A non-exhaustive reference to Australian regulators and selected professional, technology and infrastructure providers relevant to digital asset businesses

Edition: August 2026
Last verified: 16 August 2026

michael-marais-q-4_GVvZwlo-unsplash.jpg

About this directory

This directory provides a concise reference to Australian regulatory bodies and selected organisations with publicly stated capabilities relevant to digital assets. It is intended to help readers understand the types of institutions and services present in the Australian market.

The directory is descriptive, non-exhaustive and not a procurement shortlist. Inclusion does not constitute endorsement, recommendation, due diligence or confirmation that a provider is suitable or available for a particular business. Candowa has not assessed the pricing, service quality, cybersecurity, financial standing or client outcomes of the organisations listed. Provider services, personnel, contracting entities and regulatory status may change.

Private providers are listed alphabetically within each category. The order of entries has no significance, and omission does not imply that an organisation lacks relevant capability.

Australia does not have one permission covering every form of digital asset business. Different laws and regulators may apply depending on the activities, products and legal entities involved. AUSTRAC administers Australia’s AML/CTF obligations for virtual asset designated services, with some newly regulated services and obligations subject to transitional arrangements. The principal digital asset platform and tokenised custody platform reforms in the Corporations Amendment (Digital Assets Framework) Act 2026 are scheduled to commence on 9 April 2027.

Official references: AUSTRAC — Virtual asset designated services · AUSTRAC — Transitional rules · Federal Register of Legislation · ASIC — Digital asset licensing


1. Regulatory, government and dispute-resolution bodies

Australian Competition and Consumer Commission — ACCC

Type: Competition and consumer protection regulator.

Scope: Competition law, consumer protections, advertising and representations, unfair practices and scam awareness.

Official resources: ACCC · Scamwatch

Australian Financial Complaints Authority — AFCA

Type: Independent external dispute-resolution scheme.

Scope: Complaints involving participating financial firms. AFCA has also been authorised as an external dispute-resolution scheme under the Scams Prevention Framework for designated sectors.

Official resources: AFCA membership · Scams Prevention Framework authorisation

Australian Securities and Investments Commission — ASIC

Type: Corporate, markets, financial services and consumer credit regulator.

Scope: Company registration, financial products and services, Australian financial services licences, authorised markets and related regulatory registers.

Official resources: AFS licensees · ASIC registers

Australian Taxation Office — ATO

Type: Federal tax and superannuation authority.

Scope: Tax treatment and record-keeping relating to crypto assets, businesses and investors.

Official resources: Crypto assets and business · Crypto asset investments

Australian Treasury

Type: Australian Government policy department.

Scope: Economic and financial-system policy, including digital asset legislation and consultations.

Official resource: Digital assets policy

Australian Transaction Reports and Analysis Centre — AUSTRAC

Type: Anti-money laundering and counter-terrorism financing regulator and financial intelligence unit.

Scope: Administers Australia’s AML/CTF framework, including registration and supervision relating to virtual asset designated services. The application and timing of obligations depend on the services provided and relevant transitional arrangements.

Official resources: Virtual asset service providers · VASP registration

Office of the Australian Information Commissioner — OAIC

Type: Privacy and freedom-of-information regulator.

Scope: Australian Privacy Principles, personal information handling and the Notifiable Data Breaches scheme.

Official resource: Australian Privacy Principles

Other relevant authorities

Authority

Public role

Australian Prudential Regulation Authority

Prudential supervision of banks, insurers and superannuation entities

Australian Signals Directorate / Australian Cyber Security Centre

Cybersecurity guidance, alerts and incident-response resources

Foreign Investment Review Board

Advises the Treasurer and Australian Government on foreign investment policy and proposals; Treasury administers the regulatory framework

Reserve Bank of Australia

Payments-system policy, financial stability and designated payment-system matters


2. Legal, licensing and AML/CTF services

The organisations below publicly describe Australian legal, licensing, financial-crime or compliance capabilities relevant to digital asset businesses. Descriptions summarise provider-published information and do not assess performance or suitability.

