater of AUD 10 million, 0.5% of average value of scheme property up to AUD 5 million, or 10% of average revenue.
Sub-custody outsourcing to an Australian ADI or licensed professional trustee company qualifies the operator as an incidental provider with the lower threshold. The real constraint for most operators is not the regulatory test itself, it is the cost of capital on the AUD 10 million NTA lock-up, which at a 3–5% yield deficit against the operator’s cost of capital implies AUD 300,000 to 500,000 per year in opportunity cost.
Application Process
The Australian application process has two parallel tracks: AUSTRAC enrolment and registration via AUSTRAC Online (4–12 weeks for clean applications) and ASIC AFSL application via the ASIC Regulatory Portal (5–8 months realistic from a complete lodgement). ASIC aims to decide within 120 days but observed timelines for crypto-related applications routinely run longer, particularly where responsible manager evidence requires further information.
Application language: English.
Pre-application engagement: ASIC offers pre-lodgement meetings on novel applications and digital-asset-specific queries; AUSTRAC offers pre-enrolment guidance through AUSTRAC Online support. Use both.
Entity Formation
Forming an Australian entity is the first step: see the full Australia company formation guide. Most operators incorporate an Australian proprietary company under the Corporations Act 2001. Confirm at least one Australian-resident director, secure a registered office, allocate share capital, and complete ASIC company registration. Tax residency analysis (incorporated in Australia, or central management and control in Australia) should be settled before share issuance.
AUSTRAC Enrolment and Registration
Enrol with AUSTRAC Online and complete the DCE registration form. Required documentation: business structure, beneficial ownership disclosure, AML/CTF program, risk assessment, national criminal history checks for key personnel. AUSTRAC fit-and-proper assessment runs in parallel. Re-registration cycle is three years; annual compliance report is due 31 March each year.
AFSL Preparation (specialist work)
Where the product is a financial product: prepare the proof pack for the ASIC Regulatory Portal. This includes business description, financial resources statement (including NTA documentation), organisational expertise statement, responsible manager profiles (minimum two RMs meeting RG 105), compliance arrangements, risk management framework, conflicts of interest policy, dispute resolution arrangements, and auditor appointment. The AFSL application has been mandatory through the Regulatory Portal since .
AFSL Lodgement and Assessment
Lodge through the Regulatory Portal. ASIC’s 120-day service standard target is rarely met for crypto matters; realistic 5–8 months from a complete lodgement. ASIC’s first review pass typically produces a request for further information within 8–12 weeks. The largest sources of RFI are responsible manager evidence and the financial resources statement. Engage proactively with the case officer; ASIC’s review is iterative.
Banking and Operational Onboarding (parallel)
Open client-money and operational banking with an Australian Authorised Deposit-taking Institution (ADI), and if relevant, an overseas correspondent bank for AUD/USD/EUR flows. AFCA membership for retail-client AFSL holders.
Compliance Documentation and Go-Live
Finalise AML/CTF policies under the 2025 Rules consolidation. Implement the travel rule by if not already in place. Run the breach-reporting framework under section 912DAA and RG 78. Conduct the first annual compliance report (AUSTRAC) due of the following year. The AFSL is granted as a written instrument; ASIC publishes the licensee on the public register.
Jagelski & Partners’ specialist compliance partners draft Australia-specific AML/CTF policies, the enterprise-wide ML/TF/PF risk assessment, the responsible-manager competence pack, and the AFSL financial-resources statement as part of the licensing engagement. The compliance documentation is the most time-intensive component of any Australian AFSL application: 8 to 16 weeks of specialist work that cannot be shortcut with generic templates. Discuss your scope →
Required Documents
Required documents for Australian crypto licensing span four categories: corporate and constitutional documents for the Australian entity, personal documents for directors, responsible managers, and beneficial owners, an extensive compliance documentation pack, and business plan with three-year financial projections. ASIC’s Regulatory Portal and AUSTRAC Online accept lodgement digitally, with all supporting evidence uploaded as part of the structured application form.
Corporate Documents
ASIC company registration (Form 201), constitution or replaceable rules, share register, register of members, registered office details, ABN registration with the ATO, and TFN registration. For foreign-controlled entities, FIRB notification or approval where applicable. The Corporations Act 2001 requires at least one Australian-resident director for proprietary companies and two for public companies (section 201A).
Personal Documents (Directors, Responsible Managers, UBOs)
Certified copies of passports for all directors, RMs, and beneficial owners. National Police Certificates dated within 6 months. Foreign police checks for individuals who have resided overseas. Bankruptcy and insolvency check (AFSA). Statutory declarations of solvency. CVs and evidence of regulated-industry experience for RMs (the “five years in the last eight” RG 105 standard). Where an individual has held a financial services position in the prior 5 years, references, and conduct evidence from the prior licensee.
Compliance Documentation
The compliance documentation is the most heavily scrutinised component of any Australian AFSL application. Jagelski & Partners’ specialist compliance partners draft each of these documents as part of the licensing engagement: bespoke and Australia-specific, not templates adapted from other jurisdictions. Each document must reflect the applicant’s specific business model, risk profile, and operational structure.
Under the AML/CTF Amendment Act 2024 and 2025 Rules, the former Part A risk assessment and Part B customer identification procedures consolidate into unified “AML/CTF policies”. For Australian crypto operators, the policy must reflect the reformed 2025 Rules from (AML/CTF program, governance, CDD; compliance officer in Australia) and explicitly cover the new virtual asset designated services from (crypto-to-crypto exchange, transfers, custody, offer/sale).
AUSTRAC’s supervisory focus is whether the policies are tailored to the specific business, not adapted from templates. The most common cause of RFI is generic policy language that does not reflect the operator’s actual customer base and transaction patterns.
