On paper, structuring a security token offering in Australia looks tractable. In practice, the legal exposure runs across three parallel regimes simultaneously – the Corporations Act's managed investment and financial product provisions, AUSTRAC (the Australian Transaction Reports and Analysis Centre) registration under the anti-money-laundering framework, and the ASX/ASIC disclosure and licensing obligations that apply once tokens carry rights that resemble equity or debt. Miss any one of them, and a product launch becomes an unregistered securities offering with all of the civil and criminal consequences that follow.
This page sets out the legal architecture of a security token offering structured for the Australian market, the cross-border questions that most inbound operators encounter, and the structural decision points that determine whether the offering proceeds cleanly or triggers regulatory remediation.
What makes a token a security in Australia?
Australian law applies a substance-over-label test: if the rights attached to a token meet the statutory definition of a financial product under the Corporations Act – most commonly a managed investment scheme interest, a share, or a debenture – the token is regulated as a security regardless of what the whitepaper calls it. ASIC (the Australian Securities and Investments Commission) has published guidance making clear that calling a token a "utility token" does not determine its classification; the economic substance of what the holder receives is what matters. In our practice, we apply the same substance-over-form analysis on day one, before a single line of marketing copy is written. That approach is the primary defense against the scenario ASIC most frequently encounters: an issuer who labelled a token a utility instrument but structured rights that look, economically, like a profit share.
The classification question turns on three axes. First, does the holder acquire a right to a financial return generated by the issuer's or a third party's efforts? Second, does the token confer a right to a pool of assets or to a scheme managed by a promoter? Third, is the token redeemable against a fiat or asset peg in a way that resembles an e-money obligation? If any of these is answered affirmatively, the offering is in regulated territory. The AUSTRAC registration obligation is distinct – it attaches to the provision of digital currency exchange services and certain payment functions, not to the act of issuance alone – but the two regimes interact directly when token proceeds are exchanged on a secondary market.
How does AUSTRAC registration interact with a token offering?
AUSTRAC registration is required for any business that provides a digital currency exchange service in Australia, and the obligation can attach to a token issuer whose distribution mechanics include an exchange function. The AUSTRAC regime derives from Australia's Anti-Money Laundering and Counter-Terrorism Financing Act, and the key compliance obligations are a robust AML/CTF program, ongoing transaction monitoring, and threshold transaction reporting. Issuers who route secondary liquidity through an Australian platform, or who operate a smart-contract-based primary issuance with an exchange-like matching function, should assess whether that function constitutes a registrable designated service.
The FATF Travel Rule (the obligation to pass originator and beneficiary identification data with a qualifying transfer) applies in Australia, and the threshold – while expressed qualitatively here pending any regulatory update – aligns with the FATF standard. Inbound operators structured outside Australia but targeting Australian investors must assess whether a physical or virtual Australian nexus triggers the registration obligation. We have advised businesses in this position; the analysis turns on where the designated service is "provided" rather than where the operator is incorporated.
The process above describes the standard path. Your facts – the token's rights structure, the investor base, the distribution channel – change the analysis materially. For an initial classification read against your whitepaper and terms, contact OBOLUS at info@oboluslaw.com.
Does a security token trigger managed investment scheme obligations?
A security token that pools investor capital into a common enterprise managed by the issuer almost certainly constitutes a managed investment scheme (MIS) under the Corporations Act, and registration of the scheme with ASIC is required unless a specific exemption applies. The MIS regime is one of the most significant structural traps for token issuers in Australia. Issuers who are surprised by this classification typically modeled their offering on offshore market standards without mapping the Australian statutory test. The responsible entity requirement – which mandates an Australian Financial Services Licence (AFSL) holder to manage a registered scheme – is operationally significant for foreign-domiciled issuers.
The most commonly used exemptions are the wholesale-investor carve-out, the sophisticated-investor test, and small-scale offering relief. Each has strict conditions on investor count, offer size, and marketing conduct. Operating outside these conditions exposes the issuer to ASIC enforcement and, potentially, a criminal offering offence. In our cross-border practice, we regularly advise offshore issuers on whether Australian-resident investors can be admitted under the wholesale exemption without triggering the full registration pathway.
What does a compliant Australian token offering structure look like?
A compliant structure for a security token offering in Australia proceeds in five identifiable stages, each with a corresponding legal deliverable.
