Australia’s crypto regulation is split across three regulators — AUSTRAC, ASIC, and the ATO — plus the federal Treasury and the Reserve Bank. Each owns a different slice of the question “is this allowed?” Knowing which regulator cares about which thing matters when you’re picking platforms, structuring activity, or just trying to understand whether something is on the level.

The four-regulator map

RegulatorWhat it cares about
AUSTRACAnti-money-laundering. Operates the Digital Currency Exchange (DCE) register. Anyone offering crypto-to-fiat services to Australian residents must register.
ASICFinancial products and services. Regulates exchanges that offer derivatives, leverage, or “financial product” tokens. Issues AFSL licences. Enforces against scams and unlicensed conduct.
ATOTax. Treats crypto as property. Defines CGT events. Data-matches with exchanges.
Treasury & RBAPolicy. Treasury runs crypto-asset reform consultations. The Reserve Bank publishes research on stablecoins and CBDC pilots.

AUSTRAC — the entry licence

If a platform exchanges crypto for AUD or vice versa for Australian customers, it must be on the AUSTRAC DCE register. Operating without registration is a criminal offence. Registration requires:

  • An AML/CTF program with risk assessment.
  • KYC (know your customer) on every customer.
  • Threshold transaction reporting (cash-equivalent transactions of $10,000+).
  • Suspicious matter reporting.
  • Annual compliance reporting and ongoing oversight.

AUSTRAC’s bar is administrative, not financial-product-quality. Registration tells you the exchange has done KYC and AML work. It does not tell you they’re financially sound, technically secure, or operationally competent.

ASIC — the financial-product licence

Where a platform offers anything that ASIC considers a “financial product”, an Australian Financial Services Licence (AFSL) is required. This catches:

  • Crypto derivatives — futures, options, perpetuals.
  • Margin and leverage on crypto.
  • Tokens that look like managed investment schemes (yield-bearing products, fractional ownership of assets).
  • Token sales that meet the definition of a security.

Spot trading of major cryptocurrencies (BTC, ETH, etc.) is generally not a financial product under current ASIC guidance — but the boundary is contested. Treasury has been consulting on a dedicated regime for “Digital Asset Platforms” since 2022; expect movement here over coming years.

ASIC also enforces against:

  • Unlicensed financial advice (including “signal services” that look like advice).
  • Misleading and deceptive conduct in marketing.
  • Scams — investment scams are now the #1 reported scam type in Australia.

ATO — the tax view

The ATO treats crypto as property; most retail crypto activity is CGT. Detail and edge cases live on our crypto tax Australia guide.

Treasury — the reform pipeline

Treasury has been running a sequence of consultations on crypto-asset regulation:

  • The Token Mapping consultation (2022) — categorising different tokens by economic function.
  • The Digital Asset Platforms framework — proposing a bespoke licensing regime for crypto exchanges (akin to AFSL but tailored).
  • Custody-specific rules for retail-facing crypto custodians.

If and when DAP becomes law, the regulatory picture for Australian exchanges will tighten significantly. We’ll update this page when material changes happen. Read Treasury’s current papers at treasury.gov.au.

RBA & stablecoins

The Reserve Bank has run pilots on a wholesale CBDC (“Project Acacia” was the most recent named pilot). Retail CBDC discussion remains in research stage. AUDC, AUDD, and other Australian-pegged stablecoins are emerging but their treatment is the joint problem of ASIC (is this a financial product?), AUSTRAC (registration), Treasury (proposed stablecoin regime), and APRA (if a bank issues one).

Practical implications for traders

  • Use AUSTRAC-registered exchanges for fiat onramp/offramp. Treat the DCE register as the floor.
  • Be wary of “AI signal” services that drift into unlicensed financial advice.
  • Don’t deposit into managed-yield products from unlicensed operators. If something offers “X% APY” and isn’t an APRA-regulated bank, ask hard questions.
  • Track and report tax events. The ATO data-matches.
  • Watch derivative offerings closely. ASIC has been tightening retail leverage rules; legitimate platforms are conservative; questionable ones offer 100x and don’t ask much about who you are.

Where next