Mandatory under the 2025 Rules. AUSTRAC’s view is that risk assessment must be granular: customer categories, jurisdictional exposure with named higher-risk countries, product risk by feature (custody, yield, derivatives), and channel risk (web, API, in-person, agent network). The assessment must be refreshed at least annually and trigger reviews on material business change.
Documented appointment of the AML/CTF compliance officer (Australian resident from ), with role description, governance reporting line, and escalation pathway.
AUSTRAC Rule 5-3 (2025 Rules) extends sanctions screening obligations to “any assets” rather than just money, property, and virtual assets. Procedures must address screening at customer onboarding, ongoing rescreening on list updates, transaction screening, and the handling of true matches (freeze, report to DFAT). Australian sanctions are administered separately from US OFAC sanctions; operators serving US-resident customers must run both screens.
The 2025 Rules introduce new initial CDD obligations replacing the prior ACIP framework. Existing reporting entities have a transition window to to migrate. KYB procedures for institutional customers must verify control structures, ultimate beneficial owners (typically 25% threshold), source of funds and source of wealth for higher-risk relationships.
Rules-based and behavioural monitoring covering threshold transactions, suspicious patterns, and FATF-defined typologies.
Australia’s travel rule applies to virtual asset transfers from . The originating VASP must collect and transmit originator name, account/wallet identifier, and address; beneficiary VASP must collect and verify beneficiary information. Cross-border transfers face the additional layer of correspondent-VASP relationships. The operational reality: existing reporting entities should have a tested travel-rule solution in production by mid-2026.
Procedures for reporting transactions over AUD 10,000 (TTRs), international funds transfer instructions (IFTIs), and statistical reports.
Threshold for SMR (reasonable suspicion), internal escalation, AUSTRAC reporting timeline (3 business days for terrorism financing; 3 business days for money laundering).
Procedures for completing the annual AUSTRAC compliance report due each year covering the preceding calendar year.
Australian Privacy Principles compliance, data breach response plan under the Notifiable Data Breaches scheme, and (where applicable) statutory tort risk management following the Privacy Act amendments.
ASIC’s reportable situations regime is substantively broader than the prior breach regime. RG 78 enumerates the categories of reportable situations including significant breaches of core obligations, conduct that constitutes gross negligence, and reportable situations relating to other licensees and individual financial advisers. The 30-calendar-day clock starts when the licensee knows or ought reasonably to know the situation has arisen.
Business Plan and Financial Projections
Three-year financial projections covering revenue, expenses, capital expenditure, and cash flow. NTA documentation showing compliance with the relevant RG 166 requirement (base AFSL, custodial, responsible entity tiers). Funding evidence (capital injection, parent company support, debt). Operating model description including business lines, customer segments, jurisdictional reach, and growth assumptions.
Technology and Operational Documentation
IT infrastructure description (architecture, hosting, third-party providers). Cybersecurity framework aligned with ISO 27001 or equivalent. Business continuity and disaster recovery plans. Custody procedures (hot/cold wallet segregation, key management, multi-signature controls). Outsourcing arrangements and material service provider register. Data protection and incident response plans.
Costs and Pricing
Australian crypto licensing costs are concentrated in professional advisory work and capital lock-up rather than government fees. ASIC online corporate AFSL application fees range from AUD 2,233 (low complexity) to AUD 7,537 (high complexity) per the Corporations (Fees) Regulations 2001 Schedule 1 (CPI-indexed annually from 1 July);[21] AUSTRAC has no government fee for VASP registration. For custodial AFSL holders the dominant first-year cost is the AUD 10 million NTA capital lock-up rather than any government fee.
Government / Regulator Fees
| Fee | Amount (AUD) | Frequency | Notes |
|---|---|---|---|
| AUSTRAC VASP registration (formerly DCE) | Nil | Once at registration; 3-year re-registration | No government fee |
| AUSTRAC industry contribution levy | Variable | Annual | Applies only to larger leviable entities; smaller crypto operators are typically below the threshold |
| ASIC AFSL application: corporate (online, low complexity) | 2,233≈ $1,600 | Once at lodgement | Per ASIC fee schedule, indexed annually from 1 July; paper lodgement higher |
| ASIC AFSL application: corporate (online, medium complexity) | 3,348≈ $2,400 | Once at lodgement | Mid-tier standard corporate AFSL fee |
| ASIC AFSL application: complex (responsible entity, market making) | Up to 7,537≈ $5,400 | Once at lodgement | Tiered by complexity |
| ASIC annual industry funding levy | Minimum 1,500≈ $1,100 | Annual | Plus graduated component per adviser/activity |
| AFCA membership | From 375≈ $270 | Annual | Small financial firm member tier; scales with size |
Annual indexation note: ASIC fees are indexed annually from . Figures above reflect the 2024–25 schedule and may be revised for 2026–27.[21]
Total Cost Summary
| Statutory charge (AUSTRAC, ASIC, AFCA) | Amount (AUD) |
|---|---|
| AUSTRAC VASP registration, formerly DCE | Nil |
| AUSTRAC industry contribution levy (annual; larger leviable entities only, and smaller crypto operators sit below the threshold) | Variable |
| ASIC AFSL application fee, corporate online low complexity through complex responsible entity or market making (indexed each 1 July; paper lodgement higher) | 2,233–7,537≈ $1,600–5,400 |
