The AFSL Imperative - A Compliance Guide for Digital Asset Businesses Operating in Australia

Australia has, for the first time, brought crypto exchanges, custodians and tokenisation platforms inside its financial services licensing regime. The window to act on the most urgent of the new obligations is measured in weeks, not years. This guide explains what changed, what is required, and what to do before the deadlines arrive.

At a glance

On 1 April 2026 the Australian Parliament passed the Corporations Amendment (Digital Assets Framework) Act 2026, which received Royal Assent on 8 April 2026.[1] The Act extends the Australian Financial Services Licence (AFSL) regime to digital assets and creates two new categories of financial product: Digital Asset Platforms (DAPs) and Tokenised Custody Platforms (TCPs).[2] The substantive framework commences on 9 April 2027, with a six-month transition window closing on 9 October 2027.[3]

But the most pressing deadline is sooner. ASIC has confirmed that its sector-wide “no-action” position expires on 30 June 2026: businesses providing financial services involving digital-asset financial products must lodge an AFSL application (or variation) by that date to retain transitional relief from enforcement.[4] Separately, AUSTRAC’s expanded anti-money-laundering obligations for new virtual asset services commence on 1 July 2026.[5]

1. What the Act changes

For most of the past decade, Australian digital-asset businesses operated under a registration regime with AUSTRAC for anti-money-laundering purposes, but largely outside the licensing rules that govern banks, fund managers and brokers. The Digital Assets Framework closes that gap. By amending the Corporations Act 2001 (Cth), it treats the operation of a digital-asset platform as the provision of a financial service, requiring an AFSL and the consumer-protection and market-integrity obligations that come with it.

The two new product categories

Digital Asset Platforms (DAPs): a facility under which an operator holds digital tokens (the underlying assets) either for itself or on behalf of others. This captures the core activity of most exchanges and custodial wallet providers.[6]

Tokenised Custody Platforms (TCPs): a facility under which an operator holds an asset other than money and issues a single digital token for each asset, giving the holder the right to redeem or direct delivery of that asset. The operator typically acts as trustee or bailee, the structure used for tokenised real-world assets.[7]

A narrower, control-based definition of “digital token”

The Act narrows the concept of a digital token to an electronic record that one or more persons are capable of factually controlling, meaning the ability to transfer it, exclude others, and demonstrate control. Regulators may also prescribe further classes of electronic record. Crucially, an issued token may still separately be a security, a managed investment scheme interest, a derivative or a non-cash payment facility under existing law, so a single token can attract more than one set of obligations.[8]

Existing law already bites: INFO 225

Even before the new framework commences in 2027, ASIC’s updated Information Sheet 225 makes clear that many digital-asset products are already financial products under current law, including certain stablecoins, wrapped tokens, tokenised securities and digital-asset wallets. That is why the 30 June 2026 deadline matters now: the obligation to be licensed does not wait for 2027.[9]

2. The immediate deadline: 30 June 2026

ASIC has granted a sector-wide no-action position to ease the transition. Under it, ASIC does not intend to take enforcement action for unlicensed conduct involving digital-asset financial products provided the business lodges a complete AFSL application (or a variation to an existing licence) by 30 June 2026. Firms that need a licence but do not apply by that date risk breaching the financial services laws.

Conditions of the relief

•       The business commenced providing the relevant services on or before 31 December 2025.

•       Foreign entities register as a foreign company in Australia and appoint a local agent by 30 June 2026.

•       For those needing an Australian Market Licence or a clearing-and-settlement facility licence: notify ASIC in writing of the intention to apply by 30 June 2026, hold a pre-lodgement meeting, and lodge within 12 months of notifying.

The relief does not extend to all activity. It does not cover derivatives, non-cash payment facilities other than stablecoins, or crypto lending/“earn” products other than wrapped tokens. Those require their own analysis.[10]

The cost of missing it

Operating an unlicensed financial services business is not a technicality. It carries civil and criminal penalties, including fines that may reach up to 10% of annual turnover. After 30 June 2026, the no-action umbrella closes for anyone who has not applied.[11]

3. Dual regulation: ASIC and AUSTRAC

The Digital Assets Framework operates alongside AUSTRAC’s reformed anti-money-laundering and counter-terrorism-financing (AML/CTF) regime. Most platforms will therefore carry two parallel sets of obligations. The AUSTRAC reforms bring their own near-term dates:[12]

The practical takeaway: the ASIC licensing clock (30 June 2026) and the AUSTRAC obligations clock (1 July 2026) run within days of each other. A platform cannot treat one as a substitute for the other. AUSTRAC registration alone is no longer sufficient where the activity involves a financial product.[13]

