Australia’s digital asset market is entering an unusual overlap period. The Treasury Laws Amendment (Digital Asset Framework) Act 2026 received royal assent on April 8, 2026. The new law brings Digital Asset Platforms and Tokenised Custody Platforms into the financial product regime and will take effect on April 8, 2027. At the same time, AUSTRAC has already expanded anti-money laundering coverage for virtual asset service providers, and ASIC’s no-action period for existing financial services licensing issues ends on June 30, 2026. Firms now have to deal with rules that already apply while preparing for a new platform licensing system that starts next year.
Australia does not place crypto oversight under a single authority. The Australian Securities and Investments Commission, or ASIC, handles financial products, market conduct, and platform licensing. AUSTRAC covers anti-money laundering and counter-terrorism financing. The Australian Prudential Regulation Authority, or APRA, focuses on prudential risk for banks and large stored-value institutions. The Reserve Bank of Australia, or RBA, is responsible for payments system and settlement policy. The Australian Taxation Office, or ATO, deals with asset disposals and income records. The starting point for any licensing analysis remains the same: what assets a project controls, whose assets it holds, how transactions are carried out, and whether payment functionality is involved.
Asset classification still comes first, followed by what the platform actually does
Before the new law takes effect, ASIC will continue using the Corporations Act 2001 to decide whether a token or service amounts to a financial product. A token may fall within a managed investment scheme, a derivative, a non-cash payment facility, or a security. If a platform facilitates trading in financial products, it may also amount to a financial market. A stablecoin that lets users pay others using an account balance may be treated as a non-cash payment facility. A wrapped token linked to the price of another asset may also fall under derivatives rules.
That classification can directly trigger the need for an Australian Financial Services Licence, or AFSL. Issuing a financial product, giving advice, arranging transactions, holding client assets, or operating a related facility each carries different authorizations and ongoing obligations. If even one financial product appears on a platform, the trading function may move into financial market licensing territory. A business cannot decide its regulatory status simply by calling itself an exchange, a wallet, or a Web3 project.
The new law is meant to create a single entry point for many platforms that were previously hard to classify. New section 761GB of the Corporations Act defines a digital token through factual control. If an electronic record can be transferred by one or more persons, can exclude others from control, and can evidence control, it may fall within the definition. The test looks at whether users and platforms can actually control the asset. It does not depend on any particular blockchain or cryptographic structure.
On that basis, section 761GC defines a Digital Asset Platform, or DAP, as a platform where the operator holds digital tokens on behalf of clients. Section 761GD defines a Tokenised Custody Platform, or TCP, as a platform where each real-world asset or non-monetary asset corresponds to a digital token that can be redeemed for, or delivered as, that asset. The first category covers common centralized trading and custody services. The second creates a dedicated route for tokenized real-world assets.
DAPs and TCPs will be treated as financial products
The law adds DAPs and TCPs to the list of financial products in sections 764A(1)(la) and 764A(1)(lb) of the Corporations Act, except where they are already regulated under another category such as a managed investment scheme. In principle, operators will need an AFSL and authorizations that match the platform’s activities. Platform rules, disclosure, client assets, and trading processes all move into the financial services framework.
This shifts the focus from the token itself to the service layer. Many spot tokens may not be securities or derivatives in the traditional sense. But when a platform controls them for clients, records entitlements, and arranges trading, the operational risks faced by customers look much closer to those in regulated financial services. Lost private keys, internal ledger errors, misuse of assets, and settlement failures all sit at the platform level. Australia’s answer is to regulate custody and trading arrangements directly.
Section 912BB requires relevant licensees to comply with asset holding standards and trading and settlement standards. Under new section 912BE, ASIC may set rules on how client assets are held, segregated, recorded, reconciled, reported, and used. A platform may use omnibus wallets to hold assets for multiple clients, but its internal books must continuously identify each client’s entitlement. If only one address appears on-chain, the platform’s own sub-ledger becomes the key evidence of ownership.
