Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
How To Get An Australian Credit Licence: Step-By-Step
- 1) Confirm your activities and authorisation model
- 2) Choose and register your business structure
- 3) Identify Responsible Managers and organisational competence
- 4) Design your compliance framework
- 5) Set up dispute resolution
- 6) Arrange compensation and insurance
- 7) Prepare for privacy and data security
- 8) Lock in operational arrangements
- 9) Draft your customer-facing collateral
- 10) Lodge your ACL application with ASIC
- Key Legal Documents For A Credit Business
- Alternatives To Holding Your Own Licence
- Key Takeaways
Thinking of offering loans, broking credit, or arranging consumer finance in Australia? If your business provides consumer credit or credit assistance, you’ll likely need an Australian Credit Licence (ACL) from ASIC before you start. Getting licensed isn’t just a form to lodge - it’s about building the right structure, systems and accountability so you can operate legally and sustainably.
In this guide, we’ll break down what an ACL is, when you need one, the step-by-step licensing process, and your ongoing compliance obligations. We’ll also cover the key documents to have in place and alternatives if you’re not ready to hold your own licence yet.
What Is an Australian Credit Licence (And Do You Need One)?
An Australian Credit Licence authorises you (or your business) to engage in “credit activities” covered by the National Consumer Credit Protection Act 2009 (NCCP Act) and the National Credit Code. In simple terms, you need an ACL if you offer or assist with consumer credit.
Common “credit activities” that require an ACL
- Providing credit to individuals for personal, household or domestic purposes (e.g. personal loans, credit cards, payday loans, buy-now-pay-later variants that fall within the credit laws).
- Credit assistance, such as suggesting or assisting a consumer to apply for credit or to increase their credit limit (e.g. mortgage and finance broking).
- Acting as an intermediary or servicing/administrating credit contracts and consumer leases.
- Consumer leases where the arrangement is regulated under the National Credit Code.
Business-only lending may fall outside the consumer regime, but be careful: if the borrower is an individual or the purpose is mixed, you can still be captured. Always check how your products are structured and who your customers are.
Do you always need your own licence?
No - some businesses operate as an authorised credit representative of an existing licensee. This can be faster to get to market, but you must comply with the licensee’s supervision and reporting arrangements. If you want full control of products, branding and compliance frameworks, getting your own ACL is usually the better path.
How To Get An Australian Credit Licence: Step-By-Step
ASIC assesses whether you’re competent, resourced and set up to comply with the law. That means preparation is everything. Here’s a practical roadmap.
1) Confirm your activities and authorisation model
Map exactly what you’ll do (e.g. broking, lending, servicing) and decide whether you’ll apply for your own licence or operate as a credit representative. Your business plan should explain your products, target customers, and how you’ll comply with the credit laws.
2) Choose and register your business structure
Decide whether to operate as a sole trader or a company. Many founders set up a proprietary company for liability protection and credibility. If you go down this route, sort your Company Set Up and internal governance (like a Company Constitution) early. If there are multiple founders, a tailored Shareholders Agreement will help define ownership, decision-making and exit terms.
3) Identify Responsible Managers and organisational competence
ASIC expects your team to have the right skills and experience for the credit activities you seek to authorise. Usually, you’ll nominate one or more Responsible Managers who demonstrate relevant industry experience and qualifications. You’ll also document your training plan, supervision, and how competence is maintained as you scale.
4) Design your compliance framework
Your licence application must show how you’ll comply with the law day-to-day. This normally includes policies for responsible lending (where applicable), hardship and vulnerability, complaints handling, breach reporting, risk management, outsourcing oversight, and record‑keeping. Build practical procedures and template records - ASIC wants to see more than a paper promise.
5) Set up dispute resolution
You’ll need internal dispute resolution (IDR) procedures that meet ASIC requirements and membership of the Australian Financial Complaints Authority (AFCA) for external dispute resolution. Your Credit Guide must clearly tell consumers how they can complain and what to expect.
6) Arrange compensation and insurance
ASIC expects licensees to maintain adequate compensation arrangements, typically through professional indemnity insurance suitable for the size and nature of your business. Ensure your policy covers representatives, sub‑authorised reps and the products you offer.
7) Prepare for privacy and data security
Credit businesses handle sensitive personal and financial information. Put in place a compliant Privacy Policy, consents and collection notices, secure data handling practices, and a tested Data Breach Response Plan. Lenders may also need to consider obligations under AML/CTF laws.
8) Lock in operational arrangements
Document key relationships with brokers, referrers, software providers, call centres and outsourced service providers. Align remuneration and commissions with your responsible lending and conduct obligations. If you will take security over goods or assets, plan to use the PPSR - here’s a handy overview of what the PPSR is.
9) Draft your customer-facing collateral
Prepare compliant credit contracts, consumer lease agreements, the Credit Guide, quote/credit proposal disclosures, hardship and complaints information, and marketing disclaimers. On the web side, make sure your site has clear Website Terms of Use and accessible disclosures.
10) Lodge your ACL application with ASIC
Use ASIC’s online portal to apply, select authorisations consistent with your business plan, and upload your evidence (policies, RM details, org charts, AFCA membership, insurance, etc.). ASIC may ask questions or request more information - respond promptly and keep your materials consistent.