Stage 1 – classification opinion. Before any documentation is drafted, counsel produces a written classification analysis. This maps the token's rights against the financial product definitions and the MIS test. The output is a defensible written record that the issuer applied the correct legal standard before launch.
Stage 2 – entity and AFSL analysis. If the offering falls within a regulated category, the issuer must either hold an AFSL, engage an AFSL holder as responsible entity or placement agent, or structure the offering exclusively to wholesale or sophisticated investors under an applicable exemption. Foreign issuers frequently engage an Australian AFSL-licensed partner for this purpose.
Stage 3 – offering documentation. For a registered or exemption-reliant offering, this includes a product disclosure statement (PDS) or a compliant information memorandum, subscription documentation, investor eligibility certifications, and smart-contract specification. The documentation must accurately describe the rights, the risk profile, the issuer's obligations, and the secondary-market access mechanisms.
Stage 4 – AUSTRAC assessment. The issuer's AML/CTF exposure is mapped. Where the distribution architecture triggers a registrable designated service, AUSTRAC registration and an AML/CTF program are prepared concurrently with the offering documentation.
Stage 5 – secondary market and custody planning. Australian investors holding tokenized securities have legitimate expectations about custody, liquidity, and transfer. Issuers must decide at structuring stage whether to list on a regulated facility, engage an OTC desk, or restrict secondary trading entirely during a lock-up period. Each choice has regulatory and commercial consequences that need resolution before the offering opens.
How does an Australian token offering interact with offshore structures?
Most security token offerings we see are not purely domestic. A Cayman-incorporated fund issues tokens representing interests in an Australian real asset; a Singapore-based technology company opens its round to Australian wholesale investors; a BVI entity uses a smart contract to manage distribution across multiple time zones. In each case, the Australian regulatory regime does not disappear simply because the issuer is offshore.
The operative principle is that ASIC and AUSTRAC both apply a nexus test: if Australian residents are targeted or admitted, or if the designated service is provided in or from Australia, the Australian regime applies. This means an offshore issuer must run a parallel analysis of its home jurisdiction – whether MiCA in Europe, MAS requirements in Singapore, or VARA obligations in Dubai – against the Australian-specific obligations. We coordinate that cross-border analysis, working with allied counsel in the relevant jurisdiction to map each regime against the issuer's fact pattern before any investor communication is made.
Banking is a parallel constraint. Australian financial institutions have expressed caution about accounts servicing token offering proceeds, and this is not unique to Australia. We have seen offerings where the primary structure was legally sound but the banking strategy was underdeveloped, producing a delay at the exact moment that investor funds needed to settle. Tax treatment of token proceeds – income versus capital characterization, GST implications – also varies by offering structure and needs to be modeled before documentation is finalised.
If a prior offering structure was flagged by ASIC or a banking partner, a second analysis of the structural design can surface the specific point of failure. Write to OBOLUS at info@oboluslaw.com to discuss a structural review.
How has this played out in practice?
In a recent matter, a technology company domiciled in Southeast Asia sought to raise capital by issuing tokens representing interests in an Australian infrastructure project. The initial whitepaper described the tokens as utility instruments conferring platform access rights. Our classification analysis identified that the economic substance of the tokens – a proportionate share of project revenue distributed at the issuer's discretion – closely tracked a managed investment scheme interest under Australian law. We restructured the offering as a wholesale scheme under the applicable AFSL-licenced responsible entity, prepared a compliant information memorandum, and conducted a parallel AUSTRAC exposure mapping. The offering proceeded to a close in the same quarter, with documentation that withstood a subsequent ASIC review query without material amendment.
Which structure should your offering use?
The appropriate structure depends on three variables: the token's rights profile, the investor base, and the issuer's operational footprint in Australia. The following profiles describe the most common patterns.
Profile A – offshore issuer, no Australian operational presence, wholesale investors only. This profile may qualify for the sophisticated-investor or wholesale exemption, avoiding full MIS registration. The critical condition is that the investor-count and offer-size limits are respected at all times, and that no general solicitation is made to Australian retail investors. AUSTRAC exposure is low if no Australian exchange function is present. Indicative timeline to a compliant close: several weeks from classification opinion to subscription close, depending on documentation complexity.
Profile B – offshore issuer, Australian assets or investors above the wholesale threshold. This profile requires engagement of an Australian AFSL-licensed responsible entity or a full MIS registration. AUSTRAC registration is likely where the distribution involves any exchange-equivalent function. The timeline extends materially; MIS registration is not a short process, and AFSL partner identification adds lead time.
