Formal guide to Australian AFSL financial services licensing

In Australia, a business providing financial services generally must hold an AFSL covering the relevant services, or qualify for a specific statutory exemption. ASIC lists ten financial service activities: providing product advice, dealing, making a market, operating a registered scheme, custody, traditional trustee company services, operating CCIV, crowd-sourced funding, insurance claims handling and settling, and superannuation trustee services. A single licence may combine several activities; a business menu cannot replace the licence wording.ASIC scope of licensing

Licensing must be assessed against the services performed, the specific products, whether clients are retail or wholesale, whether advice is limited to general advice, and whether transactions involve issuance, underwriting or arranging. A managed account MDA is not an eleventh separate statutory service or a standalone, all-purpose asset management licence; it is a combination of authorisations subject to specific issuance restrictions and applicable exemption conditions.

• Map a service–product–customer matrix based on actual fund flows, contractual relationships and decision-making authority.
• Identify execution on behalf of clients, product issuance and arranging transactions for others separately.
• This guide presents fifteen product classes in consolidated form, including deposit sub-classes and emissions unit sub-classes; the application portal must still be used to select each applicable option accurately.

A properly configured AFSL enables a business to conduct approved business lawfully in Australia and allows customers and partners to check the scope of the licence on the public register. A combination of authorisations may support coordinated advisory, brokerage, fund and platform businesses, but additional authorisations also increase staffing, capital and supervision costs. Applications should be based on evidenced business needs.

AFSL does not constitute ASIC endorsement of a business, product or investment returns; it is not a credit rating and does not guarantee a bank account, financing, asset security or investment profits. The ASIC mark must not be used to imply endorsement. Holding an Australian licence does not automatically confer the right to conduct business in Hong Kong, Singapore, the UK or any other jurisdiction.ASIC Explanation of what a licence means

• The website displays the actual licensed legal entity, licence number and verifiable authorisation; it does not use unsupported certification marks.
• For cross-border promotion, check local licensing and solicitation restrictions individually.
• Disclose product risks and service fees alongside promotional advantages.

Financial products cannot be determined by name alone. Company securities, government bonds, fund interests, insurance, derivatives, foreign exchange contracts, non-cash payment facilities and emissions units have different legal definitions; real property itself and an interest in a real estate fund are also not the same product. Holding securities for one’s own business purposes does not necessarily constitute providing a financial service to clients; exemptions for transactions involving a company issuing its own securities also have exceptions.

Wholesale clients do not mean wealthy individuals or all companies in general. Keep evidence of eligibility under the tests applicable to the product and service concerned; the accountant's certificate pathway based on net assets of AUD 2.5 million or gross income of AUD 250,000 in each of the past two financial years does not apply universally to all insurance and pension situations. Wholesale business remains subject to licensing, honest conduct, organisational capability and applicable financial requirements. Consumer credit may separately require ACL; deposit-taking, insurance underwriting, operating a financial market or a clearing and settlement facility each has a separate regulatory pathway.

• Check the applicable conditions for client type, the validity of the accountant’s certificate and the investment amount test.
• Do not misclassify wholesale funds as authorisation to operate a registered retail scheme.
• Provide a business characterisation opinion for each digital asset, yield account, P2P and payment product.

An application may use a structure suited to the business, such as a company, an individual or a partnership. Trust business is generally applied for by the trustee, rather than treating the trust name as a separate licensed legal entity. An Australian proprietary company generally needs at least one director ordinarily resident in Australia. A public company needs at least three directors, at least two of whom are ordinarily resident in Australia, and at least one secretary resident in Australia; a proprietary company with crowd-sourced funding shareholders is subject to additional director requirements. Registration and local agent requirements for a foreign company must be addressed according to its structure; the resident director rules for an Australian subsidiary should not be applied to it.ASIC company personnel rules

Disclose the ownership chain, controlling entities, actual control arrangements and relevant fit and proper persons. The ASIC fit and proper person test does not mean that all passive minority shareholders are uniformly awarded a qualification. Controllers, directors and senior executives must disclose adverse background information honestly; materials must not conceal disqualification, bankruptcy or integrity issues. A director must apply for a director ID before appointment; distinguish the current obligation to apply for ID from the new obligation, commencing in 2027, for companies to provide ID to ASIC.Director ID

• Prepare registration evidence, the constitution, director consents, shareholding chart, controller information and an explanation of the source of funds.
• Check the company name, business name, ACN／ARBN and any applicable ABN registration.
• Where a public company acts as a registered fund responsible entity or a corporate director of CCIV, additional specific governance requirements must be implemented.

