Launch an Australian crypto business with the right AUSTRAC registration, AFSL analysis, and AML/CTF framework. RUE supports exchanges, custody, OTC, staking, and token platforms.
Prepared by RUE editorial team · Reviewed by Milana · Updated 28 October 2026
Book Licensing AssessmentAustralia is a credible launch jurisdiction for crypto businesses because it combines a mature AML/CTF regime, a respected financial regulator, and practical access to Asia-Pacific markets. The key is to map your model correctly: in Australia, a “crypto license” usually means AUSTRAC registration, AFSL analysis, or both.
"As your point of contact, I help coordinate the licensing process end-to-end, keep communication clear, and move your application forward without unnecessary delays."
RUE structures Australia crypto projects from the regulatory perimeter stage, not from a generic template. We map whether your model fits AUSTRAC DCE registration, remittance registration, AFSL exposure, or a combined pathway.
Our team prepares AML/CTF documentation, governance packs, application materials, banking evidence files, and regulator-response strategy so founders can launch with fewer avoidable delays and fewer classification mistakes.
AUSTRAC supervises AML/CTF and reporting entities, while ASIC governs financial products, market conduct, and AFSL perimeter issues.
Australia is often used as an operating base for regional expansion, especially for exchanges, OTC desks, treasury platforms, and institutional crypto services.
Banking is not guaranteed, but a documented AML program, transparent ownership, and clean transaction-flow mapping materially improve onboarding odds.
A proprietary company limited by shares (Pty Ltd) can be foreign-owned, but governance, resident director rules, tax registration, and operational substance must be handled properly.
A crypto license in Australia is not a single universal permit. The legal path depends on what service you actually provide: exchange, custody, OTC, wallet, staking, token issuance, or fiat payment functionality. In practice, most founders start with a perimeter analysis covering AUSTRAC, ASIC, the AML/CTF Act 2006, the Corporations Act 2001, tax registration, privacy compliance, and banking readiness.
The most common mistake is filing too early. AUSTRAC and banking counterparties both expect a coherent operating model: customer types, fiat rails, wallet architecture, sanctions controls, source-of-funds logic, suspicious matter escalation, and beneficial ownership transparency. If the business touches financial products, non-cash payment facilities, derivatives, managed investment schemes, or tokenised securities, an AFSL analysis becomes mandatory.
Most applicants use an Australian proprietary limited company (Pty Ltd). A Pty Ltd must generally have at least one director who ordinarily resides in Australia. Founders usually also need:
Foreign ownership is generally permitted, including 100% foreign shareholding, but transparent UBO disclosure and source-of-funds evidence are critical for regulators, banks, and service providers.
The first legal question is not “how to get a crypto license in Australia,” but which perimeter applies. Typical mapping:
Australia uses a functional analysis. Labels like “wallet,” “staking,” or “platform” do not decide the outcome; the decisive factors are what rights the customer receives, who controls assets, and whether the service falls inside the Corporations Act perimeter.
If you are a reporting entity, AUSTRAC expects a real AML/CTF framework, not a generic policy set. Core elements include:
A strong Australian crypto compliance file also maps on-chain typologies, including mixers, darknet exposure, sanctioned wallet interactions, chain-hopping, and rapid in/out fiat conversion patterns.
Reporting entities must appoint an AML/CTF compliance officer at management level with sufficient authority, independence and resources. The officer must be fit and proper and, where designated services are provided at or through an Australian permanent establishment, resident in Australia. Directors must oversee risk, with clear escalation and delegated authority. An AFSL business must also demonstrate the required organisational competence.
ASIC and banking counterparties both look beyond titles. They assess whether decision-makers can explain the product, the custody model, the client base, and the risk controls in operational detail.
Custody architecture is a regulatory issue, not just a technical one. If you hold or control customer private keys, or can unilaterally move client assets, the compliance burden increases materially. Best-practice controls usually include:
A unique issue in Australia is that banks often ask for the same custody evidence pack that a sophisticated regulator would expect: wallet governance, chain exposure policy, proof of reserves methodology limits, and insolvency segregation logic.
Crypto compliance in Australia now intersects directly with data governance. Businesses collecting KYC data, blockchain analytics results, and Travel Rule payloads should assess obligations under the Privacy Act 1988 and the Australian Privacy Principles (APPs). In practice, this means:
For Travel Rule implementation, many VASPs rely on IVMS101-based data structures and protocol/vendor layers such as TRISA, OpenVASP, or commercial interoperability providers. That technical choice affects auditability and operational scale.
