Crypto regulation in Australia

For years, Australian crypto businesses mainly faced anti-money laundering registration, with limited consumer protection rules. That is changing. In 2026 Parliament passed legislation bringing digital asset platforms into the financial services licensing system. Understanding who regulates what helps you know what protections exist today and which are coming.

Who does what

AUSTRAC: registration and AML

Since 2018, businesses exchanging digital currency for money have had to register with AUSTRAC and meet anti-money laundering obligations such as verifying customers' identities and reporting suspicious matters. Reforms to the anti-money laundering laws expanded coverage to a broader range of virtual asset service providers, such as those exchanging between crypto-assets, transferring them or safekeeping them for customers. AUSTRAC publishes a register of VASPs. Registration is not an endorsement.

AUSTRAC has also focused on crypto ATMs, which have been linked to scams.

ASIC and the Digital Assets Framework Act 2026

The Corporations Amendment (Digital Assets Framework) Act 2026 passed Parliament on 1 April 2026 and received Royal Assent on 8 April 2026. Its core obligations are scheduled to commence on 9 April 2027.

In broad terms, the Act:

• creates new categories of financial product for digital asset platforms (DAPs) and tokenised custody platforms (TCPs);
• requires businesses operating these platforms for customers to hold an Australian financial services licence;
• applies financial services obligations such as conduct, disclosure, asset-holding standards and dispute resolution to licensed operators;
• focuses on platforms holding assets for customers rather than regulating every crypto-asset as a financial product.

ASIC has published guidance and a roadmap for the transition. Smaller operators may be subject to exemptions. Until commencement, protections depend largely on the business and whether it already holds a licence for other products.

Existing ASIC powers

ASIC already regulates crypto-related products that are financial products, such as crypto derivatives and some crypto funds, and can take action over misleading conduct. It has restricted crypto CFDs for retail clients and takes down investment scam websites.

The ATO

The ATO treats crypto held as an investment as a CGT asset and collects data from platforms. Read crypto tax basics.

Payments and stablecoins

Treasury and the RBA have been modernising payments regulation, which is expected to cover certain stablecoin and payment arrangements. Read stablecoins explained.

What it means for consumers

• Today: check AUSTRAC registration, ASIC's investor alert list and AFCA membership before using a platform. Read how to check a crypto platform.
• From 2027: look for platforms that hold an Australian financial services licence covering digital asset platform services.
• Always: no regulation removes market risk. Licensing does not protect against price falls.

A short timeline

Dates are summarised from official sources; check ASIC and AUSTRAC for exact transition arrangements and any changes.

International context

Other jurisdictions have introduced their own crypto rules, such as the European Union's Markets in Crypto-Assets regulation. Platforms operating from overseas may not be subject to Australian protections, which is another reason to check registration and licensing carefully.

The bottom line

Australia is moving from registration-only towards licensing for crypto platforms. That should strengthen protections over time, but crypto remains high risk, and checking a platform yourself remains essential. Because timelines and details can shift as regulators publish guidance and transition arrangements, always confirm the current position directly with ASIC and AUSTRAC before relying on any summary, including this one.