Australia's Crypto Regulation Overhaul: New AML/CTF Rules, the Digital Assets Framework, and What It Means for Investors

Australia’s Crypto Wild West Is Officially Over

For years, Australia’s approach to cryptocurrency regulation has been described as a patchwork. Crypto exchanges that converted digital assets to Australian dollars had to register with AUSTRAC, but vast swathes of the industry operated in a regulatory grey zone. Crypto-to-crypto trading platforms, custodial wallet providers, NFT marketplaces, and DeFi protocols largely fell outside the reach of Australia’s Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) framework.

That changes on 31 March 2026.

A sweeping expansion of the AML/CTF Act brings dozens of new business categories under AUSTRAC’s regulatory umbrella. At the same time, the Digital Assets (Market Regulation) Bill is making its way through Parliament with rare bipartisan support, promising a dedicated licensing framework for crypto platforms. And from 1 July 2026, the crypto “travel rule” will require service providers to share sender and receiver information on transfers, aligning Australia with global anti-money laundering standards set by the Financial Action Task Force (FATF).

For Australian investors, businesses, and financial advisers, the next few months represent a turning point. Here is what is changing, who is affected, and what you need to do.

The AML/CTF Expansion: What Changes on 31 March 2026

The Old Rules

Until now, AUSTRAC’s jurisdiction over crypto has been narrow. Under the existing AML/CTF Act, only “digital currency exchange” providers (those converting between fiat currency like AUD and cryptocurrency) were classified as reporting entities. This meant that a platform letting you buy Bitcoin with Australian dollars had to register with AUSTRAC, verify your identity, monitor transactions, and report suspicious activity.

But a platform that only facilitated crypto-to-crypto trades (say, swapping Ethereum for Solana) technically fell outside this requirement. The same applied to custodial wallet services, crypto lending platforms, and NFT marketplaces.

The New Rules

From 31 March 2026, the definition of regulated virtual asset services expands dramatically. The following business types must now register with AUSTRAC:

The expansion also introduces a new “threshold transaction” definition that captures high-value virtual asset transactions exceeding prescribed limits. This means large crypto transfers will trigger the same reporting requirements as large cash transactions at traditional financial institutions.

What Registered Businesses Must Do

AUSTRAC-registered crypto businesses must now comply with a comprehensive set of obligations:

• Customer identification and verification (KYC): All customers must be identified and verified before they can transact. This includes collecting government-issued ID, verifying addresses, and screening against sanctions lists.
• Transaction monitoring: Businesses must implement systems to detect unusual or suspicious transaction patterns, including rapid movement of funds, structuring to avoid thresholds, and transactions involving high-risk jurisdictions.
• Suspicious matter reporting (SMR): If a business suspects a transaction may be linked to money laundering, terrorism financing, or other serious crimes, it must file a report with AUSTRAC.
• Record keeping: All transaction records must be retained for seven years.
• AML/CTF program: Each business must develop, implement, and maintain a compliant AML/CTF program, reviewed and updated regularly.

Registration with AUSTRAC is free, but the compliance costs are real. Smaller operators may face significant investment in systems, staff training, and ongoing monitoring to meet the new requirements.

The Digital Assets Framework Bill: A Licensing Regime Takes Shape

What the Bill Proposes

Running parallel to the AML/CTF expansion is the Digital Assets (Market Regulation) Bill, which the Australian Senate has backed and is currently being debated in the House of Representatives.

While the AML/CTF changes focus on anti-money laundering and counter-terrorism, the Digital Assets Framework Bill goes further. It proposes a dedicated licensing regime for digital asset platforms, similar to the Australian Financial Services Licence (AFSL) that governs traditional financial products.

Key features of the proposed framework include:

• A new licence category: Digital asset exchanges and custody providers would need a specific AFSL variant. Estimated costs for obtaining this licence range from $50,000 to $200,000, depending on the business model and complexity.
• Capital adequacy requirements: Platforms must maintain minimum capital reserves to protect against operational and market risks.
• Client asset segregation: Customer funds and crypto assets must be held separately from the platform’s own assets, preventing the kind of commingling that led to collapses like FTX.
• Market integrity obligations: Platforms must implement measures to prevent market manipulation, wash trading, and insider trading.
• Dispute resolution: Licensed platforms must belong to an external dispute resolution scheme, giving consumers a clear pathway for complaints.

