On 1 October 2026, crypto exchange licensing in Australia stopped being a future problem and became a present one. ASIC's temporary no-action relief for digital asset businesses expired on 30 September,[1] and firms that need an Australian Financial Services (AFS) licence but haven't sorted one out now risk operating in breach of financial services law.[2] In this guide you'll learn what changed, what a licence does and doesn't protect you from, and a simple checklist for checking any platform before you send it a dollar.
What actually changed on 1 October?
In October 2025, ASIC updated its Information Sheet 225 to spell out how existing law applies to digital assets. Commissioner Alan Kirkland put it plainly: "Many widely traded digital assets are financial products under current law."[3] Platforms dealing in those products need an AFS licence, and ASIC gave the industry a grace period to apply. That period was extended once, from 30 June to 30 September 2026, and it is now over.[1]
The stakes for firms are serious. Maximum penalties for a company are the greater of A$18.2 million, three times the benefit obtained, or 10% of annual turnover capped at A$910 million.[3] By 2 September, ASIC had received more than 45 licence applications from digital asset businesses.[3]
This isn't the only rule that has moved this year:
- AUSTRAC registration. From 31 March 2026, AUSTRAC began replacing its old digital currency exchange register with a broader virtual asset service provider (VASP) register[4] covering crypto-to-crypto exchange, custody and transfers, not just swapping dollars for Bitcoin.
- The travel rule. Since 1 July 2026, providers have to collect and share sender and recipient information when they move crypto for customers.[4]
- A dedicated platform regime. The Corporations Amendment (Digital Assets Framework) Act 2026 passed Parliament on 1 April and creates two new licensed categories: digital asset platforms and tokenised custody platforms.[5] It takes effect on 9 April 2027.[1]
Does a licensed crypto exchange mean my money is safe?
Not entirely, and this is the part most people miss.
A licence answers one question: is this platform allowed to operate, and is someone holding it to a standard? Moneysmart explains that dealing with a licensed provider gives you access to free dispute resolution and better protection if things go wrong. But it is equally clear that a licence "does not mean that ASIC endorses the company, financial product or advice. Or that you cannot incur a loss from the investment."[6]
In other words, licensing protects you from the platform behaving badly. It does not protect you from buying something you didn't understand.
That gap matters. When ASIC surveyed 1,053 retail investors in November 2021, only 20% of crypto owners described their approach as "risk-taking".[7] Around 80% didn't see their crypto holdings as risky at all. I'll be honest: early on I was in that 80%. I bought what people around me were excited about and didn't think about where it was held or what I'd do if I couldn't get it back.
What the rulebook looks like from the inside
To show what informed research looks like, I ran Australia through Mirror Ai's regulatory data. On the licensing topic alone, Mirror Ai's corpus draws on 215 Australian source documents, more than any other jurisdiction it tracks. Australia scores 100 out of 100 for both coverage and stringency, but 85.8 for clarity.[8] That's a fair summary of where we are: the rules are extensive and demanding, but not always easy for an everyday trader to read.
The obligations Mirror Ai extracts from that corpus show what a licence is meant to deliver for retail clients. For example, AFS licensees serving retail clients must have compensation arrangements for losses caused by the licensee's breaches. ASIC itself carries a duty to promote "confident and informed participation of investors and consumers".[8]
That word "informed" is the bit that can't be outsourced to a regulator. The rules can make a platform accountable. Only research makes the trader informed.
How to check if a crypto exchange is regulated in Australia
Here's a checklist you can run in about ten minutes before opening an account or moving funds.
- Search ASIC's Professional Registers. ASIC recommends using its Professional Registers search[9] to confirm a company holds an AFS licence. Match the exact legal name and ABN, not just the brand name.
- Check the website on the register matches the one you're using. The register lists licensee websites, which helps you spot imposter sites that copy a real company's name.
- Check ASIC's Investor Alert List on Moneysmart. It flags companies and websites that could be fraudulent, a scam or unlicensed.
- Ask about AUSTRAC registration. A platform exchanging or holding crypto for you should be registered as a VASP. If it can't tell you clearly, treat that as an answer.
- Ask about licence status directly. Some platforms lodged applications close to the deadline and may still be waiting on ASIC. If you can't find a licence, ask the platform in writing what its current status is and keep the reply.
- Find the dispute resolution details. Look for how complaints are handled internally and which external body you can escalate to. If you can't find this before you sign up, it won't be easier to find after something goes wrong.
- Be wary of "the regulator froze your funds". In August, ASIC warned consumers about Yepbit,[10] a platform where investors reported they couldn't withdraw. Yepbit falsely claimed ASIC had frozen investor funds. ASIC said Yepbit held no AFS licence and was not registered as a VASP with AUSTRAC.