New section 912BF allows ASIC to set trading and settlement standards that cover acquisition, disposal, encumbrance, and final settlement of assets. The scope also includes order handling, agency and outsourcing arrangements, market-making or liquidity provision agreements, and oversight of those arrangements. Platforms will need to show that trades can be completed and explain how orders enter the system, who can intervene, what permissions external market makers receive, and how unusual trading is detected and handled.
Section 912BG goes further by requiring platform rules to spell out customer eligibility, the obligations of each side, settlement methods, external liquidity, risks, asset lists, and redemption or delivery arrangements. Those rules have contractual effect between the licensee and the client. User agreements are no longer just website terms. They must line up with actual on-chain control, internal ledgers, and settlement systems.
A small-scale exemption exists, but the boundary is narrow
The law keeps a small-scale DAP exemption. Section 911A(2)(ja) of the Corporations Act applies where a platform does not offer other financial products, the total value of transactions over the previous 12 months does not exceed A$10 million, and the value each client brings onto the platform does not exceed A$5,000. The operator must also notify ASIC.
The exemption is better suited to limited pilots or small services than to a mass-market trading venue. The aggregate cap and the per-client cap can be reached quickly as a business grows. A platform may also fall outside the exemption if it adds yield, leverage, derivatives, or payment functionality, because that can introduce other financial products.
For startups, the practical route is to define the scale of the test and the customer limits first, then decide whether to rely on the exemption, work with a licensed entity, or prepare an AFSL application from the start. Treating licensing as something to fix after launch is becoming harder to square with ASIC’s current enforcement stance. The no-action period under the existing framework ends on June 30, 2026. Businesses that already amount to financial products or financial services need to address licensing now.
AUSTRAC registration addresses a different risk line
AFSL obligations deal with financial services and client assets. AUSTRAC registration deals with whether funds are being used for money laundering, terrorism financing, or sanctions evasion. The same business may need both. From March 31, 2026, Australia’s updated AML and CTF rules expanded the scope of virtual asset services. The rules now cover not only fiat-to-crypto exchange, but also crypto-to-crypto exchange, transfers of virtual assets on behalf of clients, custody or administration, and financial services related to the issuance or sale of virtual assets.
Businesses within scope must register with AUSTRAC as virtual asset service providers, establish AML and CTF programs, complete customer due diligence, monitor transactions, and file suspicious matter reports. Cross-institution transfers also have to comply with the travel rule, meaning specified information about the payer and payee must accompany the transfer. Registration review can take up to 90 days, so firms need to build document preparation and regulator questions into their launch timelines.
AUSTRAC will look at ownership, key personnel, product flows, target customers, sources of funds, and technical controls. Registration is not just a web form. A platform needs to explain how customers enter the service, how wallet addresses are verified, how high-risk jurisdictions and privacy coins are handled, and how on-chain alerts are linked to customer accounts. Transaction monitoring vendors may supply address risk data, but the registered business remains responsible for the rules, investigations, and reporting.
For offshore platforms, the question of whether services are offered in Australia, and whether the business has Australian customers and operational links, affects both registration and licensing analysis. Keeping servers or a company entity offshore does not solve compliance issues if the platform serves Australian users. Marketing, Australian dollar on-ramps, local staff, and customer support can all become factual indicators of a business connection.
Stablecoins may fall into payments and prudential oversight at the same time
Stablecoin activity often cuts across both systems. Issuance and redemption may amount to a non-cash payment facility. Wallets and transfers can trigger AUSTRAC obligations. Reserve management raises questions about banking, custody, and asset segregation. Australia’s Treasury is also advancing payments licensing reform, with plans to bring more payment service providers into the AFSL regime and create powers over large stored-value facilities and designated payment service providers.
APRA’s focus is the financial soundness of large stored-value institutions, including issuers of Australian dollar-denominated stablecoins that are widely used for payments. Once scale reaches a certain point, reserve quality, capital, liquidity, and redemption capacity may move into prudential supervision. The RBA approaches tokenized money from the perspective of payments efficiency and financial stability and continues to study wholesale settlement arrangements. At present, the RBA says Australia lacks a clear public interest case for a retail central bank digital currency, with policy resources directed more toward wholesale and payments infrastructure.