| ASIC industry funding levy (annual; the minimum, plus a graduated component per adviser and activity) | 1,500≈ $1,100 |
| AFCA membership (annual; small financial firm member tier, scaling with size) | 375≈ $270 |
| Statutory cost, Year 1 | 4,108–9,412≈ $3,000–6,800 |
| Statutory cost, annual (Year 2 onwards) | 1,875≈ $1,300 |
| Build item (cost quoted per case) | Amount (AUD) |
|---|---|
| Australian Pty Ltd formation (ASIC registration plus legal and agent fees) | 600–2,500≈ $430–1,800 |
| Legal advisory, AFSL application (specialist regulatory counsel; complex applications run higher) | 30,000–80,000≈ $22K–58K |
| Compliance documentation (AML/CTF policies, risk assessment, sanctions framework, travel rule; bespoke Australia-specific drafting) | 25,000–60,000≈ $18K–43K |
| Responsible manager sourcing or contracting, per RM (annual; external or contractor RMs, in-house RMs cost less but require recruitment) | 50,000–150,000≈ $36K–110K |
| Compliance audit, statutory audit plus AFSL compliance review (annual) | 10,000–30,000≈ $7,200–22K |
| AML/CTF compliance officer, Australian resident (annual salary; a senior officer commands the higher end) | 60,000–150,000≈ $43K–110K |
| PI insurance, retail AFSL per RG 126 (annual) | 8,000–25,000≈ $5,800–18K |
| Typical build, Year 1 (quoted per case) | 183,600–497,500≈ $130K–360K |
| Typical build, annual (Year 2 onwards) | 128,000–355,000≈ $92K–260K |
| Held, not spent (in neither total) | Amount (AUD) | Notes |
|---|---|---|
| Capital lock-up: custodial AFSL (NTA) | 10,000,000≈ $7.2M | Permanent; opportunity cost approximately 300,000–500,000 per year≈ $220K–360K per year |
| Capital lock-up: incidental custody or sub-custody | 150,000–500,000≈ $110K–360K | Permanent; applies when custody is outsourced to an Australian ADI or licensed trustee company |
The opportunity cost of capital is the single largest hidden cost. The foregone return on the custodial NTA lock-up is typically larger than the entire annual ongoing operating cost of the regulated framework, and is the principal driver of the sub-custody outsourcing decision.
Timeline
Realistic Australian crypto licensing timelines run 4–12 weeks for AUSTRAC VASP registration and 5–8 months for the ASIC AFSL from complete lodgement. The two tracks should run in parallel rather than in sequence. Complex AFSL applications (responsible entity, market making, or first-time digital asset operators) run 8 months or longer; the 120-day ASIC service standard is rarely met in practice for crypto matters.
| Stage | Duration | Cumulative |
|---|---|---|
| Entity formation (ASIC company registration, ABN, TFN) | 2–4 weeks | 2–4 weeks |
| AUSTRAC enrolment + registration (parallel from week 1) | 4–12 weeks | 4–12 weeks |
| AFSL proof-pack preparation (parallel from week 1) | 8–16 weeks | 8–16 weeks |
| AFSL lodgement and ASIC assessment | 5–8 months | 7–11 months |
| Banking onboarding (parallel from month 2) | 2–6 months | Within total |
| Compliance documentation finalisation and go-live readiness | 2–4 weeks | Within total |
| Total realistic timeline (AUSTRAC-only operator) | 3–4 months | 3–4 months |
| Total realistic timeline (AFSL-required operator) | 7–11 months | 7–11 months |
ASIC published service standards target 120 days from a complete application, but observed AFSL timelines for crypto matters routinely run 5–8 months and complex applications (responsible entity, market making, first-of-kind tokenisation products) regularly exceed 8 months. The mandatory move to the ASIC Regulatory Portal shortened the form-handling cycle but has not materially reduced substantive review time. In practice, the binding constraint is the iteration cycle on responsible manager evidence and the financial resources statement: these typically attract 1 to 3 RFI rounds, each adding 4–8 weeks.
Operators relying on ASIC’s class no-action letter must lodge the AFSL application or variation by ; on a 5–8 month review that lodgement is still decided well inside the DAP commencement.
Taxation
Australia is a standard-rate corporate jurisdiction with crypto-specific clarity: but the GST exemption on digital currency and the deep tax-treaty network make the effective economics competitive with offshore alternatives. Corporate income tax is 25% for base rate entities (turnover under AUD 50 million) or 30% for larger entities; crypto is taxed as a CGT asset; digital currency supplies have been GST-exempt since .
| Tax | Rate | Crypto Application |
|---|---|---|
| Corporate Income Tax | 25% (base rate entity) / 30% | Applies to all crypto business income; base rate threshold requires aggregated turnover < AUD 50m AND ≤ 80% passive income |
| Capital Gains Tax | Marginal rate for individuals; 25%/30% for companies | Crypto is a CGT asset under TD 2014/26; 50% individual CGT discount on assets held > 12 months (under review) |
| Goods and Services Tax (GST) | 10% standard rate | GST-EXEMPT for digital currency supplies since |
| Withholding Tax: interest | 10% | Treaty rates often reduce to 5% or 0% |
| Withholding Tax: royalties | 30% | Treaty rates often reduce to 5–10% |
| Withholding Tax: dividends (unfranked) | 30% | Treaty rates often reduce |
| Payroll tax | Variable (state-based, 4–6.85%) | Applies above state-specific thresholds |
| Stamp Duty | Variable (state-based) | Generally not applicable to crypto transactions |
Crypto Asset Taxation Specifics (ATO Treatment)
The ATO classifies crypto as a CGT asset under Tax Determination TD 2014/26, not as foreign currency under TD 2014/25.[10] Disposals are CGT events (A1 for direct disposals, C2 for losses), with the 50% individual CGT discount applying for assets held over 12 months (under review as of ). The personal-use asset exemption applies only where the asset cost less than AUD 10,000 and was used mainly for personal consumption.
Trading-stock treatment applies for businesses where crypto is held as inventory. Staking rewards are typically assessable as ordinary income at fair market value when received; mining income is ordinary income; airdrops and chain splits attract specific ATO guidance.
