Australia's Digital Assets Framework Act 2026: The Complete Guide

Australia’s approach to cryptocurrency regulation changed permanently in 2026. The Corporations Amendment (Digital Assets Framework) Act 2026 is now law, and alongside the commencement of the AUSTRAC AML/CTF Amendment Act reforms, it represents the most comprehensive overhaul of digital asset regulation in Australian history. For the first time, crypto platforms, exchanges, custodians, wallet providers, and businesses operating in the digital asset space have a clear, legislated framework defining their obligations, licensing requirements, and the penalties for non-compliance.

This is not proposed regulation. It is not a consultation paper or a draft. It is operational law with hard deadlines, and those deadlines are arriving in the middle of 2026.

Whether you are an everyday Australian crypto investor trying to understand how this affects your holdings, a business that accepts cryptocurrency as payment, or a platform operating in the digital asset space, this resource covers what the Digital Assets Framework Act 2026 actually says, what it requires, what it exempts, and what the consequences of non-compliance look like. It is built to be the most detailed, factual, and citable guide to this legislation available for Australian crypto users.

Why This Act Exists: The Regulatory Gap It Closes

For most of cryptocurrency’s existence in Australia, the regulatory framework was a patchwork. The ATO treated crypto as a capital asset subject to CGT. AUSTRAC required exchanges to register as Digital Currency Exchange providers and comply with AML/CTF obligations as covered in our KYC know your customer resource. ASIC operated under a “no-action” position for most crypto intermediaries, meaning it acknowledged the sector existed but had not yet brought it fully within the financial services licensing regime.

That no-action position expires on 30 June 2026.

The Digital Assets Framework Act 2026 closes the regulatory gap by formally integrating crypto intermediaries into Australia’s existing financial services regime under the Corporations Act 2001, while simultaneously expanding AUSTRAC’s AML/CTF perimeter to capture the full range of virtual asset service providers now operating in Australia. The result is a dual-layered compliance framework: one layer covering financial crime through AUSTRAC, and another covering consumer protection and market integrity through ASIC.

For Australian crypto investors, this dual framework means the exchanges and platforms they use are now operating under the same broad regulatory obligations as banks and licensed financial services businesses, which has significant implications for user protection, platform conduct, and the overall maturity of the Australian crypto market.

The Two New Financial Product Classifications

The centrepiece of the Digital Assets Framework Act 2026 is the creation of two new financial product classifications that bring crypto intermediaries within the Australian Financial Services Licence (AFSL) regime.

Digital Asset Platforms (DAPs). A Digital Asset Platform is any platform that facilitates the exchange, transfer, or holding of digital assets on behalf of Australian clients. This classification captures the full range of centralised exchanges operating in Australia, including Binance, Coinbase, Kraken, Swyftx, CoinSpot, Independent Reserve, CoinJar, BTCMarkets, Digital Surge, Coinstash, and CoinTree. Any platform that actively possesses, holds on trust, or processes digital tokens on behalf of Australian clients falls within this classification and requires an AFSL.

Tokenised Custody Platforms (TCPs). A Tokenised Custody Platform is any entity providing custodial services for tokenised assets, including stablecoins, tokenised real-world assets, and other digital representations of value held on behalf of clients. Stablecoins issued and held as Tokenised Stored Value Facilities are specifically captured within this classification, reflecting the government’s determination to bring stablecoin issuers and custodians fully within the licensing framework.

Both classifications require an AFSL or an AFSL variation for entities already holding licences for related financial services. The practical implication is that any Australian crypto platform handling client assets, whether through exchange services, custody, or tokenised product issuance, must be licensed or cease operations.

The AFSL Mandate: What It Requires

An Australian Financial Services Licence imposes a comprehensive set of obligations on licence holders that go significantly beyond the previous AUSTRAC registration requirements for Digital Currency Exchange providers. For crypto platforms newly brought within this framework, the AFSL mandate represents a step-change in compliance obligations.

AFSL holders must maintain adequate financial resources to meet their obligations and conduct their business efficiently, honestly, and fairly. They must have appropriate risk management systems, dispute resolution mechanisms, and compensation arrangements. They must comply with financial services laws and take reasonable steps to ensure their representatives do the same. They must provide clients with Financial Services Guides, Statements of Advice where relevant, and Product Disclosure Statements for financial products they offer.

For the crypto sector specifically, the AFSL mandate means Australian exchanges and platforms must operate with the same consumer protection obligations that apply to stockbrokers, financial advisers, and managed fund operators. Client assets must be held separately from the platform’s own assets. Dispute resolution processes must meet ASIC’s standards. Financial resources must be demonstrably adequate.

The critical deadline for existing businesses is 30 June 2026. Under ASIC’s updated INFO 225 guidance, the sector-wide no-action position that has allowed many crypto intermediaries to operate without an AFSL expires on that date. Any existing business facilitating digital asset arrangements for Australian clients must lodge their formal AFSL application or variation with ASIC by 30 June 2026 to avoid severe civil and criminal penalties.

