MSB Licence in Australia: AUSTRAC Remittance and VASP Registration (2026)

MSB Licence in Australia

A business that transmits money or deals in virtual assets in Australia registers with AUSTRAC, the country's anti-money-laundering and financial intelligence regulator, as a remittance service provider or a virtual asset service provider. Money remitters register on the Remittance Sector Register, and, following the 2026 reforms, crypto businesses register under the new virtual asset service provider framework that has replaced the former digital currency exchange regime. Registration is national, has no licensing fee or minimum capital requirement, and is granted where AUSTRAC is satisfied the business can manage its money-laundering and terrorism-financing risks. The 2026 reforms have significantly expanded and tightened these obligations, so any business entering this space needs to understand the current position rather than the pre-reform one.

This guide explains what registration Australia actually requires, the impact of the 2026 AML/CTF reforms, the process and timeline, and the ongoing obligations. It is written for money remitters, crypto businesses and international operators considering the Australian market.

The Australian equivalent of an MSB licence

In Australia, the regulator is AUSTRAC, established under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006. A business that provides remittance services, meaning it accepts instructions to transfer money or property to a recipient, must be registered on the Remittance Sector Register before it provides those services. It is an offence to provide remittance services in Australia without being registered. Remittance providers register in one of three capacities: as a remittance network provider, whose affiliates use its systems; as a remittance affiliate of such a network; or as an independent remittance dealer using its own systems. Registration confirms that the business has met AUSTRAC's requirements; AUSTRAC can refuse, suspend, cancel or impose conditions on a registration where it identifies an unacceptable risk.

The 2026 AML/CTF reforms

Australia is implementing the most significant overhaul of its AML/CTF framework since 2006, through amendments that take effect across 2026, commonly described as the Tranche 2 reforms. Two changes matter most for money and crypto businesses. First, the long-standing "digital currency exchange" designation has been replaced by the internationally recognised "virtual asset service provider" terminology, and the scope has been broadened well beyond simple fiat-to-crypto exchange to capture crypto-to-crypto exchange, custody and safekeeping, virtual asset transfers, and arranging such services. Second, expanded AML/CTF obligations, including customer due diligence, program, reporting and travel-rule requirements, apply to these services from 1 July 2026. Existing digital currency exchange providers are automatically registered as virtual asset service providers from 31 March 2026 and do not need to re-register, but they must update their details and meet the new obligations.

The reforms also restructure value-transfer reporting, replacing the previous international funds transfer instruction framework with a broader transfer-of-value concept, and AUSTRAC has stepped up its supervision of the sector in parallel.

Key dates under the reforms

The reform timetable is compressed, and the dates matter.

Date	What happens
31 March 2026	Transitional rules commence; digital currency exchanges automatically become registered VASPs; the new virtual asset service definitions take effect
30 May 2026	Deadline for entities enrolled on 30 March 2026 to notify AUSTRAC of their AML/CTF compliance officer
1 July 2026	Expanded AML/CTF obligations, including customer due diligence, program, reporting and the travel rule, commence for new virtual asset services
29 July 2026	Final enrolment and registration deadline for newly regulated entities; applying before this date allows continued operation under transitional arrangements while AUSTRAC decides

The registration process and timeline

Registration involves both enrolment and a registration application. A business enrols with AUSTRAC and then applies for registration, providing information about the business and, importantly, evidence that it can effectively manage and mitigate its money-laundering, terrorism-financing and proliferation-financing risks. This is a governance exercise, not merely an online form: AUSTRAC's questions may cover beneficial owners, key personnel, operational capability, countries of operation and risk management. A business generally cannot start providing remittance or virtual asset services before AUSTRAC has approved its registration, although transitional arrangements allow certain newly regulated virtual asset providers who apply before 29 July 2026 to continue operating while AUSTRAC decides. AUSTRAC may take up to 90 days to assess an application, and the period can reset if it requests further information, so businesses should apply well before their intended launch.

Ongoing obligations

Registration is the gateway to a continuing set of obligations. A registered business must maintain an AML/CTF program with a compliance officer, a business-specific risk assessment, customer due diligence and ongoing monitoring, transaction monitoring, suspicious matter reporting, threshold transaction reporting and the relevant value-transfer reporting, and record-keeping. For virtual asset service providers, the travel rule from 1 July 2026 requires payer and payee information to accompany certain virtual asset transfers, which demands genuine operational capability around data collection, wallet screening, secure transmission and exception handling, not merely a policy document. AUSTRAC has made clear, through its supervisory activity, that it expects businesses to move promptly to meet the reformed obligations. Separately, the ASIC Digital Assets Framework, which regulates digital asset platforms under financial services law, is due to commence in 2027 on a different track, so crypto businesses should track both regimes.

