The Australian Securities and Investments Commission has issued a final warning to crypto firms operating under temporary regulatory relief. Companies that provide digital asset products or services classified as financial products under existing law must act before the end of September or face potential breaches of financial services rules.

Deadline and Enforcement Consequences

Businesses needing an Australian Financial Services license must submit a new application or request variations to an existing license by September 30, 2026. Firms that require an Australian Market Licence or a Clearing and Settlement facility licence must notify the regulator in writing of their intention to apply and complete a pre-application meeting before the same date.

From October 1, any firm that requires authorization but has not met the conditions of the temporary no-action position risks operating in breach of financial services law. The regulator has stated that noncompliant operators could face civil and criminal penalties. Maximum fines may reach 10 percent of annual turnover, though courts determine the precise penalty based on the circumstances of each case.

Application Numbers and Guidance Updates

Since updating its guidance on digital assets as financial products and services in October 2025, the commission has recorded more than 45 digital asset-related license applications. That figure has risen from roughly 30 applications reported when the regulator previously extended the original deadline.

The temporary no-action relief was initially set to expire on June 30, 2026. In late June the commission extended the period to September 30 and broadened coverage to include certain crypto businesses operating as authorized representatives of licensed firms or through intermediary arrangements. The relief is not itself a license or legal exemption; it simply describes circumstances under which the regulator does not intend to take enforcement action during the transition.

Not every crypto activity automatically requires a license. Bitcoin and certain other digital assets may fall outside the definition of financial products on their own. However, related services, investment arrangements, custody offerings, wrapped tokens, staking products, or derivatives can still trigger licensing obligations. Companies must assess the specific rights attached to each product rather than relying solely on technical descriptions.

Relation to Broader Digital Asset Rules

The September 30 deadline addresses obligations that already exist under current financial services law. It remains distinct from the Corporations Amendment (Digital Assets Framework) Act 2026. That legislation received Royal Assent earlier in the year and is scheduled to commence on April 9, 2027 after an implementation period.

The forthcoming framework will introduce dedicated rules for digital asset platforms and tokenized custody services, bringing those activities under a specialized licensing regime. Existing authorizations will continue to matter after the new rules begin. Some firms may need to obtain licenses under the present system and later vary them to cover activities regulated by the 2027 framework.

The regulator plans further consultation on standards and additional guidance during the lead-up to the new regime. In the meantime, firms still relying on temporary relief must decide whether to apply, adjust their operations, or cease providing affected services once the protection expires.

Implications for Market Participants

Australian users of crypto platforms are not facing restrictions on holding or transferring digital assets themselves. The primary practical change concerns the status of the intermediaries they use. Platforms that successfully complete the licensing process will operate under clearer oversight, while those that do not may scale back services or exit the market.

Firms uncertain about whether their activities require authorization are expected to seek legal advice based on their specific products, custody arrangements, and customer agreements. Submitting an application does not guarantee approval. Applicants must meet requirements covering competence, financial resources, compliance systems, risk management, and dispute resolution arrangements.

The commission has not published a list of applicants or detailed the types of services covered by the more than 45 applications received to date. Enforcement priorities after October 1 have also not been specified beyond the general statement that noncompliant firms may face investigation and possible civil or criminal action.