Australia regulates crypto through two agencies with different jobs: AUSTRAC for anti-money-laundering, and ASIC wherever a token or service is a financial product. The government has spent several years building a dedicated licensing regime for digital asset platforms, so a product designed in 2026 has to satisfy today's rules and be ready for the next set. Australia also has a capable engineering community and some notable Web3 companies, which makes it a realistic place to build, not just to sell.
Who regulates what
| Body | Role for crypto and Web3 | What it means for your product |
|---|---|---|
| AUSTRAC | AML/CTF regulator and financial intelligence agency | Registration for digital currency exchanges and, under 2024 reforms, a wider set of virtual asset services; KYC, monitoring, reporting, Travel Rule |
| ASIC | Corporate, markets and financial services regulator | An Australian financial services (AFS) licence if your token or service is a financial product; design and distribution obligations; misleading conduct enforcement |
| Treasury | Policy and legislation | Drafting the digital asset platform and tokenized custody platform regime and payments licensing reform |
| RBA | Central bank, payments system | Research and pilots on CBDC and wholesale tokenized settlement |
| ATO | Tax authority | Capital gains treatment of crypto, data-matching with exchanges |
AUSTRAC: registration and the 2024 reforms
Since April 2018, businesses exchanging digital currency for money (and vice versa) must register with AUSTRAC as digital currency exchange providers and run an AML/CTF program: customer identification, ongoing due diligence, suspicious matter reporting and threshold reporting for cash. Operating unregistered is an offense.
Amendments passed in late 2024 broaden the regime from "digital currency exchange" to a set of virtual asset services, covering exchanges between different virtual assets, transfers on behalf of customers, safekeeping, and certain services connected to token issuance, and they strengthen Travel Rule obligations. The new virtual asset obligations were scheduled to apply from 31 March 2026. If your product touches customer assets in any of these ways, assume AUSTRAC's perimeter includes you and build the compliance data flows accordingly. AUSTRAC has also focused heavily on crypto ATMs as a scam and money-laundering channel and has tightened conditions on ATM operators; our crypto ATM software guide covers the product side.
ASIC: when tokens are financial products
Australia has no blanket "crypto is a security" rule. Instead, ASIC asks whether a token or arrangement is a financial product under the Corporations Act: an interest in a managed investment scheme, a derivative, a security, or a non-cash payment facility. Yield products, pooled staking, tokenized funds, margin and leveraged trading, and some stablecoin arrangements often land inside the definition. If they do, you need an AFS licence (or to operate under someone else's), plus disclosure, and the design and distribution obligations (DDO) in force since 2021, which require a target market determination for products offered to retail clients.
ASIC has brought several crypto cases. A well-known example: the Federal Court found in 2024 that the local operator of a major international exchange breached DDO by offering a margin extension product without a target market determination. ASIC updated its guidance on digital assets as financial products in 2025, and gave some time-limited relief while businesses transition. If you are unsure whether your product is a financial product, that question must be answered before you write the token contract, because the answer changes licensing, disclosure and who you can sell to.
The digital asset platform regime
Treasury published draft legislation in 2025 to create licensing for digital asset platforms and tokenized custody platforms through the existing AFS framework, so that businesses holding customer assets would need an AFS licence with tailored obligations on custody, settlement and disclosure, with exemptions for small operators. Related work would bring payment stablecoins under a reformed payments licensing regime. At the time of writing these reforms were progressing through the legislative process with transition periods; check the enacted text and commencement dates before relying on them.
Banking and scams
Scam losses have shaped Australia's approach. From 2023 several major banks introduced limits or blocks on payments to some crypto exchanges, citing scam prevention. For a consumer product, that means fiat on-ramps can be constrained regardless of your licensing status, and your onboarding should anticipate scam-related friction: confirmation steps, warnings and holds on first withdrawals.
Tax in brief
The ATO treats most crypto assets as property for capital gains tax purposes, with the 50% CGT discount available to individuals who hold an asset for more than 12 months. Swapping one token for another is generally a CGT event. The ATO runs data-matching with Australian exchanges, so products that serve Australian users should provide clean transaction exports.
Tokenization and the RBA
The RBA ran an eAUD pilot in 2023 and then Project Acacia with ASIC and industry, exploring how wholesale tokenized assets could settle in central bank money or regulated stablecoins. ASIC has also been examining tokenization and, alongside the platform reforms, has signaled interest in supporting the shift to tokenized markets. If you are building tokenized funds, bonds or private credit for Australian institutions, see the tokenization platform guide and security token offerings.
