Australia Compliance Report

Generated 2026-09-22

Framework In Development

Regulatory Overview

Regulatory Status: Active legislative/regulatory process underway
Risk Level: medium
Primary Legislation: Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (2006), Corporations Act 2001 (2001), Corporations Amendment (Digital Assets Framework) Bill 2025 (Exposure Draft): ht, Corporations Act 2001: https://www.legislation.gov.au/Details/C2023C00001, Corporations Act 2001 (amendments proposed): Via AFSL requirements.
Travel Rule: Adopted — Threshold: Implemented
Tax Reporting: ATO treats crypto as property (CGT asset); capital gains tax applies on disposal. Biennial compliance assessment required.

Key Facts

aml The enrolment and registration forms are no longer directly available at https://www.austrac.gov.au/new-enrolment-and-registration-forms-austrac-online; that URL now redirects to Austrac's secure online login portal. There is still no Australia‑specific evidence that the forms are only valid until 29 July 2026. VASP enrolment and registration requirements in Australia remain in effect and have not expired; AUSTRAC continues to require providers to apply for enrolment and registration with ongoing regulatory obligations. AUSTRAC requires enrolment to be completed through AUSTRAC Online by 29 July 2026, and the generic guidance pages still provide direct enrolment steps and preparation information. The page at https://www.austrac.gov.au/new-austrac/enrol-or-register still exists and serves as a hub for enrolment information, with detailed enrolment forms available on the 'Enrol with us' sub-page at https://www.austrac.gov.au/new-austrac/enrol-or-register/enrol-us. Digital currency exchanges (DCEs) and virtual asset service providers (VASPs) must enrol with AUSTRAC as reporting entities providing designated services under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006. AUSTRAC QRG: Transitioning from DCE to VASPAUSTRAC: Register as remittance or VASP DCEs registered as reporting entities must transition to VASP registration by updating enrolment details between 31 March 2026 and 29 July 2026 to continue providing services. AUSTRAC QRG: Transitioning from DCE to VASP VASPs must both enrol and register with AUSTRAC before providing virtual asset services; registration approval is required except under transitional rules for applications before 29 July 2026. AUSTRAC: Register as remittance or VASP Providers of newly regulated virtual asset services must enrol and apply for registration by 29 July 2026; transitional rules allow continued services until AUSTRAC decides on pending applications. AUSTRAC: Register as remittance or VASP
enforcement Non-compliance penalties are severe: failing to enrol or register can result in fines up to AUD 210,000 for corporations and potential criminal charges, including imprisonment The Binance fine stands out as the largest quantified penalty and a landmark court ruling. AUSTRAC's actions affected the most entities, signaling broad sector crackdown. Recent FCA 2024/25 enforcement data now reports substantial detail on major fined actions, including aggregate fine totals and specific enforcement outcomes, so it is no longer accurate to say that penalty details are generally limited or that there are no other major fined actions with full details in the results. Search results lack comprehensive coverage of all actions; additional minor warnings or investigations (e.g., 417 registered exchanges monitored) exist but are not individually significant.
general Legal rights attached (e.g., ownership, voting, profit participation resembling shares). Bundle of enforceable rights, expectations, issuer intentions, and smart contract features. No direct "Howey test" equivalent; instead, substance over form (e.g., tokenised bonds likely debentures; many wrapped tokens likely derivatives). Security tokens: Likely securities (shares or debentures) if providing ownership income, rights in off-platform assets, or share-like features (e.g., Token Estate). Wrapped tokens and stablecoins: Often derivatives or financial products; ASIC proposes class relief for eligible ones. Utility/protocol tokens (e.g., Golem): Not inherently securities unless rights mimic financial products. Note: Ripple (XRP) is excluded as an example due to its globally contested classification and ongoing US SEC litigation. Exchange tokens (e.g., Bitcoin, Litecoin): Typically not financial products. Issuers offering securities/MIS must comply with disclosure (product disclosure statements), licensing (AFSL for dealing/advising), and registration if applicable.
licensing AUSTRAC — AML/CTF, DCE registration ASIC — Securities, derivatives, financial products, design & distribution obligations Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (2006) — AML/CTF, DCE registration Corporations Act 2001 (2001) — Financial products regulation (AFSL), design & distribution obligations VASP: DCE registration with AUSTRAC (1-3 months, no minimum capital). AFSL required if offering financial products (6-12 months, AUD 50K-5M+). Comprehensive reform proposed — Treasury 'token mapping' (2023), CASP-style authorization expected 2025-2026. CUSTODY: AFSL required for crypto-related financial products; no standalone custody license yet. Reform will likely introduce dedicated custody framework. EXCHANGE: DCE registration (AUSTRAC, AML-only) + AFSL if offering financial products. ASIC aggressive on crypto derivative issuers (design & distribution obligations). Debanking of crypto firms major issue — Senate inquiry 2023. AUSTRAC (Australian Transaction Reports and Analysis Centre) is the primary regulator responsible for administering Australia's anti-money laundering and counter-terrorism financing regime
securities Cryptocurrency and digital asset activities in Australia are legal but regulated as financial products and services under the Corporations Act 2001 and the Australian Securities and Investments Commission Act 2001, with ASIC serving as the primary market and financial services regulator ASIC Home | ASIC Businesses conducting crypto-asset activities that involve financial products, such as securities or managed investment schemes, require an Australian Financial Services (AFS) licence, while superannuation entities holding such assets are overseen by APRA under separate prudential standards Guide for Directors: Superannuation | APRA Licensing is possible and has been pursued by market participants, though the practical reality is that most crypto businesses must carefully determine whether their specific token or service constitutes a financial product before proceeding, as no blanket crypto-specific licence exists Australian Securities and Investments Commission Act 2001 Enforcement activity is increasing, with ASIC actively investigating unlicensed conduct and misleading representations in the crypto sector ASIC Home | ASIC The framework remains fragmented, with regulatory gaps around decentralised finance (DeFi), stablecoins, and non-financial utility tokens creating compliance uncertainty for businesses Corporations Act 2001 - Federal Register of Legislation ASIC was established as a body corporate under section 8 of the Australian Securities and Investments Commission Act 2001, with membership comprising commissioners appointed by the Governor-General Australian Securities and Investments Commission Act 2001 ASIC performs the functions and exercises the powers conferred on it by the corporations legislation under section 11 of the Australian Securities and Investments Commission Act 2001 Australian Securities and Investments Commission Act 2001 The primary law governing digital asset securities is the Corporations Act 2001 (No. 50, 2001), which ASIC has general administration of pursuant to section 5B of that Act Corporations Act 2001 - Federal Register of Legislation
status Australia regulatory status: existing-law, framework-developing Australia's AML/CTF regulatory framework is currently operational with Tranche 2 expansion scheduled for implementation in 2026
tax ATO treats crypto as property (CGT asset); capital gains tax applies on disposal. Biennial compliance assessment required.
travel rule Travel Rule adopted — threshold: AUD 10,000 (threshold transaction reporting)

Sources

This report is AI-generated from publicly available regulatory sources. Last updated: 2026-09-22. View full profile