The Australian Securities and Investments Commission on October 15, 2026, published Consultation Paper 392 (CP 392), setting out proposed capital, custody, disclosure, and trading standards for digital asset platforms operating in Australia. The paper represents the most significant regulatory in...
"Same activity, same risk, same regulatory outcome." — Alan Kirkland, ASIC Commissioner
The Australian Securities and Investments Commission on October 15, 2026, published Consultation Paper 392 (CP 392), setting out proposed capital, custody, disclosure, and trading standards for digital asset platforms operating in Australia. The paper represents the most significant regulatory intervention in the country's crypto sector to date, proposing net tangible asset requirements as high as A$14 million (approximately US$9.7 million) for platforms that do not use qualifying third-party custody arrangements. An estimated 400 crypto platforms currently operate in the Australian market; roughly 10% hold an Australian Financial Services Licence (AFSL).
CP 392 follows the passage of the Corporations Amendment (Digital Assets Framework) Act 2026, which received Royal Assent on April 8, 2026. The new regime commences on April 8, 2027, with existing operators required to apply for a licence — or vary an existing one — by October 7, 2027. ASIC has set November 27, 2026, at 5:00 pm AEDT as the consultation deadline and plans to publish final instruments and guidance in March 2027. Industry participants have signalled the capital thresholds, combined with strict custody and trading rules, will likely trigger consolidation among smaller operators.
The consultation arrives at a moment of rapid market expansion. Australian crypto entities processed approximately USD $50 billion (AUD $71 billion) in on-chain transaction volume between March 2025 and February 2026, with monthly volumes surging from roughly USD $800 million to USD $4.5 billion over that period. One in three Australians — 33%, up from 31% in 2025 — now holds cryptocurrency, according to industry surveys. The regulatory framework aims to bring platform conduct in line with standards already applied to traditional financial market operators.
The Corporations Amendment (Digital Assets Framework) Act 2026 passed both chambers of the Australian Parliament on April 1, 2026, and received Royal Assent on April 8, 2026. The legislation amends the Corporations Act 2001 to bring digital asset platforms within the existing financial services regulatory perimeter, rather than creating a standalone crypto-specific regime.
ASIC's CP 392, published October 15, 2026, translates that legislative mandate into proposed regulatory instruments. The commission is consulting on draft rules across four domains: capital adequacy, custody arrangements, disclosure obligations, and trading conduct. The consultation window closes November 27, 2026. ASIC intends to publish final instruments and regulatory guidance in March 2027, one month before the regime commences on April 8, 2027.
Existing platform operators face a six-month transitional window. Those currently in operation must submit licence applications — or applications to vary existing AFSLs — by October 7, 2027. ASIC received more than 140 licensing applications during the lead-up period, with over 110 of those submitted during the no-action period that ran from October 2025 through September 30, 2026.
CP 392 puts forward three alternative capital models for industry consultation. The divergence between them is significant, and the model ultimately adopted will determine the financial barrier to entry — and continued operation — for hundreds of platforms.
Model 1 is the most demanding. It requires platforms without qualifying third-party custody arrangements to hold the greater of A$14 million (US$9.7 million) in net tangible assets or 10% of average revenue. Operators that do maintain qualifying custody arrangements face lower thresholds beginning at A$200,000, plus a percentage of held assets and 10% of revenue. This tiered approach is designed to incentivise the use of independent custodians.
Model 2 introduces a separate A$7 million threshold for operators that do not hold financial products and lack third-party custody. Other operators — those holding client assets without qualifying custody — remain subject to the A$14 million or revenue-based requirement, whichever is greater. This model draws a distinction between platform types based on whether they take possession of client funds or digital assets.
Model 3 takes a modular approach. The base requirement is the largest of A$2 million, a percentage of underlying assets, or 10% of revenue. Platforms then face add-on capital charges depending on the nature of their activities: A$500,000 for agent services, A$750,000 for operating a neutral trading venue, and A$1 million for platforms trading as principals. The cumulative effect of these add-ons could still push capital requirements above A$4 million for multi-service operators, though the entry point is substantially lower than under Models 1 or 2.
| Model | Base NTA (No Third-Party Custody) | With Qualifying Custody | Revenue Component | |-------|-----------------------------------|------------------------|-------------------| | 1 | A$14M | A$200K + % of assets | 10% avg. revenue | | 2 | A$7M (non-holding) / A$14M (holding) | Lower thresholds | 10% avg. revenue | | 3 | A$2M + activity add-ons | A$2M + activity add-ons | 10% avg. revenue |
For context, Australia's crypto exchange market was valued at $587.2 million in 2026. A A$14 million capital floor represents a material proportion of annual revenue for all but the largest operators in the domestic market.
ASIC's custody proposals impose detailed operational requirements on platforms that hold digital assets on behalf of clients. Platforms must report quarterly to ASIC on their custody wallet structures and associated addresses. All custody-related records must be retained for seven years.
Notably, ASIC is not proposing a blanket requirement for all digital assets to remain onshore. Offshore custody is permitted under the proposed framework, a pragmatic concession to the global nature of blockchain infrastructure. However, ASIC is consulting on safeguards for emergency access to private keys in scenarios where overseas parent entities fail — a provision clearly informed by the collapse of FTX in 2022 and the complications Australian customers faced recovering assets held by offshore entities.
