Australia opens consultation on capital, custody and trading rules for crypto platforms ahead of the 2027 licensing framework

What happened

Australia's securities regulator, ASIC, opened a public consultation on Thursday on the capital, custody and trading standards that crypto platforms will have to meet under the country's new digital asset licensing framework. The consultation paper, known as CP 392, is the practical core of the Corporations Amendment (Digital Assets Framework) Act, which Parliament passed in April. It asks the industry how the rules should work in practice before they become binding, with feedback due by November 27, 2026.

The capital proposals come in three alternative models, and the consultation is in part a choice between them. One model would require operators that do not use qualifying third party custody arrangements to hold at least 14 million Australian dollars, about 9.7 million US dollars, in net tangible assets, or 10 percent of average revenue, whichever is greater. The logic is that a platform holding customer assets itself needs a larger financial buffer than one that places those assets with a specialist custodian, and the three models are different ways of scaling that buffer to the size and structure of the business. ASIC said its proposed guidance acknowledges the growing role of digital assets and tokenization, including in traditional parts of the financial system, and is meant to give operators clarity on what they must do to obtain a licence, safeguard customer assets and meet financial requirements.

Custody is where the proposals are most detailed. ASIC does not propose to mandate that customer assets be held inside Australia. It would allow offshore custody arrangements, while asking whether Australian operators should have emergency access to private keys if an overseas parent company or related custodian fails. That question goes to the central failure mode of the last crypto cycle: customers of a local platform discovering, in a collapse, that their assets sit in wallets controlled by an entity in another jurisdiction that they cannot reach. Operators would also have to report their custody wallet structures and addresses to ASIC every quarter, and retain the relevant records for seven years.

Trading conduct forms the third leg. ASIC proposes restrictions on platforms trading for their own account, and on platforms accepting benefits to favour particular tokens, both aimed at conflicts of interest. The sharpest edge falls on platforms that match client orders. Under the proposal as described in the consultation coverage, a platform that brings client orders together, whether by order book or by matched principal trading, could not trade as principal on its own platform, and its related companies could not trade as principal through it either, subject to model specific exceptions. That strikes directly at business models built around an affiliated market maker trading on the same venue its customers use.

The timetable is long and fixed. The consultation is one step in an 18 month implementation roadmap ASIC published after the Act passed in April. ASIC aims to publish final standards and guidance in March 2027. The law itself is set to take effect on April 8, 2027, and existing operators will have until October 7, 2027 to apply for the relevant licence or for changes to a licence they already hold, and they can keep operating while ASIC assesses their applications. Industry reaction reported on Thursday was broadly welcoming, with a national industry body calling the consultation an important milestone after years of engagement on reform, and an exchange executive describing the standards as appropriately demanding, likely to reward operators that have already invested in compliance, capital and custody, and to challenge those that have waited.

Why it matters

Australia is building the kind of framework the industry has spent years asking regulators for, and Thursday's paper shows what that request actually costs. A capital floor of 14 million Australian dollars for self custodied operations, quarterly wallet reporting to the regulator, seven years of records and a ban on the platform's own group trading as principal on its venue are not paperwork. They are a decision that a crypto exchange should be financed, supervised and conflict checked more like a securities market operator than like a software startup. Smaller operators will read the three capital models closely, because the choice between them decides whether the framework consolidates the Australian market into a handful of well capitalized platforms or leaves room for local entrants to grow into it.

The offshore custody position is the most consequential judgement in the paper. Mandating domestic custody would have been simpler to supervise and worse for customers in almost every other way, because the deep custody infrastructure for digital assets is global, and forcing assets onshore would have cut Australian platforms off from it. Allowing offshore custody while demanding emergency access to private keys, and quarterly disclosure of wallet structures, is an attempt to get the supervision without the isolation. Whether it works depends on a question the consultation is honestly asking rather than answering: in an actual failure of an overseas parent, would the emergency access right be exercisable in hours, or would it be a legal claim argued for years while customers wait. The industry feedback on that single point is worth more than the rest of the paper combined.

The own account trading restriction matters for a quieter reason. In traditional markets, the separation between the venue and the firms trading on it is foundational, because a venue that trades against its own customers, or whose affiliate does, holds information and speed advantages that customers cannot audit. Crypto markets grew up with those roles merged. Australia's proposal unmerges them, at least for order matching platforms, and the exceptions and their boundaries will decide how much of the current market structure survives. Platforms that rely on an affiliated market maker for their liquidity have been told, in effect, to examine that arrangement first.

There is also a sequencing lesson for other jurisdictions. Australia legislated first, in April, and is consulting on implementation second, with an 18 month runway, a March 2027 date for final guidance, an April 2027 start and an October 2027 application deadline, with continuity of operation while applications are assessed. Whatever the merits of each rule, that order, statute, consultation, guidance, commencement, transition, is the opposite of regulation by enforcement action, and operators in countries still waiting for a statute will notice.

What to watch

Watch the capital model choice. Which of the three models ASIC adopts in its March 2027 final guidance, and what concessions it makes for platforms using third party custody, will decide the framework's effect on competition more than any other single element.

Watch the emergency access answers. The consultation responses on offshore custody, due by November 27, will show whether custodians and platforms can describe a workable mechanism for reaching private keys in a foreign parent's failure, or whether the proposal softens into a disclosure duty.

Watch the own account exceptions. The boundary between a banned principal trade and a permitted model specific exception is where affiliated market making either survives in a disclosed form or ends. Platforms have until the March guidance to restructure, and announcements of restructured liquidity arrangements would be the early signal.

And watch the application queue. Operators have from April 8, 2027 to apply and until October 7, 2027 as the deadline, operating in the meantime. How many apply, and how many instead withdraw from the Australian market, is the final verdict on whether the standards were calibrated as demanding or as prohibitive.