Australia’s crypto sector has one week left. The securities regulator has told every digital asset business relying on its temporary enforcement relief to lodge a licence application by September 30, or run the risk of operating illegally from October 1 with fines that can reach 10% of annual turnover.
The Australian Securities and Investments Commission issued what it called a final call this month. Firms that need an Australian Financial Services licence must apply for a new one or vary an existing licence before the deadline. Companies that need a market licence or a clearing and settlement facility licence face an extra requirement: written notice to the regulator and a pre-application meeting, also by September 30.
From October 1, a firm that needs authorisation but has not met the conditions of ASIC’s no-action position risks breaching financial services law. The regulator says civil and criminal penalties are on the table, including turnover-based fines that scale with the size of the business. For a large exchange, 10% of annual turnover is not a rounding error.
How the deadline got here
The no-action position dates to late 2024, when ASIC consulted on transitional arrangements after updating its guidance on when a digital asset counts as a financial product. The relief gave firms breathing room to work out whether their products needed licensing under existing law rather than waiting for new legislation.
The original deadline of June 30 proved too tight. On June 25, ASIC extended it by three months and widened the scope to cover firms operating as authorised representatives of licensed businesses or through certain intermediary arrangements. The regulator described the extension as a pragmatic response to industry transition challenges. More than 45 digital asset licence applications have been lodged since the guidance update, up from roughly 30 when the extension was granted.
| Milestone | Date | What changed |
|---|---|---|
| Updated guidance and no-action relief | Dec 2024 to Oct 2025 | Firms given time to assess licensing needs |
| Original deadline | June 30, 2026 | About 30 applications received |
| Extension | June 25, 2026 | Relief pushed to Sept 30, scope widened |
| Final deadline | Sept 30, 2026 | 45+ applications lodged |
| Enforcement begins | Oct 1, 2026 | Unlicensed operation risks civil and criminal penalties |
Who is affected
The relief covers providers of digital asset-related financial products and services, which in practice means exchanges offering derivatives, leveraged token products, asset managers wrapping crypto in fund structures, and platforms providing advice or dealing services. Plain spot trading sits outside the perimeter in most cases, which is why the application count is in the dozens rather than the hundreds.
Firms that miss the deadline do not automatically become criminals on October 1. The no-action position has conditions, and a firm that has lodged an application and is working through the process may still fall within it. The risk concentrates on businesses that have neither applied nor engaged with the regulator. ASIC’s message is that those firms know who they are.
What the licence actually requires
An Australian Financial Services licence is not a form to fill in. Applicants must demonstrate adequate resources, compliance systems, dispute resolution arrangements, and responsible managers with relevant experience. Crypto firms that previously operated with light structures have had to hire compliance staff, appoint external auditors and document custody arrangements for client assets. That is the work behind the 45 applications, and it is also why some firms have not finished.
The market and clearing licence tracks is stricter still, aimed at venues that operate trading infrastructure rather than merely dealing in products. Those firms must notify ASIC in writing and complete a pre-application meeting before the deadline, a process that can take months to arrange. A venue that has not yet booked that meeting has effectively missed the window.
The industry response so far
Local industry bodies have generally supported the direction while pressing for clarity on which products fall inside the perimeter. The October 2025 guidance update settled most of the big questions: tokenized securities, derivatives and interest-bearing products are in, plain spot commodities are largely out. Firms restructured around that line. Some split their businesses, moving offshore for products that cannot be licensed and keeping the compliant book in Australia.
The application count tells its own story. Roughly 30 applications existed when the extension was granted in June, and more than 45 by this month. The pace has not slowed, but the tail of firms still outside the process is what the regulator is now targeting with the turnover-fine warning. ASIC has signalled it expects the remaining holdouts to either commit to the process or exit the market.
Australia’s wider crypto framework
The licensing deadline is separate from the country’s Digital Asset Framework, which takes effect on April 9, 2027. That legislation will create a purpose-built regime for crypto firms. Until then, existing financial services law applies, and ASIC has been explicit that it will police the boundary.
Enforcement activity has already picked up. The regulator ordered Cryptolink’s bitcoin ATMs offline over reporting failures, and the Federal Court fined BPS Financial $14 million over unlicensed conduct and misleading statements about its Qoin wallet. The chair, Joe Longo, said at the time that the digital asset industry is well on notice that its products remain a focus for the regulator.
For global crypto businesses, Australia is becoming a test of how hard transition deadlines bite in practice. The European Union’s MiCA regime went through a similar licensing grind, with grandfathering periods that some firms used and others missed. Australia’s version has no grandfathering after October 1, only the no-action conditions. Firms that spent the extension window on business as usual rather than paperwork now have seven days to fix that.