AUSTRAC Registration Eligibility Checker
Registration Requirement
If you're running a crypto exchange in Australia, you must register with AUSTRAC - no exceptions. It’s not a suggestion. It’s the law. And as of October 2025, if you haven’t done it yet, you’re operating illegally. The penalties aren’t just fines. They’re criminal charges. You could face jail time.
Who Needs to Register?
AUSTRAC registration applies to any business that exchanges fiat money (like AUD) for digital currency (like Bitcoin or Ethereum), or the other way around. That includes online platforms, mobile apps, and even physical crypto ATMs. If your business touches fiat-to-crypto or crypto-to-fiat trades, you’re in scope.Here’s what doesn’t count: trading one cryptocurrency for another (like BTC for ETH) is currently not required to be registered - but that’s changing. Starting March 31, 2026, that changes. Exchanging one crypto for another, holding crypto for clients, managing digital wallets, and even helping launch new tokens (like ICOs) will all require AUSTRAC registration. If you’re planning to expand your services, you need to plan for this now.
What You Need Before Applying
You can’t just fill out a form and hope for the best. AUSTRAC requires two critical documents before you even submit your application:- AML/CTF Program - This is your rulebook. It details how you’ll detect, prevent, and report money laundering and terrorism financing. It must include procedures for customer identification, transaction monitoring, staff training, and internal audits.
- ML/TF Risk Assessment - You have to prove you understand your risks. Are you dealing with high-volume anonymous users? Are you operating in high-risk regions? Do you accept cash deposits? This document maps out your vulnerabilities and how you’re addressing them.
If you skip these, your application will be rejected - or worse, flagged for investigation after you’ve started operating. Many businesses lose months because they try to rush this part. There’s no shortcut. You need a written, tailored program. Generic templates won’t cut it. AUSTRAC knows the difference.
The Registration Process
The application is done online through AUSTRAC’s portal. But before you click submit, make sure you have:- Your business ABN and legal structure details
- Names and IDs of all directors, owners, and key staff
- Your AML/CTF Program and Risk Assessment documents
- Proof of identity for all control persons
AUSTRAC doesn’t just check your paperwork. They look at your people. If one of your directors has a history of financial crime, your application will be denied. They also check if your business structure is designed to hide ownership - like using offshore shell companies. That’s a red flag.
There’s no set timeline for approval. Some get approved in 6 weeks. Others wait 6 months. It depends on how clean your application is. If you’re missing something, they’ll ask for it - and you’ll have 28 days to respond. Miss that deadline? Your application closes.
What Happens After You Register?
Registration isn’t the finish line. It’s the starting line. Once you’re registered, you’re under constant scrutiny.- Know Your Customer (KYC) - You must verify every customer’s identity before they trade. That means government-issued ID, proof of address, and sometimes a selfie with the ID. No exceptions for small trades.
- Transaction Monitoring - Your system must flag unusual activity. A customer suddenly sending $50,000 in Bitcoin to an unknown wallet? That’s a Suspicious Matter Report (SMR). You have to file it within 3 business days.
- Record Keeping - You must keep records of every transaction, customer ID, and communication for at least 7 years. That includes chat logs, emails, and even internal notes.
- Annual Compliance Report - Every year, you submit a report proving you’re still following your own rules. If you haven’t trained your staff in the last 12 months? You’re non-compliant.
AUSTRAC doesn’t wait for problems. They do random audits. They can show up with a warrant. If they find a gap - even a small one - they can suspend your registration. That means you stop trading. Immediately.
AUSTRAC vs ASIC: What’s the Difference?
A lot of people confuse AUSTRAC with ASIC. They’re not the same.- AUSTRAC handles anti-money laundering and counter-terrorism financing. It’s mandatory for all crypto exchanges dealing with fiat.
- ASIC regulates financial products. If you’re selling tokens that act like shares, bonds, or derivatives (like tokenized stocks or profit-sharing tokens), you need an Australian Financial Services License (AFSL). That’s a whole other layer.
Most crypto exchanges only need AUSTRAC. But if you’re offering staking rewards that pay interest, or selling NFTs that represent ownership in a company, you might need both. Don’t assume. Get legal advice.
What’s Changing in March 2026?
This is the biggest shift in Australian crypto regulation in years. By March 31, 2026, AUSTRAC’s rules will cover:- Crypto-to-crypto exchanges
- Custody services (holding crypto for clients)
- Wallet management platforms
- Services related to ICOs, token sales, and DeFi protocols
That means even if you only trade Bitcoin for Ethereum, you’ll need to register. If you’re a wallet provider that lets users send and receive crypto, you’re in scope. If you’re building a DeFi app that lets people lend crypto, you’ll need to register.
