Australia’s financial regulators have moved from rulemaking to active enforcement as a cluster of anti money laundering and digital asset licensing deadlines reached in recent months prompt compliance action across the industry. Since early October, the Australian Transaction Reports and Analysis Centre, known as AUSTRAC, and the Australian Securities and Investments Commission have signaled that firms that have not completed mandatory enrolment, licensing applications or baseline AML work face fines, infringement notices and potential civil or criminal exposure. The stepped up activity targets both long established digital asset platforms as well as a wider set of professional services and intermediaries that were brought into Australia’s AML and licensing nets during the 2025 and 2026 reform packages. H2: What changed and why regulators say enforcement is necessary Over the last 18 months Canberra has overhauled how cryptocurrencies and related services are regulated. Lawmakers expanded the reach of the AML and counter terrorism financing framework to cover a broader range of designated services, and they introduced a licensing regime for certain digital asset businesses under Australia’s financial services laws. Many of those reforms began to take practical effect on and after July 1, 2026, with key application and compliance windows closing through September and into October. Regulators and policy makers say the reforms were designed to bring digital asset markets into parity with traditional financial services, reduce avenues for illicit finance, and provide clearer protections for retail and institutional users. Now that the technical and administrative deadlines have passed, authorities have warned that compliance cannot be indefinitely postponed. H2: AUSTRAC starts issuing notices, targeting non enrolled service providers AUSTRAC has launched a program of engagement and enforcement aimed at entities that appear to be providing designated services without enrolling as reporting entities. In the weeks after the July commencement dates, AUSTRAC focused on education and outreach, but the agency has increasingly turned to formal notices where registration has not occurred and where remedial steps have not been demonstrated. The enforcement letters and infringement notices that have gone out do not single out crypto platforms alone. AUSTRAC is applying its powers across sectors that were newly captured by the updated AML rules, including real estate, accounting and trust services where onboarding, transfer and custody arrangements may overlap with digital asset flows. For regulated crypto intermediaries, the risk is twofold: failure to enrol or to meet minimum AML program requirements exposes firms to fines and can also undermine the credibility of licence applications that are under concurrent review by ASIC. H2: ASIC’s licensing deadline raises the compliance bar for digital asset firms Separately, ASIC’s approach to authorising businesses that carry on certain digital asset services has tightened. Following a period in which ASIC provided transitional and no action arrangements for firms preparing licensing applications, the regulator signaled that from 1 October 2026 the tolerance period for operating without appropriate authorisation has ended for many businesses. That shift matters because the licensing regime imposes higher governance, custody and disclosure standards than what many crypto firms historically applied. ASIC and industry advisers say that businesses offering custody, trading or intermediary services must demonstrate operational resilience, clear segregation of client assets, and robust risk management frameworks if they are to be licensed. Firms that relied solely on AUSTRAC registration in order to operate may find that they also require an ASIC licence depending on the services they perform and the structure of their customer arrangements. H2: Industry response and the compliance gap Industry groups and advisory firms report a substantial compliance gap, particularly among smaller operators and new entrants. Surveys conducted by compliance vendors and legal advisers indicate that a significant minority of businesses captured by the new rules have not completed foundational AML tasks such as formal risk assessments and documented transaction monitoring programs. That gap has practical consequences for licence assessors and for customers who expect regulated custody and clearer dispute resolution pathways. Some firms have rushed to lodge licence applications and to shore up AML controls since the deadlines closed, but submissions and remediation plans take time to review. Regulators have signaled they will apply graduated enforcement, using education where firms move quickly to comply and taking formal action where breaches persist or where systemic risk is identified. H2: Why this matters for users and the broader market The immediate consequence for Australian consumers is that some smaller platforms or intermediaries may change product offerings, restrict certain services or suspend onboarding while they seek regulatory approvals. For institutional players and global exchanges that serve Australian customers, the combined AUSTRAC and ASIC focus raises the bar for governance and may accelerate consolidation in the market toward providers that can meet enhanced compliance burdens. From a broader policy perspective, Australia’s shift from consultation and phased implementation to active enforcement signals an international turning point. Jurisdictions that were permissive about crypto activity are now caught between the technical challenge of supervising new market infrastructure and the political demand to limit criminal exploitation. Australia is among the earlier advanced economies to reach an enforcement phase where AML registration and financial services licensing must be demonstrably in place or enforcement consequences follow. H2: What firms should do now Regulated entities and businesses that handle, custody or transfer crypto assets should urgently confirm whether they meet AUSTRAC enrolment obligations and whether their business model also requires an ASIC licence. Businesses should complete or update a formal AML risk assessment, implement transaction monitoring proportionate to risks, maintain records of customer due diligence, and if required, pursue an ASIC authorisation or variation. Firms that have already applied to ASIC should maintain clear evidence of progress and remediation steps to present to regulators if questioned. H2: Looking ahead As the enforcement window widens, market participants can expect regulators to continue using a mixture of guidance, targeted supervision and enforcement notices to bring non compliant entities into line. For companies that invest in compliance, the immediate cost is likely to be offset over time by clearer legal status and improved access to banking and institutional counterparties. For the broader market, the net effect will be a higher threshold for trust and participation, reshaping how crypto services are offered in Australia. Regulatory scrutiny is now a defining feature of the Australian crypto landscape, and firms that treat compliance as an afterthought will face increasingly tangible consequences.