Before launch, the company should have a regulator-grade operating file covering:
This same pack is usually reused for bank onboarding, payment provider due diligence, and investor review. In other words, a well-prepared Australia crypto license file reduces friction across the entire launch stack.
Compare Australia with other jurisdictions by key conditions for obtaining and operating a MiCA/CASP license: regulator, review period, fees, capital, local substance, and passporting.
6 jurisdictions in this table
* This table focuses on MiCA/CASP authorization conditions. Use the settings icon to customize countries and parameters.
Australia does not impose a separate “crypto company tax.” Crypto businesses are taxed under the ordinary Australian tax framework, with outcomes driven by entity type, turnover, income character, and transaction structure. For most incorporated operators, the first tax question is corporate income tax, not retail-investor capital gains tax.
An Australian company may qualify for the base rate entity corporate tax rate of 25% if it satisfies the relevant turnover and passive income tests. Otherwise, the standard company tax rate is generally 30%. As a planning shorthand:
Crypto exchanges, brokers, and market-making businesses usually recognize trading income on revenue account. That means many founders should not assume that every token disposal automatically receives capital treatment. Where digital assets are held as trading stock, inventory, treasury assets, or are used in customer operations, the tax analysis changes materially.
GST treatment depends on the service supplied. Australia has specific rules affecting digital currency, but the answer is not “crypto is always GST-free” or “crypto is always exempt.” The correct analysis turns on whether the business is supplying digital currency itself, an intermediary service, software, advisory work, or another taxable supply. Exchange spreads, fees, wallet services, and SaaS layers should be reviewed separately.
The ATO expects robust records. A crypto business should retain wallet-level evidence, customer ledgers, FX conversion methodology, fee logic, blockchain transaction IDs, and reconciliation files between on-chain balances and accounting records. In practice, weak reconciliation is one of the fastest ways to create both tax and AML problems.
Registration is only the starting point. Australian crypto businesses must maintain continuous AML, governance, tax, privacy, and operational controls after go-live.
There is no single universal Australian crypto license. In Australia, the phrase crypto license in Australia is an umbrella term covering one or more of the following:
The legal split matters because founders often over- or under-scope their launch. A fiat-to-crypto exchange may need AUSTRAC registration even where no AFSL is required. A token platform may trigger AFSL issues even if the founders describe it as “just software.” A wallet product may stay outside one perimeter and enter another depending on who controls the keys and what contractual rights the user receives.
Australia in 2026 should be read through four status labels:
This distinction is where most public guides fail. RUE structures Australian crypto projects by current law first, then layers in transition risk and expected reforms so founders do not build on headlines instead of enforceable rules.
Answer a few quick questions to find out if this jurisdiction suits your crypto business
Based on your answers, this jurisdiction matches your business requirements well. Here's a quick summary:
Recommended Regulatory Route
AUSTRAC VASP registration and, where applicable, AFSL or other Australian permissions
Estimated Budget
€24,000 – €35,000
Estimated Timeframe
4–6 months
EU Passporting
Not available through Australian registration or licensing
Define whether the project is exchange, OTC, custody, wallet, staking, tokenisation, or hybrid. Map AUSTRAC, ASIC, remittance, tax, privacy, and banking exposure before any filing. Duration: 1-2 weeks.
Set up the Australian entity, usually a Pty Ltd, appoint the resident director, obtain ACN, and prepare ABN/TFN/DIN-related registrations as needed. Duration: about 1 week once documents are ready.
Prepare the business-wide risk assessment, AML/CTF program, KYC/CDD/EDD procedures, sanctions controls, reporting workflows, and Travel Rule roadmap. Duration: 2-6 weeks depending on complexity.
Document fiat rails, wallet architecture, custody controls, reconciliation logic, vendor stack, complaints handling, privacy controls, and governance approvals. Duration: 1-4 weeks.
Submit AUSTRAC enrolment/registration materials where required and respond to regulator questions. Timing varies by completeness, business model clarity, and follow-up rounds. Practical range: 1-3 months or longer in complex cases.
If the service may involve a financial product, prepare the AFSL workstream: Responsible Managers, governance pack, conduct framework, AFCA readiness, and ASIC-facing materials. Practical range: 6-9+ months depending on scope.