The 18-Month Transition Period

If the Bill receives Royal Assent (which is expected in mid-2026 given bipartisan support), existing crypto businesses will have an 18-month transition period to obtain the new licence. During this period, businesses that are already registered with AUSTRAC can continue operating while their licence applications are processed.

This transition window is critical for the industry. It means Australian crypto businesses need to start preparing now, even before the legislation is finalised.

Why This Matters for Investors

For everyday Australian crypto investors, the licensing framework provides several important protections:

1. Your assets should be safer. Client asset segregation means that if a platform goes under, your crypto holdings should be identifiable and separable from the platform’s debts. This is a direct response to the FTX collapse, where customer assets were commingled with corporate funds.

2. You’ll have somewhere to complain. The requirement for platforms to join an external dispute resolution scheme (like the Australian Financial Complaints Authority, or AFCA) gives investors a free, independent avenue for resolving disputes.

3. Market manipulation should decrease. Market integrity obligations mean platforms must actively monitor for and prevent wash trading, spoofing, and other manipulative practices that have plagued crypto markets.

4. You can verify legitimacy. Once the regime is in place, investors will be able to check whether a platform is licensed, much as you can currently check an AFSL holder on the ASIC Connect register.

The Travel Rule: Sharing Sender and Receiver Data

What Is It?

The “travel rule” is a concept borrowed from traditional banking. When banks transfer funds internationally via SWIFT, they must include information about the sender and receiver. The crypto travel rule applies the same principle to virtual asset transfers.

From 1 July 2026, Australian Virtual Asset Service Providers (VASPs) must collect and transmit the following information when processing transfers:

For the sender (originator):

• Full name
• Account number or unique transaction reference
• Physical address, national identity number, or date and place of birth

For the receiver (beneficiary):

• Full name
• Account number or unique transaction reference

Thresholds and Exemptions

The travel rule applies to transfers above a prescribed threshold. While the exact AUD threshold is still being finalised through AUSTRAC’s rule-making process, it is expected to align with the FATF recommendation of approximately AUD 1,500 (based on the USD/EUR 1,000 equivalent).

Transfers below this threshold may still require basic originator information but not the full data set. Transfers between two wallets controlled by the same person (self-transfers) are not exempt, though they may have simplified requirements.

Impact on Privacy

The travel rule has been contentious within the crypto community. Many users are drawn to cryptocurrency precisely because of its pseudonymous nature. The travel rule effectively strips away some of that pseudonymity for transfers through regulated platforms.

However, it is worth noting that the rule only applies to transfers involving at least one VASP. Peer-to-peer transfers between unhosted (self-custody) wallets are not directly covered, although VASPs must assess the risk when a customer sends funds to or receives funds from an unhosted wallet.

For practical purposes, most Australian investors who use regulated exchanges will notice additional identity verification steps when making transfers, particularly larger ones.

How Cryptocurrency Is Taxed in Australia in 2026

The regulatory changes do not alter the fundamental tax treatment of cryptocurrency in Australia, but they do make it harder to avoid reporting obligations. Here is the current position:

Capital Gains Tax (CGT)

The ATO treats cryptocurrency as property (specifically, as a CGT asset). Any disposal of crypto triggers a CGT event. Disposals include:

• Selling crypto for AUD or another fiat currency
• Trading one cryptocurrency for another
• Using crypto to purchase goods or services
• Gifting crypto to another person

If you hold crypto for more than 12 months before disposing of it, you may be eligible for the 50% CGT discount (for individuals and trusts, not companies). This means only half of the capital gain is included in your assessable income.

Income Tax

Crypto received as payment for goods or services, as mining rewards, or as staking/DeFi yield is generally treated as ordinary income. It is assessed at its market value in AUD at the time it is received.

The ATO’s Data-Matching Programs

The ATO has been running data-matching programs with Australian crypto exchanges since 2019. These programs collect transaction data from platforms and cross-reference it with tax returns. The expanded AML/CTF requirements from 31 March 2026 will give the ATO even more data to work with.

In the 2024-25 financial year, the ATO sent over 300,000 “nudge” letters to crypto investors whose reported tax did not match exchange data. This number is expected to grow significantly as more platforms are brought under AUSTRAC’s reporting framework.

