Stay connected with KayaToday, follow us on Instagram and Facebook for the latest news and reviews delivered straight to you.
Regulatory patience has limits, and Australia’s financial watchdog has just made that unmistakably clear. The Australian Securities and Investments Commission, known as ASIC, has put crypto businesses on notice: obtain the correct financial services license before September 30, or risk civil and criminal penalties including fines of up to 10% of annual turnover.
The warning, issued on Wednesday, targets companies that have been operating under ASIC’s so-called no-action position, a form of temporary enforcement relief that shielded unlicensed digital asset businesses from immediate regulatory action while the broader framework was being developed. That grace period is now closing fast.
What the Deadline Actually Requires
The obligations vary by business type, but the core message is consistent. Firms that require an Australian Financial Services licence must submit a new application or seek an amendment to an existing one before the September 30 cutoff. Companies needing market licences or clearing and settlement licences face an additional step: they must formally notify ASIC and complete a pre-application meeting before the deadline, not merely submit paperwork.
From October 1, any business that requires authorisation but has failed to meet the conditions of the no-action position could be found in breach of Australian financial services law. ASIC has been explicit that both civil and criminal penalties are on the table, with fines reaching 10% of annual turnover representing a potentially existential cost for smaller operators.
The regulator noted it has recorded more than 45 digital asset-related licence applications since it updated its guidance in October 2025. That figure reflects some momentum, though the jump from roughly 30 applications in late June to more than 45 now suggests a meaningful portion of the industry is still moving slowly. On June 25, ASIC extended the original June 30 deadline to September 30 and broadened the relief to cover crypto businesses operating as authorised representatives of licensed firms or through certain intermediary arrangements. That extension bought the industry three additional months, and ASIC appears unwilling to offer another.
A Transitional Measure, Not the Final Word
It is worth being precise about what this deadline does and does not represent. The September 30 licensing requirement is a transitional enforcement measure, separate from Australia’s forthcoming Digital Asset Framework, which takes effect on April 9, 2027. That broader framework will establish a more comprehensive regulatory architecture for the sector. The current deadline is about bringing existing businesses into compliance with financial services laws that, in ASIC’s view, already apply to many crypto operations regardless of whether the industry has historically treated them that way.
This distinction matters because it means the compliance burden is not a one-time event. Firms that secure licences now will still need to navigate the 2027 framework when it arrives. The September deadline is a floor, not a ceiling.
The pressure is also not entirely new. In a related enforcement action, Australia recently ordered Cryptolink Bitcoin ATMs offline over what ASIC described as basic reporting failures, a signal that the regulator is willing to act against specific operators rather than simply issue broad warnings.
Why This Matters Beyond Australia
For investors and businesses in Malaysia and Singapore watching from across the region, Australia’s approach offers a useful reference point. Both the Securities Commission Malaysia and the Monetary Authority of Singapore have pursued their own licensing frameworks for digital asset service providers, and the pattern is broadly similar: an initial period of relative tolerance while rules are developed, followed by firm enforcement once guidance is in place.
Australia’s experience illustrates the risk of treating regulatory relief as a permanent operating condition rather than a temporary accommodation. Businesses that delayed engaging with ASIC’s process now face a compressed timeline with serious financial consequences attached. The 10% of turnover penalty figure is not a token fine designed to be absorbed and forgotten. For a mid-sized exchange or asset manager, it could represent a sum large enough to threaten the business entirely.
The broader lesson is structural. As crypto markets mature and regulators in major economies move from guidance to enforcement, the cost of non-compliance is rising sharply. Australia’s September 30 deadline is a concrete example of that shift, and the firms that have already submitted applications are likely to find themselves in a significantly stronger position than those still weighing their options as the clock runs down.
Read More: Thailand’s Crypto Travel Rule Closes In on Self-Custodial Wallets
