Crypto Licensing

Australia Crypto Licensing: AUSTRAC and ASIC

Two regulators run in parallel today and a third statutory regime starts on 9 April 2027, so standing is bought with time. We do not file here.

Talk to us

Why Australia Matters for Crypto Operators

Australia is one of the most institutionally credible crypto jurisdictions in the Asia-Pacific region. The Australian Financial Services Licence (AFSL) is treated as a gold-standard authorisation, the country runs on English common law with regulators that publish detailed guidance, and a deep tax-treaty network reduces withholding on cross-border flows. For operators building institutional-grade custody, tokenised real-world asset platforms, AUD-denominated stablecoins, or regulated derivatives for APAC investors, it is a serious option. The trade-off is speed: Australia rewards regulatory standing over time-to-market.

Expert Comment

The critical line is the 30 June 2026 deadline for AFSL lodgement: file before the DAP regime commences on 9 April 2027 to retain interim relief, or face enforcement gaps under the new regime. Australia’s three overlapping regulators—AUSTRAC (AML/CTF), ASIC (financial products), and the forthcoming DAP framework—run in parallel rather than in sequence, making the jurisdiction institutionally credible but operationally dependent on sequencing your applications correctly against those dates.

Daniel Tomberg CEO & Senior Partner, Tomberg & Partners
In short: Two operative regulators, AUSTRAC and ASIC, run in parallel, and a third statutory regime, the Digital Asset Platform framework, commences 9 April 2027. The AFSL sits in the same institutional tier as the Singapore MAS and Hong Kong SFC regimes. If speed is the binding constraint, faster paths exist; if institutional credibility is the goal, few jurisdictions match it.

Regulatory Framework

Australia regulates crypto businesses through two operative regulators and a third statutory regime that commences in 2027. AUSTRAC, the financial intelligence unit, supervises anti-money-laundering obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 and runs the AUSTRAC Online registration portal; daily penalties of up to AUD 19,800 (from 7 November 2024) apply to unregistered conduct. ASIC supervises any crypto product that qualifies as a financial product under Chapter 7 of the Corporations Act 2001, with its guidance anchored in Information Sheet 225 (updated 29 October 2025) and Regulatory Guides 105, 133 and 166. The Digital Asset Platform regime takes effect 9 April 2027, with Treasury leading policy and the ATO administering tax throughout.

In short: Which regulator gates the business depends on the product. Pure fiat-crypto on-ramps sit under AUSTRAC alone today. Any platform offering custody, yield, derivatives, tokenised securities, or stablecoin issuance is already inside the ASIC AFSL perimeter. From 9 April 2027, every digital asset platform that holds client tokens becomes a new category of financial product under the DAP regime.

Court Decisions Shaping the Perimeter

Recent Federal Court decisions have built a coherent body of crypto-asset case law. The Full Federal Court overturned ASIC’s financial-product finding against Block Earner’s fixed-rate yield product (ASIC v Web3 Ventures Pty Ltd [2025] FCAFC 58), narrowing the “managed investment scheme” reading, though the High Court granted special leave to appeal and that appeal is pending. ASIC won on different ground in the Qoin and Kraken matters. The pattern: the court demands precise statutory fit but reads “credit facility”, “non-cash payment facility” and the design and distribution obligations regime broadly. Operators planning yield, structured products, or margin functionality should expect scrutiny on the perimeter.

Regulatory Transition

Australia is mid-transition on two regulatory axes at once. The AML/CTF Amendment Act 2024 replaced the narrow “digital currency” concept with the broader FATF “virtual asset” term, expanding AUSTRAC’s Digital Currency Exchange registration into a wider Virtual Asset Service Provider regime; and the statutory Digital Asset Platform regime commences 9 April 2027, with full supervision around October 2028 after a six-month transition. No grandfathering applies under the DAP regime, but an ASIC class no-action letter offers interim relief where an AFSL application is lodged by 30 June 2026. The dates that matter:

Key Deadlines

MilestoneDateImpact
AUSTRAC reformed obligations commence31 March 2026AML/CTF program, governance and CDD reforms apply; DCEs auto-roll into VASP status; compliance officer mandatory in Australia
ASIC class no-action letter window closes30 June 2026AFSL applications must be lodged by this date to retain interim relief
New VASP designated services commence1 July 2026Newly regulated VASPs must enrol with AUSTRAC; travel rule effective; Tranche 2 services in scope
DAP/TCP regime commences9 April 2027DAPs and TCPs become financial products; six-month transition begins
Full DAP/TCP supervisionApproximately October 2028Conduct obligations apply in full; ASIC begins enforcement

Licence Types and Activities Covered

Australia has no single “crypto licence”. It has a layered authorisation perimeter, and the right approach is to map the business model to the authorisation layer before incorporation. A fiat-crypto on-ramp can launch on AUSTRAC alone; a yield product, derivatives offering, or custodial exchange triggers the AFSL; a trading venue meeting the financial-market test triggers an Australian Market Licence; and tokenised real-world assets sit naturally under the forthcoming TCP authorisation.

