Home
VASP license
Crypto license in Australia

Crypto license in Australia

A crypto license in Australia — formally, AUSTRAC registration as a Digital Currency Exchange — is mandatory for any business offering fiat-to-crypto or crypto-to-fiat services, with approval typically taking 8 to 16 weeks from a complete submission. Operating without registration is a criminal offense under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006, administered by AUSTRAC. The framework is activity-based, FATF-aligned, and applies equally to Australian companies and foreign platforms serving Australian customers.

A crypto license in Australia is a registration issued by the Australian Transaction Reports and Analysis Centre (AUSTRAC) under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006. Any entity that exchanges digital currency for fiat — or fiat for digital currency — on a commercial basis qualifies as a Digital Currency Exchange (DCE) and must register before onboarding customers. Additional licensing under an Australian Financial Services License (AFSL), overseen by ASIC, applies where crypto activities involve financial products such as derivatives or tokenized securities. Registration must be renewed every three years.

Parameter	Value
Regulator	AUSTRAC (primary); ASIC (AFSL where financial products involved)
Primary Law	Anti-Money Laundering and Counter-Terrorism Financing Act 2006
Registration Type	DCE Registration; Remittance Registration; AFSL (if applicable)
Approval Timeline	8–16 weeks (AUSTRAC DCE); 4–12 months (AFSL)
Minimum Capital	No statutory minimum
Registration Renewal	Every 3 years
Corporate Tax	30% (25% for eligible small businesses)
GST	10% (crypto exchange transactions generally exempt)
Withholding Tax on Dividends	30% (treaty reductions possible)
Physical Presence	Local Australian business address required
Compliance Officer	Local AML/CTF officer required from March 2026
Foreign Ownership	Permitted; foreign platforms serving AU customers also subject to AUSTRAC

In this guide, you will find clear, practical information on:

The legal status of crypto assets and virtual asset services in Australia;
Regulatory authorities and key legislation governing crypto businesses;
Licensing and registration requirements for different crypto activities;
The application process, costs, and expected timelines;
Ongoing compliance, AML, and reporting obligations;
Key advantages of obtaining a crypto license in Australia.

This guide is designed to help you assess whether Australia is the right jurisdiction for your crypto project and understand the steps required to operate lawfully.

Who regulates crypto businesses in Australia?

AUSTRAC — the Australian Transaction Reports and Analysis Centre — is the sole authority responsible for registering and supervising Digital Currency Exchange (DCE) providers under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006. Every crypto business that falls within the DCE definition must register with AUSTRAC before commencing operations, regardless of company size, client base, or whether the entity is incorporated in Australia or overseas.

Role of AUSTRAC as the Primary Regulator

The Australian Transaction Reports and Analysis Centre (AUSTRAC) is the national authority responsible for preventing money laundering, terrorism financing, and other serious financial crimes. Crypto businesses that fall within the definition of a digital currency exchange are classified as reporting entities and are subject to ongoing supervision by AUSTRAC.

AUSTRAC’s mandate spans:

Registering and monitoring digital currency exchange providers;
Enforcing AML/CTF compliance obligations;
Collecting and analyzing transaction reports;
Taking enforcement action for regulatory breaches.

Governing Legislation

The regulatory obligations for crypto businesses are primarily set out in the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 and its associated Rules and Regulations. This legislation establishes a risk-based compliance model requiring regulated entities to identify, assess, and mitigate money laundering and terrorism financing risks linked to their operations.

Mandatory Registration Requirement

Any business offering fiat-to-crypto or crypto-to-fiat exchange services in Australia must be registered with AUSTRAC before commencing operations. Operating without registration is not a regulatory oversight — it constitutes a criminal offense.

Key points include:

Registration is a legal prerequisite for market entry;
Businesses must be registered prior to onboarding customers;
AUSTRAC registration applies regardless of company size or client base.

Renewal and Ongoing Supervision

AUSTRAC registration is not indefinite. Registered digital currency exchanges must renew their registration every three years, confirming ongoing compliance with AML/CTF requirements and updating business information as needed. AUSTRAC conducts active supervision between renewal cycles and may request information or conduct compliance reviews at any time.