One boundary is explicit: platforms cannot disclose private keys or recovery phrases to regulators. This restriction acknowledges the technical reality that sharing cryptographic keys would compromise the security of client assets and is fundamentally incompatible with sound custody practices. ASIC instead proposes oversight through wallet-address reporting and audit mechanisms.
CP 392 includes sharp restrictions on trading conduct that will force structural changes at several Australian platforms. Order-matching platforms — those operating exchange-like functionality — cannot trade as principal on their own platforms. They also cannot permit related entities to trade through them.
The implications are direct. Platform groups that operate affiliated market-making desks alongside exchange operations will need to restructure their businesses. This mirrors regulatory approaches in traditional equities and derivatives markets, where exchange operators and proprietary trading functions are subject to strict separation requirements.
The "same activity, same risk, same regulatory outcome" principle articulated by ASIC Commissioner Alan Kirkland signals the regulator's intent to apply financial market conduct standards uniformly, regardless of whether the underlying asset is a share, a derivative, or a token.
The Australian crypto market has expanded rapidly through 2025 and 2026. On-chain transaction volume processed by Australian crypto entities reached approximately USD $50 billion (AUD $71 billion) in the twelve months from March 2025 to February 2026. Monthly volumes grew from roughly USD $800 million to approximately USD $4.5 billion during that period — a more than fivefold increase.
Ownership penetration continues to climb. Approximately 33% of Australians now hold cryptocurrency, up from 31% in 2025. The domestic exchange market was valued at $587.2 million in 2026.
The market is served by roughly 400 platforms. Among the largest domestic operators: CoinSpot reports over 3 million accounts and lists more than 500 cryptocurrencies; Swyftx claims a customer base of 1.5 million; and Independent Reserve, one of the oldest Australian exchanges, was acquired by IG Group in January 2026. Other significant operators include CoinJar and BTC Markets. Only about 10% of the 400 platforms currently hold an AFSL.
The High Court of Australia's unanimous 7-0 decision in ASIC v Block Earner, handed down in June 2026, established binding precedent that fixed-yield crypto products require financial services authorisation under existing law. The case marked the first time a crypto-asset product was examined by Australia's highest court under financial services legislation.
The ruling eliminated residual ambiguity about whether yield-bearing crypto products fell within the Corporations Act's regulatory perimeter. It provides ASIC with clear judicial backing as it moves to implement the broader digital assets framework through CP 392. For platforms offering staking, lending, or other yield-generating products, the decision confirmed that regulatory licensing is not optional.
Early industry reaction to CP 392 has been measured. Amy-Rose Goodey, CEO of the Digital Economy Council of Australia (DECA), stated: "After years of engagement on regulatory reform, it's encouraging to see the focus shift towards practical implementation." The comment reflects an industry that has broadly accepted the inevitability of regulation and is now focused on the details.
Shane Chandra, CEO of OKX Australia, struck a more cautious tone, noting that the proposed rules could drive industry consolidation due to higher compliance and capital demands. For smaller platforms operating on thin margins without institutional backing, the capital requirements — particularly under Model 1 — may prove prohibitive.
The consolidation dynamic is straightforward: platforms unable to meet capital thresholds will face a choice between seeking acquisition, partnering with capitalised entities, or exiting the market. The October 7, 2027, application deadline creates a hard deadline for those decisions.
Australia's approach aligns with, but does not replicate, regulatory frameworks taking shape in other major jurisdictions.
The European Union's Markets in Crypto-Assets Regulation (MiCA) has been fully applicable since December 30, 2024, establishing a single rulebook across 27 member states. MiCA covers asset-referenced tokens, e-money tokens, and crypto-asset service providers under unified authorisation and conduct requirements.
Singapore's Monetary Authority of Singapore (MAS) has imposed a 90% cold storage requirement for custodied digital assets and introduced retail leverage restrictions — among the most prescriptive custody rules globally.
The United Kingdom's Financial Conduct Authority (FCA) maintains a separate registration regime for crypto-asset businesses and is developing its own comprehensive regulatory framework following Brexit, with consultations ongoing through 2026.
Australia's framework is distinguished by its integration into existing financial services law rather than bespoke crypto legislation. The "same activity, same risk, same regulatory outcome" principle positions ASIC's approach as technology-neutral — regulating the economic function of digital asset platforms rather than the underlying technology.
CP 392 translates the Corporations Amendment (Digital Assets Framework) Act 2026 into operational requirements that will reshape the structure of Australia's digital asset market. The capital thresholds, custody obligations, and trading restrictions proposed by ASIC are designed to bring crypto platform regulation to parity with traditional financial market standards. For well-capitalised operators, the framework provides regulatory clarity that may attract institutional participation and cross-border business. For the estimated 360 platforms currently operating without an AFSL, the next twelve months will require decisive action: secure capital, apply for licensing, find an acquirer, or wind down.
The consultation period offers industry participants a final window to influence the calibration of these rules — particularly the choice between the three capital models, which range from A$2 million with modular add-ons to a flat A$14 million floor. ASIC's final instruments, expected in March 2027, will determine whether Australia's crypto regulatory regime is remembered as a framework that professionalised the market or one that consolidated it into the hands of a few large incumbents. The answer may well be both.