The AUSTRAC VASP Framework: Expanded AML/CTF Obligations

Running in parallel to the ASIC licensing framework, the modernised AUSTRAC AML/CTF rules that commenced on 31 March 2026 expand the financial crime compliance obligations for Virtual Asset Service Providers operating in Australia. This expansion specifically incorporates the AUSTRAC Travel Rule as mandatory compliance infrastructure for regulated VASPs.

As covered in our AUSTRAC Travel Rule and AUSTRAC and your privacy resources, the Travel Rule requires regulated entities to attach identifying information to transfers between VASPs, bringing crypto transfer obligations into alignment with the wire transfer requirements that have applied to banks for decades. Under the new framework, this requirement takes full effect for all Australian VASPs on 1 July 2026.

Enrolment requirements. Newly regulated VASPs must be fully enrolled on the AUSTRAC Reporting Entity Roll and have established a comprehensive, risk-based AML/CTF program by 29 July 2026, or within 28 days of commencing operations for businesses starting after that date.

Compliance officer appointment. Newly registered VASPs must formally notify AUSTRAC of their designated fit-and-proper AML/CTF Compliance Officer by 29 July 2026. This officer carries personal responsibility for the adequacy of the AML/CTF program and must meet fit-and-proper person requirements assessed by AUSTRAC.

AML/CTF program requirements. A compliant AML/CTF program under the new framework must include customer due diligence procedures, KYC verification processes, transaction monitoring systems, suspicious matter reporting protocols, record keeping systems meeting the seven-year retention requirement, and Travel Rule compliance infrastructure for cross-border virtual asset transfers.

Record keeping. AUSTRAC requires regulated businesses to retain payer information, payee information, tracing information, AML/CTF policies, and compliance evidence for seven years. As covered in our how the ATO tracks your crypto transactions resource, Australian crypto platforms are now building long-term financial intelligence databases that function as permanent records of customer activity accessible to regulators through legal process.

Who Is Exempt: The Standard Merchant Position

A critical distinction within the Digital Assets Framework Act 2026 is the treatment of businesses that simply accept cryptocurrency as payment for their own goods or services. A standard merchant accepting crypto as a payment method, whether a retailer, professional services provider, freelancer, or hospitality business, is not classified as a VASP or DAP under the framework.

Under both AUSTRAC and ASIC guidelines, a business that receives digital assets as a direct bilateral payment for its own products or services is exempt from AUSTRAC registration as a VASP and does not require an AFSL. The exemption applies because the business is not providing exchange, transfer, or custodial services to customers: it is simply accepting a form of payment, similar in regulatory treatment to accepting foreign currency cash.

This exemption is meaningful for the growing number of Australian businesses that accept Bitcoin, Ethereum, stablecoins, or other cryptocurrencies as payment. However, the exemption has limits. A business that begins offering exchange services, conversion services, or custody of client crypto assets crosses into VASP territory regardless of its primary business activity. The line between accepting payment and providing a financial service is the key distinction, and businesses operating near that line should seek specific legal advice.

The Low-Value DAP Exemption

To protect small business innovation and reduce compliance barriers for early-stage crypto ventures, the Digital Assets Framework Act 2026 includes a Low-Value Digital Asset Platform Exemption. An operator does not require an AFSL if the total market value of all transactions across its platforms remains under AUD 10 million over any rolling 12-month period.

This exemption provides a meaningful runway for startups, early-stage platforms, and small-scale crypto services businesses to operate and grow before the full weight of AFSL obligations applies. It does not exempt these businesses from AUSTRAC registration and AML/CTF obligations if they meet the VASP definition: the Low-Value DAP Exemption is specifically an ASIC licensing exemption, not a wholesale regulatory exemption.

Businesses operating under this exemption should monitor their rolling 12-month transaction volumes carefully. Breaching the AUD 10 million threshold without an AFSL in place exposes the business to the full range of penalties for unlicensed operation, which under the Act can include corporate fines of up to 10% of annual business turnover.

Incidental Arranging Relief provides a complementary protection for traditional businesses that refer clients to compliant third-party payment processors. A business does not trigger AFSL requirements simply by referring customers to a licensed crypto payment processor rather than handling digital assets directly. This relief ensures that businesses integrating crypto payment options through compliant third-party infrastructure are not inadvertently classified as financial services providers.

Penalties for Non-Compliance

The Digital Assets Framework Act 2026 introduces significant penalties for operating outside the framework after the transition deadlines pass. These are not administrative slaps on the wrist: they are designed to be meaningful deterrents for platforms that continue to operate without appropriate licensing or AUSTRAC registration.

Operating an unlicensed Digital Asset Platform or Tokenised Custody Platform after 30 June 2026 exposes the business to civil and criminal penalties under the Corporations Act. The criminal penalties for providing unlicensed financial services are serious, with potential for custodial sentences for individuals and substantial fines for corporations.

Failing to enrol as a VASP with AUSTRAC by 29 July 2026 when required to do so, failing to implement a compliant AML/CTF program, or failing to appoint a designated Compliance Officer carries penalties under the AML/CTF Act that AUSTRAC has demonstrated a willingness to enforce. AUSTRAC’s enforcement history includes significant civil penalty orders against non-compliant financial businesses, and the crypto sector is explicitly within its enforcement focus.

