Crypto-funded debit card in Australia
A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.
Crypto debit card is conditionally permitted in Australia with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- DCE/VASP registration with AUSTRAC (mandatory before providing services, with transitional rules until 29 July 2026)
- Mandatory AML/CTF program covering KYC, transaction monitoring, suspicious activity reporting, record-keeping, and a designated AML/CTF Compliance Officer
- Customer due diligence (CDD) on all cardholders at onboarding
- Suspicious Matter Reports (SMRs) to AUSTRAC for transactions arousing suspicion
- Threshold transaction reporting (AUD 10,000 and above) if relevant to the service
- Enrolment with AUSTRAC within 28 days of commencing designated services (online via AUSTRAC Online portal)
- Registration as a VASP with AUSTRAC — more detailed application than enrolment, with closer AUSTRAC scrutiny
- Transition from existing DCE registration to VASP registration by updating enrolment between 31 March 2026 and 29 July 2026
- Ongoing compliance: transaction monitoring, record-keeping, annual compliance reporting to AUSTRAC
- If holding customer crypto assets (custody), AFSL from ASIC is required — bringing additional AML-related AFSL obligations including client asset segregation and dispute resolution
Key Restrictions
- Must be a registered Australian company with an ABN; fit-and-proper directors/owners required
- Must hold AUSTRAC DCE/VASP registration as a baseline
- If the card program involves issuing a stored-value facility or payment instrument, an AFSL with an Australian credit licence or a separate authorization under the Payment Systems (Regulation) Act may be needed
- If the card program provides a crypto-backed loan/credit component or is linked to a financial product, an AFSL is required (6-12 month application, AUD 50K-5M+ capital depending on scope)
- If the operator holds customer crypto assets (e.g., funds waiting to be off-ramped), an AFSL for custody is required under the Corporations Act and the 2025 Digital Assets Bill
- Crypto-to-fiat conversion at point of sale likely constitutes a designated service under AML/CTF Act, triggering AUSTRAC obligations; if structured as a remittance-like service, additional remittance registration may apply
- Partner-bank or BIN-sponsor arrangement needed — Australian crypto firms face severe debanking issues (Senate inquiry 2023); finding a sponsoring bank or Principal Member (e.g., Mastercard/Visa) may be operationally challenging
- Design & Distribution Obligations (DDO) under Corporations Act apply if the card is a financial product — requiring a target market determination (TMD)
Key Risks
- Severe debanking risk — Australian crypto firms face systematic bank account closures; Senate inquiry (2023) highlighted this as a major obstacle; securing BIN sponsorship or banking partner is difficult
- Regulatory reform in flux — Treasury token mapping (2023) and CASP-style authorization expected 2025-2026; the operating model may need to relicense under an incoming framework
- ASIC is aggressive on crypto derivative/lending products; if the card is structured with credit features or rewards linked to financial products, enforcement action is possible
- AUSTRAC enforcement is active — non-compliance fines up to AUD 210,000 for corporations plus potential criminal charges; Binance was fined as a landmark case
- Tax treatment — ATO treats crypto as property; crypto-to-fiat conversions (card top-ups or point-of-sale off-ramps) are CGT events, creating complex tax reporting obligations for both the operator and cardholders
- Competing regulatory characterizations — the card could be classified as a payment instrument, stored-value facility, or derivative product, each carrying different licensing pathways
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
AUSTRAC is the AML/CTF regulator; since 31 March 2026 it registers virtual asset service providers, replacing digital currency exchange registration (AML/CTF Amendment Act 2024, No. 110, Schedule 6).
ASIC regulates digital assets that are financial products under the Corporations Act and ASIC Act, including licensing, disclosure and design and distribution obligations; its guidance is INFO 225 (updated October 2025).
The Anti-Money Laundering and Counter-Terrorism Financing Act 2006 governs crypto AML/CTF; from 31 March 2026 its digital currency exchange registration was replaced by virtual asset service provider registration (AML/CTF Amendment Act 2024, No. 110, Schedule 6).
The Corporations Act 2001 governs digital assets that are financial products, requiring AFS licensing, product disclosure and design and distribution obligations (ASIC INFO 225); the Digital Assets Framework Act 2026 (No. 38) amends it to add digital asset platforms and tokenised custody platforms from April 2027.
Virtual asset service providers register with AUSTRAC from 31 March 2026 (AML/CTF Amendment Act 2024, No. 110) and need an AFS licence for financial products; the crypto reform is enacted as the Digital Assets Framework Act 2026 (No. 38), commencing in April 2027.
Providing custody of digital assets that are financial products currently requires an AFS licence covering custodial or depository services (RG 133, RG 166); the Digital Assets Framework Act 2026 (No. 38) adds tokenised custody platforms as a new financial product (s 761GD) from April 2027.
Exchanges register with AUSTRAC for AML/CTF (virtual asset service provider registration from 31 March 2026) and need an AFS licence for financial products; ASIC enforces design and distribution obligations, with Bit Trade (Kraken) ordered to pay $8 million in December 2024 for issuing a margin product without a target market determination.
Since 31 March 2026 exchanges must register with AUSTRAC as virtual asset service providers (AML/CTF Act s 76B, as amended by Act No. 110, 2024), replacing digital currency exchange registration; exchanges dealing in financial products also need an AFS licence, and the Digital Assets Framework Act 2026 (No. 38) adds digital asset platforms from April 2027.
