Self-custodial wallet / non-custodial software in Australia
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Australia without local incorporation, subject to AML obligations and low licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- Low
- Last updated
- 2026-07-13
AML Obligations
- No AML obligations attach to the publisher of non-custodial software, because the publisher never holds, controls, or has access to user funds (i.e., does not provide a 'designated service' under the AML/CTF Act 2006).
- If the software publisher also provides an ancillary service that involves custody, exchange, or remittance of digital currency, then AUSTRAC registration as a DCE/VASP would be required, with mandatory AML/CTF program including KYC, transaction monitoring, SAR reporting, record-keeping, and a designated compliance officer.
Key Restrictions
- The publisher must not engage in any activity that constitutes providing a 'designated service' under the AML/CTF Act — i.e., cannot handle, store, transfer, or exchange digital currency on behalf of users.
- If the software monetizes via integrated swap/on-ramp/off-ramp features where the publisher facilitates transactions (not just links to third parties), this may trigger DCE/VASP classification.
- ASIC may consider certain wallet features (e.g., staking, swaps with order-book matching) as financial product advice or dealing, triggering AFSL requirements.
Key Risks
- Regulatory ambiguity: ASIC may reclassify non-custodial wallet features (e.g., in-wallet swaps, staking) as financial services, creating unexpected AFSL exposure.
- Enforcement risk: AUSTRAC or ASIC may take a broad view of what constitutes a 'designated service' or 'financial product' — a conservative compliance posture is advisable.
- No specific safe harbor or exemption for non-custodial software publishers exists in Australian law.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
AUSTRAC is the AML/CTF regulator; since 31 March 2026 it registers virtual asset service providers, replacing digital currency exchange registration (AML/CTF Amendment Act 2024, No. 110, Schedule 6).
ASIC regulates digital assets that are financial products under the Corporations Act and ASIC Act, including licensing, disclosure and design and distribution obligations; its guidance is INFO 225 (updated October 2025).
The Anti-Money Laundering and Counter-Terrorism Financing Act 2006 governs crypto AML/CTF; from 31 March 2026 its digital currency exchange registration was replaced by virtual asset service provider registration (AML/CTF Amendment Act 2024, No. 110, Schedule 6).
The Corporations Act 2001 governs digital assets that are financial products, requiring AFS licensing, product disclosure and design and distribution obligations (ASIC INFO 225); the Digital Assets Framework Act 2026 (No. 38) amends it to add digital asset platforms and tokenised custody platforms from April 2027.
Virtual asset service providers register with AUSTRAC from 31 March 2026 (AML/CTF Amendment Act 2024, No. 110) and need an AFS licence for financial products; the crypto reform is enacted as the Digital Assets Framework Act 2026 (No. 38), commencing in April 2027.
AUSTRAC administers the Anti-Money Laundering and Counter-Terrorism Financing Act 2006; since 31 March 2026 its regime covers virtual asset service providers, which must be registered on the Virtual Asset Service Provider Register (s 76B, inserted by Act No. 110, 2024).
Every reporting entity, including virtual asset service providers from 31 March 2026, must be entered on AUSTRAC's Reporting Entities Roll (AML/CTF Act s 51A as amended by Act No. 110, 2024).
Virtual asset service providers must both enrol on the Reporting Entities Roll (AML/CTF Act s 51A) and be registered on the Virtual Asset Service Provider Register (s 76B) under the AML/CTF Act as amended by Act No. 110, 2024 from 31 March 2026.
AUSTRAC AML/CTF Registration: https://www.austrac.gov.au/businesses/obligations/digital-currency-exchange-providers
Virtual asset service providers, which replaced digital currency exchange providers on 31 March 2026, must enrol with AUSTRAC as reporting entities (AML/CTF Act 2006 s 51B); registrable virtual asset services are virtual asset safekeeping, exchange, transfer, and services connected with the offer or sale of a virtual asset (s 5; s 6 table 1 items 29, 30, 46A, 50A-50C).
A service is a designated service under the AML/CTF Act 2006 only where it has a geographical link to Australia (s 100), and a person who commences to provide a designated service must apply to AUSTRAC for enrolment on the Reporting Entities Roll (s 51B).
Under the AML/CTF Act 2006 as amended by Act No. 110 of 2024, reporting entities must undertake an ML/TF risk assessment and maintain AML/CTF policies (ss 26C, 26F), conduct initial, ongoing and enhanced customer due diligence (ss 28, 30, 32), report suspicious matters to AUSTRAC (s 41) and keep records (Part 10).
Providing a registrable virtual asset service without AUSTRAC registration is a strict-liability offence punishable by 2 years imprisonment or 500 penalty units, rising to 7 years or 2,000 penalty units for repeat conduct (AML/CTF Act 2006 s 76A); failing to enrol is a civil penalty contravention for each day (s 51B).
ASIC Info Sheet 225 (Digital Assets): https://asic.gov.au/regulatory-resources/digital-transformation/digital-assets-financial-products-and-services/
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a publisher of non-custodial wallet software who never holds, controls, or accesses user funds generally does not trigger AUSTRAC registration or AFSL requirements, but certain integrated financial features (swaps, staking, order matching) could reclassify the operator under AML/CTF or ASIC financial-services law, creating registration or licensing obligations.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?