The local ecosystem and talent
Australia's Web3 scene is smaller than the US or Singapore but has produced globally significant teams. Immutable, founded in Sydney, became one of the best-known Web3 gaming infrastructure companies; Synthetix, the derivatives protocol, was founded by an Australian; and local exchanges such as CoinSpot, Swyftx and Independent Reserve built large domestic user bases. Strong university computer science programs in Sydney, Melbourne and Brisbane feed engineering teams, and the gaming and fintech sectors supply product talent.
Engineer salaries are high by Asian standards and below US levels. Employer costs include compulsory superannuation contributions on top of salary. Foreign hires generally require an employer-sponsored skilled visa, which adds lead time and cost. Time zones are an asset for collaborating with Asia and a drawback for real-time work with Europe and the US East Coast.
R&D Tax Incentive
The R&D Tax Incentive can provide a refundable tax offset for eligible companies with aggregated turnover under A$20 million, which can materially reduce the net cost of genuinely experimental development. Registration and eligibility rules are strict, and routine software development often does not qualify, so get a specialist assessment before you count on it.
Local, remote or hybrid: how to choose
| Model | Best for | Relative cost | Main risk |
|---|---|---|---|
| Fully Australian team | AFS-licensed or AUSTRAC-registered products, bank integrations, enterprise and government clients | High | Burn rate; small pool of senior smart contract specialists |
| Hybrid: local lead + remote engineers | Most startups: local product, compliance and security ownership; remote delivery in Asia or Europe | Medium | Requirements lost between the compliance lead and the remote team |
| Fully remote team | Non-custodial apps, protocols and tooling for a global audience | Low to medium | Nobody accountable for Australian compliance obligations |
A process for selecting a partner
- Classify your product first. Get a short written view from counsel: is anything a financial product, do you provide virtual asset services, and what will the platform regime require?
- Write down the compliance-driven requirements. Target market determinations, AML/CTF program hooks, Travel Rule messaging, record-keeping, scam warnings, client asset segregation.
- Shortlist teams with evidence. Look for live products you can verify on-chain or in app stores, audit reports for their contracts, and engineers you can interview.
- Run a paid discovery sprint. Two to four weeks to produce an architecture, threat model and backlog. This tests how a team thinks before you commit to a long engagement.
- Check security practice. Key management, deployment controls, test coverage, and willingness to work with an independent smart contract auditor.
- Secure ownership. Code in your repositories, infrastructure in your cloud accounts, deployer keys and admin roles controlled by you from day one.
- Agree on milestones that ship. Testnet releases and audits as milestones, not documents.
Questions specific to Australia
- Have you built for an AFS licensee or an AUSTRAC-registered business, and what did their compliance team ask of your systems?
- How would your design change if the product is classed as a financial product versus not?
- How do you implement scam interventions without destroying conversion?
- Can you produce ATO-friendly transaction reports for users?
- Do you understand Australian privacy law obligations for KYC data?
The broader checklist in blockchain consulting still applies. To compare regional bases, see the Singapore guide.
Frequently asked questions
Do I need to register with AUSTRAC to launch a crypto app in Australia?
If you exchange crypto for money, or provide the wider virtual asset services covered by the 2024 reforms, yes. A purely non-custodial app that never handles customer assets is usually outside the regime, but get that confirmed for your specific features.
Is a crypto token a financial product in Australia?
It depends on the arrangement. Bitcoin itself is generally not, but tokens or services that look like managed investment schemes, derivatives or non-cash payment facilities can be. ASIC's guidance gives worked examples.
Has the digital asset platform licensing regime started?
Draft legislation was released in 2025 and was moving through the legislative process with transition periods. Check the commencement date of the enacted law and ASIC's guidance on transitional relief.
Can I issue a stablecoin in Australia?
Stablecoin arrangements may be financial products today, and payments licensing reforms were planned to cover payment stablecoins specifically. Get advice.
Is it cheaper to hire offshore developers?
Usually yes, but keep product ownership, security leadership and compliance requirements with someone accountable in Australia, especially if your product will be supervised locally.
Do Australian banks work with crypto startups?
Some do, cautiously. Expect enhanced due diligence and possible limits on customer payments to exchanges. Line up banking and payment partners early.