Profile C – domestically incorporated issuer offering to retail investors. This is the highest-compliance profile: full MIS registration, PDS preparation, AFSL licensing or engagement, AUSTRAC registration, and ongoing reporting obligations. Not appropriate for a rapid capital raise; issuers in this profile are typically established businesses with recurring funding programs. The legal structure, once built, is reusable for subsequent rounds.
No single profile is inherently preferable. The right choice turns on the facts of the issuer, the assets, and the investor community. A common mistake at this decision point is choosing the lightest available structure based on cost, without mapping whether the actual investor base fits within its legal conditions.
What are the most common structural mistakes in Australian token offerings?
A utility label does not settle legal classification. This is the predominant structural error we identify in inbound instructions – an issuer who received informal confirmation that the token was "not a security" based on the label attached to it rather than the substance of the rights it confers. ASIC's guidance is explicit that the economic substance analysis governs, not the marketing term. Operators who rely on the label alone carry a material regulatory risk that survives the offering close and sits as a latent liability.
A second common error is treating Australian law as a single regime. The Corporations Act financial-product obligations, the AUSTRAC AML/CTF requirements, and ASIC's financial-services licensing framework are three distinct bodies of law with different triggers and different enforcement authorities. Missing any one of them while complying with the other two is not a partial success; it is a compliance gap that can interrupt the offering or expose the issuer after the fact.
A third error, specific to cross-border structures, is under-estimating the Australian nexus test. Issuers who close their offering offshore and then allow secondary-market transfers to Australian-resident holders can trigger Australian regulatory obligations at the secondary-market stage even if the primary offering was cleanly structured. Secondary-market planning is not optional; it is part of the initial structure.
Self-assessment checklist before approaching a legal team
Before a first instruction meeting, an issuer can usefully prepare the following: a current draft of the token's rights terms (even in bullet-point form); a description of the intended investor base by geography and by retail or wholesale classification; a summary of the distribution mechanism, including any exchange or matching function; and a description of any existing AUSTRAC or ASIC registrations held by the issuer or its affiliated entities. Issuers who arrive with this information reduce the time and cost of the initial classification analysis substantially. We work through these inputs in a structured first-engagement call, typically conducted under a mutual NDA.
Related at OBOLUS
- Token Offerings & Securities Practice – our full-service approach to token structuring and securities compliance across jurisdictions
- Utility Token – A Legal Guide – the substance-over-label test applied to utility token classification
- AML/CFT Policy Drafting in Cayman Islands – AML/CTF program structuring for offshore digital-asset entities
FAQ
Is my token a security?
Australian law applies a substance-over-label test under the Corporations Act. If your token confers rights to a financial return, a share in a managed pool, or an obligation resembling a debt instrument, it is likely a financial product regardless of its label. The determination turns on the economic substance of the rights attached to the token – not the marketing term used in the whitepaper. A classification opinion from qualified counsel is the appropriate first step before any investor communication is made.
Do I need a MiCA whitepaper?
MiCA is European Union legislation and applies to offerings targeting EU/EEA investors or to issuers authorised in the EU/EEA. An Australian offering does not require a MiCA whitepaper as a matter of Australian law. However, if your offering is cross-border and EU/EEA investors are included, MiCA whitepaper and CASP authorisation obligations apply in parallel with the Australian regime. The two regimes are independent; compliance with one does not satisfy the other.
How should an airdrop be structured legally?
An airdrop distributing tokens with financial-product characteristics to Australian residents is not exempt from the Corporations Act simply because no consideration is charged. ASIC assesses the substance of what is transferred. A compliant airdrop structure in Australia typically restricts distribution to non-retail participants, excludes Australian residents from the airdrop population, or limits token rights to genuine non-financial utility. Each approach requires a prior classification analysis and, where financial-product rights are present, a legal opinion supporting the chosen exemption pathway.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the entirety of our practice, and we act only for businesses. Our classification analysis is built on the substance of rights, not the marketing label – the distinction that determines whether an offering is defensible. To discuss your structure, contact info@oboluslaw.com or message us at t.me/oboluslaw.
By Roman Levitt, Technology & DeFi Counsel – specialising in token classification, smart-contract legal architecture and cross-border digital-asset structuring, with particular focus on Australian and Asia-Pacific regulatory frameworks.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.