A business that has an Australia remittance licence can give a buyer a ready-made entry into the payments and virtual-asset market. Instead of going through the process of getting a license and setting up the business structure with related procedures, the buyer takes over an existing entity.
There must be an in-depth review of the company’s history, internal controls, personnel, and the company’s dealings with AUSTRAC. Since the implementation of the AML/CTF amendments, these factors have become even more important.
How Ownership of an AUSTRAC Registered Company Is Transferred
A purchaser normally acquires the entity itself rather than treating the AUSTRAC status as a standalone permission.
Generally, buying a company may involve:
- examining the company’s records and history with AUSTRAC;
- establishing beneficial owners and persons exercising control;
- reviewing the directors and senior staff;
- scrutinizing the company’s AUSTRAC compliance with AML/CTF regulations along with the customer onboarding practices;
- looking at previous communications with AUSTRAC;
- agreeing the terms of the acquisition;
- officially changing the control;
- updating relevant records after completion.
Buyer Due Diligence and KYC Requirements
The underlying business should be examined carefully. Particular attention should be given to:
- the history of the business with AUSTRAC;
- customer identification procedures;
- suspicious matter submissions;
- threshold transaction records;
- AML/CTF controls;
- staff training;
- screening arrangements;
- monitoring tools;
- previous reviews or findings;
- unresolved issues with financial institutions.
KYC checks may also apply to people taking control of the business. AUSTRAC can require information concerning beneficial owners, directors and other key personnel.
Notifications and Regulatory Updates Following the Acquisition
Updates may concern:
- beneficial owners;
- directors;
- key personnel;
- the AML/CTF compliance officer;
- business activities;
- contact details;
- persons responsible for the operation.
AUSTRAC generally expects relevant changes to its records to be made within 14 days.
The purchaser should prepare these updates before completion wherever possible. Online access should also be checked when responsibility for the business passes to a new team.
Australia’s AML/CTF Reforms: What Changed for DCE and IRD Businesses
Existing DCEs moved automatically to the VASP category. They did not need to start a new registration process, but their details and internal procedures had to be updated. Existing IRDs retained their registrations under the transitional rules.
The main areas affected:
- customer identification and verification;
- beneficial-owner checks;
- suspicious activity monitoring;
- record keeping;
- staff training;
- AML/CTF program reviews;
- information requirements for certain transfers.
Transition from DCE registration to the new VASP framework
| Business type | Position from 31 March 2026 |
| Existing DCE | Moved automatically to VASP |
| Existing IRD | Existing status continues |
| New VASP | Must follow the current AUSTRAC process |
| New IRD | Must satisfy applicable conditions before operating |
New AML/CTF obligations.
After completion, the business continues to operate under the AML/CTF regime.
Depending on its activities, its obligations can include:
- submitting suspicious matter reports;
- submitting threshold transaction reports;
- completing annual compliance reports;
- maintaining customer records;
- keeping an effective AML/CTF program;
- reviewing customer information;
- monitoring relevant activity;
- retaining prescribed records.
Internal procedures should match the actual business model. A policy created for one type of service may no longer be suitable if the new owner expands into other virtual-asset or remittance activities.
Travel Rule Implementation
The 2026 reforms introduced the Travel Rule for certain virtual-asset transfers. Businesses covered by the rule must collect, retain and pass on prescribed information when processing relevant transfers.
For a buyer, this means checking whether the existing systems can support these procedures. Customer and counterparty information should be handled consistently, with clear procedures for cases where required information is missing or incomplete.
Transitional Arrangements for Existing Businesses
Existing AUSTRAC DCE and IRD businesses are subject to transitional provisions under the 2026 reforms.
The buyer should check which procedures have already been updated and identify any remaining work. The transition does not remove the business’s AML/CTF obligations.
Ongoing Compliance Requirements After the Purchase
Depending on activities, these may include:
- suspicious matter reports;
- threshold transaction reports;
- annual compliance reports;
- customer record keeping;
- AML/CTF program reviews;
- ongoing customer monitoring.
If there are changes, the relevant procedures should be updated accordingly.