Digital Currency GST Exemption
Digital currency supplies have been input-taxed-equivalent (effectively GST-free) since under Schedule 1 of the Treasury Laws Amendment (2017 Measures No. 6) Act 2017 (Cth). This places digital currency on the same footing as fiat for GST purposes and avoids the double-GST outcome that would otherwise arise on crypto trading. Services connected with digital currency (custody, exchange, transmission) are GST-applicable where supplied to Australian recipients.
CRS and CARF Reporting
Australia has implemented the OECD Common Reporting Standard (CRS) and is implementing the Crypto-Asset Reporting Framework (CARF). The ATO operates a crypto-asset data-matching program covering Australian exchanges since 2014.
Pillar Two (Global Minimum Tax)
Australia has enacted domestic Pillar Two legislation (Taxation (Multinational–Global and Domestic Minimum Tax) Act 2024). The 15% Global Minimum Tax (GloBE) applies to multinational groups with consolidated revenue exceeding EUR 750 million: a threshold unlikely to affect standalone Australian-domiciled VASPs but relevant to subsidiaries of larger crypto groups.
Ongoing Compliance & Post-Registration
Australian registration and licensing create a permanent compliance infrastructure obligation. AUSTRAC requires annual compliance reporting by , threshold transaction and suspicious matter reporting, AML/CTF policy maintenance, and travel-rule operationalisation from . ASIC AFSL holders face the section 912A general obligations regime, the 30-day reportable situations regime under section 912DAA, annual financial statements, and audit.
Annual Reporting Obligations
AUSTRAC: annual compliance report due each year, submitted via AUSTRAC Online, covering the preceding calendar year. ASIC: annual financial statements and auditor’s report under the Corporations Act; AFSL compliance certificate; FS70 financial statements (where applicable); FS71 audit opinion. CCIVs and registered managed investment schemes face additional reporting. ATO: annual income tax return; quarterly BAS for GST-registered entities; CRS and CARF reports under the OECD frameworks.
Renewal Fees and Supervision Fees
AUSTRAC registration must be renewed every three years. ASIC AFSL holders pay the annual industry funding levy: minimum AUD 1,500 plus a graduated component per regulated activity. AFCA membership renews annually with fees scaling on member size. Recurring costs typically include the AML/CTF compliance officer salary (AUD 60,000 to 150,000), annual audit (AUD 10,000 to 30,000), PI insurance (AUD 8,000 to 25,000 for retail AFSL), and registered office and company secretary fees.
Regulatory Inspections
AUSTRAC conducts thematic reviews focused on customer due diligence, transaction monitoring, and SMR/TTR quality. ASIC conducts thematic reviews and targeted surveillance, with documented enforcement focus on crypto exchanges, derivatives, and consumer-facing yield products. Both regulators have used their information-gathering powers (AUSTRAC section 167 notices; ASIC section 33 notices) extensively against crypto operators. Operators should maintain audit-ready documentation across all designated services and AFSL authorisations.
Enforcement
AUSTRAC penalties: civil penalty proceedings under the AML/CTF Act; daily penalties up to 60 penalty units (AUD 19,800 per day from ) for unregistered DCE conduct.[22] ASIC penalties under the Corporations Act: for civil penalty provisions, individual maximum is the greater of 5,000 penalty units or three times the benefit; corporate maximum is the greater of 50,000 penalty units, three times benefit, or 10% of annual turnover capped at 2.5 million penalty units.
Criminal liability is available under section 911A for unlicensed financial services. Recent crypto-sector enforcement penalties: AUD 14 million (BPS Financial / Qoin, ); AUD 10 million (Binance Australia Derivatives, ); AUD 8 million (Bit Trade / Kraken, ); AUD 13.1 million client compensation (Binance Australia, 2023).
Critical Infrastructure (SOCI) Obligations
The Security of Critical Infrastructure Act 2018 applies to crypto platforms meeting the “critical infrastructure asset” definition in the financial services sector, including stored-value facility operators and substantial exchange operators above thresholds. Mandatory cyber-incident reporting within 12 hours of becoming aware of a critical cyber incident. Positive security obligations apply once designated. SOCI applicability should be assessed on launch and refreshed annually.
Advertising and Promotion Rules
ASIC’s design and distribution obligations regime (Part 7.8A of the Corporations Act) applies to issuers and distributors of financial products to retail clients. Target market determinations must be prepared and reviewed periodically. Promotion of unlicensed financial services to Australian retail clients is a criminal offence under section 911A. Influencer promotion of crypto products has been an active ASIC enforcement area since 2023: operators using affiliate or influencer marketing should document financial product analysis and target market determinations for each product.
Banking
Banking access is the practical bottleneck for Australian crypto operators, despite the country having one of the deepest and most developed banking systems globally. The four largest Australian domestic banks each took a different approach to crypto in mid-2023, and access has remained constrained since. No statute prevents banking; the constraint is internal bank risk appetite.
The Council of Financial Regulators’ advice on debanking and the Government’s response committed to voluntary data collection from the four major banks, “in principle” 30-day notice and reason-giving requirements, and capability uplift in the DCE, fintech, and remittance sectors.[23] The Treasury’s Statement on Developing an Innovative Australian Digital Asset Industry re-committed to working with the four major banks on debanking.[8] As of , debanking remains a real and ongoing operational risk.
Tier-1 domestic banks tightened access in mid-2023 in distinct ways: one imposed a transfer cap of AUD 10,000 per month with mandatory 24-hour holds on payments to crypto exchanges from ; another began declining transactions to platforms designated higher-risk; a third applied a similar monthly cap; and the fourth introduced holds and delays on payments to crypto platforms.
