Australia's Crypto Licensing Law: The 2027 Deadline Is Not the One That Matters

The Deadline the Headlines Got Wrong

Australia just brought its crypto industry inside the securities regulatory perimeter. On 1 April 2026, the Corporations Amendment (Digital Assets Framework) Bill 2025 passed both houses of Parliament, and it received Royal Assent on 8 April 2026, becoming the DAF Act 2026 (ASIC roadmap). Exchanges and custody platforms must now obtain an Australian Financial Services Licence, placing them under the same core rules as brokers and fund managers.

But here is the part the headlines are missing. The widely reported "six months" to get licensed does not run from the April 2026 passage date. The DAF Act does not even commence until 9 April 2027, and the six-month window is a post-commencement transition period running from April 2027 to October 2027 (Hall & Wilcox).

The real deadline is far more urgent, and almost nobody is talking about it. Here is what happened, why the timing matters, and what platform operators should do now.

Two New Product Categories, One Regulator

The DAF Act creates two new categories of regulated financial products under the Corporations Act 2001 (Gilbert + Tobin):

• Digital Asset Platforms (DAPs). These cover exchanges and platforms that hold crypto on behalf of users — the core custodial-exchange model.
• Tokenised Custody Platforms (TCPs). These cover firms that hold real-world assets and issue a corresponding digital token, the emerging tokenization model for funds, private credit, and other instruments.

Operators of both must obtain an AFSL from the Australian Securities and Investments Commission. This is the same license architecture that governs brokers and fund managers. That framing is deliberate and consequential.

Why the framing matters

Australia did not build a bespoke crypto regime. It folded digital asset intermediaries into the existing financial services regime. An AFSL brings capital adequacy requirements, conduct obligations, disclosure duties, and ongoing ASIC supervision. For firms accustomed to operating outside the perimeter, this is not a paperwork exercise. It is a structural conversion into a supervised financial institution.

The A$24 billion figure that dominated coverage is a prospective annual economic opportunity estimate from a March 2026 report by the Digital Finance Cooperative Research Centre with the Digital Economy Council of Australia — roughly 1% of GDP (DFCRC report). It is a forecast, not a current market size. Read it as the prize for getting licensed, not a description of today.

The September 2026 Deadline That Actually Binds Now

This is the fact that reframes the entire timeline. Separately from the DAF Act's April 2027 commencement, ASIC's existing no-action position under Information Sheet 225 (INFO 225) expired. Firms providing financial services involving digital assets that are already financial products under existing law must lodge an AFSL application by 30 September 2026 (ASIC). Unlicensed conduct carries penalties of up to 10% of annual turnover.

The distinction operators are missing

There are two clocks running, and they are not the same clock.

• The DAF Act clock governs assets that become newly regulated as DAPs and TCPs. That regime commences 9 April 2027, with the six-month application window opening then.
• The INFO 225 clock governs digital assets that were already financial products under existing law. That deadline is 30 September 2026 — right now, not next year.

A platform that assumes it has until 2027 because the DAF Act "just passed" may already be operating unlicensed under the existing regime. The crypto market structure lesson is blunt: the securities perimeter is defined by the nature of the product, not by the label the platform uses. Tokenized funds, yield products, and staking arrangements often meet the definition of a financial product today, independent of the new categories.

Any operator with Australian users should classify each product line against the current financial-product definition before assuming the 2027 runway applies to it.

What Platform Operators Should Do Before 30 September 2026

The passage of the DAF Act does not buy operators time. It signals that the licensing question is now settled and that ASIC intends to enforce it. Firms should treat the next several weeks as decision time.

First, classify every product line against the existing financial-product definition. Do not wait for the 2027 commencement. If any token, yield product, or custody arrangement is already a financial product, the 30 September 2026 AFSL deadline applies now.

Second, map your operating model to DAP or TCP. Custodial exchanges will generally fall under Digital Asset Platforms. Firms issuing tokens backed by real-world assets should assess Tokenised Custody Platform status and the tokenization-of-RWA obligations that follow.

Third, budget for the full AFSL burden. An AFSL is not a registration. It carries responsible-manager requirements, financial resource thresholds, compliance systems, and reporting duties equivalent to a broker or fund manager.

Fourth, account for the concurrent AML/CTF regime. Australia's expanded AML/CTF rules for virtual asset service providers — including the FATF Travel Rule with no minimum threshold — came into force on 1 July 2026 under the AML/CTF Amendment Act 2024, with a VASP registration deadline of 29 July 2026 (Solidus Labs). Licensing and AML obligations run on separate tracks.

Cross-border operators serving Australian users from offshore should not assume geography insulates them. The financial-product analysis follows the customer, not the server. Firms weighing US and Australian market entry should coordinate their digital asset compliance strategy across both regimes rather than treating them as isolated projects.