AML House

Type: AML/CTF legal and consulting provider.

Australian presence: Australian provider.

Published capability: AML/CTF programs, compliance support and training for regulated businesses.

Website: AML House

Arctic Intelligence

Type: Financial-crime risk assessment and AML compliance technology provider.

Australian presence: Australian-founded provider.

Published capability: Financial-crime risk assessments, control assessments and AML program tools.

Website: Arctic Intelligence

Gilbert + Tobin

Type: Australian corporate law firm.

Australian offices: Sydney, Melbourne and Perth.

Published capability: Financial services, technology, corporate transactions, blockchain and cryptocurrency regulation.

Website: Gilbert + Tobin — Blockchain and Cryptocurrency Regulation 2026

Hamilton Locke

Type: Australian commercial law firm.

Australian presence: Australian practice with offices in major business centres.

Published capability: Funds, financial services, digital asset structuring and licensing.

Website: Hamilton Locke — Australia’s new digital asset regulation

Holley Nethercote

Type: Specialist financial-services regulatory law and consulting practice.

Australian presence: Australian specialist practice.

Published capability: Market-entry advice, AFSL and credit licensing, compliance documentation and training.

Website: Holley Nethercote

Piper Alderman

Type: Australian commercial law firm.

Australian offices: Adelaide, Brisbane, Melbourne, Perth and Sydney.

Published capability: Blockchain and digital asset matters, financial services, taxation, privacy, AML/CTF, corporate transactions and disputes.

Website: Piper Alderman — Blockchain

Sophie Grace

Type: Financial-services legal and compliance consultancy.

Australian presence: Australian consultancy.

Published capability: AFSL applications, regulatory compliance and compliance procedures.

Website: Sophie Grace — AFSL services


3. Tax, accounting and assurance

BDO Australia

Type: Audit, tax and advisory firm.

Australian presence: National Australian network.

Published capability: Corporate audit, tax, accounting and advisory, including published guidance on accounting for cryptocurrencies.

Website: BDO Australia — Accounting for cryptocurrencies

Grant Thornton Australia

Type: Audit, tax, risk and advisory firm.

Australian presence: National Australian practice.

Published capability: Audit, tax, financial-crime and AML/CTF advisory services.

Website: Grant Thornton Australia — AML/CTF reforms


4. Identity, AML technology and blockchain analytics

The global providers in this section publish capabilities relevant to Australian operations. Unless expressly stated, inclusion does not confirm an Australian contracting entity, Australian licence or availability of every service in Australia.

Chainalysis

Type: Blockchain analytics technology provider.

Delivery model: Global provider.

Published capability: Wallet screening, transaction monitoring, investigations and blockchain intelligence.

Website: Chainalysis

Elliptic

Type: Blockchain analytics technology provider.

Delivery model: Global provider.

Published capability: Wallet screening, transaction monitoring, investigations and cross-chain analytics.

Website: Elliptic

FrankieOne

Type: KYC/KYB, AML and identity orchestration platform.

Australian presence: Australian company, Frankie Financial Pty Ltd.

Published capability: Identity verification, fraud screening and configurable compliance workflows. FrankieOne is listed as a fully operational gateway service provider for Australia’s Identity Verification Services.

Websites: FrankieOne · Identity Verification Services gateway providers

GBG greenID

Type: Identity verification provider.

Australian presence: GBG ANZ.

Published capability: Electronic identity verification using Australian and regional data sources. GBG ANZ is listed as a fully operational gateway service provider for Australia’s Identity Verification Services.

Websites: GBG greenID · Identity Verification Services gateway providers

TRM Labs

Type: Blockchain intelligence technology provider.

Delivery model: Global provider with Australia-focused research and engagement.

Published capability: Address screening, transaction monitoring, investigations and illicit-finance intelligence.

Website: TRM Labs — Australia’s crypto economy


5. Payments, stablecoins and digital asset infrastructure

AUDC Pty Ltd / AUDD

Type: Issuer of an AUD-denominated stablecoin and related on-chain payment infrastructure.