Red flags worth pausing on
- A platform that says it is "ASIC approved" or "ASIC endorsed". ASIC licenses businesses; it doesn't endorse them.
- Pressure to deposit quickly, or a "bonus" that disappears unless you top up.
- Withdrawal delays explained by fees, taxes or regulatory audits you have to pay to clear.
- Contact that started on social media or a messaging app rather than through a platform you found yourself.
The platform check is step one, not the whole job
Once a platform passes the checklist, the second question is still yours: do you understand what you're about to buy? That means knowing what the token does, who controls its supply, how liquid it is, and whether it carries regulatory risk of its own. A licensed exchange can list a token that still isn't right for you.
This is the knowledge gap Mirror Ai was built to close. The goal is to put research, market context and the regulatory picture in front of you before the order, not after the loss. None of it is complicated. It just has to be in front of you at the right moment.
What happens next, in April 2027?
When the Digital Assets Framework commences on 9 April 2027, platforms that hold tokens on behalf of customers will need to fit into the new digital asset platform or tokenised custody platform categories. There is a low-value exemption[5] for platforms with less than $10 million in transactions over 12 months and less than $5,000 per customer, so small operators may sit outside the regime. That's one more reason to check rather than assume.
FAQ
Do crypto exchanges need a licence in Australia?
Many do. ASIC's view is that many widely traded digital assets are financial products, so platforms dealing in them need an AFS licence. Exchanges handling crypto for customers must also be registered with AUSTRAC as virtual asset service providers.
How do I check if a crypto exchange is licensed?
Search the company's legal name on ASIC's Professional Registers, confirm the listed website matches the one you're using, and check ASIC's Investor Alert List on Moneysmart.
Does a licence mean I can't lose money?
No. Moneysmart states that a licence does not mean ASIC endorses the company or product, or that you cannot incur a loss. It mainly gives you access to dispute resolution and better protection if the platform does the wrong thing.
When does the new digital asset platform regime start?
The Digital Assets Framework takes effect on 9 April 2027.
If you'd like research, market insight and regulatory context in one place before your next trade, you can try Mirror Ai at https://mirror.glasslane.io/try
This article is general information only and is not financial advice. Consider your own circumstances and seek professional advice before making financial decisions.
References
- crypto.news, "Australia's crypto licensing relief ends. What comes next?", 30 September 2026. https://www.google.com/url?q=https://crypto.news/australias-crypto-licensing-relief-ends-what-comes-next/&source=gmail&ust=1791426316296000&sa=E
- Bitbase, news report on the end of Australia's crypto licensing relief, 30 September 2026. https://www.google.com/url?q=https://www.bitbase.com/news/australias-crypto-licensing-relief-ends-what-comes-next&source=gmail&ust=1791426316296000&sa=E
- The Industry Spread, "ASIC's digital asset licence window closes on 45 applications", 9 September 2026. https://www.google.com/url?q=https://theindustryspread.com/asic-digital-asset-licence-window-45-applications-september-2026/&source=gmail&ust=1791426316296000&sa=E
- Shufti Pro, news report on AUSTRAC's VASP register and the travel rule, 1 July 2026. https://www.google.com/url?q=https://shuftipro.com/news/australia-austrac-vasp-register-travel-rule/&source=gmail&ust=1791426316296000&sa=E
- Hall & Wilcox, "Digital assets reform passes: 18-month licensing window opens for platform operators", 10 April 2026. https://www.google.com/url?q=https://hallandwilcox.com.au/news/digital-assets-reform-passes-18-month-licensing-window-opens-for-platform-operators/&source=gmail&ust=1791426316296000&sa=E
- Moneysmart (ASIC), "Australian financial services (AFS) licence". https://www.google.com/url?q=https://moneysmart.gov.au/glossary/australian-financial-services-afs-licence&source=gmail&ust=1791426316296000&sa=E
- Accountants Daily, "Crypto buyers fail to understand risks, ASIC says". https://www.google.com/url?q=https://www.accountantsdaily.com.au/regulation/17406-crypto-buyers-fail-to-understand-risks-asic-says&source=gmail&ust=1791426316296000&sa=E
- Mirror Ai regulatory data: jurisdiction scores for the licensing topic (computed 12 August 2026) and extracted Australian consumer-protection obligations.
- ASIC, "Use ASIC's resources to help avoid scams". https://www.google.com/url?q=https://www.asic.gov.au/regulatory-resources/scams/use-asic-s-resources-to-help-avoid-scams&source=gmail&ust=1791426316296000&sa=E
- ASIC, "ASIC warns against Yepbit and Yepbit Exchange", 12 August 2026. https://www.google.com/url?q=https://asic.gov.au/about-asic/news-centre/news-items/asic-warns-against-yepbit-and-yepbit-exchange/&source=gmail&ust=1791426316296000&sa=E
