AUSTRAC Registers - It Does Not License

Read this first

Two facts that reframe every AUSTRAC pitch

First, vocabulary: AUSTRAC registers, it does not license. A VASP or remittance registration carries no prudential capital, no conduct permission and no investor-protection mandate; whether an activity also needs an Australian financial services licence from ASIC is a separate question. Any pitch calling an AUSTRAC registration a "crypto licence" is a category error.

Second, there is no AUSTRAC pre-approval for a change of control - and that is not a loophole. The gates sit after closing: new beneficial owners and key personnel must be notified within 14 days, fitness powers run at any time, the three-year renewal is a fresh assessment, and the regulator has publicly attacked the sale of dormant registrations. The gate moved; it did not disappear.

The registers

Who must register - and on which register

Two registers matter. The Virtual Asset Service Provider Register covers the designated-service items in the table below. The Remittance Sector Register covers three classes - remittance network provider (RNP), affiliate of an RNP, and independent remittance dealer (IRD) - each a separate registration, and one business can hold more than one. Both sit under Part 4 of the AML/CTF Rules 2025.

Obligations attach through the geographical link: a designated service provided at or through a permanent establishment in Australia, by an Australian resident through a foreign one, or by a subsidiary of an Australian-resident company. Serving Australians through a website alone does not necessarily create the link - but an RNP with an Australian affiliate network is captured regardless.

The perimeter is criminal law. Providing virtual asset or remittance services without registration is illegal; on the remittance side AUSTRAC quantifies the exposure at up to A$420,000, seven years in prison, or both.

The reform

31 March 2026: DCE registrations became VASP registrations

The Anti-Money Laundering and Counter-Terrorism Financing Amendment Act 2024 received assent on 10 December 2024; its virtual asset schedules commenced on 31 March 2026. On that date every existing DCE registration became a VASP registration by operation of law under the Transitional Rules 2026 - no re-application, no new decision - and it now reaches the full expanded service set once updated. The conversion is not free of homework: three transition tasks ride with the entity, whoever owns it.

Deferred start

What switched on 1 July 2026

Obligations for the newly added services started on 1 July 2026: AML/CTF programs, customer due diligence, reporting, the travel rule and record-keeping. Businesses providing only newly regulated virtual asset services that applied to register before 29 July 2026 may keep operating until AUSTRAC decides. The announcement layer - who is caught and the three realistic responses - is in our 29 July deadline briefing; this page owns the map.

Process as published

Enrol, register, 90 resettable days, three years

Enrolment comes first, through AUSTRAC Online - generally within 28 days of starting a designated service, with an AUSTRAC Account Number issued on submission. Registration is the harder second step, and for remittance and virtual asset providers it is a gate: outside the 2026 transitional carve-out, services cannot begin before AUSTRAC approves the registration.

AUSTRAC may take up to 90 days to assess an application, and the period resets whenever it requests further information; file quality sets the timetable. No end-to-end median is published; the month counts on third-party pages are consultancy colour. Outcomes are approved, approved with conditions or refused, and each is reviewable under Part 17A of the Act.

A registration runs for three years. The renewal window opens 90 days before expiry, and an application filed inside it keeps the registration alive until decided. Miss the window and it lapses: removal from the register, with any re-application treated as new.

Fees, honestly

No published fee schedule - and what that does not mean

AUSTRAC publishes no application-fee schedule for enrolment, registration or renewal. Third-party pages assert that registration is free; no official AUSTRAC page we have read states this, so we do not repeat it as fact. The one official money mechanism is the industry contribution levy, payable usually by medium-to-large entities with earnings of A$100 million or more; the levy model is under review as at July 2026.

There is no capital requirement anywhere in the regime. SKY7's own fees are quoted on request.

The acquisition rail

No pre-approval - four gates after closing

A share sale of a registered VASP or remittance dealer needs no prior AUSTRAC approval - there is no Australian equivalent of the UK's section 178 notice. That is only safe read with the four gates below: the regime polices ownership after closing, reaching the new owners directly.

Gate one: any change to beneficial owners - the forms draw the line at more than 25 percent ownership or control - or to key personnel must be notified within 14 days, under sections 75M(4) and 76P of the Act. In July 2026 the update form is still in development, so a buyer completing now must record its intent to notify. Gate two: AUSTRAC may suspend or cancel a registration at any time where the business poses a significant money laundering, terrorism financing or serious crime risk - reaching the new owners' and associates' history, at home or overseas.

Gate three is the three-year renewal: a fresh assessment on the same risk criteria, and a buyer inherits the seller's renewal date, not a new clock. Gate four is dormancy. In its 29 April 2025 "use it or lose it" release, AUSTRAC's CEO said "inactive businesses are vulnerable to being bought and co-opted by criminals"; the June 2026 register announcement urges inactive businesses to withdraw rather than risk cancellation.

The enforcement record says the powers are used: ten published VASP and DCE cancellations between 12 November 2025 and 4 June 2026, three refusals to renew on 29 January 2026 alone, and a 7 April 2026 suspension hitting both of one operator's registrations. Since about 30 June 2026 the VASP register is public - anyone can verify an entity's status. Why no approval gate makes diligence harder, not easier, is the subject of buying an AUSTRAC-registered business; the decision framework is in buy vs apply fresh.

Shell honesty

Why dormant registrations are a wasting asset

The market offers dormant AUSTRAC registrations as a shortcut. Read the regulator first: AUSTRAC can cancel a registration where it has reasonable grounds to believe the business no longer carries on the registrable service, it ran a national blitz on exactly that through 2025 and publishes every cancellation. A dormant registration is a wasting asset the regulator is working to switch off - and a buyer still faces the 14-day notifications and the renewal reassessment.

The honest alternative is an operating entity. Our live lot, the Australian AUSTRAC DCE and IRD dual registration for sale, is exactly that - a share sale of an anonymised operating company, details on the lot page, pricing on request.

Conditions in practice

What "approved with conditions" looks like on this register

Registration outcomes include approval with conditions, and conditions are not theoretical. On 3 June 2025 AUSTRAC put crypto-ATM providers on notice with an operating condition set: an A$5,000 cash deposit and withdrawal cap, mandatory scam warnings, enhanced customer due diligence and robust transaction monitoring. It had already refused to renew one ATM operator's registration on 6 May 2025, and cash transactions of A$10,000 or more carry threshold transaction reports.

The market is not marginal - Australia is the world's third-largest crypto-ATM market, upwards of 1,800 machines - and AUSTRAC expects other cash-accepting providers to consider similar limits. Conditions are flagged publicly on the register - a diligence item, not a private matter: the full operator picture is in crypto ATMs after the A$5,000 cap.

Moving target

What is changing, as of July 2026

The registration-details update form is still in development, with a no-enforcement posture for recorded, prompt updates once it lands. The industry contribution levy model is under review. Obligations for the newly regulated services went live on 1 July 2026, and the twin 29 July 2026 deadlines - new-provider registration applications and existing entities' VASP enrolment updates - close this month.

Further out: the earliest independent-evaluation deadline for existing reporting entities falls on 31 March 2027, and the transitional period for alternative customer identification runs to 31 March 2029, when reporting on transfers to unverified self-hosted wallets begins. ASIC's licensing perimeter for digital assets is a separate, moving workstream - check ASIC directly. Statements here are made as of July 2026: verify the current text on austrac.gov.au and legislation.gov.au before you rely on them.