ASIC's current organisational competence terminology is Responsible Manager (RM, responsible manager), not the Hong Kong term Responsible Officer. Managers must have direct responsibility for important day-to-day decisions about the ongoing provision of financial services, and their combined knowledge and experience must cover all authorisations. There is no rule requiring every applicant to have two RMs, nor a rule that all RMs must hold a university degree or be Australian citizens. The number depends on the complexity of the business, the time available to devote to the role and key-person risk.RG105

RG105 There are five knowledge and experience pathways. Pathways involving relevant industry standards, a university degree plus a short industry course, or a relevant diploma generally require three years’ relevant experience in the past five years; an individual assessment pathway generally requires five years’ experience in the past eight years; other evidence pathways require a well-supported case. A natural person providing personal advice on relevant financial products to retail clients must also meet applicable adviser professional standards, examination, registration and continuing professional development requirements; an old RG146 course alone cannot replace these. Compliance functions may be resourced according to scale, but outsourcing does not remove the licensee’s responsibilities.

• Prepare managers’ CVs, qualifications, responsibilities, time commitments, references, background checks and an authorisation coverage matrix.
• Retail advisers should check the Financial Advisers Register, relevant provider registration and eligible pathways.
• AR must be authorised in writing and cannot exceed the principal licence; whether employees must be separately listed as AR should be determined by reference to the legal relationship.
• For designated services, appoint an AML/CTF responsible person, a finance officer and, where applicable, a registered company auditor.

An Australian company’s registered office must be a physical street address in Australia, not a post office box; it does not have to be the same as the place where the company actually operates. If an accountant’s or agent’s office is used, written consent from the occupier should be retained. The principal place of business must also be a physical address. The AFSL application should also accurately disclose the business address, address for service of notices and actual operating arrangements.ASIC Company address

There is no general requirement for all AFSL institutions to rent a separate office in Sydney, maintain a fixed floor area or use an Australian data centre, but they must have supervisory, personnel, technology and records-access capabilities suited to their business. The decision-making authority of overseas or remote teams, time-zone support, cloud outsourcing, custody arrangements and regulatory access must be explained specifically. In 2026, ASIC introduced an arrangement for registering business websites; provide and update genuine business website addresses as required, to prevent impersonation.Update licensing information

• Distinguish the registered office required by law, principal place of business, customer service outlets and the address of the Hong Kong consultancy.
• Online platforms retain control of their domains, website inventories and version approval records.
• For remote operations, clearly specify management availability, regulatory service of documents and responsibility for data access.

Share capital is an accounting item representing company financing and ownership; NTA is net tangible assets adjusted for regulatory purposes and cannot be replaced directly by registered share capital or the bank account balance. Goodwill, certain intangible assets, related-party amounts and non-qualifying assets must be treated in accordance with the applicable rules. Baseline requirements include being able to pay debts as they fall due, having positive net assets and having resources to support forecast cash outflows. Pure advisory firms must not be incorrectly required to maintain a uniform A$50,000 or A$150,000 NTA.RG166 Basic requirements

Holding applicable client money or property with a total value reaching AUD 100,000 generally triggers a minimum SLF of AUD 50,000; insurance and other exceptions must be checked. ASLF triggered by dealing with clients as principal is generally calculated as AUD 50,000 plus tiered adjustments for liabilities, while retail OTC issuers are subject to an alternative NTA regime. Non-retail OTC foreign exchange principal dealers may, subject to the applicable conditions, use ASLF or the AUD 10,000,000 Tier 1 capital pathway. These rules cannot be treated as three freely interchangeable options. The applicable minimum ASLF is AUD 50,000, plus 5% of adjusted liabilities between AUD 1,000,000 and AUD 100,000,000, and 0.5% of the amount above AUD 100,000,000, subject to a maximum requirement of AUD 100,000,000; the triggers and adjustment items must first be confirmed under RG166.

