If your business provides a virtual asset designated service with a geographical link to Australia, you must enrol with AUSTRAC. For virtual asset service providers, enrolment is the legal step that brings your business into AUSTRAC’s reporting and compliance system before or as you start providing regulated exchange, transfer, safekeeping or related services. If you miss the deadline, you risk serious enforcement action, including civil penalties of up to $33.5 million per contravention, and criminal penalties can apply for intentional contraventions.
Your AML/CTF obligations
For virtual asset service providers, enrolment applies because regulation is tied to the services you provide, not the label you use for your business. You need to enrol if you provide a designated virtual asset service with an Australian geographical link, such as exchanging virtual assets for money, exchanging one virtual asset for another, providing virtual asset safekeeping, accepting instructions to transfer virtual assets on behalf of customers, or participating in the offer or sale of a virtual asset in a way covered by the Act. Enrolment is not a licence and it is not optional. It is your formal notification to AUSTRAC that you are a reporting entity.
Hard deadline
If you are providing a new designated virtual asset service from 1 July 2026, you must apply to enrol by 29 July 2026. If your business starts providing a designated service after 1 July 2026, you must apply within 28 days after the day you start providing that service. Enrolment is done through AUSTRAC Online at austrac.gov.au.
What to do now
A common mistake in this sector is assuming enrolment only applies to major exchanges. It does not. Smaller platforms, brokers, OTC desks, token issuers involved in covered offers or sales, custodial wallet providers and businesses that facilitate transfers can all be caught if they provide a designated service. Another common mistake is thinking incidental movement of value automatically means registration is required. AUSTRAC’s guidance says you must enrol if you provide a designated service, but registration is an extra process that typically applies to remittance providers and specialised virtual asset service providers. Check both questions separately.
The practical way to handle this is to map your product features against the designated service categories before launch, not after. If your platform offers fiat on-ramp, crypto-to-crypto swaps, custody, transfer functionality or token sale participation, document which features are live from day one and use that date to set your enrolment deadline. Keep a copy of your AUSTRAC submission, screenshots of confirmation, and internal notes showing why you concluded you were regulated. That will make later compliance work easier when you move on to customer due diligence, reporting and your AML/CTF program.
A lightweight AML platform, built exclusively for Tranche 2
Get AUSTRAC's mandates done as fast and effortless as possible.