← Regulations / Australia / Operating Models / Self-custodial wallet

Self-custodial wallet / non-custodial software in Australia

Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.

Conditional AI-Generated · Unreviewed

Self-custodial wallet is conditionally permitted in Australia without local incorporation, subject to AML obligations and low licensing burden.

Verdict Details

Permitted
conditional
Local entity required
No
Licensing burden
Low
Last updated
2026-07-13

AML Obligations

  • No AML obligations attach to the publisher of non-custodial software, because the publisher never holds, controls, or has access to user funds (i.e., does not provide a 'designated service' under the AML/CTF Act 2006).
  • If the software publisher also provides an ancillary service that involves custody, exchange, or remittance of digital currency, then AUSTRAC registration as a DCE/VASP would be required, with mandatory AML/CTF program including KYC, transaction monitoring, SAR reporting, record-keeping, and a designated compliance officer.

Key Restrictions

  • The publisher must not engage in any activity that constitutes providing a 'designated service' under the AML/CTF Act — i.e., cannot handle, store, transfer, or exchange digital currency on behalf of users.
  • If the software monetizes via integrated swap/on-ramp/off-ramp features where the publisher facilitates transactions (not just links to third parties), this may trigger DCE/VASP classification.
  • ASIC may consider certain wallet features (e.g., staking, swaps with order-book matching) as financial product advice or dealing, triggering AFSL requirements.

Key Risks

  • Regulatory ambiguity: ASIC may reclassify non-custodial wallet features (e.g., in-wallet swaps, staking) as financial services, creating unexpected AFSL exposure.
  • Enforcement risk: AUSTRAC or ASIC may take a broad view of what constitutes a 'designated service' or 'financial product' — a conservative compliance posture is advisable.
  • No specific safe harbor or exemption for non-custodial software publishers exists in Australian law.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 80% confidence

AUSTRAC — AML/CTF, DCE registration

[primary] AUSTRAC
licensing 80% confidence

ASIC — Securities, derivatives, financial products, design & distribution obligations

[primary] ASIC
licensing 20% confidence

Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (2006) — AML/CTF, DCE registration

licensing 20% confidence

Corporations Act 2001 (2001) — Financial products regulation (AFSL), design & distribution obligations

licensing 20% confidence

VASP: DCE registration with AUSTRAC (1-3 months, no minimum capital). AFSL required if offering financial products (6-12 months, AUD 50K-5M+). Comprehensive reform proposed — Treasury 'token mapping' (2023), CASP-style authorization expected 2025-2026.

licensing 20% confidence

AUSTRAC (Australian Transaction Reports and Analysis Centre) is the primary regulator responsible for administering Australia's anti-money laundering and counter-terrorism financing regime

licensing 20% confidence

Reporting entities must enrol with AUSTRAC if they provide a designated service with a geographical link to Australia

licensing 20% confidence

Remittance service providers and virtual asset service providers must both enrol and register with AUSTRAC

licensing 100% confidence

AUSTRAC AML/CTF Registration: https://www.austrac.gov.au/businesses/obligations/digital-currency-exchange-providers

[primary] austrac.gov.au — Digital Currency Exchange Providers [primary] asic.gov.au — Do You Need An Afs Licence [primary] treasury.gov.au — C2022 259046
aml 90% confidence

Digital currency exchanges (DCEs) and virtual asset service providers (VASPs) must enrol with AUSTRAC as reporting entities providing designated services under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006. AUSTRAC QRG: Transitioning from DCE to VASPAUSTRAC: Register as remittance or VASP

[secondary] AUSTRAC QRG: Transitioning from DCE to VASP [secondary] AUSTRAC: Register as remittance or VASP [secondary] AUSTRAC QRG: Transitioning from DCE to VASP
aml 90% confidence

If you provide a designated service with a geographical link to Australia, you must enrol with AUSTRAC AUSTRAC.

[secondary] AUSTRAC [secondary] AUSTRAC [secondary] AUSTRAC
aml 20% confidence

Reporting entities must develop and maintain an AML/CTF program tailored to their business, conduct customer due diligence, report suspicious transactions, and maintain required records

enforcement 20% confidence

Non-compliance penalties are severe: failing to enrol or register can result in fines up to AUD 210,000 for corporations and potential criminal charges, including imprisonment

licensing 100% confidence

ASIC Info Sheet 225 (Digital Assets): https://asic.gov.au/regulatory-resources/digital-transformation/digital-assets-financial-products-and-services/

[primary] austrac.gov.au — Digital Currency Exchange Providers [primary] asic.gov.au — Do You Need An Afs Licence [primary] treasury.gov.au — C2022 259046

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a publisher of non-custodial wallet software who never holds, controls, or accesses user funds generally does not trigger AUSTRAC registration or AFSL requirements, but certain integrated financial features (swaps, staking, order matching) could reclassify the operator under AML/CTF or ASIC financial-services law, creating registration or licensing obligations.

Questions this verdict aims to answer

  • Does software publishing trigger VASP / MSB classification?
  • Do AML obligations attach when no custody exists?
  • What disclosure or consumer-protection rules apply?