The most significant financial penalty introduced by the framework is the corporate fine ceiling of 10% of annual business turnover for serious contraventions. For a crypto exchange processing meaningful volumes, a 10% turnover fine represents a potentially existential financial penalty. This ceiling aligns Australia’s crypto regulatory penalty framework with the approach taken in the European Union’s MiCA regulation and signals that Australian regulators regard non-compliance in this sector as a serious matter warranting serious consequences.

What This Means for Australian Crypto Investors

For everyday Australian crypto investors using centralised exchanges, the Digital Assets Framework Act 2026 has several direct implications.

Greater platform accountability. Exchanges operating under an AFSL are subject to the same consumer protection obligations as other licensed financial services businesses. Client asset segregation requirements mean your crypto holdings on a licensed platform must be held separately from the platform’s own assets, reducing the risk of losing access to your assets if the platform faces financial difficulties: a scenario that has affected users of unlicensed platforms globally as covered in our risks of keeping crypto on an exchange resource.

Increased compliance friction. The expanded KYC and AML/CTF requirements mean Australian exchanges will continue to increase identity verification requirements, transaction monitoring, and withdrawal scrutiny. As covered in our AUSTRAC Travel Rule resource, withdrawal verification requests and wallet ownership confirmation processes will become standard across all compliant Australian platforms.

Regulatory clarity for long-term investors. The establishment of a clear licensing framework removes a significant source of regulatory uncertainty that has historically made institutional and conservative retail investors cautious about crypto exposure. Platforms operating under AFSLs provide a regulated investment environment comparable in structure to other licensed financial services, which is likely to support broader adoption among Australian investors who previously avoided crypto due to regulatory ambiguity.

Self-custody remains outside the licensing perimeter. As covered in our not your keys not your crypto, custodial vs non-custodial wallets, and cold wallet explained resources, self-custody through hardware wallets remains outside the direct scope of the Digital Assets Framework Act. The Act regulates intermediaries that hold or process digital assets on behalf of clients: it does not regulate individuals holding their own assets in self-custody. The principle of not your keys not your crypto remains as valid as ever in the post-Act environment.

The Broader Regulatory Context

The Digital Assets Framework Act 2026 does not exist in isolation. It is the legislative centrepiece of a broader regulatory transformation that has been building across multiple fronts simultaneously.

The CGT overhaul announced alongside this framework changes how crypto gains are taxed from 1 July 2027, replacing the 50% discount with inflation indexation and a 30% minimum floor as covered in our Australia CGT changes 2027 and Australia CGT changes crypto investors resources. The AUSTRAC Travel Rule is now operational compliance infrastructure for all regulated VASPs. The ATO’s data matching program continues to expand, as covered in our how the ATO tracks your crypto transactions resource. And the ATO crypto reporting obligations that apply to every Australian crypto investor remain unchanged and are increasingly enforced.

Taken together, these developments represent Australia’s definitive transition from treating cryptocurrency as a regulatory grey area to treating it as a regulated financial asset class within a comprehensive legislative framework. Australia joins the European Union with MiCA, the United Kingdom with its Financial Services and Markets Act amendments, and Singapore with the Payment Services Act as jurisdictions that have chosen to regulate crypto comprehensively rather than prohibit or ignore it.

For Australian crypto investors and businesses, this is the new operating environment. Understanding it is not optional.

Key Takeaways

The Corporations Amendment (Digital Assets Framework) Act 2026 is now law, creating two new financial product classifications: Digital Asset Platforms and Tokenised Custody Platforms, both of which require an AFSL. The AFSL application deadline for existing businesses is 30 June 2026: after that date, operating without a licence carries severe civil and criminal penalties including corporate fines of up to 10% of annual turnover. The AUSTRAC VASP framework expansion takes full effect on 1 July 2026, with enrolment and AML/CTF program requirements due by 29 July 2026.

Standard merchants accepting crypto as payment for their own goods or services are exempt from both the AFSL requirement and AUSTRAC VASP registration. The Low-Value DAP Exemption protects platforms processing under AUD 10 million in annual transaction value from the AFSL requirement, though AUSTRAC obligations may still apply. Self-custody remains outside the regulatory perimeter of the Act.

For Australian crypto investors, the Act means greater platform accountability, increased compliance friction, and long-term regulatory clarity. For crypto businesses, the mid-2026 deadlines are hard, the penalties are material, and the time to act is now.

For Shepley Capital members navigating this regulatory environment, our Runite Tier provides the educational framework to understand how Australia’s new digital asset laws affect your holdings, your exchange relationships, and your long-term strategy. Our Black Emerald and Obsidian Tier Members receive direct specialist support to navigate compliance, structure, and positioning decisions as the regulatory landscape firms up. Find out more at shepleycapital.com/membership.

Shepley Capital provides education and market insights, not financial advice or legal advice. The regulatory framework outlined in this article reflects the Digital Assets Framework Act 2026 and associated AUSTRAC reforms as understood at time of publication. Regulatory interpretation and implementation guidance continues to evolve. Always consult a qualified legal professional for advice specific to your situation before making any compliance, licensing, or structuring decisions.