Crypto Licensing in Australia: How the Regulatory Framework Works in 2026

Australia’s cryptocurrency regulatory framework in 2026 requires businesses that offer crypto services to Australians to hold appropriate licences and registrations: at minimum, AUSTRAC registration as a Digital Currency Exchange (DCE) provider, and increasingly, an Australian Financial Services Licence (AFSL) or authorisation under the Corporations Amendment (Digital Assets Framework) Act 2026 for certain crypto asset products. Understanding how Australian crypto licensing works matters directly for Australian investors: the licensing status of any platform you use determines whether you have regulatory protections, whether your complaint has a formal resolution pathway, and whether the platform operates under standards that protect your crypto assets and personal data. The ATO’s data matching programme connects directly to AUSTRAC-registered platforms, meaning that licensed platforms are part of the tax reporting infrastructure that underpins Australian crypto tax compliance. This guide explains the licensing landscape for 2026 and what it means for Australian crypto investors.

As of 1 July 2027, CGT rules in Australia are set to change. Please visit this page for the revised tax rules.

AUSTRAC Registration: The Baseline Requirement for Crypto Businesses

AUSTRAC (the Australian Transaction Reports and Analysis Centre) is Australia’s financial intelligence agency and anti-money laundering regulator. Under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (AML/CTF Act) as amended, businesses that exchange cryptocurrency for fiat currency, exchange one crypto asset for another in a commercial context, or operate custody services for crypto assets are classified as “digital currency exchange providers” and are required to register with AUSTRAC before offering services to Australian customers. AUSTRAC registration is the minimum licensing baseline: it does not make a platform a full financial services provider, but it requires the platform to implement an AML/CTF compliance programme (including customer KYC (Know Your Customer) procedures and transaction monitoring), designate a compliance officer, and report suspicious transactions and threshold cash transactions to AUSTRAC. For Australian investors, checking whether an exchange is AUSTRAC-registered is the first step in evaluating whether any platform meets the minimum Australian legal requirements for crypto operations.

The KYC verification process that AUSTRAC-registered platforms must implement is why every Australian exchange requires identity verification before allowing trading. AUSTRAC’s customer due diligence rules require platforms to verify the identity of customers before they provide services, collect proof of identity documents (passport, driver’s licence, or equivalent), and apply enhanced due diligence for higher-risk customers. The KYC requirements are directly linked to the ATO’s data matching programme: AUSTRAC-registered DCEs are required to report certain customer and transaction data to the ATO, which uses this information to identify Australian taxpayers who have crypto holdings or transactions that may not have been declared. For Australian crypto investors, the KYC process is both a regulatory requirement and the mechanism through which your exchange activity becomes part of the ATO’s visibility into your crypto tax obligations. The ATO data matching penalties for undisclosed crypto income are substantial.

The AML/CTF compliance obligations that come with AUSTRAC registration extend beyond KYC to include transaction monitoring (detecting and reporting potentially suspicious patterns in customer trading), record keeping (maintaining customer and transaction records for 7 years), and reporting (submitting Threshold Transaction Reports for cash transactions above AUD 10,000 and Suspicious Matter Reports for transactions that raise AML/CTF concerns). AUSTRAC has demonstrated willingness to penalise non-compliance: the AUD 1.3 billion penalty against Westpac for AML/CTF failures (2020) and AUSTRAC’s enforcement actions against several smaller crypto businesses for insufficient KYC procedures establish that registration without genuine compliance programme implementation carries significant legal risk. For Australian investors considering using offshore platforms that avoid AUSTRAC registration, the absence of AML/CTF compliance on the platform means the platform has no obligation to detect and report suspicious activity involving your account, which removes both a fraud protection mechanism and legal risk visibility for you as a customer.

