Overview
Australia's regime in 2026 sits across three tracks. The base layer is the AUSTRAC Digital Currency Exchange (DCE) registration under Part 6A of the AML/CTF Act, mandatory since 3 April 2018. From 31 March 2026 the AUSTRAC Tranche-2 virtual asset services expansion brings crypto-to-crypto exchange, custody, transfers and the Travel Rule into scope. From 9 April 2027 the ASIC Digital Asset Platform (DAP) and Tokenised Custody Platform (TCP) regimes under the Corporations Amendment (Digital Assets Framework) Act 2026 add an AFSL requirement on top of AUSTRAC.
For 2026 market entry the planning horizon is therefore short, the AUSTRAC enrolment window for newly captured services closes 29 July 2026, and the ASIC transitional no-action lodgment deadline for DAP/TCP AFSL applications is 30 June 2026. Build for both regulators in parallel.
Australia has become a serious APAC base for licensed crypto: Coinbase Australia announced it had secured the AFSL pathway on 7 April 2026, the first major exchange to telegraph readiness for the DAP regime. A parallel AUSTRAC + ASIC pathway is now the market standard for exchange, custody and tokenised-RWA businesses targeting Australian retail.
Regulators
AUSTRAC (Australian Transaction Reports and Analysis Centre) is the AML regulator and runs the DCE registration plus the Tranche-2 virtual-asset-services expansion. ASIC (Australian Securities and Investments Commission) regulates financial services under the Corporations Act 2001 and will license DAP and TCP operators under the new framework. The Treasury, Markets Group, leads digital-asset reform policy. The Australian Taxation Office (ATO) handles tax.
Track 1. AUSTRAC DCE registration
Mandatory since 3 April 2018 under Part 6A of the AML/CTF Act 2006. Any business providing a crypto-to-fiat exchange service with a geographical link to Australia must register. Registration term is three years, renewable. AUSTRAC charges no registration fee.
Core obligations: AML/CTF Programme (Part A risk-based, Part B customer due diligence), KYC, Threshold Transaction Reports (TTR), Suspicious Matter Reports (SMR), International Funds Transfer Instruction reports (IFTI) and Travel Rule. The compliance perimeter scales with monthly transaction volume, not capital.
Track 2. AUSTRAC Tranche-2 / Virtual Asset Services expansion
The AML/CTF Amendment Act 2024 expands AUSTRAC designated services from 31 March 2026. New designated services captured:
- Crypto-to-crypto exchange.
- Digital asset custody and custodial wallet services.
- Virtual asset transfer services (including Travel Rule).
- Safekeeping of private keys and multisig on behalf of customers.
| Date | Trigger |
|---|---|
| 31 March 2026 | New designated services covered; enrolment opens; Travel Rule starts for existing DCEs. |
| 1 July 2026 | Full compliance obligations commence for newly captured VASPs. |
| 29 July 2026 | Final enrolment deadline. |
Travel Rule implementation aligns with FATF Recommendation 16 across all virtual asset transfers from 31 March 2026.
Track 3. ASIC AFSL · Digital Asset Platform / Tokenised Custody Platform
The Corporations Amendment (Digital Assets Framework) Act 2026 received Royal Assent on 8 April 2026 and commences on 9 April 2027, the day after a 12-month period from Assent. Two new regulated facilities:
- Digital Asset Platform (DAP): a facility where an operator holds digital tokens for themselves or on behalf of another.
- Tokenised Custody Platform (TCP): an operator holds non-money assets and issues a digital token representing the right to redeem or direct delivery of the asset.
Any person who advises, deals in, or arranges dealings in DAP/TCP financial services requires an Australian Financial Services Licence (AFSL) from ASIC.
Indicative NTA capital (law-firm guidance pending final ASIC regulatory guide)
| Model | Indicative NTA |
|---|---|
| Custodial operator (direct custody of client tokens) | AUD 5 million minimum, in cash / liquid fiat |
| Operator with "factual control" over client tokens | AUD 5 million NTA (crypto excluded from NTA calc) |
| Outsourced sub-custody to AU-licensed sub-custodian (AUD 5M NTA) | 0.5% of assets held |
| Custody of tokenised RWA (full TCP) | Up to AUD 10 million NTA |
For other AFSL crypto use cases the existing RG 166 framework still applies, standard AFSL holders sit in the AUD 50,000–150,000 NTA band depending on activity, custodial or depository services at the AUD 10 million baseline.
The ASIC transitional no-action position protects providers that have lodged an AFSL application or variation by 30 June 2026. Miss that date and the DAP/TCP rules apply on commencement (9 April 2027) without a transition. AUSTRAC enrolment for the Tranche-2 services must be completed by 29 July 2026. Most market entrants in 2026 should plan AUSTRAC and AFSL workstreams concurrently from Q2 2026.