4. What holding an AFSL involves

An AFSL is not a one-off filing; it is an operating licence with continuing obligations. Applicants should expect ASIC to test organizational competence, the fitness of responsible managers, financial resources, risk-management systems, dispute resolution and compensation arrangements. Where retail clients are served, membership of the Australian Financial Complaints Authority (AFCA) is required; it is typically imposed as a condition in the covering letter accompanying the draft licence, to be in place before the licensee commences operations. Custodial operators face particular scrutiny of capital and asset-holding standards. ASIC’s existing custody rules require a minimum level of net tangible assets for providers holding client assets, and comparable capital and operational standards are expected to apply to DAPs and TCPs as ASIC settles the detail through its implementation consultations.[14]

ASIC has published an implementation roadmap for the new regime and, on 4 May 2026, reminded industry that the no-action position is closing. The roadmap signals further consultation on operational standards through to commencement in 2027, so the requirements applicants prepare for today will continue to be refined.[15]

5. A practical compliance roadmap

A sequenced approach for an existing digital-asset business assessing its position:

Steps 1 and 2 are the ones that cannot slip: the classification analysis determines whether the 30 June 2026 deadline applies to you at all, and it takes time to do properly.

6. How Gosai Law can help

Gosai Law is a regulated, multi-jurisdictional firm focused on digital assets and emerging technology, with a global presence and offices in the United States, the United Kingdom, the UAE, and Asia-Pacific. That footprint matters for digital-asset businesses that rarely operate in a single jurisdiction.

ASIC’s no-action window is closing in weeks. If you are carrying an unresolved licensing position, the time to lodge an AFSL application or variation is now. We can assess your pathway, classify your products, and move quickly before the deadline.

Get in touch today to arrange a consultation.

Important notice

This guide is general information current as at June 2026 and reflects publicly available sources cited in the footnotes. It is not legal advice and does not account for your particular circumstances. Regulatory positions and dates may change; verify against the primary instruments (the Corporations Act 2001 (Cth) as amended, ASIC Information Sheet 225 and ASIC’s no-action instrument, and the AUSTRAC AML/CTF Rules) and obtain advice before acting.

[1]ASIC, “Deadline looms for digital asset businesses to apply for a licence” (4 May 2026): the Corporations Amendment (Digital Assets Framework) Act 2026 (DAF Act) passed Parliament on 1 April 2026, received Royal Assent on 8 April 2026 and commences 9 April 2027. asic.gov.au

[2]Corporations Amendment (Digital Assets Framework) Act 2026 (Cth), which creates Digital Asset Platforms and Tokenised Custody Platforms as new categories of financial product; see also ASIC, INFO 225. legislation.gov.au; asic.gov.au

[3]ASIC, “Deadline looms…” (4 May 2026) and ASIC’s roadmap for implementation of the reforms (April 2026): the framework commences on 9 April 2027, with transitional arrangements following commencement. asic.gov.au

[4]ASIC, “Deadline looms for digital asset businesses to apply for a licence” (May 2026). asic.gov.au/about-asic/news-centre

[5]AUSTRAC, “AML/CTF transitional rules update” and “What to expect from the changes to the AML/CTF Rules” (2026). austrac.gov.au

[6]Corporations Amendment (Digital Assets Framework) Act 2026 (Cth): in essence, a digital asset platform is a facility under which an operator holds digital tokens for itself or on behalf of others. legislation.gov.au

[7]Corporations Amendment (Digital Assets Framework) Act 2026 (Cth): a tokenised custody platform issues a single token for each non-money asset held, with the operator acting as trustee or bailee. legislation.gov.au

[8]Corporations Amendment (Digital Assets Framework) Act 2026 (Cth): a “digital token” is an electronic record one or more persons are capable of factually controlling; an issued token may still also be a security, managed investment scheme interest, derivative or non-cash payment facility under existing law. legislation.gov.au

[9]ASIC, updated Information Sheet 225, Digital assets: financial products and services (media release 25-250MR, 2025): stablecoins, wrapped tokens, tokenised securities and certain wallets may be financial products. asic.gov.au

[10]ASIC Class No-Action Letter for Digital Asset Businesses (29 October 2025): the no-action position does not extend to derivatives, non-cash payment facilities other than stablecoins, or crypto lending/“earn” products other than wrapped tokens. asic.gov.au

[11]ASIC (May 2026): unlicensed conduct carries civil and criminal penalties, including fines that may reach up to 10% of annual turnover.

[12]AUSTRAC, “AML/CTF transitional rules update” (2026): dates for new virtual-asset-service obligations, enrolment, the travel rule and CDD transition. austrac.gov.au

[13]AUSTRAC (2026); see also ASIC INFO 225 (25-250MR). Registration with AUSTRAC does not satisfy the separate AFSL obligation where a digital asset is a financial product.

[14]Reflects ASIC’s existing custody requirements (Regulatory Guide 166) for providers holding client assets; final financial and operational standards for DAPs/TCPs are being settled through ASIC’s implementation consultations.

[15]ASIC released its implementation roadmap (April 2026) and on 4 May 2026 reminded industry that the no-action position is closing. asic.gov.au