Companies that ignore this will be shut down. There’s no grace period. The clock is ticking.
What Happens If You Don’t Register?
You think you can fly under the radar? Think again.- Criminal charges - Up to 10 years in prison for operating without registration.
- Fines up to $21 million for corporations.
- Reputational damage - Your name will be published on AUSTRAC’s enforcement list. Banks will freeze your accounts. Payment processors will cut you off.
- Customer lawsuits - If users lose money because you’re unlicensed, they can sue you.
There’s no “just this once” loophole. AUSTRAC doesn’t care if you’re small. They don’t care if you’re new. They don’t care if you didn’t know the rules. Ignorance isn’t a defense.
How to Get It Right
The smartest move? Don’t try to do this alone.- Hire a compliance consultant with real AUSTRAC experience - not a general lawyer.
- Use a KYC provider that’s already integrated with AUSTRAC’s systems.
- Build your AML/CTF program around real transaction patterns, not templates.
- Train your team monthly. Keep records of every session.
- Start preparing for March 2026 now - even if you’re not doing crypto-to-crypto yet.
There are firms in Australia that specialize in this. They’ve helped over 200 exchanges get registered. They know what AUSTRAC looks for. They know the common mistakes. Paying for expert help now saves you millions later.
Consumer Protection Still Applies
Even if your crypto isn’t a financial product, you still have to follow the Australian Consumer Law. That means:- No false claims about returns
- No hiding fees in fine print
- No misleading ads
- No promising “guaranteed profits”
One exchange got fined $1.2 million last year for advertising “earn 20% monthly” on staking. They didn’t break AUSTRAC rules - but they broke consumer law. You can’t ignore either.
Final Reality Check
Australia isn’t trying to kill crypto. It’s trying to bring it into the same system as banks and brokers. The goal is to protect consumers, stop crime, and build trust. The companies that succeed aren’t the ones that fight the rules. They’re the ones that build compliance into their DNA.If you’re serious about operating in Australia, treat AUSTRAC like your bank. Not as a hurdle. As a requirement. Because in 2025, if you’re not registered, you’re not legitimate.
Do I need AUSTRAC registration if I only trade crypto for crypto?
As of November 2025, no - you don’t need AUSTRAC registration for crypto-to-crypto trades. But that changes on March 31, 2026. After that date, all exchanges, including those trading one digital currency for another, must register. If you plan to offer this service, start preparing now.
Can I operate while my AUSTRAC application is pending?
No. You cannot legally provide digital currency exchange services in Australia until your registration is approved. Operating without registration is a criminal offense, even if your application is under review. Many businesses delay launching until approval is granted to avoid penalties.
What happens if my AUSTRAC registration is denied?
If your application is denied, AUSTRAC will explain why. Common reasons include incomplete AML/CTF programs, undisclosed ownership, or links to high-risk individuals. You can appeal or resubmit after fixing the issues. But you must stop all operations immediately. Reapplying without fixing the core problems will likely result in another denial.
Do I need an AFSL from ASIC too?
Only if you’re offering financial products - like tokenized shares, derivatives, or profit-sharing tokens. Most crypto exchanges only need AUSTRAC. But if you’re selling tokens that act like investments, you’ll need both. Check with a legal expert. Mixing the two can lead to serious compliance failures.
How long does AUSTRAC registration take?
There’s no fixed timeline. It can take anywhere from 6 weeks to 6 months. The speed depends on how complete and accurate your application is. Applications with clear AML/CTF programs and full documentation get approved faster. Missing documents or vague risk assessments delay everything.
Can I use a third-party KYC provider?
Yes - and you should. Many exchanges use certified KYC providers like Jumio, Onfido, or Trulioo. These services integrate with AUSTRAC’s expectations and automate identity verification. But you’re still legally responsible for ensuring compliance. The provider does the work, but you own the risk.
Do I need to report every transaction to AUSTRAC?
No. You only need to report two types: (1) Threshold Transaction Reports (TTRs) for cash transactions over $10,000 AUD, and (2) Suspicious Matter Reports (SMRs) for any transaction that seems unusual or potentially illegal. You don’t report every trade - just the risky ones.
What if I’m based outside Australia but serve Australian customers?
If you’re targeting Australian customers - even if you’re based overseas - you still need AUSTRAC registration. The law applies to any business that offers services to people in Australia. Ignoring this because you’re offshore is a common mistake. AUSTRAC can block your website, freeze your bank accounts, and pursue legal action internationally.
Categories