For a responsible entity of a fund, an IDPS or a retail CCIV corporate director that meets the custody requirements, the current NTA is generally the highest of A$150,000, 0.5% of the average total value of fund assets (capped at A$5 million) and 10% of average revenue. Where the custody requirements are not met, it is generally the higher of A$10 million and 10% of average revenue. The required cash and liquid assets ratio must also be met. The increases set out in instrument 2026/708 take effect on 1 July 2027. Application budgets should model the future requirements as well, but must not rewrite the current thresholds.

• Prepare separate schedules for the share capital arrangements, regulatory net asset reconciliation, cash-flow forecast and capital buffer.
• Use tailored cash requirement rules for complex funds, custody, CSF and OTC businesses.
• Shareholder loans, subordinated debt or parent-company support can be counted only if the relevant conditions are met.
• The budget includes the costs of an orderly exit, complaint compensation, insurance excesses and platform recovery.

From 16 June 2025, the ASIC Regulatory Portal collects application information through structured transactions, generating questions based on the services and products selected. The main supporting documents are called People Proofs. The former fixed upload lists for FS01, Core Proofs, Non-core Proofs and A5／B1 must not be treated as the current application process. However, business plans, financial models, risk policies and operational evidence must still be prepared truthfully and be ready for completing the portal or responding to requests for further information.INFO294

Documents must be consistent with client contracts, funds flows and the final product. The application should specify service recipients, products, revenue sources, management responsibilities, controllers, outsourcing, financial resources and orderly exit arrangements. Retail business must prepare applicable disclosure, complaints and compensation documents; funds, custody, insurance claims or crowdfunding require additional evidence specific to those areas. Do not submit template policies that do not reflect actual operations.

• Entity information, shareholding and controller chart, business description and service–product matrix.
• People Proofs: evidence relating to fit and proper persons and responsible managers.
• Financial statements, applicable forecasts, NTA / SLF / ASLF calculations and evidence of financial support.
• Client contracts, FSG or applicable alternative disclosure, SoA／RoA, PDS or securities offering disclosure, TMD.
• Compliance monitoring, conflicts of interest, risk management, AML/CTF, cybersecurity, outsourcing and exit documentation.

First assess the nature of the business and resource gaps, then establish the entity, appoint substantive managers and prepare financial and operational arrangements. In the Regulatory Portal, select the correct services, products and customer types, upload the information requested by the system, review the declarations and pay the statutory fees calculated by the portal. Submitted answers cannot be changed independently after submission; corrections or further information should be handled through formal communication.ASIC application FAQ

ASIC will assess the ability to meet licensing obligations and may raise enquiries, require further evidence or discuss licence conditions. A draft licence or a requirement to put conditions such as insurance or dispute resolution arrangements in place does not mean that authorisation to conduct all business has been granted. Business may commence within the approved scope only once the final licence has taken effect, relevant products have been registered and other commencement conditions have been met. If no financial services covered by the licence have been provided within six months after the licence is granted, ASIC must be notified in accordance with applicable requirements.

• Step one: Legal classification, authorisation matrix and client classification.
• Step two: Put the company, governance, managers, capital, banking and systems in place.
• Step three: Complete the portal fields, People Proofs, review, fee payment and submission.
• Step four: Respond to enquiries, check the draft terms and satisfy pre-licensing conditions.
• Step five: Final authorisation, product launch acceptance testing and a first-year maintenance plan.

ASIC Service targets are decisions on 70% of complete applications within 150 days and 90% within 240 days. These targets apply to decisions on whether to grant or vary a licence; they do not mean approval is certain. A shortage of managers, complex innovation, outsourcing arrangements not yet in place, funding shortfalls or multiple rounds of enquiries may extend the timeframe. Where applicable, fund registration has a separate statutory processing timeframe; this must not be used to infer that AFSL is equally fast.ASIC Service targets

Commercial budgets should schedule initial preparation, ASIC assessment, and bank and system launch separately. A simple advisory or agency business may be planned on an overall basis of around 6–12 months; allow longer for complex asset custody, retail issuance or dual APRA licensing. These are non-binding estimates. The official application fee is calculated by the portal based on the entity and authorisations selected; applicable annual rates may change. The original guide's fixed amounts and claimed 4–6 months after optimisation are not retained as quotations or commitments.