Australian presence: AUDC Pty Ltd, Australia.

Published capability: AUDC’s February 2026 Product Disclosure Statement describes AUDD as a non-cash payment facility issued under AFSL 700123 and backed by Australian-dollar reserves on a 1:1 basis. The PDS also states that AUDD is not a bank deposit or legal tender and is not protected by the Financial Claims Scheme.

Resources: AUDD · AUDD Product Disclosure Statement

Fireblocks

Type: Digital asset technology infrastructure provider.

Delivery model: Global provider.

Published capability: Wallet, transfer, treasury and policy-controlled digital asset operations technology. Australian contracting arrangements and service availability should be confirmed for each engagement.

Website: Fireblocks

Monoova

Type: Australian payments infrastructure provider.

Australian presence: Australian provider.

Published capability: Australian account-to-account payments, collections, payouts and payment automation.

Website: Monoova

Zerocap

Type: Institutional digital asset trading and liquidity provider.

Australian presence: Australian provider.

Published capability: Digital asset execution, liquidity and related institutional infrastructure.

Website: Zerocap

Zodia Custody Australia

Type: Institutional digital asset custody provider.

Australian presence: Provider-stated Australian operating presence.

Published capability: Institutional custody, staking and off-exchange settlement. The contracting entity and availability of individual services should be confirmed directly.

Website: Zodia Custody — Australia


6. Cybersecurity, smart-contract security and insurance

CyberCX

Type: Cybersecurity consulting and managed security provider.

Australian presence: Australia and New Zealand.

Published capability: Cloud security, penetration testing, incident response, governance, privacy and managed detection.

Website: CyberCX

Insurance brokers

Aon Australia and Marsh Australia are large insurance brokers with Australian operations. Their broader commercial insurance capabilities include areas such as directors’ and officers’, professional indemnity, cyber and crime insurance. This does not confirm that cover is available for a particular digital asset business; availability, exclusions, limits and policy terms are determined case by case.

Sigma Prime

Type: Blockchain security research and smart-contract auditing firm.

Australian presence: Australian-founded.

Published capability: Smart-contract and blockchain protocol security reviews and research.

Website: Sigma Prime


Directory methodology

This edition includes:

Information is drawn primarily from official government sources, regulatory documents and provider websites. Provider descriptions are based on publicly stated capabilities and have not been independently tested. The directory does not rank providers and does not publish private contacts, pricing, client assessments or Candowa’s internal views on provider suitability.

For global providers, inclusion does not imply an Australian legal entity, Australian licence or government approval. For all providers, published capability does not confirm service quality, financial standing, cybersecurity performance, availability or suitability for a particular client or activity.

How to use this directory

Readers should begin by identifying the activity they intend to conduct in Australia and the legal entity that will conduct it. They should then confirm which regulatory, licensing, tax, compliance, technology, banking, custody, security and insurance capabilities are relevant.

Before appointing a provider, verify its current contracting entity, personnel, regulatory status, scope of work, conflicts, pricing and ability to support the proposed activity. Where a licence or registration is material, check the relevant official register rather than relying only on a provider’s website.

Updates and corrections

The directory is intended to be reviewed after material regulatory changes and periodically for changes to provider information. Organisations may submit factual corrections for editorial consideration. Submission, sponsorship, referral arrangements or another commercial relationship do not guarantee inclusion or favourable treatment.

About Candowa

Candowa helps international companies evaluate the Australian market and coordinate the local relationships, professional capabilities and execution required to establish and grow their business in Australia.

2299a1b4-a764-43b3-8fbe-f431d2949a0e.png

Disclaimer

This directory provides general information only. It is not legal, tax, financial, accounting, procurement or investment advice. It does not constitute a recommendation, referral, assurance or due-diligence report on any organisation listed. Laws, regulatory guidance, provider status and service availability may change. Readers should obtain advice for their own circumstances and verify regulatory status through the relevant official registers.