That means an Australian dollar stablecoin project may need to answer four sets of questions at once: whether the token is a financial product, what AFSL authorizations the issuer and wallet provider need, whether the business has completed AUSTRAC registration, and whether reserve scale triggers APRA or payments system oversight. If the platform also offers trading and custody, the DAP regime will cover client assets and settlement processes as well. Compliance design has to start with the product and the flow of funds, not with separate document sets for separate regulators.
Tax and recordkeeping run through the whole business
The ATO generally treats crypto assets as capital gains tax assets. Selling, exchanging, gifting, or using crypto to buy goods can amount to a disposal event for individuals. Income tax rules may also apply where assets are traded as a business or received as compensation. The ATO requires records of transaction dates, Australian dollar values, purpose, counterparties, wallets, and fees, and those records are generally kept for five years.
The transaction history held by a platform directly affects a customer’s ability to complete tax reporting. If deposits, withdrawals, crypto-to-crypto swaps, on-chain transfers, and fee records use different time or pricing conventions, users may struggle to reconstruct cost basis. Platforms serving Australian customers need to build downloadable records, Australian dollar valuations, and account identification into product design. They also need to manage access controls between regulatory reporting and privacy protection.
Client asset rules also depend on reliable records. On-chain addresses show that assets moved. Internal ledgers explain which customer, which order, and which fee category those movements belong to. Those two record sets meet in day-to-day reconciliation. They support ASIC inspections, AUSTRAC investigations, and tax evidence. Many of the new Australian requirements end up resting on this traceable data foundation.
How firms can prepare before the 2027 start date
The Digital Asset Framework law takes effect on April 8, 2027. New Part 10.83 of the Corporations Act provides transition arrangements, and section 1730 defines the point at which the new regime applies. Relevant platforms will get a six-month transition period after commencement to deal with licensing and business migration. ASIC has already started an 18-month implementation roadmap and will issue standards on asset holding, trading and settlement, and financial requirements, while also updating licensing guidance.
Existing businesses can begin with a three-layer review. First, assets: assess token by token whether anything already falls within the financial product perimeter. Second, activities: map deposits, exchange, custody, transfers, staking, lending, and redemption, and identify who has control at each step. Third, entities: confirm which Australian or offshore companies contract with customers, hold assets, operate the technology, and bear customer-facing responsibility. Once those three layers are clear, the boundaries for AFSL authorizations, AUSTRAC registration, and future DAP or TCP applications become easier to define.
The migration period also involves contracts and systems. Platform rules need to function as legally effective customer arrangements. Custody contracts need to support segregation and timely return of assets. Omnibus wallets need reliable sub-ledgers. The permissions granted to market makers and outsourced providers also need to be documented. If a firm waits until ASIC has published every detailed rule, licensing materials, system changes, and customer migration may all end up compressed into the same period.
The framework centers on control, trading arrangements, and redemption rights
Australia’s approach shows a strong platform-based regulatory logic. Regulators are not trying to assign a permanent label to every token in advance. The focus is on three points instead: control of client assets, trading arrangements, and redemption rights. Once DAPs and TCPs are treated as financial products, platforms that custody and trade assets can face a common minimum standard even where the underlying token is not itself a security.
For businesses, the practical result is that AFSL obligations and AUSTRAC registration will run in parallel for the long term. One track answers who may provide financial services and how assets are held and settled. The other answers who the customer is, where funds come from, and how unusual transactions are reported. Stablecoins and tokenized real-world assets can also pull in payments, prudential, and tax oversight.
The 2027 platform licence is not the starting point of Australian crypto regulation. Existing financial product rules and AML requirements are already in force. The next year is a window for moving from older classification questions into the new platform framework. Firms that can connect on-chain control, internal ledgers, customer contracts, and regulatory reporting into one operating line will be in a stronger position to complete that shift.
