If you operate a crypto exchange in Australia and you're treating April 2027 as your first compliance deadline, you're already behind.
The Digital Assets Framework Act gets the headlines. The 18-month transition period sounds comfortable. But buried in the regulatory stack are three deadlines that arrive much sooner—and missing any of them puts your license at risk before the new regime even starts.
May 30, 2026: Compliance officer notification deadline. June 30, 2026: INFO 225 class relief expires. July 1, 2026: Travel Rule takes effect.
That's not 18 months. That's 8 weeks.
⚠️ The Convergence Problem
Australia's regulatory framework has a coordination issue. AUSTRAC's AML/CTF rules started March 31. ASIC's Digital Assets Framework commences April 2027. In between, existing financial services law fills the gap. Three regulators, three timelines, one compressed compliance window. The assumption that you can wait for the "new regime" is dangerous.
The Three Deadlines You Can't Miss
AUSTRAC AML/CTF Transitional Rules Commenced
Ongoing transaction monitoring obligations became mandatory. If you haven't implemented real-time screening for both fiat-to-crypto and cross-chain transfers, you're already non-compliant.
Compliance Officer Notification
VASPs must notify AUSTRAC of their appointed compliance officer. This isn't optional. AUSTRAC expects newly regulated entities to have an AML/CTF compliance officer in place by July 1—the May 30 notification is your proof of progress.
ASIC INFO 225 Class Relief Expires
The regulatory comfort that allowed platforms to operate while the framework was being finalized ends. After this date, firms must comply with existing licensing requirements under the Corporations Act. No more grace period.
Travel Rule Activation
Every VASP must transmit originator and beneficiary data with every transfer. Due diligence on counterparty VASPs becomes mandatory. Risk-based policies for self-hosted wallet transfers required. Transactions with unlicensed entities in FATF jurisdictions: prohibited.
VASP Registration Closes
After this date, operating without registration is illegal. No exceptions. No extensions.
Digital Assets Framework Commences
Full AFSL regime for Digital Asset Platforms (DAPs) and Tokenised Custody Platforms (TCPs). By this point, the standards will have been consulted, finalized, and published. Applications open shortly after.
Why the "DCE" to "VASP" Shift Matters
This isn't just regulatory rebranding. For years, Australia used "digital currency exchange" (DCE)—a term that implied a narrow function. You take fiat, you give crypto. Simple.
VASP encompasses the full range of services now in the market:
DCE (Old Definition)
- Exchange fiat for crypto
- Exchange crypto for fiat
- Limited scope
VASP (New Definition)
- Exchange services
- Transfer services
- Custody services
- Issuance services
- Administration services
The VASP designation aligns Australia with FATF terminology and international standards. More importantly, it captures what Australian crypto businesses actually do in 2026—not what they did in 2018.
The INFO 225 Trap
ASIC's INFO 225 class no-action position has been the safety net for Australian crypto platforms. It provided regulatory comfort while the framework was being developed. It allowed businesses to operate without licenses for activities that might technically fall under the Corporations Act.
That safety net disappears on June 30.
What Changes After June 30
After INFO 225 expires, any product or service that falls inside the Corporations Act perimeter requires proper licensing. ASIC's current guidance still applies—it always did. The no-action position was regulatory forbearance, not regulatory absence. If your derivatives product or managed investment scheme was always technically captured by existing law, you'll need to comply with those requirements while the new Digital Assets Framework is built around you.
The dangerous assumption: "We don't need to do anything until April 2027."
The reality: If your activities already fall within existing financial services law, you're subject to that law now. INFO 225 was a temporary pause on enforcement, not a permanent exemption.
Travel Rule: The Operational Challenge
July 1 brings Australia's Travel Rule into effect. The requirements sound simple on paper. The operational reality is anything but.
Travel Rule Compliance Checklist
- Transmit originator data (name, account number, address/date of birth/national ID) with every transfer
- Transmit beneficiary data (name, account number) with every transfer
- Conduct due diligence on counterparty VASPs before transacting
- Implement risk-based policies for self-hosted wallet transfers
- Verify counterparty VASPs are licensed in their FATF-compliant jurisdiction
- Refuse transactions with unlicensed entities in FATF jurisdictions
- Maintain records of all transmitted information
The counterparty due diligence requirement creates a network effect problem. You need to verify that the VASP you're transacting with is licensed. They need to verify the same about you. If either party can't provide verification, the transaction cannot proceed.
For cross-border transfers—where Travel Rule implementation varies by jurisdiction—this creates friction. Singapore has had Travel Rule requirements since 2020. Japan since 2022. Hong Kong since 2024. Australia arrives in 2026. Each jurisdiction has slightly different data requirements, different thresholds, different verification standards.
The platforms that have already integrated Travel Rule infrastructure (TRISA, Notabene, Sygna Bridge) will handle this smoothly. Everyone else faces an integration sprint.
Stablecoins: The Regulatory Gap
Australia's Digital Assets Framework covers exchanges and custody. Stablecoins sit on a different track entirely.