• List statutory application fees, annual company review fees and ASIC industry regulatory levies separately.
• Also budget for legal and compliance, managers and staff, audit, PI／compensation, AFCA, outsourcing, custody, banking and IT costs.
• Capital is an ongoing resource and should not be conflated with a one-off advisory fee as a total investment.

For retail services, provide FSG or the applicable statutory alternative information, as appropriate. Personal advice is subject to SoA／RoA, best interests and advice suitability obligations, and applicable product exceptions; a general advice warning cannot obscure advice that has in fact taken an individual's objectives into account. Professional standards for advisers dealing with retail relevant financial products differ from training standards for other advice providers and should be identified by category.Professional standards and experience pathways

PDS is not used uniformly for every product: an ordinary securities offer may be subject to a prospectus or other Chapter 6D disclosure, while insurance, superannuation and fund products are assessed under their respective regimes. An issuer subject to design and distribution obligations must prepare TMD; distributors must take reasonable steps and provide feedback on complaints and significant deviations. The sales process should address anti-hawking, risk disclosure, commission conflicts and unfair contract terms; a customer’s click to confirm should not be treated as a release from liability.

• Keep disclosure versions, delivery times, client selections and the basis for advice.
• Establish auditable classification controls for retail and wholesale entry points.
• Product changes trigger reassessment of TMD, distribution and client communications.

Current internal dispute resolution should use RG271; the former RG165 is no longer the current standard. A response to a general complaint under IDR is usually required within 30 calendar days, but pensions, death benefit distributions and other matters have specific time limits and procedures, so a single timeframe cannot be applied across the board. Applicable retail licensees should join AFCA and implement the relevant IDR data reporting requirements.RG271

Compensation arrangements applicable to retail clients are generally implemented through adequate PI insurance, but statutory exemptions, APRA entities or alternative arrangements approved by ASIC must be assessed in the particular circumstances. Insurance cannot guarantee coverage for every loss; review the scope of business, exclusions, retroactive date, excess, representative network and run-off cover after the business ceases. Wholesale business is not thereby exempt from civil liability or contractual insurance requirements.

• Establish complaint channels, responsible personnel, registration, investigation, timeframes and escalation of systemic issues.
• Check that the AFCA member is the same as the actual legal entity.
• Notify the insurer and assess historical liabilities when adding products, representatives or acquiring a business.

Money subject to the client money rules under the applicable company law must be deposited promptly into an eligible designated account and its use restricted, separately from working capital. Client money rules, statutory arrangements for insurance premiums, fund assets and custody financial products are not the same regime; it cannot be claimed that every AFSL company must open two types of bank account. Businesses providing advice only and not receiving client money generally do not need to open a trust account for client money they do not hold.

Holding clients’ financial products or beneficial interests in them may involve a custodial authorisation. Merely holding statutory client money does not automatically amount to providing custodial services, and there is a specific exclusion for a responsible entity holding registered scheme property. Appointing a third party does not automatically remove licensing or oversight obligations. The contract must be checked to establish who provides the service, who holds the legal or beneficial interest, and whether the relevant custody conditions are met.RG166 Custody classification

• Banks conduct their own KYC and risk approvals; a licence does not guarantee account opening.
• Establish processes for identifying ownership of funds, daily applicable reconciliations, payment authorisations and handling discrepancies.
• Custody agreements should cover asset segregation, sub-custody, records, withdrawals, insolvency and exit.
• Client money and fund assets must not be used to meet the company's own capital requirements.

Whether AUSTRAC obligations apply depends on which designated services are provided and their territorial connection; holding AFSL does not automatically make an entity a registered entity of every type. Relevant businesses must complete the applicable enrolment/registration and implement risk assessments, an AML/CTF programme, customer and beneficial owner due diligence, ongoing monitoring and applicable reporting. The designated service assessment may differ for advice-only businesses compared with issuance, securities trading, remittance or digital asset services.AUSTRAC Reform overview

Reforms for existing reporting entities commence mainly from 31 March 2026, with some matters affected by transitional rules; new professional services and expanded designated services for digital assets will be regulated from 1 July 2026. These should no longer all be described as future trends, nor should it be assumed that all transitional arrangements end on the same day. The new scheme, responsible persons, due diligence, value transfers and reporting requirements should be checked against the services actually provided.