The Main Authorisations

  • AUSTRAC Digital Currency Exchange (DCE) registration. Required since 3 April 2018 for any business providing a designated service with a geographical link to Australia. From 31 March 2026 existing registrations roll into VASP status; from 1 July 2026 the perimeter expands to crypto-to-crypto exchange, transfers, safekeeping, and offer/sale services. Crypto ATMs and OTC desks are in scope.
  • ASIC Australian Financial Services Licence (AFSL). Required where the crypto product is a “financial product”. Relevant authorisations cover dealing, advice, operating a managed investment scheme, making a market, and custodial or depository services.
  • Australian Market Licence and Clearing and Settlement Facility Licence. Required where a venue meets the “financial market” definition (Part 7.2) or clears or settles financial products (Part 7.3).
  • DAP and TCP authorisations (from 9 April 2027). Tailored AFSL authorisations under the new framework.

What Sits Outside the Perimeter

ASIC’s INFO 225 treats native proof-of-stake staking by the asset holder, bitcoin and similar payment tokens in isolation, and genuinely ancillary activity as typically outside the financial-product perimeter, and the DAP regime exempts public permissionless ledgers, defined staking arrangements, and certain wrapped-token structures. The analysis flips the moment a product layers on yield, derivatives, or a managed scheme. The point worth stressing: registering as a digital-asset exchange does not authorise dealing in tokenised securities, which need an AFSL. Where the structure is a fund, see our fund licensing work.

Requirements and Process

Requirements depend on the regime. AUSTRAC has no minimum capital but requires beneficial ownership disclosure, fit-and-proper testing, and an AML/CTF program. The AFSL imposes net tangible asset thresholds that scale sharply for custodial business (AUD 10 million), at least two responsible managers with documented competence, and an Australian-resident director and registered office.

In short: The two make-or-break elements are responsible manager identification (the single most common AFSL bottleneck) and custody capital structure. Outsourcing custody to an Australian ADI or licensed trustee company drops the NTA requirement from AUD 10 million to AUD 150,000 and changes the economics fundamentally.
RequirementAUSTRAC RegistrationASIC AFSL
Australian-resident directorRequiredRequired (and key personnel under RG 105)
Registered office in AustraliaRequiredRequired
AML/CTF compliance officer in AustraliaRequired from 31 March 2026n/a (RG 78 breach reporting applies)
Minimum capitalNoneAUD 50,000 base NTA; AUD 10 million NTA for custodial AFSL
Responsible managersn/aMinimum 2; RG 105 “five years in last eight” standard
Fit-and-proper assessmentDirectors, key personnel, beneficial ownersDirectors, RMs, beneficial owners
Professional indemnity insuranceNot requiredRG 126 cover required for retail AFSL holders
AFCA membershipn/aMandatory for retail-client AFSL holders
Foreign ownershipPermitted; FIRB approval may apply at thresholdsSame

The Critical-Path Items

Responsible manager identification is the binding constraint on the AFSL track: two RMs meeting the RG 105 “five years in the last eight” standard are mandatory, and sourcing qualified RMs with digital-asset experience takes months, so experienced applicants begin 6 to 12 months before lodgement. The AML/CTF program must be tailored to the operator’s actual product mix; generic policies adapted from a MiCA or MAS template are the most common cause of requests for further information. The two tracks should run in parallel: AUSTRAC enrolment via AUSTRAC Online (4 to 12 weeks) and the ASIC AFSL via the Regulatory Portal (5 to 8 months from a complete lodgement). Forming the entity is the first step: see the full Australia company formation guide.

Taxation

Australia is a standard-rate corporate jurisdiction with crypto-specific clarity. Corporate income tax is 25% for base-rate entities (aggregated turnover under AUD 50 million) or 30% for larger entities; crypto is taxed as a CGT asset; and digital currency supplies have been GST-exempt since 1 July 2017, which avoids a double-GST outcome on trading flows. The deep tax-treaty network and the GST exemption together keep the effective economics competitive with offshore alternatives.