Foreign bank branches with crypto-aware compliance functions, fintech-friendly second-tier institutions, and specialist crypto-banking platforms in adjacent jurisdictions are the more reliable banking counterparties for serious operators.
Client-money trust accounts for AFSL holders must be held with an Australian Authorised Deposit-taking Institution (ADI) under the Corporations Act unless ASIC grants relief: INFO 225 indicates ASIC may consider case-by-case relief where alternative protections are demonstrated. What the AFCA framework does not provide is a banking-access guarantee: AFCA covers banking conduct disputes for customers, but it does not compel a bank to take on a particular customer.
In practice, the operators that secure tier-1 domestic banking are those that arrive with a complete compliance package, a named AML/CTF compliance officer in Australia, and a documented sanctions and CDD framework in production, not those that arrive with a registration certificate and expect onboarding to follow. The 2–6 month banking timeline runs in parallel with the AFSL process for a reason: it is rarely faster.
Jagelski & Partners’ banking partner network includes 90+ institutions across Australia, foreign bank branches operating in Australia, and specialist banking platforms in adjacent jurisdictions. A licence without banking access is a certificate on the wall.
Explore Banking SolutionsFATF Status & International Standing
Australia is a founding member of the Financial Action Task Force and maintains clear standing in the FATF mutual evaluation process. The most recent comprehensive mutual evaluation found Australia to have a strong AML/CTF framework, with the AML/CTF Amendment Act 2024 and Tranche 2 reforms addressing the historical gap on designated non-financial businesses.
EU Market Access
An Australian licence (AUSTRAC, AFSL, or DAP) does not confer EU passporting rights. MiCA contains no third-country equivalence regime: there is no mechanism for the European Commission to recognise a non-EU licence as equivalent. MiCA Article 61 permits third-country firms to serve EU clients only when the client initiates contact entirely on their own initiative. ESMA’s Guidelines on reverse solicitation under MiCA (ESMA35-1872330276-2030, published , applicable from ) interpret the exemption restrictively.[24]
Any form of EU-targeted marketing, EU-language website content, geo-targeted advertising, app-store availability, or use of EU-based influencers constitutes solicitation that voids the exemption. The exemption is designed for isolated contacts, not systematic EU market access.
For a detailed analysis of what constitutes solicitation and the documentation requirements, see Reverse Solicitation Under MiCA →.
Advantages and Limitations
Australia offers institutional-grade regulatory credibility, deep tax-treaty coverage, and an English common law system; it pays for that in long AFSL timelines, persistent debanking risk, and the AUD 10 million custody capital threshold. The trade-offs are well understood and consistently surfaced in client jurisdiction selection conversations: choose Australia for credibility, not for speed.
- AFSL credibility carries weight in institutional sales. The AFSL is recognised as a gold-standard financial services authorisation across the Anglophone and APAC institutional market.
- Deep tax-treaty network reduces withholding leakage. More than 40 comprehensive tax treaties materially reduce cross-border withholding tax on interest, royalties, and dividends.
- Digital currency GST exemption since 2017. No double-GST exposure on crypto trading flows, with services connected with digital currency taxed on standard principles.
- Statutory DAP framework provides legal certainty. The Corporations Amendment (Digital Assets Framework) Act 2026 integrates with the AFSL regime rather than running alongside it; “same risk, same regulation” provides predictability.
- AUD stablecoin and tokenised RWA precedents established. Two AUD stablecoins are operative under ASIC’s distribution exemption; Project Acacia produced a mature wholesale CBDC and tokenised settlement evidence base.
- AFSL timelines are long compared with APAC peers. Realistic 5–8 months from complete lodgement, 8+ months for complex applications. Mitigation: Lodge AFSL applications in parallel with AUSTRAC enrolment and entity formation, not in sequence. Use the ASIC class no-action letter window (lodge by ) where applicable.
- No EU passporting. An Australian licence does not provide MiCA equivalence or passporting rights to the EU/EEA. Mitigation: Operators targeting EU clients can obtain a separate CASP authorisation in an EU member state (full market access via passporting) or, for isolated genuinely unsolicited contacts only, may fall within the narrow reverse solicitation exemption under MiCA Article 61.
- Custodial AFSL requires AUD 10 million NTA lock-up. Opportunity cost of approximately AUD 300,000 to 500,000 per year. Mitigation: Outsource custody to an Australian ADI or licensed trustee company; sub-custody structures qualify as incidental providers with NTA of the greater of AUD 150,000 or 10% of average revenue.
- Debanking risk remains material. Tier-1 Australian banks have variable risk appetite and operate transfer caps and onboarding constraints for crypto businesses. Mitigation: Engage foreign bank branches with crypto-aware compliance functions and fintech-friendly second-tier institutions in parallel; build banking conversations on a complete compliance package, not a registration certificate alone.
- Regulator-by-litigation approach has produced uncertainty. ASIC’s mixed record in Block Earner, Finder Wallet, BPS Financial, and Bit Trade leaves perimeter questions unsettled. Mitigation: Use ASIC’s pre-lodgement and no-action engagement mechanisms; obtain external legal opinions on product classification for novel structures; monitor the High Court special-leave outcome on Block Earner.