Management, Compliance Officer and AML Program Requirements
The incoming team should establish who will act as AML/CTF compliance officer and ensure that the person can perform the role effectively.
The AML/CTF program should then be reviewed. Sound controls can remain in place, while outdated elements are amended.
Staff should understand their responsibilities, particularly in relation to customer checks, unusual activity, record keeping and escalation procedures.
Why Buying an Existing AUSTRAC Company Can Save Time
- Starting a new operation requires considerable preparation. An established entity may already have its structure, AUSTRAC history, banking arrangements, internal procedures and operational infrastructure.
- There is still work to complete after the acquisition, particularly where the business must adapt to changes. The advantage is that the purchaser takes over an operating structure instead of creating every element from scratch.
- The quality of the existing business is more important than simply having an AUSTRAC status on paper.
Future Regulatory Outlook for Crypto and Remittance Businesses in Australia
The new Australian crypto regulation is moving into a wider AML/CTF framework and setting higher standards on operational details.
The revisions have already increased the extent of the activities that fall under the regulation as well as incorporated new requirements.
The state of the business at the time of AUSTRAC registration transfer is crucial to buyers. It is much easier to adjust a business with a clean history and professional staff that is supported by efficient internal controls.
FAQ
How is ownership of an AUSTRAC registered company transferred?
Usually through the acquisition of the entity holding the relevant AUSTRAC status.
Does AUSTRAC need to be notified after a change of ownership?
Yes. Relevant changes should be reflected within the applicable timeframe.
Can foreign investors acquire an AUSTRAC registered company?
Foreign investors may acquire an entity, subject to applicable local rules.
What documents are required from the buyer?
The exact list depends on the structure of the acquisition. Identification information, corporate details, beneficial ownership information and details concerning incoming key personnel may be required.
What happens to the existing DCE registration after the AML reforms?
Existing DCE businesses moved automatically into the VASP category. They were required to update their AUSTRAC information and adapt to the new rules.
What is the difference between a DCE and a VASP?
DCE was the previous category covering specified activities. VASP is the broader category which covers a wider range of services.
Will an existing DCE automatically become a VASP?
Yes. Existing DCE businesses transitioned automatically under the transitional provisions.
What new AML/CTF obligations apply to crypto businesses?
The amended regime introduces stronger customer-checking, record-keeping, monitoring and transfer-information obligations. The precise duties depend on the services provided.
Does the Travel Rule relate to AUSTRAC registered businesses?
It applies to relevant virtual-asset transfers which are covered by the rules. Businesses handling such transfers need suitable procedures and technology.
Are IRD registrations still valid?
Yes. Existing AUSTRAC IRD registrations continue under the transitional arrangements.
Is a new registration required after the reforms?
Since AUSTRAC VASP became the new category for DCE, existing DCEs don’t have to do a new application. Existing IRDs also don’t have to change their status under the transitional arrangement rules.
What ongoing reporting obligations apply after the acquisition?
Based on the services offered, the business might have to file suspicious matter disclosures, limit-exceeding operation summaries and yearly adherence reports whilst maintaining the required records as mandatory.
How long does the acquisition process usually take?
There are different factors affecting the duration of the process, so there is no standard timeframe.
Why buy an existing AUSTRAC registered company instead of applying for a new registration?
An existing company already possesses AUSTRAC history, procedures, staff, etc. These aspects reduce the groundwork that new organizations have to do.
- How Ownership of an AUSTRAC Registered Company Is Transferred
- Buyer Due Diligence and KYC Requirements
- Notifications and Regulatory Updates Following the Acquisition
- Australia's AML/CTF Reforms: What Changed for DCE and IRD Businesses
- Transition from DCE registration to the new VASP framework
- New AML/CTF obligations.
- Travel Rule Implementation
- Transitional Arrangements for Existing Businesses
- Ongoing Compliance Requirements After the Purchase
- Management, Compliance Officer and AML Program Requirements
- Why Buying an Existing AUSTRAC Company Can Save Time
- Future Regulatory Outlook for Crypto and Remittance Businesses in Australia
- FAQ