Request more info about Australia crypto license

What types of Australian crypto registrations and licenses are available?

Australia regulates crypto businesses through three parallel regimes: AUSTRAC DCE registration for exchange services, AUSTRAC remittance registration for value transfer activities, and an ASIC Australian Financial Services License (AFSL) for financial product activities. Most crypto exchanges require DCE registration alone. Businesses offering crypto derivatives, tokenized securities, or managed investment schemes must additionally obtain an AFSL from ASIC.

AUSTRAC Digital Currency Exchange (DCE) Registration

AUSTRAC DCE registration is the core and most common requirement for crypto businesses operating in Australia. It is mandatory for any entity that provides fiat-to-crypto or crypto-to-fiat exchange services. Registration must be completed before commencing operations and brings the business within the scope of the AML/CTF Act.

Remittance Registration

Crypto businesses that transfer value on behalf of customers — particularly across borders — may also fall under Australia’s remittance service provider framework. Remittance registration is also administered by AUSTRAC and is distinct from DCE registration. In practice, some crypto platforms are required to hold:

DCE registration for exchange activity; and
Remittance registration for value transfer services.

ASIC Licensing: Australian Financial Services License (AFSL)

An AFSL issued by ASIC is required where crypto activities involve financial products under the Corporations Act. This may apply to crypto derivatives, tokenized securities, and managed investment schemes involving digital assets. Unlike AUSTRAC registration, an AFSL governs consumer protection, disclosure, conduct, and licensing standards. Some crypto businesses must comply with both AUSTRAC and ASIC requirements simultaneously.

Regulatory Regimes Overview

Regulatory Regime	Regulator	Applies When	Primary Focus
AUSTRAC DCE Registration	AUSTRAC	Fiat-to-crypto or crypto-to-fiat exchange services	AML/CTF compliance
Remittance Registration	AUSTRAC	Value transfer services, including cross-border transactions	AML/CTF and transaction monitoring
AFSL	ASIC	Crypto activities involving financial products	Licensing, conduct, consumer protection

Does my Australian crypto business actually need AUSTRAC registration?

Not every crypto operation in Australia requires AUSTRAC registration. The obligation applies specifically to entities that operate a Digital Currency Exchange (DCE) — defined as a business exchanging digital currency for fiat, or fiat for digital currency, on a commercial basis. AUSTRAC assesses DCE status based on substance over form: if your business controls customer onboarding, pricing, or transaction flow, it will likely fall within scope regardless of how it is labeled.

Definition of a Digital Currency Exchange (DCE)

A Digital Currency Exchange (DCE) is defined as a business that provides a service for exchanging digital currency for fiat currency, or fiat currency for digital currency, in the course of carrying on a commercial activity. The regulatory focus is not limited to traditional centralized exchanges. Any entity that facilitates the conversion between digital assets and government-issued currency may qualify as a DCE, regardless of:

Whether the platform operates online or through physical channels;
The volume of transactions processed;
Whether services are offered to retail clients, institutional customers, or both.

AUSTRAC assesses DCE status based on substance over form. A company does not avoid classification simply by outsourcing technical functions or labeling itself as a “technology provider.” If the business controls customer onboarding, pricing, transaction flow, or settlement, it is likely to fall within the DCE definition.

Regulator Service Provider Test

When assessing whether a business qualifies as a DCE, AUSTRAC applies two practical criteria:

Is the business providing exchange services to external customers?
Is it doing so on a commercial, regular basis?

If both criteria are met, AUSTRAC registration is required regardless of business structure or how the service is described.

AUSTRAC Registration vs. AFSL Requirements

AUSTRAC registration should not be confused with an Australian Financial Services License (AFSL). AUSTRAC registration addresses AML/CTF risk and financial crime prevention. AFSL licensing, overseen by ASIC, applies where crypto assets qualify as financial products under the Corporations Act. In some cases, a crypto business may require both registrations.

Foreign Platforms and Australian Customers

The requirement to register applies equally to Australian-incorporated companies and to foreign entities offering exchange services to Australian customers. Offshore platforms with an Australian client base are subject to AUSTRAC registration and ongoing AML/CTF supervision — and operating without registration constitutes a criminal offense under Australian law.