Which Crypto Exchange To Use

AUSTRAC’s register of DCE providers is publicly searchable, allowing Australian investors to verify whether any exchange claiming to operate legally in Australia is genuinely AUSTRAC-registered. The AUSTRAC DCE register can be accessed through the AUSTRAC website and lists all registered providers by name, ABN, and registration date. For Australian investors evaluating which crypto exchange to use, cross-referencing the exchange’s AUSTRAC registration status confirms the legal baseline. Legitimate Australian-focused exchanges (including major local platforms like CoinJar, Independent Reserve, Swyftx, and BTC Markets, and major international platforms like Coinbase, Kraken, and others that have registered for Australian operations) will appear on the AUSTRAC register. An exchange that claims to be operating legally in Australia but is not on the AUSTRAC register is operating unlicensed, creating significant legal and financial risk for Australian customers who use it. The Australian AML framework makes AUSTRAC registration non-optional for any genuine crypto business targeting Australian customers.

The ongoing compliance obligations for AUSTRAC-registered platforms include annual compliance reports to AUSTRAC, ongoing customer due diligence updates as risk profiles change, and immediate notification of significant changes to business structure or ownership. For the ATO’s matching programme, AUSTRAC-registered platforms submit bulk transaction data annually that the ATO uses to generate income tax return pre-fills and to identify discrepancies between declared crypto income and exchange records. For Australian crypto investors, the practical implication is that any crypto tax reporting that differs significantly from the exchange records the ATO receives through AUSTRAC data matching is likely to trigger a review or audit. Maintaining complete and accurate crypto tax records that are consistent with your exchange transaction history is not just good practice but a direct response to the data matching infrastructure that makes crypto tax discrepancies increasingly visible to the ATO.

AFSL and the Digital Assets Framework Act 2026: The New Licensing Layer

The Corporations Amendment (Digital Assets Framework) Act 2026 introduced a new licensing framework for crypto asset markets that goes beyond the AUSTRAC DCE registration baseline. Under the Act, platforms offering certain categories of crypto asset products (digital asset exchange services above certain thresholds, stablecoin custody and issuance, tokenised financial products) require an AFSL authorisation covering their status as a Digital Asset Platform (DAP) or Tokenised Custody Platform (TCP). The Digital Assets Framework Act establishes conduct standards for licensed platforms (client money protection, custody obligations, conflict of interest management, market manipulation prohibitions) that mirror the obligations that apply to traditional financial services providers. For Australian crypto investors, AFSL-licensed platforms provide a higher standard of regulatory protection than AUSTRAC-only registered platforms: your assets must be held in segregated client money accounts, the platform must meet capital adequacy requirements, and you have access to the Australian Financial Complaints Authority (AFCA) for unresolved complaints.

The Australian Financial Services Licence (AFSL) remains relevant to the crypto regulatory landscape alongside the new Digital Assets Framework Act. Certain crypto asset products (crypto managed funds, crypto derivatives, tokenised securities) have always required AFSL authorisation as financial products under the Corporations Act, and the new Digital Assets Framework Act does not remove this requirement. Platforms offering crypto staking services where returns are guaranteed or where the crypto asset is pooled for collective investment may trigger the “managed investment scheme” definition under ASIC’s regulatory guidance, requiring an AFSL managed investment licence. For Australian investors using crypto platforms that offer staking, yield products, or fund-like crypto investment products, checking whether the product is offered under appropriate AFSL authorisation (and reading the product disclosure statement if one is required) provides important consumer protection context. Unlicensed platforms offering these products create significant legal risk for Australian investors.

ASIC’s enforcement role in the crypto licensing framework has expanded significantly with the Digital Assets Framework Act. Prior to the Act, ASIC’s jurisdiction over crypto was limited to crypto products that constituted financial products under the existing Corporations Act definition (crypto derivatives, managed investment schemes). The Act extends ASIC’s jurisdiction to the new Digital Asset Platform (DAP) and Tokenised Custody Platform (TCP) categories, giving ASIC market conduct regulatory authority over digital asset markets for the first time. ASIC has signalled its intention to apply the same market manipulation and market integrity standards to digital asset markets that apply to traditional securities markets: insider trading in crypto assets, wash trading, and price manipulation are now clearly within ASIC’s enforcement remit for licensed platforms. For Australian crypto investors who use licensed platforms, this means increased market integrity protection. For those using unlicensed offshore platforms, the ASIC protections do not apply, leaving Australian investors without regulatory recourse against manipulative practices. The AUSTRAC regulatory framework and the ASIC-administered Digital Assets Framework Act together constitute Australia’s comprehensive crypto legal framework as of 2026.