De-minimis exemption, when AFSL is not required
The Digital Assets Framework Act carves out a low-value threshold so early-stage and micro-scale operators do not need an AFSL with DAP authorisation. A provider stays outside the DAP licensing perimeter where both of these conditions hold simultaneously:
- Customer holdings below AUD 5,000 per customer.
- Total annual transaction volume below AUD 10 million over a rolling 12-month window.
AUSTRAC obligations still apply. DCE registration, Tranche-2 enrolment, AML/CTF Programme, Travel Rule and reporting are not subject to the AFSL de-minimis. Practically, the exemption is designed for founder-stage pilots and small OTC desks. Once either threshold is crossed the operator must lodge an AFSL application and (where the ASIC no-action position still applies) fall inside the transition window rather than trigger breach of Chapter 7.
DCE vs AFSL, how the two licences differ
| Dimension | AUSTRAC DCE / VASP enrolment | ASIC AFSL with DAP/TCP |
|---|---|---|
| Regulator | AUSTRAC | ASIC |
| Statute | AML/CTF Act 2006 Part 6A (as amended 2024) | Corporations Act 2001 Ch. 7 (DAF Act 2026) |
| Who must hold it | Any crypto-to-fiat exchange and, from 31 March 2026, crypto-to-crypto exchange, custody, transfer services | Operators of Digital Asset Platforms and Tokenised Custody Platforms above the de-minimis |
| Minimum capital | None | Indicative AUD 5M NTA (custodial); tiered to AUD 10M for full TCP |
| Government fee | No registration fee | AFSL lodgment fee per ASIC fee schedule |
| Timeline | 3–5 months | 10–18 months |
| Primary focus | AML/CTF, Travel Rule, reporting | Financial-services conduct, client-asset protection, disclosure, IDR/EDR |
| Commencement / status | Live since 3 April 2018; Tranche-2 from 31 March 2026 | Act assented 8 April 2026; regime commences 9 April 2027 |
For most retail-facing exchange and custody businesses above the de-minimis, the 2026–2027 plan is AUSTRAC enrolment first, AFSL in parallel. Banking access is a separate workstream, the major Australian banks remain selective on crypto accounts, and a clear licensing roadmap materially improves onboarding outcomes.
High-level checklist
- Australian proprietary company (Pty Ltd) or Australian-registered foreign company with a local place of business.
- For AFSL: at least two Responsible Managers with relevant experience and education per ASIC RG 105.
- Directors pass fit-and-proper assessment, ASIC police and bankruptcy checks.
- AML/CTF Programme aligned with AUSTRAC requirements (Part A and Part B).
- Custody architecture aligned with the indicative DAP/TCP rules; HSM controls, segregation, insurance.
- Travel Rule technology integrated for the 31 March 2026 commencement.
- For DAP: AFSL application via ASIC, lodged by 30 June 2026 to use the transitional no-action position.
- Reporting infrastructure: TTR, SMR, IFTI, plus AFSL conditions on PI insurance and dispute resolution.
Process and timeline
| Step | DCE (AUSTRAC) | AFSL + DAP (ASIC) |
|---|---|---|
| Pre-application, entity, AML programme, policies | 1–2 months | 4–6 months |
| Regulator review | 4–12 weeks | 6–12 months (AFSL typical) |
| Total realistic | 3–5 months | 10–18 months |
Taxation
- Corporate tax: 30% standard, 25% for base-rate entities (turnover < AUD 50M and passive income ≤ 80%).
- GST: crypto-to-fiat and crypto-to-crypto exchanges are GST-free (since 1 July 2017, digital currency treated as money).
- Capital gains tax applies to individuals and entities holding crypto as a CGT asset.
- No dedicated VDA flat rate. Crypto gains are taxed at ordinary income or CGT rates depending on classification per ATO guidance.
Official sources
- AUSTRAC. DCE register, AML/CTF rules, Tranche-2 guidance.
- ASIC. AFSL, INFO 225, DAP/TCP regulatory guides.
- ASIC Corporate Register, company and licensee look-up.
- The Treasury. Digital Asset Platform reform consultation papers.
- Reserve Bank of Australia, payments-system policy and stablecoin research.
- Australian Taxation Office, crypto CGT and income-tax guidance.
- ACCC, consumer-law and scam-watch enforcement on digital assets.
FAQ
Is an AUSTRAC DCE registration enough in 2026?
For crypto-to-fiat exchange linked to Australia, yes, until 31 March 2026, but the Tranche-2 expansion adds crypto-to-crypto, custody and transfers. From 9 April 2027 most operators will also need an AFSL with the DAP authorisation.
What is the minimum capital?
AUSTRAC sets none. ASIC DAP indicative NTA is AUD 5M (custodial) under law-firm guidance pending the final ASIC RG. Crypto is excluded from NTA calculation.
How long does the licence take?
3–5 months for AUSTRAC DCE; 10–18 months for the AFSL with DAP authorisation.