What are the requirements for an Australian AUSTRAC registration?

Australian AUSTRAC registration requires a formally established legal entity with transparent ownership, a local business address, and a compliant AML/CTF program tailored to the specific risk profile of the business. There is no statutory minimum capital requirement. From March 2026, a locally based compliance officer or equivalent governance function with effective control over AML/CTF matters is expected by AUSTRAC.

Corporate Structure & Local Presence

A crypto business must be formally enrolled and registered with AUSTRAC before providing regulated services. Registration is entity-specific and tied to the actual operating company.

Key structural expectations include:

A clearly defined legal entity with transparent ownership and control;
Appointment of responsible persons suitable for AML/CTF oversight;
A local Australian business address (virtual office acceptable in many cases).

From March 2026, businesses should be prepared to demonstrate the presence of a locally based compliance officer with effective control over AML/CTF matters.

AML/CTF Program Requirements

All registered crypto businesses must develop, implement, and maintain a compliant AML/CTF program tailored to their specific risk profile. Generic or template-based policies are insufficient under AUSTRAC’s risk-based model.

Core AML/CTF obligations include:

Customer identification and verification procedures (KYC);
Ongoing customer due diligence and transaction monitoring;
Enhanced due diligence for high-risk customers and activities;
Submission of suspicious matter reports and threshold transaction reports.

Record-Keeping and Reporting

Crypto businesses must retain AML/CTF records for prescribed periods and submit periodic and event-driven reports to AUSTRAC. Businesses are also required to:

Promptly notify AUSTRAC of material changes to operations, ownership, or services;
Keep registration details current at all times;
Cooperate with regulatory reviews and information requests.

How do you get an Australian crypto license step by step?

Australian AUSTRAC registration follows seven stages, from entity setup to post-registration compliance. AUSTRAC typically takes 8 to 16 weeks to assess a complete DCE application; well-prepared submissions with comprehensive AML/CTF documentation consistently reduce review time. Businesses also requiring an AFSL from ASIC should begin that parallel process during documentation preparation, as AFSL review adds 4 to 12 months to the overall timeline.

Preliminary Analysis & Regulatory Pathway Determination

Before any filings, the business must assess its service model to determine whether it requires AUSTRAC DCE registration, remittance registration, an ASIC AFSL, or multiple regimes simultaneously. This early analysis informs documentation needs and compliance strategy.

Company Formation & Corporate Setup

Establish an Australian legal entity (e.g., Pty Ltd), obtain an Australian Business Number (ABN) and Australian Company Number (ACN), and appoint officers in accordance with corporate and regulatory expectations. A local business address is required. This step is foundational for AUSTRAC engagement.

Documentation & Compliance Preparation

Develop a robust AML/CTF compliance framework including an AML/CTF program and risk assessment, KYC and transaction monitoring procedures, internal controls and governance policies, and reporting structures for suspicious matter reporting. High-quality documentation significantly reduces review delays.

AUSTRAC Registration Application Submission

Submit the formal application through the AUSTRAC Online portal. Applicants must provide details on directors, beneficial owners, compliance personnel, and operational processes.

AUSTRAC Review & Decision

AUSTRAC conducts a risk-based assessment, which may include further inquiries or requests for supplemental information. Simple or well-prepared applications may receive a decision at the lower end of the 8–16 week range, while complex or incomplete submissions can extend to approximately 4 months. Approval is issued in writing, and no regulated services may be offered until registration is confirmed.

Final Compliance Adjustments & Operational Readiness

Following registration, finalize internal compliance systems, conduct any requisite testing of transaction monitoring and reporting tools, and complete any remaining corporate formalities before going live.

ASIC AFSL Application (If Applicable)

If the business operates with crypto financial products such as tokenized securities, derivatives, or certain custodial arrangements, a separate AFSL application through ASIC is required. This involves review of governance, capital adequacy, conduct frameworks, and consumer protection measures. Organizations often prepare in parallel with AUSTRAC documentation to optimize time.