How Australia Compares
Australia’s natural comparators are the other Tier-1 Regulated APAC jurisdictions: New Zealand, Hong Kong, and Singapore. Each operates under a substantial financial regulator with internationally recognised standards; each diverges meaningfully on timeline, capital, tax, and banking access. Estonia is the EU cross-tier reference for operators weighing EU passporting against APAC institutional credibility.
| Factor | Australia | New Zealand | Hong Kong | Singapore |
|---|---|---|---|---|
| Licence Type | AUSTRAC DCE/VASP + ASIC AFSL + (from 2027) DAP/TCP | FSPR registration + AML/CFT compliance | SFC VATP + HKMA Stablecoin Issuer + C&ED MSO | MAS Digital Payment Token (DPT) under PSA; MPI licence |
| Regulator | AUSTRAC + ASIC | FMA + DIA | SFC + HKMA + C&ED | MAS |
| Timeline | AUSTRAC 4–12 weeks; AFSL 5–8 months | FSPR 4–6 months | VATP 12–18 months | DPT 9–18 months |
| Min. Capital | None (AUSTRAC); AUD 50,000–10m (AFSL)≈ $36K–7.2M | None (FSPR) | HKD 5m paid-up + HKD 3m liquid (VATP)≈ $640K paid-up + $380K liquid | SGD 250,000 (MPI)≈ $200K |
| Year 1 all-in (statutory fees + typical build) | AUD 187,708–506,912 + capital lock-up≈ $140K–360K | NZD 50,000–150,000≈ $30K–89K | HKD 7–15m operating; HKD 15–23m incl. capital≈ $890K–1.9M operating | SGD 1.5m–3m+ all-in, incl. base capital and MPI security deposit≈ $1.2M–2.4M |
| Corporate Tax | 30% (25% BRE) | 28% | 16.5% standard; 8.25% concessional first HKD 2m | 17% standard; partial exemptions |
| Local Presence | AU-resident director + AML officer + RMs | NZ-resident director | HK-resident officers | SG-resident director + executive officer |
| EU Passporting | No | No | No | No |
| FATF Status | Member; clear | Member; clear | Member; clear | Member; clear |
| Institutional Credibility | High; gold-standard AFSL, a full financial-services licence and a door-opener in institutional sales | High; FATF-clear, common-law property treatment of crypto (Ruscoe v Cryptopia) | High; Tier-1 financial centre, SFC brand strong for institutional flow | High; MAS DPT licence is a recognised global credibility signal |
| Banking Access | Selective; deep domestic banking system but the four majors constrained; onboarding 2–6 months | Difficult; major banks have de-risked crypto; offshore-facing structures effectively closed | Moderate; easier for licensed VATPs since the 2023 HKMA circular | Moderate; the licence is necessary but not sufficient; onboarding 2–6 months |
| Best For | Institutional-grade custody, AUD stablecoin issuers, tokenised RWA platforms, AFSL-credentialled exchanges | Substantively NZ-facing operators wanting a light-touch, FATF-clear registration | Established exchanges and stablecoin issuers targeting APAC institutional and retail flow | Institution- and accredited-investor-focused DPT operators valuing MAS supervisory credibility |
Compare every crypto jurisdiction side by side →
Among the four Tier-1 APAC peers, Australia offers the most balanced profile for institutional credibility versus operating cost. New Zealand is materially cheaper and faster, though an FSPR registration is a lighter credential than a full financial-services licence; Hong Kong’s VATP regime carries the highest credibility for large exchanges but the regulatory cost (HKD 5m + 3m capital) is significant.
Singapore’s MAS regime is the closest competitor on credibility and the most stringent on operational substance. The genuine differentiator for Australia is the statutory DAP framework, the AUD stablecoin precedent, and the depth of the tax-treaty network: none of the three APAC peers offers all three together. Estonia, the EU cross-tier reference, remains the answer for EU passporting.
When Australia Is the Right Choice
Choose Australia if:
- You are building institutional-grade custody for APAC, Australian, or New Zealand investors and need the AFSL credibility to support institutional onboarding.
- You are issuing an AUD-denominated stablecoin and want to follow the AUDM/AUDF precedent under ASIC’s distribution exemption regime.
- You are tokenising real-world assets (real estate, equities, carbon credits) for Australian retail or wholesale investors and need the forthcoming TCP authorisation framework.
- You require deep tax-treaty coverage for cross-border flows and the AUD GST exemption is material to product economics.
Consider alternatives if:
- Speed-to-market is the binding constraint: Dubai VARA offers a faster credible path (minimum 9 months, but lighter on substance hurdles).
- You need EU passporting: Estonia or another EU MiCA jurisdiction provides MiCA CASP authorisation with full EEA market access.
- Your business is primarily retail crypto in Hong Kong / China / Taiwan: Hong Kong SFC VATP regime is the better natural fit.
- You are a sole-trader or small operator: New Zealand FSPR registration is materially cheaper and faster.
Australia Company Formation
Form an Australian Pty Ltd with an Australian-resident director, registered office, ABN, and TFN registration, and full FIRB analysis where required.
Open an Australian Crypto Business Account
Banking onboarding for AUSTRAC-registered DCEs and ASIC AFSL holders, across tier-1 ADIs, foreign bank branches, and specialist platforms.
Not sure which column is you? Ask Emma. She compares these jurisdictions in seconds, in your language.
Common Mistakes in Australia Applications
ASIC’s published guidance and AUSTRAC’s enforcement record point consistently to a small set of recurring application errors. The Federal Court’s case law and ASIC’s INFO 225 updates flag the same misconceptions in the perimeter analysis. Across the AFSL and AUSTRAC tracks, the highest-frequency mistakes cluster around responsible managers, financial resources, product classification, and substance.
- Misclassifying the product against the financial-product perimeter. Operators frequently assume that a “fiat–crypto on-ramp” sits outside ASIC’s scope and that AUSTRAC registration is sufficient. INFO 225’s October 2025 update lists 18 worked examples; any product offering yield, derivatives, managed staking, asset-referenced stablecoins, or non-cash payment functions is typically a financial product and triggers the AFSL.[7]
- Treating responsible manager identification as a downstream task. Two RMs meeting the RG 105 “five years in the last eight” experience standard are mandatory. Sourcing qualified RMs with digital-asset-relevant experience takes months and is the single most common AFSL bottleneck. ASIC will accept one RM covering regulatory aspects and a second covering unregulated digital-asset operational experience: but the case must be made explicitly.