TaxRateCrypto Application
Corporate Income Tax25% (base rate entity) / 30%Base-rate threshold requires aggregated turnover < AUD 50m AND ≤ 80% passive income
Capital Gains TaxMarginal for individuals; 25%/30% for companiesCrypto is a CGT asset under TD 2014/26; 50% individual discount on assets held > 12 months (under review)
Goods and Services Tax (GST)10% standard rateGST-exempt for digital currency supplies since 1 July 2017
Withholding Tax: interest / royalties / dividends10% / 30% / 30%Treaty rates often reduce materially on cross-border flows
Payroll & Stamp DutyState-based, variablePayroll above state thresholds; stamp duty generally not applicable to crypto transactions

The ATO classifies crypto as a CGT asset under TD 2014/26, with the 50% individual discount applying to assets held over 12 months and staking rewards typically assessable as ordinary income when received. Australia is implementing the Crypto-Asset Reporting Framework, and the ATO has run a crypto data-matching program since 2014.

Banking

Banking access is the practical bottleneck for Australian crypto operators, despite a deep domestic banking system. No statute prevents banking; the constraint is internal bank risk appetite. The four largest domestic banks tightened access in mid-2023, and debanking remains a real operational risk as of May 2026. The operators that secure tier-1 domestic banking are those who arrive with a complete compliance package, a named AML/CTF compliance officer, and a documented CDD framework in production, not a bare registration certificate. Client-money trust accounts for AFSL holders must be held with an Australian ADI unless ASIC grants relief, and the 2 to 6 month banking timeline rarely beats the AFSL process. Banking is one of our core services here, scoped alongside the licensing perimeter that determines whether a business can operate at all.

In short: Foreign bank branches with crypto-aware compliance functions and fintech-friendly second-tier institutions are increasingly the workable counterparties. A licensed EU EMI or credit institution can play a supporting role for cross-border AUD, USD, and EUR flows where domestic access is constrained.

FATF Status and EU Market Access

Australia is a founding member of the Financial Action Task Force and holds clear standing in the FATF mutual evaluation process. The AML/CTF Amendment Act 2024 and the Tranche 2 extension to designated non-financial businesses (effective 1 July 2026) close the long-standing gap that earlier evaluations identified, and the AUSTRAC supervisory model is referenced internationally as a mature framework.

In short: An Australian licence does not grant access to the EU market. MiCA contains no third-country equivalence regime, so an Australian authorisation confers no passporting rights. Operators serving EU clients must obtain a separate CASP authorisation in an EU member state or fall within the narrow reverse solicitation exemption under MiCA Article 61, which ESMA restricts to isolated, genuinely unsolicited contacts. Any EU-targeted marketing voids it. See Reverse Solicitation Under MiCA →.

How Australia Compares

Australia’s natural comparators are the other Tier-1 regulated APAC jurisdictions: New Zealand, Hong Kong, and Singapore. Each operates under a substantial financial regulator with internationally recognised standards, and each diverges on timeline, capital, tax, and banking. Estonia is the EU cross-tier reference for operators weighing EU passporting against APAC credibility.

FactorAustraliaNew ZealandHong KongSingapore
Licence TypeAUSTRAC DCE/VASP + ASIC AFSL + (from 2027) DAP/TCPFSPR registration + AML/CFT complianceSFC VATP + HKMA Stablecoin Issuer + C&ED MSOMAS Digital Payment Token under PSA; MPI licence
RegulatorAUSTRAC + ASICFMA + DIA + RBNZSFC + HKMA + C&EDMAS
TimelineAUSTRAC 4–12 weeks; AFSL 5–8 monthsFSPR ~3–6 monthsVATP 8–18 monthsDPT 9–18 months
Min. CapitalNone (AUSTRAC); AUD 50,000–10m (AFSL)None (FSPR)HKD 5m paid-up + HKD 3m liquid (VATP)SGD 250,000 (MPI)
Corporate Tax30% (25% BRE)28%16.5% standard; 8.25% concessional first HKD 2m17% standard; partial exemptions
EU PassportingNoNoNoNo
FATF StatusMember; clearMember; clearMember; clearMember; clear
Institutional CredibilityHigh; gold-standard AFSL and a door-opener in institutional salesHigh; FATF-clear, common-law property treatment of cryptoHigh; Tier-1 financial centre, strong SFC brandHigh; MAS DPT licence is a recognised global signal
Banking AccessSelective; the four majors constrained; onboarding 2–6 monthsDifficult; major banks have de-risked cryptoModerate; easier for licensed VATPs since the 2023 HKMA circularModerate; the licence is necessary but not sufficient
Best ForInstitutional custody, AUD stablecoin issuers, tokenised RWA platforms, AFSL-credentialled exchangesNZ-facing operators wanting a light-touch, FATF-clear registrationEstablished exchanges and stablecoin issuers targeting APAC flowInstitution-focused DPT operators valuing MAS credibility

See where we deliver crypto licensing →

Among the four APAC peers, Australia offers the most balanced profile of institutional credibility against operating cost. New Zealand is cheaper and faster but carries less weight; Hong Kong’s VATP regime carries the highest credibility for large exchanges at a significant regulatory cost; Singapore’s MAS regime is the closest competitor on credibility and the most stringent on substance. Australia’s genuine differentiators are the statutory DAP framework, the AUD stablecoin precedent, and the depth of the tax-treaty network.

