A$24B Crypto Licensing Law: Australia Ends the Wild West Era

💡 Key Takeaways

  • Australia passed the Corporations Amendment (Digital Assets Framework) Bill 2025 on April 1, creating the Asia-Pacific’s first comprehensive crypto licensing law — all exchanges and custody providers must now obtain an AFSL
  • Two new regulated categories — DAP (Digital Asset Platforms) and TCP (Tokenised Custody Platforms) — bring crypto under the same rules as brokers and fund managers, while self-custody wallets and AMMs stay exempt
  • The legislation arrived within a 10-day global regulatory sprint: UK FCA’s CP25/14 (March 30), Australia’s bill (April 1), and the EU MiCA final compliance deadline (July 1) — an A$24 billion market is now under bank-grade oversight

Australia’s Crypto Licensing Law: What Changes

A$24 billion. That is the annual opportunity Australia’s policymakers see in the digital finance market — and the number that drove them to pass the Asia-Pacific’s first comprehensive crypto licensing framework. On April 1, 2026, both houses of Australia’s Parliament approved the Corporations Amendment (Digital Assets Framework) Bill 2025, pulling crypto exchanges and custody providers into the same regulatory orbit as traditional financial services firms.

The key here is that this is not a voluntary code of conduct or a set of non-binding guidelines. Every exchange and custody provider operating in Australia must now obtain an Australian Financial Services Licence (AFSL) from the Australian Securities and Investments Commission (ASIC), which oversees market conduct and investor protection. AUSTRAC (Australian Transaction Reports and Analysis Centre) handles the anti-money laundering and counter-terrorism financing side of the equation.

AUSTRAC’s own timing underscored the coordinated nature of the shift. On March 31, just one day before the bill cleared Parliament, AUSTRAC expanded its AML/CTF oversight to cover crypto-to-crypto exchanges for the first time. The law and its enforcement infrastructure went live in near-lockstep.

Crypto licensing regulation — futuristic image of Australian Parliament with blockchain networks
The Asia-Pacific’s first comprehensive digital assets law cleared Australia’s Parliament, establishing new rules for the country’s crypto market — Generated by OpenAI DALL-E 3

DAP and TCP — Two New Regulatory Categories

The legislation carves digital asset services into two distinct regulatory categories. Digital Asset Platforms (DAPs) are facilities where an operator holds, trades, or stakes digital tokens on behalf of clients — think crypto exchanges and staking services. Tokenised Custody Platforms (TCPs) hold real-world assets such as gold, real estate, and bonds, then issue tokens linked to redemption or delivery rights for those underlying assets.

Put simply, DAPs cover the crypto-native side of the market, while TCPs cover the tokenization of traditional assets. Both categories face obligations identical to those imposed on brokers and fund managers under existing Australian financial services law. The formal creation of the TCP category means that real-world asset tokenization now has an official legal home in Australia — a significant signal for the global RWA movement.

Not everything falls under the new regime, however. Self-custody wallets, automated market makers (AMMs — algorithmic trading protocols that provide liquidity without a centralized operator), and non-custodial bridges are explicitly excluded. The dividing line is clean: if an operator takes direct possession of client assets, the crypto licensing requirements apply.

In simpler terms: A DAP is like a bank vault that holds your digital coins on your behalf. A TCP is like a warehouse that stores physical gold or property deeds and gives you a receipt (token) for what it holds. In both cases, the moment someone else holds your assets, a license is required.

AFSL Requirements and Exemptions

Obtaining an AFSL is not a rubber-stamp exercise. Licensed platforms must satisfy a detailed set of obligations that mirror the standards applied to incumbent financial institutions, including the following:

  • Asset segregation: Client funds must be held separately from the operator’s corporate capital at all times
  • Minimum capital requirements: Financial buffers to ensure operational stability and absorb potential losses
  • Dispute resolution: Mandatory complaint-handling procedures and compensation mechanisms for affected clients
  • Incident reporting: Immediate disclosure to ASIC in the event of security breaches, hacks, or system failures

The bar is deliberately high — these are the same standards that apply to stockbrokers and fund managers. Australia’s regulators are betting that institutional credibility, not leniency, will attract long-term capital into the digital asset ecosystem.

A carve-out exists for smaller operators. Platforms holding less than A$5,000 per customer and facilitating under A$10 million in annual transactions are exempt from the full licensing regime. Stablecoins, meanwhile, are routed into a separate payments regulation framework rather than being classified under the DAP or TCP categories.

Key point: Every platform that takes custody of client assets needs an AFSL — only those below the A$5,000-per-customer and A$10 million-annual-transaction thresholds are exempt. Stablecoins follow a separate payments regulatory track.
Gold cryptocurrency coins representing crypto licensing and regulation
Under the new AFSL mandate, Australian exchanges and custody providers face the same regulatory standards as traditional financial firms — Photo by Kanchanara on Unsplash

The FTX Lesson — Forced Segregation of Client Assets

The legislative design carries the scars of the FTX collapse. Australia’s bill explicitly targets the kind of customer asset commingling that brought down the exchange, mandating what the legislation calls “bank-grade standards” for asset handling. The phrase is not rhetorical — it signals that crypto firms will be held to the same custodial expectations as licensed deposit-taking institutions.