Key Tax Thresholds for 2025-26

Record Keeping

The ATO requires crypto investors to keep records of every transaction, including:

• The date of each transaction
• The value in AUD at the time
• The purpose of the transaction
• The other party (if known)
• Exchange records and digital wallet addresses

With the new regulatory framework making it harder to transact anonymously, maintaining thorough records is more important than ever.

What Australian Crypto Businesses Need to Do Now

If you operate a crypto business in Australia, the timeline is tight:

Before 31 March 2026

• Register with AUSTRAC if you are not already registered and your business falls within the expanded definitions.
• Review your AML/CTF program. If you have an existing program, it likely needs updating to cover the expanded obligations. If you do not have one, you need to develop one immediately.
• Implement or upgrade KYC systems. All customers must be identified and verified. If your platform currently allows anonymous or pseudonymous trading, this must change.

Before 1 July 2026

• Prepare for the travel rule. Implement systems to collect, verify, and transmit originator and beneficiary information for qualifying transfers.
• Test your compliance systems. Run test scenarios to ensure your monitoring and reporting systems can handle the new requirements.

Ongoing

• Budget for compliance costs. Smaller operators should expect ongoing costs of $50,000 to $150,000 per year for compliance staff, systems, and external audits.
• Monitor the Digital Assets Framework Bill. If it passes, you will have 18 months to apply for the new licence, but early preparation will be critical.
• Engage a compliance adviser. The complexity of the new framework means most crypto businesses will need professional guidance from accountants and lawyers experienced in financial services regulation.

What Australian Crypto Investors Should Do

1. Check Your Exchange Is Registered

From 31 March 2026, only AUSTRAC-registered platforms can legally offer virtual asset services in Australia. You can check an exchange’s registration status on the AUSTRAC reporting entities register.

If your exchange is not registered, consider moving your assets to a registered platform. Using an unregistered platform exposes you to regulatory risk and potentially means your assets are not protected by the new consumer safeguards.

2. Get Your Tax Records in Order

The expanded data-matching capabilities mean the ATO will have greater visibility into crypto transactions than ever before. If you have been lax about record keeping, now is the time to fix it. Consider using crypto tax software (such as Koinly, CryptoTaxCalculator, or Syla) that integrates with Australian exchanges and can generate ATO-compatible reports.

3. Review Your Self-Custody Arrangements

If you hold crypto in self-custody wallets (hardware wallets or software wallets you control), be aware that transfers between your self-custody wallets and regulated exchanges will attract additional scrutiny under the travel rule. You may be asked to verify ownership of external wallets.

4. Speak to a Professional

The intersection of crypto investment, tax law, and the new regulatory framework is complex. An accountant experienced in digital assets can help you ensure compliance, optimise your tax position, and avoid costly mistakes.

The Bigger Picture: Australia’s Place in Global Crypto Regulation

Australia’s regulatory overhaul positions the country as one of the more comprehensively regulated crypto markets in the world. Here is how it compares:

The bipartisan support for Australia’s framework suggests a recognition that regulatory clarity is better for both investors and the industry than the status quo. Capital has been flowing offshore to jurisdictions with clearer rules, and Australian crypto businesses have struggled to access banking services due to the perceived regulatory risk.

By establishing clear licensing requirements and consumer protections, Australia may be able to attract investment and innovation back to the domestic market.

What Comes Next

The next six months will be pivotal for Australia’s crypto landscape:

• 31 March 2026: Expanded AML/CTF Act takes effect. New business categories must register with AUSTRAC.
• Mid-2026 (expected): Digital Assets Framework Bill receives Royal Assent.
• 1 July 2026: Crypto travel rule takes effect.
• Late 2027 (expected): End of 18-month transition period for new AFSL licensing.

For investors, this means more protection but also more reporting obligations. For businesses, it means significant compliance investment but also greater legitimacy and access to traditional financial services.

For financial advisers and accountants, it means a growing number of clients who need guidance navigating the new landscape.

Need help understanding how Australia’s new crypto regulations affect your investments or business? Find a qualified accountant or financial adviser on WealthWorks who specialises in digital assets and can help you stay compliant.