How Buckingham Capital Consulting can help

Buckingham Capital Consulting advises money remittance and virtual asset businesses on AUSTRAC registration and on the 2026 AML/CTF reforms. We help businesses determine whether they provide a registrable remittance or virtual asset service, prepare the enrolment and registration, and build the AML/CTF program, risk assessment and compliance-officer arrangements that AUSTRAC requires. For crypto businesses, we address the transition from the digital currency exchange framework to the virtual asset service provider framework and the new obligations, including the travel rule, that apply from 1 July 2026. Because the reforms have tightened the regime considerably, getting the registration and compliance framework right the first time is more important than ever.

If you are considering the Australian market, or need to align with the reformed obligations, contact our team for an initial assessment.

Email: info@buckinghamcapitalconsulting.co.uk.

Frequently asked questions

Does Australia have an MSB licence?

Australia does not use the term "MSB licence." The equivalent is registration with AUSTRAC, the country's AML/CTF regulator. A business that transmits money registers as a remittance service provider on the Remittance Sector Register, and a business that deals in virtual assets registers as a virtual asset service provider under the framework that, following the 2026 reforms, has replaced the former digital currency exchange regime. Registration is mandatory before providing the relevant services, is national in coverage, and carries no licensing fee or minimum capital requirement. AUSTRAC grants registration where it is satisfied the business can manage its money-laundering and terrorism-financing risks, and it can refuse, suspend, cancel or impose conditions on a registration. Businesses searching for an "Australia MSB licence" are, in practice, looking for AUSTRAC remittance or virtual asset registration.

What changed for crypto businesses in Australia in 2026?

The 2026 reforms replaced the "digital currency exchange" designation with the internationally recognised "virtual asset service provider" terminology and significantly broadened the scope of regulated activity. Beyond simple fiat-to-crypto exchange, the framework now captures crypto-to-crypto exchange, custody and safekeeping, virtual asset transfers, and arranging such services. Existing digital currency exchange providers are automatically registered as virtual asset service providers from 31 March 2026 and do not need to re-register, but they must update their registration details and meet the expanded obligations. New AML/CTF obligations, including customer due diligence, an AML/CTF program, reporting and the travel rule, apply to these services from 1 July 2026. AUSTRAC has also stepped up supervision, so crypto businesses need to ensure their registration is current and their compliance program genuinely meets the reformed standard.

How long does AUSTRAC registration take?

AUSTRAC may take up to 90 days to assess a registration application, and that period can reset if AUSTRAC requests further information during the assessment. A business generally cannot start providing remittance or virtual asset services until AUSTRAC has approved its registration. There is an important exception under the 2026 transitional rules: certain newly regulated virtual asset providers who apply for registration before 29 July 2026 may continue providing the new virtual asset services while AUSTRAC makes its decision. Because the assessment is genuinely a governance review rather than a formality, and because it can be extended by requests for further information, businesses should prepare a complete application and submit it well before their intended launch date to avoid operational disruption.

What is the travel rule in Australia?

The travel rule is an obligation, applying to virtual asset service providers from 1 July 2026, that requires certain information about the payer and the payee to accompany transfers of virtual assets. In practice this means a virtual asset service provider must collect and verify the required originator and beneficiary information, transmit it securely with the transfer, and handle situations where information is missing, including transfers involving self-hosted wallets. Meeting the travel rule requires real operational capability, covering customer data collection, wallet due diligence, secure transmission, record-keeping, exception handling and staff training, rather than a policy statement alone. Because building this capability takes time, virtual asset businesses should not wait until the July 2026 commencement date to begin designing their travel-rule compliance, and should factor it into onboarding and transfer workflows well in advance.

Is AUSTRAC registration a licence?

No. AUSTRAC registration is a registration under the AML/CTF regime, not a prudential licence, and it does not indicate that AUSTRAC endorses or approves the business. It confirms that the business has satisfied AUSTRAC's requirements to be registered and has entered a supervised compliance framework, and AUSTRAC retains the power to refuse, suspend, cancel or impose conditions on a registration where it identifies an unacceptable money-laundering or terrorism-financing risk. Separately from AUSTRAC's AML/CTF regime, the ASIC Digital Assets Framework will regulate digital asset platforms under financial services law from 2027, on a different track, so crypto businesses in particular may need to consider both AUSTRAC registration and, in due course, ASIC's regime. The emphasis in Australia, as with FINTRAC in Canada, is heavily on the ongoing AML/CTF compliance program.