Enforcement teeth back up the mandate. ASIC has the authority to suspend or revoke licenses for violations, impose financial penalties, and in extreme cases order the permanent closure of non-compliant platforms.

Why this matters: before this law, Australia had no legal mechanism to compel crypto exchanges to keep client funds separate from operating capital. The gap was theoretical until FTX made it catastrophic — and an A$24 billion market has now moved from an unregulated state to a bank-grade oversight regime.

A Global Regulatory Sprint in 10 Days

Australia did not act in isolation. On March 30, two days before the Australian bill cleared Parliament, the UK Financial Conduct Authority (FCA) published CP25/14, a consultation paper setting out custody and issuance rules for stablecoins. The FCA locked in an authorization gateway opening date of September 30, 2026.

Across the Channel, the European Union’s MiCA (Markets in Crypto-Assets Regulation) framework faces its final compliance deadline on July 1, 2026, with regulators stress-testing enforcement readiness. In the United States, the CLARITY Act — designed to resolve overlapping digital asset jurisdiction — passed the House of Representatives but stalled in the Senate.

In other words, within a span of barely 10 days, the UK, Australia, the EU, and the U.S. all advanced their crypto regulatory frameworks in tandem. The approaches differ in structure: the EU imposes prescriptive capital requirements under MiCA, while Australia’s crypto licensing model relies on direct supervisory intervention rather than heavy capital buffers.

For multinational exchanges, the implication is blunt. Operating across these four jurisdictions now requires satisfying four distinct licensing regimes — each with its own application process, capital standards, and compliance timelines. The cost of maintaining a global footprint just multiplied.

Key point: March 30 (UK FCA stablecoin rules) → April 1 (Australia’s bill passes) → July 1 (EU MiCA final deadline). Global crypto regulation is converging in near-real-time, and multinational exchanges face compliance obligations in every major market simultaneously.
Australian Parliament House in Canberra
Australia’s Parliament passed the Asia-Pacific’s first comprehensive digital assets law, adding a new landmark to the global regulatory map — Photo by Marcus Reubenstein on Unsplash

Industry Reaction — Between Optimism and Caution

The initial industry response tilted positive. Kate Cooper, CEO of OKX Australia and co-chair of the Digital Economy Council of Australia, called the legislation a “pivotal moment,” stating that it “establishes a foundation for institutional participation and long-term capital allocation.”

eToro Australia’s managing director Robert Francis praised the AFSL mandate for providing “the confidence the market has been waiting for”. Kraken’s spokesperson called the law a “top-down signal” that Australia is serious about digital assets, adding that clearer rules give firms confidence to invest and expand locally.

Not everyone is celebrating without reservation, however. Legal experts and blockchain firms have raised concerns about the law’s “broad terminology,” warning that ambiguous definitions could stifle technical innovation rather than encourage it.

A separate structural concern centers on regulatory overlap — with ASIC, Treasury, APRA, and AUSTRAC all claiming a piece of the oversight mandate, the risk of duplicative or contradictory requirements is real. The takeaway: both optimists and skeptics share the same starting premise — regulation itself is necessary, but the execution details will determine whether this law attracts institutional capital or drives innovation offshore.

Timeline Every Exchange Operator Needs to Know

The clock starts once the bill receives Royal Assent — the formal final approval step in Australia’s legislative process. From that point, the law takes effect after 12 months, giving the industry a structured runway rather than a cliff edge.

Existing exchanges and custody providers must apply for an AFSL within six months of the commencement date and achieve full compliance within 18 months. Operators that fail to secure a license within that window face ASIC enforcement action.

A nearer deadline looms, however. ASIC’s no-action letter — a temporary enforcement forbearance for firms demonstrating good-faith compliance efforts — expires on June 30, 2026. Fewer than three months remain to demonstrate that a platform is actively working toward meeting the new standards.

The ultimate variable in Australia’s crypto licensing regime is token classification. Whether a platform’s token qualifies as a securities-like token, a payment token, or a stablecoin determines which regulatory pathway applies — and the obligations attached to each category are materially different. Exchange operators should put two dates at the top of their strategic calendar: the June 30 ASIC no-action letter deadline and the six-month AFSL application window following Royal Assent.

References

Stay Ahead of the Curve

Get the latest insights on AI, tech, and markets — delivered in both Korean and English.

Explore More Posts

Disclaimer: This article is for informational purposes only and is not investment advice. It does not recommend buying or selling any specific security or digital asset. All investment decisions and their outcomes are the sole responsibility of the reader.