Australia's Digital Assets Framework: What the New Crypto Regulation Actually Means for You

🕳️ The regulatory gap this is meant to close🔗

Before 2025, Australia's approach to crypto was genuinely light-touch. The main sector-specific rule, introduced by the AML/CTF Amendment Act in December 2017, required digital currency exchanges to register with AUSTRAC and comply with anti-money-laundering and counter-terrorism financing obligations. ASIC issued guidance through Information Sheet 225 (INFO 225) on when digital assets might qualify as financial products, but there was no dedicated licensing regime.

The contrast with traditional financial services was stark. A stockbroker, a managed fund, or a financial adviser must hold an AFSL and meet mandatory conduct, capital and disclosure requirements. A crypto exchange holding your Bitcoin had none of those obligations by default.

🎯 The essential: The real-world consequences were predictable. Binance Australia Derivatives was fined A$10 million by the Federal Court in March 2026 after misclassifying 524 retail clients as wholesale clients between July 2022 and April 2023, exposing them to high-risk crypto derivatives without the consumer protections they were entitled to (A$8.7 million in trading losses and A$3.9 million in fees). In August 2025, AUSTRAC had already ordered Binance Australia's local operator to appoint an external auditor after identifying serious concerns about its AML/CTF controls, including high staff turnover, insufficient local resourcing and weak senior management oversight.

Gemini exited the Australian market entirely. ASIC shut down Yepbit in 2026 after investors reported blocked withdrawals. These incidents illustrate exactly what the new framework is designed to prevent. An earlier attempt, the Digital Assets (Market Regulation) Bill 2023, a private member's bill with broader scope, didn't pass Parliament. Policy shifted from 2023 onwards toward a framework that integrates crypto platforms into the existing financial services regime rather than creating a standalone crypto code.

🏛️ What the Act actually does: two regulated platform categories🔗

The Corporations Amendment (Digital Assets Framework) Act 2026 is law. What ASIC still needs to finalise are the specific standards and guidance instruments that sit beneath it. The Act creates two categories of regulated platform.

Digital asset platforms (DAPs) are facilities where the operator holds digital tokens on behalf of clients. This covers most crypto exchanges. Tokenised custody platforms (TCPs) are facilities where the operator creates digital tokens representing underlying assets (other than money) and holds those assets, think tokenised gold or tokenised real-world assets.

📋 Licensing, standards and obligations🔗

Licensing. Operators of DAPs and TCPs must hold an AFSL, the same licence financial advisers, fund managers and stockbrokers hold. A small platform exemption applies for operators with under A$10 million in annual transaction volume and under A$5,000 per customer, though these operators still need to lodge a notice with ASIC to rely on the exemption. The thresholds can be increased by regulation.

Asset-holding standards. ASIC will set these via legislative instrument. Requirements are expected to cover holding client assets on trust, segregated from operator assets, client withdrawal rights and the ability to transfer tokens off-platform, record-keeping, reconciliation and reporting, organisational structure, staffing and security, and using client assets only in line with client instructions.

Transactional and settlement standards. Fair, orderly and transparent platform operation, best execution, pre-trade and post-trade transparency, supervision for misconduct and market abuse, and operational resilience.

Financial requirements. Liquidity and cash needs requirements, a net tangible assets requirement, and mandatory regular review by a registered company auditor.

Disclosure obligations. Licensed platforms must provide clients with a Platform Guide covering custody arrangements, fees and charges, key risks and client rights.

General conduct obligations. The Act imports existing Corporations Act protections, prohibitions on misleading and deceptive conduct, unfair contract terms protections, and design and distribution obligations.

🔎 The AUSTRAC layer alongside this🔗

The AML/CTF Amendment Act 2024 commenced on 31 March 2026, expanding AUSTRAC's perimeter from "digital currency exchanges" to the broader category of virtual asset service providers (VASPs). Existing registered digital currency exchange providers were taken to be registered as VASPs from that date. The Travel Rule for virtual asset transfers became mandatory on 1 July 2026.

The AFSL requirement under the Digital Assets Framework Act and the AUSTRAC VASP registration are separate but parallel obligations, a platform operating in Australia is expected to meet both.

🧩 How this fits alongside crypto tax and CARF🔗

The digital assets framework is about platform regulation and consumer protection. It is entirely separate from your tax obligations.

Crypto tax stays unchanged. Australian crypto tax obligations remain as they were. The ATO treats crypto as property, not currency. Every disposal event (selling, swapping, gifting, spending) triggers a capital gains event. Staking rewards and DeFi yields are generally treated as ordinary income when received, with a further CGT event on disposal. The 50% CGT discount currently applies to assets held for 12 months or more by individuals, though that discount is changing from 1 July 2027. The ATO's data-matching program has been running since the 2014-15 financial year and currently covers the 2023-24, 2024-25 and 2025-26 years, expecting data on 700,000 to 1.2 million accounts per year from Australian exchanges, a program that's entirely separate from both the DAF Act and CARF. For the full rundown, see our crypto tax guide and our deep-dive on what the ATO already knows about your crypto.

CARF is a different mechanism. The Crypto-Asset Reporting Framework (CARF) is an OECD-led international tax reporting standard. As of August 2026, it is not yet law in Australia. The government confirmed its intention to implement CARF in the December 2025 MYEFO, with legislation expected during 2026. The proposed commencement date for Australian exchanges to begin collecting CARF-standard data is 1 January 2027, with the first international data exchange expected in 2028. CARF requires reporting entities (exchanges, custodial wallet providers, brokers) to report transaction data to the ATO, which shares it with other tax authorities, giving the ATO visibility over Australians using overseas exchanges. Full detail in our CARF guide.

Different levers, same direction of travel.

🧭 What this means practically for everyday Australian crypto users🔗

• Increased baseline confidence. Once the regime commences in April 2027, AFSL-holding exchanges will be subject to mandatory custody safeguards, capital requirements and conduct obligations. Client assets must be segregated from operator assets.
• Platform availability may narrow. Some platforms will exit the Australian market rather than meet licensing requirements, Gemini already has. Expect fewer platforms, but higher standards among those that remain.
• New consumer protections. Licensed platforms must provide a Platform Guide covering fees, risks and client rights, allow clients to withdraw their assets, and give clients access to AFCA dispute resolution.
• Self-custody and DeFi are not directly affected. The framework regulates platforms holding assets on behalf of clients, not self-custody wallets or fully decentralised protocols.

📅 The implementation timeline🔗

Note that the ASIC standards and guidance instruments are still to be finalised through consultation. The Act itself is law, the specific operational standards beneath it are not yet settled.

✅ What should you actually do right now?🔗

For most everyday crypto holders, not much changes immediately. Tax obligations are unchanged and existing exchange accounts continue operating during the transition.

Things worth doing now:

• Stay informed about which platforms are seeking an AFSL, check ASIC's professional registers as April 2027 approaches
• Have a contingency plan if your platform exits the market
• Keep your records, CGT obligations are unchanged and every disposal event is still taxable
• Watch for CARF legislation, if it passes during 2026 as expected, exchanges begin collecting CARF-standard data from 1 January 2027, meaning significantly more ATO visibility over overseas exchange activity, though it doesn't create new tax obligations

🎯 The essential: Don't panic. The framework is designed to make the sector safer, not to ban crypto.

❓ Frequently asked questions🔗