Best Australian Crypto Exchanges

The transition period for existing platforms to obtain AFSL authorisation as a Digital Asset Platform (DAP) or Tokenised Custody Platform (TCP) creates a compliance window during which many platforms operating in Australia in 2026 are still in the process of obtaining that authorisation. ASIC has communicated that platforms with existing AUSTRAC DCE registrations that have submitted AFSL authorisation applications before the transition deadline can continue operating during the assessment period. For Australian investors, this means that the licensing status of some platforms may be in transition: registered with AUSTRAC (compliant with the AML/CTF baseline) but not yet holding AFSL authorisation under the new framework (still undergoing assessment for the new conduct standards). Checking the ASIC Professional Registers and AUSTRAC register provides the most current licensing information for any specific platform. The best Australian crypto exchanges for 2026 are those with full AFSL compliance under the new framework or credible ongoing compliance applications, not just the AUSTRAC minimum.

The ATO compliance implications of the Digital Assets Framework Act’s licensing regime reinforce the tax reporting incentive structure. AFSL-licensed platforms have enhanced record keeping and reporting obligations that align with ATO data matching requirements, including more detailed reporting of customer transactions, better trade and cost basis data, and clearer reporting of staking and yield events. For Australian crypto investors, using AFSL-licensed platforms provides better-quality tax data (through the platform’s own reporting tools and the ATO pre-fill data that comes from AUSTRAC/ASIC reporting) than unlicensed platforms, which provide no structured tax reporting assistance. The direct connection between licensing compliance and tax reporting quality makes AFSL-licensed platforms the better choice for Australian investors who want to fulfil their ATO tax obligations accurately and avoid data matching discrepancies that could trigger ATO review or audit.

What Licensing Means for Australian Investors: Practical Implications

The consumer protection implications of licensing status are the most immediately practical consideration for Australian crypto investors choosing between platforms. An AFSL-authorised platform must maintain client money in segregated accounts (separate from company operating funds), meet minimum capital requirements (so the platform has financial reserves to continue operating through difficult periods), and adhere to conflict of interest policies that limit the platform’s ability to trade against its own customers. These protections do not exist on unlicensed offshore platforms: if an unlicensed exchange becomes insolvent (as occurred with several offshore exchanges in 2022-2023), Australian customer funds are typically treated as unsecured creditor claims in the offshore jurisdiction’s insolvency process, with minimal recovery prospects. The exchange custody risk is fundamentally different between regulated and unregulated platforms. For Australian investors who choose to hold significant crypto assets on an exchange rather than in self-custody wallets, choosing a licensed platform is the single most important risk mitigation available.

The complaint resolution pathway available to Australian investors differs substantially between licensed and unlicensed platforms. Customers of AFSL-authorised platforms can escalate unresolved complaints to the Australian Financial Complaints Authority (AFCA), which provides free independent dispute resolution with legally binding determinations. AFCA can order platforms to refund customers, correct transaction records, or provide compensation for systemic failures. Customers of unlicensed offshore platforms have no AFCA access: their only recourse is directly with the platform (no independent oversight), in the offshore jurisdiction’s courts (impractical and expensive for most disputes), or potentially through AUSTRAC or ASIC enforcement if the platform’s conduct is reported as potentially criminal. For Australian investors who experience problems (transaction errors, withdrawal difficulties, account freezes), the availability of AFCA complaint escalation is a material difference that the licensing status of the platform determines. Understanding your legal rights and recourse in Australian crypto markets before you deposit funds is basic investor protection due diligence.

Crypto Investors

Tax reporting support from licensed platforms provides a practical advantage for Australian crypto investors fulfilling their ATO obligations. AFSL-authorised platforms are more likely to provide integrated tax reporting tools (annual statements, cost basis tracking, EOFY reports in ATO-compatible formats) because they operate under data standards and reporting obligations that align with ATO requirements. Many best Australian crypto exchanges provide downloadable CSV transaction histories, integration with leading crypto tax software platforms (Koinly, CryptoTaxCalculator), and annual tax summaries that simplify the ATO reporting process. Unlicensed platforms vary widely in the quality of their transaction export functionality, and some provide no structured tax reporting at all. For Australian investors who want to maintain clean ATO compliance with minimal manual effort, using platforms with strong tax reporting support is as important as choosing platforms with the strongest licences.