When Australia Fits, and When It Does Not

Australia fits operators building institutional-grade custody for APAC investors, issuing an AUD-denominated stablecoin, tokenising real-world assets for the forthcoming TCP framework, or relying on deep tax-treaty coverage. Consider alternatives where speed is the binding constraint, where EU passporting is needed (Estonia or another EU MiCA jurisdiction delivers full EEA market access), or where a smaller operator wants the lighter-touch New Zealand FSPR registration.

Weighing Australia against where you can actually be licensed

We work with operators choosing between jurisdictions every week and deliver formation and licensing across the markets we serve. Tell us what you are building and we will give you a straight read on the right path. We do the work and stand behind the outcome.

Banking & Payments

A company and a licence still need a bank account

Banking is one of our three core services. We help high-risk and regulated businesses open the bank and payment accounts that others refuse: we work directly with EU EMIs, payment institutions and crypto-aware banks, confirm appetite before you apply, and make the introduction. Take it with your company and licence, or on its own.

Explore banking & payments →

Frequently Asked Questions

Eligibility
Do I need AUSTRAC registration to operate a crypto exchange in Australia?

Yes, if you provide a “designated service” with a geographical link to Australia under the AML/CTF Act 2006. AUSTRAC Digital Currency Exchange registration has been mandatory since 3 April 2018. From 31 March 2026, existing DCEs auto-roll into VASP status under reformed obligations; from 1 July 2026, new virtual asset designated services come into scope. Operating unregistered attracts daily penalties of up to AUD 19,800 from 7 November 2024.

When does an AFSL apply to crypto activities?

When the crypto product meets the Corporations Act definition of a “financial product”: derivatives, managed investment schemes, securities, asset-referenced stablecoins, non-cash payment facilities, or “facilities for making a financial investment” under section 763B. ASIC’s updated INFO 225 (29 October 2025) covers tokenised securities, yield-bearing stablecoins and managed staking. Bitcoin and similar payment tokens in isolation are typically not financial products, but products built on top of them usually are.

Does an Australian crypto licence cover tokenised securities or RWA?

Not on its own. Australia is technology-neutral: a tokenised asset is regulated by what it represents, so if it is a financial product the Corporations Act 2001 applies and an AFSL is required from ASIC. Registering as a digital-asset exchange does not authorise dealing in tokenised securities. The standalone Digital Asset Platform and Tokenised Custody Platform categories received Royal Assent 8 April 2026 and commence 9 April 2027. Where the wrapper is a fund, our fund licensing work scopes the route.

Process & Timeline
What is the Digital Asset Platform regime?

The DAP regime is a new statutory licensing framework introduced by the Corporations Amendment (Digital Assets Framework) Act 2026, which received Royal Assent 8 April 2026 and commences 9 April 2027. It introduces two new categories of financial product: a digital asset platform (a facility for holding digital tokens on trust for clients, including exchanges) and a tokenised custody platform (for tokenised real-world assets). Full supervision applies around October 2028 after a six-month transition, adapting the existing AFSL framework on a “same risk, same regulation” basis.

Capital & Compliance
What capital is required for a crypto custodian in Australia?

For an AFS licensee providing custodial or depository services in its own right, the net tangible asset requirement under RG 166 is the greater of AUD 10 million or 10% of average revenue. At least 50% must be held in cash or cash equivalents, with 100% in liquid assets. Incidental custody providers, where custody is outsourced to an Australian ADI or licensed trustee company, face NTA of the greater of AUD 150,000 or 10% of average revenue. AUSTRAC has no minimum capital requirement.

Is a local director required?

Yes. The Corporations Act 2001 requires at least one Australian-resident director for proprietary companies (section 201A); public companies require two. A registered office in Australia is required for both. From 31 March 2026, an Australian-resident AML/CTF compliance officer is also mandatory. Responsible managers are not strictly required to reside in Australia, but ASIC’s RG 105 substance assessment expects active engagement with the Australian business.

Tomberg & Partners

Tell us what you need to build.

Speak with our team about formation, licensing, banking, or the operating structure your business needs.

Book a free consultation