- Underestimating the financial resources statement. The custodial NTA (AUD 10 million) is the headline figure, but the surrounding documentation (three-year cash flow projections, capital injection evidence, cash-needs analysis under Option 1 of RG 166) is itself 4–8 weeks of specialist work. Generic templates from other jurisdictions do not pass.
- Generic AML/CTF policies adapted from another jurisdiction. AUSTRAC’s substantive assessment is whether the policies reflect the operator’s actual customer base, jurisdictional exposure, and product mix. Policies adapted from a Singapore MAS, MiCA, or BVI template attract RFIs and rejection. The 2025 Rules consolidation requires Australia-specific risk-assessment language.
- Missing the ASIC class no-action letter window. ASIC’s letter supersedes the letter and runs the interim AFSL relief to , conditional on lodging an AFSL application or variation by that date. Operators who launch in 2026 without lodging by then lose access to the relief and face a harder transition to the DAP regime in 2027.
- Foreign-resident directors and RMs without substance. ASIC scrutinises whether an Australian-resident director and Australia-domiciled RMs are genuinely engaged with the business. Nominee or pass-through structures attract RFIs and substance questions during AFSL assessment.
Frequently Asked Questions
Yes, if you provide a “designated service” with a geographical link to Australia under the AML/CTF Act 2006. AUSTRAC Digital Currency Exchange registration has been mandatory since . From , existing DCEs auto-roll into VASP status under reformed AML/CTF program, governance, and CDD obligations, and the AML/CTF compliance officer requirement commences.
From , the NEW virtual asset designated services come into scope: crypto-to-crypto exchange, virtual asset transfers, virtual asset custody, and offer/sale-related financial services. Crypto ATMs and OTC desks are in scope. Operating an unregistered DCE attracts daily penalties of up to AUD 19,800 per day from .
When the crypto product meets the Corporations Act definition of a “financial product”: derivatives, managed investment schemes, securities, asset-referenced stablecoins, non-cash payment facilities, or “facilities for making a financial investment” under section 763B. ASIC’s updated INFO 225 () lists 18 worked examples covering tokenised securities, yield-bearing stablecoins, managed staking, wrapped tokens, gold-linked tokens, and tokenised real estate.
Bitcoin and similar payment tokens in isolation are typically not financial products, but products built on top of them (yield, derivatives, managed schemes) typically are.
Not on its own. Australia is technology-neutral: a tokenised asset is regulated by what it represents, so if it is a financial product the Corporations Act 2001 applies and an AFSL is required from ASIC. ASIC’s updated INFO 225 (, media release 25-250MR) adds worked examples for tokenised securities, tokenised bonds, and tokenised real estate, with a sector-wide no-action position giving operators until to lodge the necessary AFSL application or variation.
Registering or operating as a digital-asset exchange does not authorise dealing in tokenised securities. The standalone Digital Asset Platform and Tokenised Custody Platform categories are enacted but not yet in force: Royal Assent , commencing . Where the wrapper is a fund, our fund licensing mandate scopes the route.
Yes, where it provides designated services with a geographical link to Australia. The entity must enrol with AUSTRAC, meet local AML/CTF compliance officer requirements (from ), and operate as a registered foreign company under the Corporations Act with an ABN. Most operators incorporate an Australian proprietary company instead, both for substance reasons (ASIC and ATO assessment) and to access the simpler corporate framework. Pure foreign-entity operation is feasible but creates substance and banking friction.
Typically 4 to 12 weeks for clean applications, longer where remediation, further information, or fit-and-proper questions arise. The clock starts on submission via AUSTRAC Online and depends on the completeness of the beneficial ownership disclosure, AML/CTF program quality, criminal history checks for key personnel, and substance documentation. Re-registration cycle is three years; former DCE registrants need to ensure their registration covers the expanded VASP services in force from .
The DAP regime is a new statutory licensing framework introduced by the Corporations Amendment (Digital Assets Framework) Act 2026, which received Royal Assent and commences . It introduces two new categories of financial product: a digital asset platform (a facility for possessing digital tokens on trust for clients, including exchanges) and a tokenised custody platform (a custodial platform for tokenised real-world assets).
Full supervision applies approximately after a six-month transition. The regime adapts the existing AFSL framework: “same risk, same regulation”.
ASIC v Web3 Ventures Pty Ltd [2025] FCAFC 58 (): the Full Federal Court held that Block Earner’s fixed-rate crypto yield product, where the operator bears the risk/reward of deployment and the customer’s return is fixed and not referable to a pooled scheme, is not a managed investment scheme, a financial investment facility, or a derivative. The decision restrains ASIC’s expansionary reading of Chapter 7 but is not the final word: the High Court granted ASIC special leave to appeal on , and the substantive High Court appeal is pending as of . The case matters because it defines the perimeter for crypto yield products.
For an AFS licensee providing custodial or depository services in its own right (not as an incidental provider), the net tangible asset requirement under RG 166 and Instrument 2023/648 is the greater of AUD 10 million or 10% of average revenue. At least 50% must be held in cash or cash equivalents (minimum AUD 150,000), with 100% in liquid assets.
Incidental custody providers (where custody is outsourced to an Australian ADI or licensed trustee company) face NTA of the greater of AUD 150,000 or 10% of average revenue. AUSTRAC has no minimum capital requirement.
Two figures, not one. The regulator and ombudsman charge AUD 4,108 to 9,412 in Year 1 (the ASIC AFSL application fee, the ASIC industry funding levy and AFCA membership; AUSTRAC registration is free), falling to AUD 1,875 a year thereafter.