Summary Table: Licensing Process & Estimated Timelines

Stage	Description	Approximate Timeline
Regulatory Pathway Analysis	Determine applicable regimes (AUSTRAC, AFSL)	1–2 weeks
Company Formation	Entity registration, ABN/ACN, local setup	1–3 weeks
Documentation & Compliance Prep	AML/CTF programs, policies	4–12 weeks
AUSTRAC Application Submission	Complete and file registration	1–2 weeks
AUSTRAC Review & Decision	Regulator assessment and queries	8–16 weeks
Final Compliance Readiness	Final internal setup before launch	1–3 weeks
ASIC AFSL Application (If Needed)	Additional licensing for financial products	4–12 months

How much does an Australian AUSTRAC registration cost?

AUSTRAC DCE registration carries no fixed government license fee. The primary cost driver is compliance: developing a risk-based AML/CTF program typically costs USD 15,000–50,000 at setup, with ongoing annual expenditure on KYC tools, compliance staff, and reporting. Businesses subject to ASIC’s AFSL regime face additional licensing and capital adequacy costs. All registered entities are subject to AUSTRAC’s periodic industry contribution levy, which varies by entity size and activity.

Regulatory and Setup Costs

Costs arise from a combination of registration obligations and professional compliance requirements:

Company incorporation and corporate secretarial expenses;
Preparation and implementation of an AML/CTF program;
AUSTRAC registration and periodic industry contribution charges;
Ongoing compliance, reporting, and audit support.

Ongoing Compliance Expenses

Recurring costs include AML/KYC software and transaction monitoring tools, compliance staff or outsourced services, internal audits, policy updates, training, and triennial registration renewal.

Taxation of Crypto Businesses in Australia

Key tax considerations include:

Corporate income tax at 30%, with a reduced rate of 25% for qualifying small businesses;
GST at 10% — most crypto exchange transactions between Australian residents are input-taxed and do not attract GST;
Withholding tax on dividends paid to non-resident shareholders, subject to reductions under applicable double tax treaties;
Personal income tax for founders and employees at progressive rates up to 45%.

Costs and Tax Overview

Category	Description	Indicative Amount / Rate
Company Incorporation	Australian entity setup, ABN/ACN	From AUD 500+
AUSTRAC Registration	DCE registration and administration	No fixed license fee
Industry Contribution	Periodic AUSTRAC levy (where applicable)	Variable
Compliance Setup	AML/CTF program, policies, advisory	USD 15,000–50,000 (approx.)
Ongoing Compliance	KYC tools, audits, reporting	Ongoing operational cost
Corporate Income Tax	Standard corporate taxation	30% (25% for eligible small businesses)
GST	General consumption tax	10% (crypto exchanges generally exempt)
Dividend Withholding Tax	Payments to non-residents	30% (treaty reductions possible)

Crypto license consultant in Australia

Consultant

Alina Skidan

Phone +6531596549
Email a.skidan@fastoffshorelicenses.com
Position
Associate, Consultant

What are the ongoing compliance obligations after AUSTRAC registration?

AUSTRAC-registered crypto businesses must maintain a live AML/CTF program, submit suspicious matter reports and threshold transaction reports, retain records for prescribed periods, and notify AUSTRAC of material changes to their operations or ownership. AUSTRAC conducts active supervision — registered entities should expect periodic compliance checks and information requests as part of normal regulatory engagement.

Key ongoing obligations include:

Maintaining and updating a compliant AML/CTF program, including KYC and transaction monitoring;
Submitting periodic reports and suspicious matter reports to AUSTRAC;
Retaining transaction and customer records for the required periods;
Notifying AUSTRAC of significant operational or structural changes;
Conducting regular internal audits and staff training.

AUSTRAC emphasizes risk-based controls, accurate reporting, and proactive governance as the baseline expectation for all registered entities. Failure to meet ongoing obligations can result in enforcement actions, including fines, suspension, or revocation of registration.

What are the penalties for operating without an Australian AUSTRAC registration?

Operating without AUSTRAC registration as a digital currency exchange is a criminal offense under the AML/CTF Act 2006. Individual directors and officers face up to 7 years imprisonment; corporate entities risk civil penalties of up to AUD 22.2 million per breach, or three times the benefit obtained, whichever is greater. AUSTRAC has consistently pursued enforcement action under this legislative framework, and the regulator has stated publicly that DCE compliance is a supervisory priority.