Timeframes vary based on complexity and ASIC’s workload. Build in a buffer before your planned launch.
Ongoing Compliance Obligations You Must Meet
Getting your ACL is the start - staying compliant is a continual process. Here are the big ticket items most credit businesses need to manage.
Responsible lending and conduct
Depending on the product, you may need to assess whether the credit contract is “not unsuitable” for the consumer, make reasonable inquiries about requirements and objectives, and verify financial situation. Keep your policies updated with legislative changes and ensure front-line staff understand the steps and records required.
Complaints and breach reporting
You must follow ASIC’s standards for internal dispute resolution and maintain AFCA membership. Material incidents may trigger breach reporting obligations. Ensure you can identify, assess and escalate issues quickly and keep a clean audit trail.
Marketing and disclosure
Advertising credit products is regulated. Watch claims about interest rates, comparison rates, fees and approval likelihood. Your credit disclosures must be clear, accurate and timely. If you take repayments via direct debit, make sure your processes comply with direct debit laws and your contractual terms are transparent.
Privacy, data and information security
Credit businesses collect extensive personal information. Keep your Privacy Policy current, apply data minimisation, restrict access, and test your incident response using your Data Breach Response Plan. If you use credit reporting bodies or share data with third parties, ensure appropriate consents and contractual controls are in place.
Training and competent staff
Maintain regular training for brokers, assessors and customer-facing teams on responsible lending, hardship, vulnerability and complaints handling. Document completion and effectiveness. Solid HR foundations help here - each team member should have a clear, written Employment Contract and role description aligned with your compliance program.
Record-keeping and audits
Keep thorough records of assessments, verifications, disclosures, complaints and decisions. Schedule periodic compliance reviews and independent audits where appropriate. Good records protect consumers and your business if ASIC or AFCA asks questions.
Financial resources and insurance
Monitor your financial position to ensure you have adequate resources to carry on your credit activities, including maintaining appropriate PI insurance and buffers for stress scenarios.
Key Legal Documents For A Credit Business
The documents you need depend on your model (lender, broker, servicer), but most credit businesses should consider the following.
- Credit Contract or Consumer Lease: Sets out the terms, repayments, fees, disclosures and statutory rights under the National Credit Code.
- Credit Guide and Credit Proposal Disclosure: Explains your services, fees/commissions, dispute resolution and key information a consumer must receive.
- Privacy Policy: Explains how you collect, use and store personal information (link it in applications and on your website) - see Privacy Policy.
- Website Terms of Use: Sets ground rules for using your site, online applications and disclaimers - see Website Terms of Use.
- Direct Debit Terms and Authority: Allows you to collect repayments lawfully and transparently, consistent with direct debit laws.
- Hardship and Complaints Procedures: Internal processes and customer communications to manage hardship requests and disputes.
- Responsible Lending and Verification Checklists: Practical tools to standardise inquiries, verification and decision-making.
- Broker/Referrer or Outsourcing Agreements: Controls for third parties who assist with distribution, lead-gen, credit assistance or servicing.
- Security and PPSR Clauses/Template: If you take security, ensure your contracts and internal playbook support timely registrations on the PPSR - here’s a refresher on what the PPSR is.
- Data Breach Response Plan: A step-by-step playbook for managing data incidents and notifying affected individuals - see Data Breach Response Plan.
- Employment Contracts and Policies: Define staff obligations and support training/monitoring - start with an Employment Contract.
- Founders and Governance Documents: Keep internal governance tight as you grow (e.g. Shareholders Agreement and board charters for companies).
Not every business needs every document on day one, but having the right ones tailored to your model will reduce risk and help you scale with confidence.
Alternatives To Holding Your Own Licence
If you’re testing a new concept or prefer to focus on distribution, you can operate as an authorised credit representative under another licensee’s ACL. This can reduce time-to-market, but you’ll need to follow the licensee’s compliance program, reporting and branding rules.
Another option is to buy an existing licensed business. If you go down this path, build in time for legal due diligence, reviewing key customer and supplier contracts, compliance history, AFCA outcomes, data security controls, and the financial model. You’ll still need to meet “fit and proper” criteria if you become the controller of a licensee.
Whichever path you choose, plan for the point where you’ll want more control and flexibility - that’s often when businesses transition to their own licence and mature compliance framework.
Key Takeaways
- An Australian Credit Licence is required for most consumer credit activities, including lending, broking and administering credit contracts.
- Before applying, get your structure, Responsible Managers, policies, insurance, AFCA membership and customer documents in order.
- Ongoing obligations cover responsible lending, complaints handling, breach reporting, privacy, marketing rules, staff training and robust record‑keeping.
- Strong contracts and policies - such as a Privacy Policy, Credit Guide, credit contracts and direct debit terms - reduce risk and support compliance.
- Operating as a credit representative can be a stepping stone, but holding your own licence gives you greater control over products and growth.
- Getting tailored legal help early will save time, avoid rework, and set your credit business up for long‑term success.
If you’d like a consultation on applying for (or operating under) an Australian Credit Licence, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.