The build around that is quoted per case and has run AUD 183,600 to 497,500 in Year 1: legal advisory (AUD 30,000–80,000), compliance documentation (AUD 25,000–60,000), responsible manager sourcing or contracting (AUD 50,000–150,000 per RM per year), entity formation, audit, and PI insurance.
From Year 2 the build has run AUD 128,000 to 355,000. The dominant cost for custodial AFSL holders is neither: the AUD 10 million NTA capital lock-up is held rather than spent, and carries an opportunity cost of AUD 300,000 to 500,000 per year at typical yield deficits.
Yes. The Corporations Act 2001 requires at least one Australian-resident director for proprietary companies (section 201A); public companies require two Australian-resident directors. A registered office in Australia is required for both. From , an Australian-resident AML/CTF compliance officer is also mandatory. Responsible managers under the AFSL framework are not strictly required to reside in Australia, but ASIC’s substance assessment under RG 105 expects active engagement with the Australian business: nominal RMs domiciled offshore attract scrutiny during licensing review.
ASIC’s INFO 225 () clarifies that native proof-of-stake staking by the asset holder is typically not a financial product. Managed staking and staking-as-a-service are typically financial products, often as managed investment schemes or facilities for making a financial investment under section 763B.
From a tax perspective, the ATO treats staking rewards as assessable ordinary income at fair market value when received, with subsequent disposals attracting CGT. Operators offering managed staking products to retail customers must hold an AFSL with the relevant authorisation and comply with the design and distribution obligations regime.
An Australian AUSTRAC registration or AFSL does not grant EU market access or passporting rights. MiCA Article 61 permits third-country firms to serve EU clients only where the client initiates the contact entirely on their own initiative, but ESMA’s February 2025 guidelines interpret this exemption very narrowly and any form of EU-targeted marketing voids it. Operators seeking systematic EU market access should obtain a separate CASP authorisation in an EU member state.
Start your Australia crypto licence application
We run the whole process end-to-end through our partner network, from licence scoping to banking. Book a free assessment and we'll map your route to approval.
Not ready to book? Ask Emma first. She answers now, and if it needs a human she takes your details so the consultation starts ahead.
References
Show all references
- Parliament of Australia, Corporations Amendment (Digital Assets Framework) Bill 2025: Explanatory Memorandum, aph.gov.au, accessed .
- Australian Securities and Investments Commission, ASIC Corporations (Stablecoin Distribution Exemption) Instrument 2025/631, as amended by ASIC Corporations (Amendment) Instrument 2025/679 (F2025L01233, registered 7 October 2025), asic.gov.au, accessed .
- Reserve Bank of Australia and Digital Finance Cooperative Research Centre, Project Acacia Final Report, rba.gov.au, accessed .
- Australian Taxation Office, Tax treaties, ato.gov.au, accessed .
- AUSTRAC, Register with us as a remittance or virtual asset service provider, austrac.gov.au, accessed .
- Australian Securities and Investments Commission, FAQs: AFS licence applications, asic.gov.au, accessed .
- Australian Securities and Investments Commission, Information Sheet 225: Digital assets: Financial products and services (updated 29 October 2025) and Media Release 25-250MR, asic.gov.au, accessed ; ASIC, ASIC extends no-action position for digital asset businesses to 30 September 2026 and the superseding class no-action letter of 25 June 2026, asic.gov.au, accessed .
- Treasury, Developing an innovative Australian digital asset industry: Statement of 21 March 2025, treasury.gov.au, accessed .
- Treasury, Treasury Laws Amendment (Regulating Digital Asset, and Tokenised Custody, Platforms) Bill 2025: Exposure Draft (25 September 2025), treasury.gov.au, accessed .
- Australian Taxation Office, Crypto asset investments: guidance and TD 2014/26, ato.gov.au, accessed .
- Department of Home Affairs, Anti-Money Laundering and Counter-Terrorism Financing Amendment Act 2024: Overview, homeaffairs.gov.au, accessed .
- Australian Securities and Investments Commission, 26-055MR Binance Australia Derivatives ordered to pay AUD 10 million, asic.gov.au, accessed .
- Australian Securities and Investments Commission, 26-008MR BPS Financial to pay AUD 14 million in penalties over crypto Qoin Wallet, asic.gov.au, accessed .
- Federal Court of Australia, ASIC v Wallet Ventures Pty Ltd [2025] FCAFC 93, austlii.edu.au, accessed .
- Australian Securities and Investments Commission, 25-062MR Full Federal Court finds Block Earner did not engage in unlicensed conduct, asic.gov.au, accessed .
- Federal Court of Australia, ASIC v Web3 Ventures Pty Ltd [2024] FCA 64, austlii.edu.au, accessed .
- Federal Court of Australia, ASIC v Bit Trade Pty Ltd (No 2) [2024] FCA 1422, austlii.edu.au, accessed .
- AUSTRAC, AML/CTF transitional rules update: 2025 Rules consolidation, austrac.gov.au, accessed .
- Ashurst, Consulting on regulating digital asset platforms and tokenised custody platforms, ashurst.com, accessed .
- Australian Securities and Investments Commission, ASIC Corporations (Financial Requirements for Custodial or Depository Service Providers) Instrument 2023/648 and RG 166, asic.gov.au, accessed .
- Australian Securities and Investments Commission, Fees for commonly lodged documents, asic.gov.au, accessed .
- Australian Securities and Investments Commission, Fines and penalties, asic.gov.au, accessed .
- Treasury, Government response to Potential Policy Responses to De-banking in Australia (28 June 2023), treasury.gov.au, accessed .
- European Securities and Markets Authority, Guidelines on reverse solicitation under MiCA (ESMA35-1872330276-2030), , esma.europa.eu, accessed .