Criminal and Civil Penalties

Criminal prosecution of individuals: up to 7 years imprisonment;
Civil penalties for companies: up to AUD 22.2 million per breach, or 3× the benefit derived;
Injunctions preventing the business from operating;
Enforceable undertakings and remediation orders;
Forcible suspension or cancellation of any existing registrations.

Regulatory Enforcement in Practice

AUSTRAC has demonstrated willingness to pursue enforcement actions against non-compliant entities. The AUD 1.3 billion civil penalty imposed on Westpac Bank in 2020 — under the same AML/CTF Act — established the scale at which AUSTRAC exercises its enforcement powers. For crypto businesses, the same tools are available, and AUSTRAC has publicly designated DCE compliance as a regulatory priority.

Beyond direct penalties, operating without registration eliminates the possibility of obtaining banking facilities from compliant financial institutions, restricts access to payment rails, and exposes the business to reputational risks with institutional partners and investors.

What are the advantages and disadvantages of a crypto license in Australia?

Australian AUSTRAC registration provides regulatory legitimacy in one of the Asia-Pacific’s most reputable jurisdictions, with access to a mature financial market and full FATF alignment. The main trade-offs are the ongoing compliance burden — including mandatory AML/CTF programs, triennial renewal, and potential AFSL requirements for financial product activities — and the absence of tax neutrality typical of offshore jurisdictions, with a standard corporate tax rate of 30%.

Advantages	Considerations
Clear regulatory framework with AUSTRAC oversight	Compliance and reporting obligations are ongoing and detailed
Access to a mature financial market and institutional investors	Setup and compliance costs: USD 15,000–50,000 approx.
Alignment with FATF standards and global AML/CTF best practices	Registration must be renewed every three years
Strong legal protections and English common law system	Additional AFSL licensing required for financial product activities
Reputable jurisdiction enhancing credibility with banks and partners	No tax neutrality: 30% corporate tax (vs. 0% in offshore jurisdictions)
Level playing field: same rules apply to foreign platforms serving AU customers	Review timelines may extend depending on application complexity

How does banking work for Australian AUSTRAC-registered businesses?

Banking for AUSTRAC-registered crypto businesses involves a separate application process distinct from regulatory registration. Australian banks and financial institutions apply enhanced due diligence (EDD) to digital asset businesses, even where AUSTRAC DCE registration is confirmed. A complete AML/CTF framework, transparent source of funds, and a regulated business model significantly improve banking outcomes.

Typical Banking Options for AUSTRAC-Registered Businesses

Australian retail banks with dedicated FinTech or digital assets teams;
International banks familiar with AUSTRAC-compliant crypto businesses;
Licensed Electronic Money Institutions (EMIs) in the UK or EU accepting Australian-regulated clients;
Crypto-native banking providers offering business accounts to licensed DCEs.

What Improves Your Banking Application

AUSTRAC DCE registration confirmed and current;
Completed AML/CTF program and KYC manual with documented internal controls;
Clear source of funds documentation for initial operating capital;
Detailed business plan demonstrating a regulated, compliant operating model.

Fast Offshore Licenses includes corporate bank account opening assistance in its service packages, connecting clients with banking partners experienced in Australian-regulated crypto businesses.

How Fast Offshore Licenses Supports Crypto Licensing in Australia

Fast Offshore Licenses provides end-to-end support for AUSTRAC registration and, where applicable, ASIC AFSL licensing — from entity incorporation and AML/CTF program development to submission, regulator communication, and post-registration compliance. Our team has practical experience with DCE registrations and the specific documentation standards AUSTRAC expects from new applicants.

Our services include:

Company Formation and Registration
We assist in establishing a compliant Australian legal entity, including corporate structure, shareholder documentation, and statutory requirements necessary for AUSTRAC registration.
Comprehensive Licensing Support
Our specialists guide clients through AUSTRAC registration and, if applicable, AFSL application processes, including preparation of all required documents, submission, and ongoing regulator communication.
Business Planning and Regulatory Documentation
We prepare professional business plans, AML/CTF frameworks, KYC policies, internal procedures, and all supporting documents necessary for regulatory approval.
Expertise in FinTech and Digital Asset Regulation
Our legal and compliance team has extensive experience with crypto exchanges, custodial services, brokers, and other regulated financial service providers across multiple jurisdictions.
Employee Compliance Training
We support companies in maintaining regulatory readiness through AML/CTF and KYC training programs for staff.
Ongoing Company Maintenance and Support
Fast Offshore Licenses provides continuous assistance with regulatory communication, accounting supervision, local representation, and policy updates.

