AML Compliance Guide
Deadline: 29 July 2026 — enforcement now active

AUSTRAC enrolment for Virtual asset service providerss — 2026 AUSTRAC Guide

If your business provides a virtual asset designated service with a geographical link to Australia, you must enrol with AUSTRAC. For virtual asset service providers, enrolment is the legal step that brings your business into AUSTRAC’s reporting and compliance system before or as you start providing regulated exchange, transfer, safekeeping or related services. If you miss the deadline, you risk serious enforcement action, including civil penalties of up to $33.5 million per contravention, and criminal penalties can apply for intentional contraventions.

For virtual asset service providers, enrolment applies because regulation is tied to the services you provide, not the label you use for your business. You need to enrol if you provide a designated virtual asset service with an Australian geographical link, such as exchanging virtual assets for money, exchanging one virtual asset for another, providing virtual asset safekeeping, accepting instructions to transfer virtual assets on behalf of customers, or participating in the offer or sale of a virtual asset in a way covered by the Act. Enrolment is not a licence and it is not optional. It is your formal notification to AUSTRAC that you are a reporting entity.

Hard deadline

If you are providing a new designated virtual asset service from 1 July 2026, you must apply to enrol by 29 July 2026. If your business starts providing a designated service after 1 July 2026, you must apply within 28 days after the day you start providing that service. Enrolment is done through AUSTRAC Online at austrac.gov.au.

What to do now

  • Work out exactly which virtual asset services you provide and whether they are designated services with an Australian geographical link.
  • Create a user account in AUSTRAC Online and complete the enrol a new business form.
  • Prepare the business details AUSTRAC asks for, including your structure, contact details, key personnel and the services you provide.
  • If you are also a remittance or virtual asset service provider that must register, plan for registration as a separate step after enrolment.
  • Once enrolled, keep your enrolment details current and update AUSTRAC within 14 days if those details change.

A common mistake in this sector is assuming enrolment only applies to major exchanges. It does not. Smaller platforms, brokers, OTC desks, token issuers involved in covered offers or sales, custodial wallet providers and businesses that facilitate transfers can all be caught if they provide a designated service. Another common mistake is thinking incidental movement of value automatically means registration is required. AUSTRAC’s guidance says you must enrol if you provide a designated service, but registration is an extra process that typically applies to remittance providers and specialised virtual asset service providers. Check both questions separately.

The practical way to handle this is to map your product features against the designated service categories before launch, not after. If your platform offers fiat on-ramp, crypto-to-crypto swaps, custody, transfer functionality or token sale participation, document which features are live from day one and use that date to set your enrolment deadline. Keep a copy of your AUSTRAC submission, screenshots of confirmation, and internal notes showing why you concluded you were regulated. That will make later compliance work easier when you move on to customer due diligence, reporting and your AML/CTF program.

A lightweight AML platform, built exclusively for Tranche 2

Get AUSTRAC's mandates done as fast and effortless as possible.

  • Built around AUSTRAC's actual requirements
  • Single maintained compliance file
  • No compliance expertise required
  • 25 minute initial compliance setup
  • Obligations calendar & reminders
  • Instant data export
Setup: ~25 minutes Ongoing: minutes per client Price: $8 per KYC
See the product →

Frequently asked questions

Do I need to enrol if my platform only offers crypto-to-crypto swaps and never touches Australian dollars?
Yes, potentially. AUSTRAC’s guidance says exchanging virtual assets for virtual assets is a designated service, provided the service has a geographical link to Australia. The key question is not whether fiat is involved, but whether the service itself is a designated service connected to Australia.
Is enrolment the same as getting licensed or approved by AUSTRAC?
No. Enrolment is not a licence. It is your mandatory notification to AUSTRAC that your business is providing a designated service and is therefore a reporting entity under the AML/CTF regime.
What if I start my virtual asset business after 1 July 2026?
You do not get to wait until the next annual cycle. You must apply to enrol no later than 28 days after the day you first provide the designated service. If you start on or before 1 July 2026 and are covered by the new regime from commencement, the practical deadline is 29 July 2026.
Does enrolment cost anything?
No. Enrolment with AUSTRAC is free. You complete it through AUSTRAC Online, although your business will still need to invest time in preparing accurate details and then meeting the separate AML/CTF obligations that follow.
If I already move virtual assets for clients as part of another service, do I still need to register as well as enrol?
Maybe, but not always. AUSTRAC says if you provide a designated service with an Australian geographical link you must enrol, and remittance or virtual asset service providers must also register. If sending or receiving money or virtual assets is only incidental to your other services, registration may not be required, but you should check carefully whether your activities make you a specialised virtual asset service provider.