The Treasury Laws Amendment (Payments System Modernisation) Bill classifies payment stablecoins as "tokenised stored-value facilities" under ASIC oversight. Major issuers above $200 million fall under APRA. Secondary distributors—exchanges listing stablecoins—get class relief for now, allowing them to list eligible stablecoins without redundant licensing.
But here's the gap: Australia's scam prevention framework targets banks, telcos, and social media platforms. Crypto exchanges are relevant to scam prevention primarily at the conversion point—where victims move funds on-chain. How Australia connects its stablecoin framework to its scam prevention framework will determine whether there's a hole at the most critical link.
"Stablecoins are increasingly the currency of choice for cybercriminals, accounting for 84% of all illicit transaction volume. The same attributes that make them appealing to legitimate users—the dollar peg, speed of transfer, global reach—also make them the preferred rail for moving illicit funds."
— Chainalysis 2026 Crypto Crime Report
Some issuers aren't waiting. Macropod's AUDM—Australia's first AUD-backed stablecoin issued under an AFSL and a participant in the Reserve Bank's Project Acacia—has compliance and monitoring infrastructure embedded from launch. It's proof that stablecoin issuers can build for regulatory expectations before those expectations are codified.
FATF Mutual Evaluation: The External Pressure
Australia's FATF mutual evaluation begins late 2026. For the first time, the assessment tests whether laws actually work—not just whether they exist.
Australia's success depends on three factors:
1. Travel Rule Implementation: Does every VASP transmit compliant data? Are there gaps in coverage? How do Australian VASPs handle transfers to jurisdictions with weaker Travel Rule enforcement?
2. VASP Regime Effectiveness: Is the regulatory framework producing real-world compliance? Are suspicious matter reports being filed? Is enforcement happening?
3. Cross-Sector Coordination: Does the Scam Prevention Framework actually connect crypto platforms to banks to telcos? Or are there gaps between the silos?
A poor FATF evaluation has consequences. Jurisdictions can be grey-listed, which increases compliance costs for every financial institution transacting with that country. Australia has avoided the grey list so far. The stakes for maintaining that status are higher now that crypto is a core part of the evaluation.
The APAC Context: Competition for Compliance Capital
Australia's regulatory timeline doesn't exist in isolation. Within APAC, multiple jurisdictions are competing for the same firms, capital, and talent through clear rules and FATF alignment.
Hong Kong
- Purpose-built VATP licensing
- Stablecoin Ordinance active
- First licenses issued April 2026
Singapore
- MAS Payment Services Act
- Tiered framework proposed
- May 18 consultation deadline
Japan
- JFSA oversight established
- FIEA reclassification underway
- Cybersecurity guidelines active
Australia
- AFSL integration model
- AUSTRAC VASP rules active
- Full framework April 2027
Australia's choice to integrate crypto into existing AFSL requirements—rather than create a purpose-built regime—signals something specific: digital assets treated as financial services, not as a separate category requiring separate rules.
The advantage: firms that already hold AFSL licenses have a clearer path. The disadvantage: crypto-native firms must navigate a framework designed for traditional finance.
What To Do Now: 25-Day Action Plan
Week 1 (May 5-11): Compliance Officer
- Confirm compliance officer appointment is finalized
- Prepare AUSTRAC notification documentation
- Review compliance officer's qualifications against AUSTRAC expectations
- Document compliance program structure
Week 2 (May 12-18): Transaction Monitoring
- Audit current transaction monitoring capabilities
- Verify real-time screening covers fiat-to-crypto flows
- Verify real-time screening covers cross-chain transfers
- Document suspicious matter reporting procedures
Week 3 (May 19-25): Travel Rule Preparation
- Select Travel Rule infrastructure provider (if not already integrated)
- Map counterparty VASP verification requirements
- Develop risk-based policy for self-hosted wallet transfers
- Test data transmission with key counterparties
Week 4 (May 26-30): AUSTRAC Notification
- Submit compliance officer notification to AUSTRAC
- Confirm receipt and acknowledgment
- Document submission for records
- Begin Travel Rule integration testing
The Bottom Line
Australia has moved from the margins of crypto regulation to the center. The Digital Assets Framework Act passed. The VASP regime is active. The timeline is set.
But the compliance calendar is more compressed than the headlines suggest. April 2027 is not your first deadline. May 30 is.
The platforms that treat these next 8 weeks as a sprint—not a warmup—will be positioned for the new regime. Everyone else will be scrambling to catch up while their competitors are already licensed.
Key Dates Summary
May 30: Compliance officer notification to AUSTRAC
June 30: INFO 225 class relief expires
July 1: Travel Rule takes effect
July 29: VASP registration closes
April 2027: Digital Assets Framework commences
Stay Ahead of APAC Regulation
Weekly analysis of Hong Kong, Singapore, Japan, Australia, and 8+ APAC markets. Institutional-grade regulatory intelligence.
Read More Analysis →