• Prepare the designated services list separately from the ASIC authorisation matrix.
• Establish SMR, applicable large cash and cross-border value transfer reporting, and confidentiality controls.
• Keep AML records and adjust systems in line with transitional arrangements for the new and old rules.
• Do not promote AUSTRAC registration as approval of an investment product or AML certification.

Governance should cover systems for transactions, valuations, records, complaints, capital calculations and asset withdrawals. Controls should be proportionate to the scale and risk, including access permissions, multi-factor authentication, data backups, patching, supplier oversight, incident response and recovery testing. AFSL general obligations do not require every institution to obtain ISO27001, SOC2 or certification for a specified branded platform.

Outsourcing contracts should ensure audit access, data access, incident notification, continuity of services and exit migration. Overseas cloud services and remote employees require assessment of privacy, cross-border data disclosure, accessibility and operational risks; best practice must not be presented as a fixed Australian data-localisation requirement applying across the entire industry. The applicability of privacy law and data breach notification requirements depends on the entity and processing activities; they should not be applied indiscriminately to all small businesses.

• Separate financial decision-making, settlement, asset management and system access to prevent one person from controlling the entire process.
• Determine recovery time and alternative systems through business impact analysis.
• Retain evidence of incidents, exercises, supplier due diligence and remediation.

Throughout the licence period, the licensee must continue to meet the requirements corresponding to its authorisation for responsible managers’ competence, financial resources, insurance, complaints, representative supervision and client protection. Annual accounts must be submitted through the Regulatory Portal with the applicable financial statements and audit report or compliance certificate; historical FS70 and FS71 names must not be treated as current, uniform forms. Disclosing entities that are companies generally submit within three months of the financial year-end, non-disclosing entities that are companies within four months, and licensees that are not companies within two months; check the rules separately for foreign companies and limited licences.Annual financial filing

Identify legally prescribed reportable circumstances and report within the applicable time limits. Not every minor error is reportable in the same way, and a uniform three-day notification requirement should not be applied to all financial changes. Specific capital regimes may have additional risk thresholds, restrictions on commencing new transactions or notification arrangements. Changes to business address, contact information and relevant licence details generally have a ten-business-day notification period; matters concerning control, advisers, representatives and key persons should be checked against their respective specific rules.

• Establish financial forecasts, capital monitoring, board approvals and an audit calendar.
• Keep details of managers, advisers, representatives, websites and company registrations accurate.
• Submit IDR, industry funding activity indicators and AUSTRAC information as required.
• Classify record retention periods by financial, advice, AML and product-specific requirements; do not describe them all as seven years.

AFSL belongs to a specific licensed legal entity; a licence number cannot be transferred as a separate asset. A share acquisition can retain the licensed entity, but the authorisations, licence conditions, controllers, retention of managers, finances, complaint history, client money, audit, tax, regulatory actions and insurance must be reviewed. An acquirer of assets or client business must itself hold the required authorisations or put valid arrangements in place; buying a company is not a shortcut that automatically permits it to offer new products.

Control is assessed under company law s910B, including a majority of votes or capital, board composition and the actual ability to determine policy; a fixed 20% shareholding does not, by itself, mean that prior approval from ASIC is required. ASIC states on its website that it must be notified no later than 30 working days after control starts or ceases. Specific licence conditions and other regimes, including APRA and FIRB, may separately require approval. Changes to expand products, issuance, retail or market-making activities must be obtained in advance.Control rules

• Due diligence on the actual licence documents and public registers, not just screenshots of licence numbers.
• Completion conditions include managers, banking, custody, insurance, systems and any necessary regulatory approvals.
• Retain historical files, indemnity arrangements and notification lists.
• After an acquisition, reassess capital and the compliance boundaries of each branch.