Finalize bank or EMI onboarding, test reporting and sanctions workflows, run reconciliation dry-runs, approve restricted geographies, and complete launch controls. Approval alone is not operational readiness. Duration: 2-8 weeks.
Open the key issues founders, compliance teams and legal leads usually need to confirm before launch.
No. In Australia, “crypto license in Australia” is a market term, not a single statutory license. Depending on your model, you may need AUSTRAC registration, remittance registration, an AFSL, or a combination. The correct answer depends on what you do in practice: exchange, custody, payment functionality, staking wrapper, tokenisation, or financial product exposure.
Usually yes for fiat-to-crypto exchange models. AUSTRAC registration is the classic starting point for businesses exchanging digital currency and fiat currency. However, the analysis should also check whether your model includes remittance features, custody risk, or a financial product wrapper that may trigger ASIC issues as well.
Yes, where the business provides in-scope virtual asset exchange services. From 1 July 2026, Australia’s expanded AML/CTF regime expressly covers crypto-to-crypto exchange and arranging such exchanges in the course of a VASP business. Assess the geographical scope, exclusions and any additional financial-services requirements.
AFSL becomes necessary when you provide a financial service in relation to a financial product. In crypto, that can arise through derivatives, managed investment structures, tokenised securities, non-cash payment facilities, or certain staking and custody wrappers. The token label alone does not decide the issue; ASIC looks at the legal rights and the real commercial arrangement.
Yes, foreign ownership is generally permitted. A non-resident can usually own 100% of an Australian crypto company. The main constraint is not ownership nationality, but compliance quality: transparent UBO disclosure, source of funds, tax registration, and proper governance. For a Pty Ltd, you still generally need at least one director who ordinarily resides in Australia.
Yes for a typical Pty Ltd structure. An Australian proprietary company generally requires at least one director who ordinarily resides in Australia. This is a company law requirement and should not be confused with AUSTRAC registration itself. In practice, resident oversight also helps with banking and operational credibility.
Not always as a strict black-letter licensing rule, but often as a practical substance requirement. A virtual address may be enough for some corporate formalities, but banks, payment providers, and sophisticated counterparties usually prefer evidence of real operational substance. The more complex the business model, the more important local governance and real operating presence become.
Yes, self-hosted wallets are not automatically banned. The issue is control and risk management, not the mere existence of a self-hosted wallet. Australian VASPs should apply enhanced controls where appropriate, including wallet screening, ownership verification methods, counterparty risk assessment, and escalation rules for high-risk transfers.
For many cases, founders should plan around 1-3 months after documents are ready, but timing varies. The real timeline depends on business model clarity, AML documentation quality, ownership transparency, and whether the regulator asks follow-up questions. If your internal flows are not mapped before filing, delays are common.
Often 6-9 months or longer for cases that genuinely require AFSL. AFSL work is broader than AML registration. It usually involves competence evidence, Responsible Managers, governance documentation, conduct controls, complaints handling, and sometimes AFCA readiness. Complex tokenised or consumer-facing models can take longer.
The realistic answer is that cost depends far more on compliance build than on filing fees. A simple AUSTRAC-only project may start from around AUD 9,000-20,000 for basic setup and documentation support, while a more robust exchange, custody, or AFSL-exposed project can move into AUD 40,000-150,000+ once legal work, AML tooling, local governance, banking support, and ongoing compliance are included.
Yes. Crypto businesses are taxed under the ordinary Australian tax framework. The main corporate tax rates are generally 25% for eligible base rate entities and 30% otherwise. GST treatment depends on the specific supply, and many crypto business gains are taxed on revenue account rather than under retail-investor style capital gains assumptions.
Sometimes yes, but many institutions will limit functionality or defer onboarding until your compliance position is clearer. Some founders open an early operating account for setup expenses, but crypto-fiat processing usually requires deeper due diligence. A strong banking pack includes AML policy, flow mapping, UBO documents, source of funds, customer geography controls, and custody explanations.
The risks are serious. Operating without required AUSTRAC registration or without an AFSL where one is legally required can expose the business and its controllers to enforcement action, account closures, payment interruptions, reputational damage, and potentially significant civil or criminal consequences depending on the breach. The safest route is to complete perimeter analysis before launch.