What deadlines must I meet in 2026?
30 June 2026 to lodge AFSL application (ASIC transitional no-action), 29 July 2026 final enrolment for AUSTRAC Tranche-2 services, 1 July 2026 full compliance start for newly captured VASPs.
How does Australia compare with New Zealand?
New Zealand remains lighter. FSP plus AML/CFT in 3–5 months, no NTA. Australia in 2026 is more comprehensive, costlier, and on a clear path toward AFSL-grade oversight.
When is an AFSL required for a crypto token?
When the token meets a financial product test under Chapter 7 of the Corporations Act, an interest in a managed investment scheme, a derivative, or a non-cash payment facility. ASIC INFO 225 (updated 29 October 2025, media release 25-250MR) contains 18 worked examples classifying stablecoins as non-cash payment facilities and wrapped tokens as derivatives. From 9 April 2027, advising, dealing or arranging DAP/TCP services also triggers an AFSL regardless of token classification.
What are the AUSTRAC AML/KYC obligations?
Every DCE maintains a Part A (enterprise risk) and Part B (customer due diligence) AML/CTF Programme, appoints an AUSTRAC-registered AML Compliance Officer, and files TTRs, SMRs and IFTIs. From 31 March 2026 the Travel Rule applies. TTR and IFTI cash-equivalent threshold is AUD 10,000; SMRs have no threshold, any suspicion triggers the report.
How does the Travel Rule apply in Australia?
FATF Recommendation 16 implementation starts 31 March 2026 for existing DCEs and 1 July 2026 for newly captured VASPs, crypto-to-crypto, custody, transfers. The full AML/CTF Rules instrument setting the precise AUD threshold is pending; integrate an IVMS 101 messaging solution ahead of commencement.
CGT or business income, how is crypto taxed?
Individuals and entities holding crypto as a CGT asset are taxed under capital gains rules on disposal, with a 50% CGT discount for individuals and trusts holding more than 12 months. Businesses trading, mining or running an exchange treat proceeds as ordinary income, 30% corporate (25% for base-rate entities with turnover under AUD 50M). No dedicated VDA flat rate.
What custody requirements apply under the DAP regime?
Indicative under law-firm guidance: AUD 5M minimum NTA in cash or liquid fiat for custodial operators and for operators with factual control; crypto is excluded from NTA. Outsourcing to an AU-licensed sub-custodian (holding AUD 5M NTA) drops NTA to 0.5% of assets held. Full TCP for tokenised real-world assets can run to AUD 10M. Segregation per ASIC RG 133; cyber controls per APRA CPS 234.
How are stablecoins treated?
ASIC INFO 225 (finalised 29 October 2025) classifies fiat-backed stablecoins as non-cash payment facilities, financial products under the Corporations Act, so issuance, dealing and arranging require an AFSL. RBA and Treasury may add a parallel payment-stablecoin framework. A sector-wide no-action position runs to 30 June 2026 for lodged AFSL applications.
Is there a de-minimis exemption from the AFSL?
Yes. The Digital Assets Framework Act carves out operators who hold less than AUD 5,000 per customer and process less than AUD 10 million in total annual transaction volume, both conditions must hold. AUSTRAC AML/CTF obligations still apply and are not exempted by the AFSL de-minimis.
How much does an Australian crypto licence cost?
AUSTRAC charges no DCE or VASP registration fee. ASIC levies an AFSL lodgment fee per its published fee schedule. Advisor fees vary by model, indicative market range for an AUSTRAC DCE engagement is AUD 25,000–60,000 and for a DAP-authorised AFSL AUD 120,000–300,000 depending on custody architecture, number of Responsible Managers and scope of financial products.
What is AUSTRAC in plain English?
AUSTRAC is Australia's financial-intelligence unit and anti-money-laundering regulator. Under the AML/CTF Act 2006 it registers digital currency exchange providers, receives Threshold Transaction Reports, Suspicious Matter Reports and IFTI reports, and enforces the Travel Rule. It does not license financial products, that remains ASIC's remit.
Who received the first AFSL for a crypto exchange?
Coinbase Australia announced on 7 April 2026 that it had secured its AFSL pathway, positioning it as the first major international exchange aligned with the Corporations Amendment (Digital Assets Framework) Act 2026 and the forthcoming DAP regime. Local exchanges and custody providers are now lodging AFSL applications inside the 30 June 2026 no-action window.
AUSTRAC vs ASIC, what is the scope split?
AUSTRAC handles AML/CTF. DCE registration and VASP enrolment, AML programmes, customer due diligence, TTR/SMR/IFTI reporting and the Travel Rule. ASIC handles financial-services conduct. AFSL, RG 105 responsible managers, RG 133 client-asset rules, RG 166 NTA, and from 9 April 2027 the DAP and TCP facility regimes. Most 2026 operators need both.