FAQ about cryptocurrency license in Australia

Does every crypto business in Australia need AUSTRAC registration?

No. AUSTRAC registration applies specifically to entities that operate as a Digital Currency Exchange (DCE) — businesses exchanging digital currency for fiat, or fiat for digital currency, on a commercial basis. Businesses engaged solely in crypto-to-crypto transactions, software development, or advisory services do not automatically fall within scope. AUSTRAC assesses DCE status based on substance over form.

How long does it take to get an Australian crypto license?

AUSTRAC typically takes 8 to 16 weeks to assess a complete DCE registration application. Well-prepared submissions with comprehensive AML/CTF documentation consistently achieve decisions at the lower end of that range. Businesses also requiring an AFSL from ASIC should allow an additional 4 to 12 months for that parallel review process.

What are the AML/CTF compliance requirements for AUSTRAC registration?

All registered DCEs must maintain a risk-based AML/CTF program covering customer identification and verification (KYC), ongoing customer due diligence, transaction monitoring, suspicious matter reporting to AUSTRAC, and record retention for prescribed periods. Programs must be tailored to the specific risk profile of the business — generic templates are insufficient under AUSTRAC’s model.

Does Australia impose taxes on crypto businesses?

Yes. Australian crypto businesses are subject to a 30% corporate income tax rate (25% for eligible small businesses). Most crypto exchange transactions between Australian residents are treated as input-taxed for GST purposes and do not attract the standard 10% GST. Withholding tax of 30% applies to dividends paid to non-resident shareholders, subject to treaty reductions.

Can a foreigner obtain an Australian crypto license?

Yes. Foreign nationals and foreign-incorporated entities can obtain AUSTRAC DCE registration. There is no Australian citizenship or residency requirement for company directors or shareholders. However, a local Australian business address is required, and from March 2026, AUSTRAC expects a locally based compliance officer or equivalent governance function with effective control over AML/CTF matters.

Does an Australian crypto license require physical presence or a local office?

A local Australian business address is required for AUSTRAC registration. In many cases a virtual office address is acceptable at the registration stage. From March 2026, AUSTRAC is expected to require a locally based compliance officer or equivalent governance function — meaning some degree of physical or substantive local presence will become a practical necessity for most registrants.

Does AUSTRAC registration apply to foreign crypto platforms?

Yes. AUSTRAC registration applies to any entity providing DCE services to Australian customers, regardless of where the company is incorporated. Offshore platforms with an Australian client base are subject to the same registration and AML/CTF obligations as Australian-incorporated entities. Failure to register constitutes a criminal offense under Australian law.

Is there a minimum capital requirement for AUSTRAC registration?

No. The AML/CTF Act imposes no fixed minimum capital requirement for AUSTRAC DCE registration. However, AUSTRAC expects businesses to demonstrate financial stability and adequate resources to maintain ongoing compliance operations. Businesses should be prepared to evidence sufficient funds to support their AML/CTF program and operational activities.

What are the penalties for operating without AUSTRAC registration?

Operating without AUSTRAC registration as a DCE is a criminal offense under the AML/CTF Act 2006. Individual directors face up to 7 years imprisonment; corporate entities risk civil penalties up to AUD 22.2 million per breach, or three times the benefit obtained. AUSTRAC may also seek injunctions, remediation orders, and forced shutdown of non-compliant operations.

Can one entity hold both AUSTRAC DCE registration and remittance registration?

Yes. A single entity may hold multiple AUSTRAC registrations simultaneously. Crypto platforms that both exchange digital currency and transfer value on behalf of customers across borders typically require DCE registration for exchange activities and remittance registration for value transfer services. Each registration carries its own compliance obligations under the AML/CTF framework.

OTHER CRYPTO LICENSES