On 1 April 2026, the Corporations Amendment (Digital Assets Framework) Bill cleared both houses of the Australian Parliament, creating the country’s first comprehensive regulatory framework for digital asset platforms. The legislation gives custodial digital asset operators a 12-month window to commence compliance and 18 months to be fully operational under the new regime. For institutional participants and serious private investors operating through Australian entities, the compliance clock is now running.

What the Bill Creates

The Digital Assets Framework creates two new regulated categories under the Corporations Act 2001:

Digital asset platforms are entities that hold digital assets on behalf of users — exchanges, custodians, and similar intermediaries whose business involves taking possession of client assets. Under the new framework, operators in this category must obtain an Australian Financial Services Licence from ASIC, subjecting them to the same core obligations as licensed brokers and fund managers.

Tokenised custody platforms are entities that hold real-world assets and issue corresponding digital tokens — the infrastructure underlying the tokenisation of securities, real estate, commodities, and other traditional asset classes. These operators also require an AFSL and face specific requirements around asset safeguarding, redemption mechanisms, and disclosure.

Stablecoins are explicitly excluded from the tokenised custody category and routed into payments regulation under separate legislation. Non-custodial infrastructure — self-hosted wallets, automated market makers, non-custodial bridges — falls outside the new categories where the operator does not take possession of client assets.

What AFSL Licensing Requires

Bringing digital asset platforms within the AFSL regime is a significant step. AFSL obligations are not trivial. Licensed entities must:

• Safeguard client assets — maintaining adequate systems to protect client digital assets from loss, theft, or misuse, including requirements for segregation of client assets from the licensee’s own holdings.
• Provide standardised disclosure — giving clients clear, accurate information about the nature of the service, risks, fees, and custody arrangements.
• Avoid misleading conduct — the full force of the Corporations Act’s financial services misconduct provisions applies, including personal liability for directors and officers.
• Maintain dispute resolution — membership of an approved external dispute resolution scheme and adequate internal complaint handling procedures.
• Meet capital adequacy requirements — demonstrating sufficient financial resources to meet obligations to clients, including in adverse market conditions.

ASIC is the primary supervisor. Enforcement under the AFSL regime can include licence suspension, civil penalties, and criminal prosecution for serious contraventions. The offshore exemption that many digital asset platforms have historically relied upon — arguing they are not subject to Australian law because their operations are based overseas — is substantially narrowed under the new framework.

The Low-Risk Exemption

The legislation includes a carve-out for platforms holding less than A$5,000 per customer and facilitating less than A$10 million in annual transactions. This exemption is designed to reduce compliance burden for early-stage and low-volume operators without meaningful systemic risk. For any platform holding assets for clients of meaningful size, the exemption is irrelevant.

What This Means for Institutional and UHNW Participants

The regulatory change has several direct implications for institutional investors and high-net-worth individuals operating in the Australian market:

Due diligence on custody providers is now a regulatory obligation, not just good practice. Any Australian entity maintaining digital assets through a third-party custodian should verify that custodian’s AFSL status within the new framework’s compliance window. Maintaining client assets with an unlicensed custodian after the regime commences creates regulatory and fiduciary exposure for the client entity.

The compliance timeline is tighter than it appears. Eighteen months from Royal Assent sounds generous until you consider the time required for custody infrastructure review, AFSL application processing (typically three to six months under the best circumstances), and the operational changes required to meet asset safeguarding and disclosure obligations. Institutions that begin this process now are appropriately positioned. Those that wait until the deadline approaches will find ASIC’s processing capacity constrained and their options limited.

Cross-border arrangements require careful structuring. Australian institutional clients operating through offshore digital asset platforms face complex questions about whether those platforms are subject to Australian jurisdiction and, if so, whether they will seek AFSL licensing. The structuring of offshore custodial arrangements for Australian beneficial owners should be reviewed in light of the new framework.

The tokenisation opportunity is now regulated, not suppressed. For institutions exploring the tokenisation of real-world assets — with the total tokenised RWA market now exceeding $26 billion globally and projected to reach $18.9 trillion by 2033 — Australia’s regulatory clarity creates a defined pathway for compliant tokenisation activity. The framework supports innovation rather than prohibiting it, and institutions with the governance infrastructure to operate within it have a significant first-mover advantage.

ASIC’s Supervisory Posture

ASIC published updated guidance supporting digital asset innovation alongside the legislation, signalling a supervisory posture that is engaged and constructive rather than reflexively restrictive. The regulator has indicated its primary concern is consumer protection and market integrity — the same concerns that motivate financial services regulation generally — rather than the suppression of digital asset activity per se.

Institutions that approach ASIC proactively, with well-documented custody arrangements and governance frameworks, are likely to find the licensing process workable. Those that resist engagement or attempt to structure around the framework are likely to find the regulator’s patience limited.

Australia has, with this legislation, joined a growing number of jurisdictions — including the UAE, Singapore, and the European Union through MiCA — that have chosen to regulate digital assets within existing financial services frameworks rather than create sui generis regimes. The consistency of approach across major jurisdictions is itself significant: it creates a clearer map for cross-border institutional arrangements and reduces the regulatory arbitrage that characterised the sector’s earlier years.

The window to get ahead of this is open. It will not remain so indefinitely.