Shepley Capital’s membership community tracks the licensing status of major platforms operating in Australia and provides updates as AFSL authorisation applications are approved and compliance deadlines pass. For Australian crypto investors who want to remain current on which platforms are compliant, which are in transition, and which are operating outside the Australian regulatory framework, the ongoing monitoring provided through Shepley Capital membership reduces the research burden of staying informed. The licensing landscape will continue to evolve as ASIC processes these AFSL authorisation applications through 2026-2027: platforms that were acceptable in 2024 may have different licensing profiles by mid-2026. Given the legal and financial risks of using unlicensed platforms, staying informed about licensing status is a core component of the overall crypto risk management framework for serious Australian investors.

Frequently Asked Questions

How is crypto licensing regulated in Australia?

Australia's cryptocurrency regulatory framework in 2026 requires businesses that offer crypto services to Australians to hold appropriate licences and registrations: at minimum, AUSTRAC registration as a Digital Currency Exchange (DCE) provider, and increasingly, an Australian Financial Services Licence (AFSL) or authorisation under the Corporations Amendment (Digital Assets Framework) Act 2026 for certain crypto asset products. Understanding how Australian crypto licensing works matters directly for Australian investors: the licensing status of any platform you use determines whether you have regulatory protections, whether your complaint has a formal resolution pathway, and whether the platform operates under standards that protect your crypto assets and personal data. The ATO's data matching programme connects directly to AUSTRAC-registered platforms, meaning that licensed platforms are part of the tax reporting infrastructure that underpins Australian crypto tax compliance.

What is the AUSTRAC baseline requirement for crypto businesses?

AUSTRAC (the Australian Transaction Reports and Analysis Centre) is Australia's financial intelligence agency and anti-money laundering regulator. Under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (AML/CTF Act) as amended, businesses that exchange cryptocurrency for fiat currency, exchange one crypto asset for another in a commercial context, or operate custody services for crypto assets are classified as "digital currency exchange providers" and are required to register with AUSTRAC before offering services to Australian customers. AUSTRAC registration is the minimum licensing baseline: it does not make a platform a full financial services provider, but it requires the platform to implement an AML/CTF compliance programme (including customer KYC (Know Your Customer) procedures and transaction monitoring), designate a compliance officer, and report suspicious transactions and threshold cash transactions to AUSTRAC.

How do you check whether an exchange is registered with AUSTRAC?

AUSTRAC's register of DCE providers is publicly searchable, allowing Australian investors to verify whether any exchange claiming to operate legally in Australia is genuinely AUSTRAC-registered. The AUSTRAC DCE register can be accessed through the AUSTRAC website and lists all registered providers by name, ABN, and registration date. For Australian investors evaluating which crypto exchange to use, cross-referencing the exchange's AUSTRAC registration status confirms the legal baseline.

What did the Corporations Amendment (Digital Assets Framework) Act 2026 add?

What do Australian investors need to know about Best Australian Crypto Exchanges?

What Licensing Means for Australian Investors: Practical Implications?

The consumer protection implications of licensing status are the most immediately practical consideration for Australian crypto investors choosing between platforms. An AFSL-authorised platform must maintain client money in segregated accounts (separate from company operating funds), meet minimum capital requirements (so the platform has financial reserves to continue operating through difficult periods), and adhere to conflict of interest policies that limit the platform's ability to trade against its own customers. These protections do not exist on unlicensed offshore platforms: if an unlicensed exchange becomes insolvent (as occurred with several offshore exchanges in 2022-2023), Australian customer funds are typically treated as unsecured creditor claims in the offshore jurisdiction's insolvency process, with minimal recovery prospects.

How does using a licensed platform help with ATO reporting?

What are the risks associated with Crypto Licensing in Australia?

Licensing governs the platform's conduct, not the performance of any asset, so a fully licensed exchange offers no protection against a fall in price. Registration also does not guarantee solvency: it sets AML and reporting obligations rather than capital requirements comparable to a bank. The framework is still being implemented, so requirements may change and some platforms may withdraw from the Australian market. Using an unregistered offshore platform removes what protection does exist while leaving ATO obligations unchanged.