ASIC’s 30 September 2026 date is a transition deadline — not a universal crypto-licensing rule

ASIC’s 30 September 2026 date is aimed at firms within the regulator’s digital‑asset licensing framework — not every advice practice whose clients hold cryptocurrency.

ASIC’s final call for firms to act concerns providers operating within the relevant transitional arrangements. The notice does not create a universal requirement for every firm that discusses, refers to or has exposure to digital assets to obtain an Australian financial services licence.

That distinction is important for advice businesses. The licensing outcome depends on the nature of the digital asset, whether it is a financial product or involves a regulated digital asset facility, and what the firm or individual is actually doing.

Start with the regulatory perimeter

The first question is not whether clients own digital assets. It is whether the practice is providing a regulated financial service in relation to an asset or facility that falls within the relevant regime.

Personal advice about a financial product, dealing, arranging or operating a facility can raise different licensing questions. General information or financial education will not automatically have the same consequence. Nor will a referral necessarily amount to arranging or dealing; the answer depends on how the referral is structured and what role the practice plays.

Similarly, portfolio construction, implementation, platform access and custody arrangements should not be treated as interchangeable categories. A practice needs to identify the particular asset, service and conduct involved before deciding whether an authorisation or other regulatory step is required.

The practical implication is that “digital assets” should not be used as a single category in the firm’s compliance framework. An activity register should distinguish, at a minimum:

• the asset or facility involved;
• whether the asset or facility is treated as a financial product or otherwise falls within the relevant regime;
• whether the firm provides personal advice, general advice, dealing, arranging, custody or another service;
• the role of each adviser, authorised representative and external provider;
• the basis on which the firm believes the activity is permitted.

That review should test actual conduct, not just policy wording. Relevant material may include advice records, strategy papers, client correspondence, referral arrangements and implementation instructions. Their inclusion in a review does not mean that any one document or activity automatically requires an AFSL authorisation; they are evidence of what the practice is doing.

What the 30 September date means

ASIC’s notice should be read as a call to affected firms to act before the relevant transitional arrangements expire. It is not a direction that every firm with digital‑asset clients must secure a new licence by that date.

For a provider relying on the transition, the task is to establish what the transition covers, whether the provider is eligible to rely on it, and what must be done to continue the relevant activity after 30 September 2026. That may involve seeking the necessary authorisation, changing the operating model or stopping the activity. The correct outcome will depend on the provider’s circumstances and the applicable rules.

An existing licensee should not assume that its current authorisations cover a new digital‑asset service. Nor should it assume that a licence‑change process is required merely because a client has digital‑asset exposure. The firm should map the proposed activity against its existing licence, authorisations and representative arrangements, and obtain specialist legal or compliance advice where the position is unclear.

ASIC’s general information on applying for and managing an AFSL and on financial advisers and authorised representatives provides the broader licensing context. Those pages do not, by themselves, determine whether a particular digital‑asset activity is authorised.

Three defensible business responses

Once the perimeter has been established, senior management should make an explicit decision:

• 1️⃣ **Continue within the regime.** Confirm the authorisation required, the people responsible for the service and the controls needed to operate it.
• 2️⃣ **Change the service.** Remove or redesign activities that create the licensing issue, but document the revised boundaries and train affected staff.
• 3️⃣ **Exit the activity.** Stop providing the relevant service and assess the effect on existing clients, referrals and implementation arrangements.

These are business and compliance options, not a conclusion that every practice must choose one of them. A firm outside the relevant regime may not need to take any licensing step simply because it provides general information or services to clients with digital‑asset holdings.

The risk is an undocumented middle position: advisers continue discussing a particular asset, directing clients to a provider or helping implement a strategy, while the business has never established whether that conduct is advice, dealing, arranging, custody or another regulated service.

Treat existing clients as a conduct question

A decision to restrict or discontinue a digital‑asset service should prompt a client‑impact review. The review should consider which clients are affected, what the practice has previously agreed to do, whether an existing referral or implementation arrangement continues, and how any change should be explained.

Those are matters to assess with legal and compliance advisers. ASIC’s deadline notice does not, by itself, prescribe a universal client‑communication process or require every firm exiting the activity to amend each of its advice documents.

The same caution applies to Financial Services Guides, advice templates, risk disclosures, conflicts registers, service agreements and referral disclosures. They may be relevant to a firm’s review, depending on the service and conduct involved, but they are not automatically subject to the same change merely because the practice has digital‑asset clients.

The immediate practice‑management task

Management should be able to answer three questions:

• What assets or facilities are involved?
• What precisely does the firm, adviser or authorised representative do?
• Does the business rely on a transitional arrangement, and what must it do before 30 September 2026?

If the answer to the third question is unclear, the firm should obtain advice and contact ASIC where appropriate. If the activity is within the transition, the remaining time should be used to determine whether to seek authorisation, alter the service or exit it. If it is outside the regime, the firm should record why — and continue monitoring the boundaries of its conduct.

The key message for advice practices is therefore narrower than “all firms must secure a digital‑asset licence”: ASIC’s date is a prompt for affected providers to resolve their licensing position before the transition ends.¹