Holding digital assets that are financial products for clients is a custodial or depository service requiring an AFS licence, while a self-custody or self-hosted wallet product is unlikely to be one (ASIC INFO 225); ASIC extended omnibus-account relief to such digital assets in December 2025.
Crypto payment services have no dedicated licence: ASIC considers certain stablecoins likely to be non-cash payment facilities, so providing financial services for them may need an AFS licence (INFO 225), and Treasury's October 2025 exposure draft proposes payment service provider licensing covering stablecoin issuers.
AFS licensees in the digital asset sector must meet ASIC's base-level financial requirements in Regulatory Guide 166, with tailored requirements by authorisation; custodial providers must also meet a net tangible assets requirement, at least 50% of it held in cash or cash equivalents (INFO 225).
From 31 March 2026 the AML/CTF Amendment Act 2024 (No. 110, 2024) replaced AML/CTF programs with 'AML/CTF policies' (s 26F) and requires every reporting entity, including virtual asset service providers, to designate an AML/CTF compliance officer (s 26J).
Local Presence: Must be a registered Australian company with an ABN; fit-and-proper directors/owners with clean backgrounds; robust governance, IT security, and risk controls.
AFS licensees offering digital asset products must also meet disclosure (PDS and FSG), design and distribution, internal and external dispute resolution and compensation requirements, and custodians must keep client assets separate from their own (ASIC INFO 225, RG 133).
AUSTRAC Registration: Submit online via AUSTRAC portal with business details, AML/CTF program, ownership structure, and compliance evidence. Approval typically 4-6 weeks if complete.
AFS licence applications, including for digital asset businesses, are lodged through ASIC's Regulatory Portal, where an application can be saved as a draft and resumed before lodgement.
Virtual asset service providers, which replaced digital currency exchange providers on 31 March 2026, must enrol with AUSTRAC as reporting entities (AML/CTF Act 2006 s 51B); registrable virtual asset services are virtual asset safekeeping, exchange, transfer, and services connected with the offer or sale of a virtual asset (s 5; s 6 table 1 items 29, 30, 46A, 50A-50C).
DCEs registered as reporting entities must transition to VASP registration by updating enrolment details between 31 March 2026 and 29 July 2026 to continue providing services. AUSTRAC QRG: Transitioning from DCE to VASP
VASPs must both enrol and register with AUSTRAC before providing virtual asset services; registration approval is required except under transitional rules for applications before 29 July 2026. AUSTRAC: Register as remittance or VASP
Under the AML/CTF Act 2006 as amended by Act No. 110 of 2024, reporting entities must undertake an ML/TF risk assessment and maintain AML/CTF policies (ss 26C, 26F), conduct initial, ongoing and enhanced customer due diligence (ss 28, 30, 32), report suspicious matters to AUSTRAC (s 41) and keep records (Part 10).
A service is a designated service under the AML/CTF Act 2006 only where it has a geographical link to Australia (s 100), and a person who commences to provide a designated service must apply to AUSTRAC for enrolment on the Reporting Entities Roll (s 51B).
Businesses must enrol with AUSTRAC before providing designated services; daily penalties may accrue after 28 days of operating without enrolment.
Providers of registrable remittance services and registrable virtual asset services must both enrol with AUSTRAC (AML/CTF Act 2006 s 51B) and be registered, on the Remittance Sector Register (s 74) or the Virtual Asset Service Provider Register (s 76A), as amended by Act No. 110 of 2024.
Digital currency exchange providers have had to register with AUSTRAC since 3 April 2018 (AML/CTF Amendment Act 2017, No. 130); since 31 March 2026 providers of registrable virtual asset services must be registered virtual asset service providers (AML/CTF Act 2006 s 76A, as amended by Act No. 110 of 2024), and ASIC licensing applies separately where a digital asset is a financial product (INFO 225).
Enrolment involves providing AUSTRAC with business information through the Australian Business Profile Form, including business structure, designated services offered, key personnel, and contact information
Registration is an additional requirement for higher-risk designated services (remittance and virtual asset services) and involves more detailed application and closer AUSTRAC scrutiny
Providing a registrable virtual asset service without AUSTRAC registration is a strict-liability offence punishable by 2 years imprisonment or 500 penalty units, rising to 7 years or 2,000 penalty units for repeat conduct (AML/CTF Act 2006 s 76A); failing to enrol is a civil penalty contravention for each day (s 51B).
ASIC-obtained court penalties against crypto firms include $14 million against BPS Financial over its Qoin Wallet (Federal Court, ASIC 26-008MR, 27 January 2026) and $8 million against Kraken operator Bit Trade for design-and-distribution breaches (ASIC 24-274MR, 12 December 2024).
AUSTRAC's actions affected the most entities, signaling broad sector crackdown.
Evidence fact au.tax not found (may have been renamed).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a crypto-funded debit card can operate in Australia only with AUSTRAC DCE/VASP registration (mandatory as a baseline) and likely an AFSL from ASIC if the card involves custody, stored-value, or financial product features; the operator must be an Australian-incorporated entity with significant AML/CTF obligations, and faces acute debanking risks when seeking BIN sponsorship or banking partners.
Questions this verdict aims to answer
- What e-money / payment-institution license is required?
- How is the crypto-to-fiat conversion regulated?
- What KYC and AML obligations apply to cardholders?
- What partner-bank or BIN-sponsor arrangements are required?