ABN, TFN, GST and employee tax registrations should be addressed as applicable; AFSL does not itself provide tax concessions. Financial supplies are often input-taxed, but financial advice, management, brokerage and other fees may not be treated the same way, and input tax credits are subject to rules and exceptions. Cross-border management fees, shareholder financing and trust structures require separate assessment of tax residency, permanent establishment, transfer pricing and fund taxation.ATO financial supplies

Ceasing operations does not automatically end ongoing maintenance obligations. Arrange for the return of customer funds, asset transfers, unresolved complaints, termination of representatives, tail insurance cover, record retention and maintenance of capital, then apply to cancel or suspend the licence through the proper process. A fund or CCIV must also separately address the winding up of the scheme or sub-fund, registration status and property; deregistering the management company alone is not sufficient.

• Analyse GST by income category; do not describe all financial institution income as tax-exempt.
• Establish a plan for ceasing business, notifying customers, transferring assets and retaining responsibility.
• Cancellation of a licence, company deregistration, fund termination and AUSTRAC status must be dealt with separately.

The MDA instrument remade in September 2026, instrument 2026/720, replaces 2016/968. Relevant breach notifications and electronic access arrangements should be handled under the new instrument and transitional period; do not mechanically continue to describe the old ten-day notification requirement or quarterly reporting as permanent. Although instruments increasing capital for responsible entities, IDPS and retail CCIV have been announced, they do not commence until 1 July 2027.MDA Update

The digital asset framework legislation passed and received Royal Assent in 2026, but the new DAP／TCP framework takes effect in April 2027. As at the date of this guide, CP392 operational, custody and capital standards remain under consultation; the proposed digital asset NTA cannot be presented as a currently settled threshold. The April ASIC roadmap states 9 April, while the October announcement states 8 April, a one-day discrepancy between the two official website publications. The specific commencement date must be checked against the statutory commencement provisions; this guide makes no commitment to a specific day. Existing digital asset services involving financial products remain subject to current law.October 2026 consultation

The current CFD product intervention order is expected to remain in force until 23 May 2027. The October 2026 consultation proposal to extend it to 2037 and expand the definition of digital asset settlement has not yet taken effect and must not be presented as law. FAR already applies to specified banking, insurance and superannuation institutions; it does not automatically apply to all AFSL companies.CFD Official proposal APRA FAR

• Record the publication date, commencement date, transitional conditions and implementation lead for each reform.
• The latest official announcements and legal instruments prevail; the date shown on an old webpage cannot override its updated attachments.
• Do not advertise approval, certification or guaranteed services before formal official authorisation has been obtained.

Byline: Drew Tang (Mr Tang/Drew), Business Manager; Rengangyongsheng (Hong Kong) Limited, English name Rengangyongsheng (Hong Kong) Limited. This guide is for the Chinese-language business information on afsl8.com. It brings together the effective-application, capital, personnel, client-protection, banking, technology, tax and maintenance topics in the user’s own guide, and updates regulatory facts using direct official sources.

Consultancy support may include business assessments, review of authorisation combinations, coordination of company structures, assistance with manager recruitment, preparation of information, assistance with regulatory enquiries, planning financial and AML frameworks, acquisition due diligence and coordination of ongoing maintenance. Actual legal advice, audits, insurance and banking decisions are the responsibility of professionals with the relevant qualifications or functions. This article does not claim that its author is an Australian lawyer, auditor, registered financial adviser or holds AFSL qualifications.

Consultancy contact details listed in its own sources: WhatsApp +852 9298 4213, WeChat +86 159 2000 2080, email Drew@cnjrp.com; the Hong Kong licensing consultancy address is 86/F, International Commerce Centre, 1 Austin Road West, Kowloon; an appointment and verification are required. This is not the applicant’s Australian registered address and does not mean that our organisation holds a ASIC licence at that address. This article provides general information and does not constitute professional advice on a specific application, tax or investment matter.

• Do not retain unsupported figures for licences granted, success rates, regulatory certification or bank-friendliness rankings without official or verifiable evidence.
• Before formally applying, review the actual business, the law in force at the time and the terms of the ASIC licence.
• The full text extracted from the user's original guide is also saved as afsl-source.md; it is not reproduced verbatim for the public-facing site.

Complete guides to each subtype

The following are branches covering business activities, products or corporate structures; not every item corresponds to a separate statutory licence.

Frequently Asked Questions