Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
Offering credit can be a powerful growth lever for a small business.
Maybe you want to let customers pay in instalments, launch a fintech product, run a brokerage, or help clients access loans so they can buy your services. But in Australia, anything involving consumer credit is heavily regulated - and the rules can apply even when credit isn’t your main business.
That’s where Australian Credit Licence requirements come in.
In this guide, we’ll walk you through what an Australian Credit Licence (ACL) is, when you need one, the common alternatives and exceptions, and what you’ll need to do to apply and stay compliant.
What Is An Australian Credit Licence (ACL)?
An Australian Credit Licence (often shortened to ACL) is a licence issued by ASIC (the Australian Securities and Investments Commission). It allows a business to legally engage in certain “credit activities” that are regulated under Australia’s consumer credit laws.
In plain terms, if your business is:
- providing credit,
- arranging credit,
- helping consumers apply for credit, or
- managing a credit contract,
…you may need an ACL (or you may need to operate under a licence holder as a credit representative).
Why Do ACL Requirements Matter For Small Businesses?
Because the definition of “credit activity” is broad, it’s possible to fall into ACL territory without realising it.
For example, you might be a:
- startup building a lending or pay-later product,
- broker or referral business connecting customers to lenders,
- service provider offering instalment plans,
- car dealership or retailer facilitating finance, or
- platform business introducing borrowers to credit providers.
If you get this wrong, the consequences can be serious: penalties, enforceable undertakings, reputational damage, and having to stop offering the product or service until you’re compliant.
When Do You Need An ACL? (Understanding “Credit Activities”)
The key question isn’t “Do I call myself a lender or broker?” It’s “Am I engaging in a regulated credit activity?”
While the legal detail sits in the National Consumer Credit Protection Act 2009 (NCCP Act) and related regulations, at a practical level, businesses commonly need an ACL if they do things like:
1) Providing Credit Under A Consumer Credit Contract
This can include issuing loans or offering credit to consumers (not just businesses). It can also capture some arrangements where payment is deferred over time, depending on how it’s structured.
Example: you offer customers a structured instalment plan with fees/charges that meet the definition of credit.
2) Acting As A Credit Assistance Provider
This typically includes:
- suggesting a particular credit contract is suitable for a consumer, or
- assisting a consumer to apply for, increase, or remain in a credit contract.
Example: your startup helps customers choose between loan products and then helps them complete and submit applications.
3) Acting As A Credit Intermediary (Introducing / Arranging)
If you introduce consumers to lenders, facilitate applications, or act as the “middle layer” between a borrower and a credit provider, you may be acting as an intermediary.
Example: you run a lead-generation business that matches consumers to lenders and you do more than just passively advertise.
4) Managing A Credit Contract Or Consumer Lease
“Credit activity” can include activities like collecting payments or enforcing rights under a credit contract, depending on the role you play and the arrangement structure.
A Quick Note On Business-to-Business (B2B) vs Consumer Credit
ACL obligations most commonly arise for consumer credit.
That said, it’s important not to assume you’re “safe” just because your customers are small businesses. Some arrangements still involve individuals (including sole traders) or personal, domestic or household purposes, and the analysis can get complex quickly.
If you’re not sure whether your product or process is covered, it’s worth speaking with a Regulatory Compliance Lawyer early - especially before you launch publicly.
Are There Any Exemptions Or Alternatives To Holding An ACL?
Not every business touching payments or referrals needs a full ACL.
In practice, there are two common pathways businesses explore:
1) You Rely On A Legal Exemption
Some activities may be excluded or exempt depending on exactly how they’re structured.
For example, there are exemptions and carve-outs that can apply in limited situations - but they are very fact-specific, and often turn on details like:
- whether you’re merely advertising vs actually “introducing” or “assisting”,
- how you’re paid (e.g. commission-based payments can increase regulatory risk),
- whether you give any opinion or recommendation about suitability, and
- how the customer application or onboarding flow is designed.
Because of that, we usually recommend you treat exemptions as something to confirm carefully (rather than assume). A small tweak to fees, marketing, or customer onboarding can change the outcome.
2) You Operate As A Credit Representative
Many startups and small businesses choose to operate under another business’s ACL by becoming a credit representative (or engaging through a licence holder structure).
This can be attractive because it may reduce the time and cost of becoming licensed yourself.
However, it’s not a “set and forget” solution. You’ll still need:
- clear contracts setting out roles and responsibilities,
- controls over what you can say to customers,
- compliant advertising and onboarding processes, and
- training and monitoring.
If this approach is on your radar, make sure you document your commercial terms properly, with tailored contracts for your referral or distribution relationships.
Australian Credit Licence Requirements: What ASIC Generally Expects
ASIC expects an ACL holder to be competent, well-resourced, and able to comply with ongoing obligations - not just at application time, but continuously.
While the exact requirements depend on your business model, here are the common areas ASIC focuses on.
1) You Must Be “Fit And Proper”
ASIC looks at whether the people behind the business are suitable to engage in credit activities. This can include things like past misconduct, insolvency history, and whether key people have the right level of integrity and competence.
2) You Need Organisational Competence
In practical terms, this means you need people (responsible managers and staff) with appropriate experience and knowledge of credit activities and compliance.
Startups often underestimate this part. ASIC generally wants to see that the capability is real - not just “we plan to hire someone later”.
3) You Need Adequate Resources
This usually includes:
- Financial resources (enough funding to operate and meet obligations)
- Human resources (staffing to handle operations and compliance)
- Systems and processes (policies, training, record-keeping, complaints handling)
4) You Must Have Compliance Arrangements
ASIC expects you to have an actual compliance framework that fits your model - including written policies and evidence your team follows them.
Depending on what you do, this can involve:
- responsible lending and suitability processes (where required),
- staff training and competency checks,
- handling conflicts of interest,
- managing third-party relationships (referrers, distributors, platforms), and
- complaints handling.
5) You Need Dispute Resolution And Complaint Handling
If you deal with consumers, you generally need a clear and accessible internal complaints process.
In most cases, ACL holders must also be a member of AFCA (the Australian Financial Complaints Authority) so consumers can access external dispute resolution where eligible.
6) Your Marketing Must Be Compliant
Advertising in credit is a major risk area.
ASIC commonly focuses on whether promotions are misleading, whether key terms are disclosed appropriately, and whether your customer journey nudges consumers into unsuitable products.
If you market online, also consider your website legal foundation, including Website Terms and Conditions that match how users actually interact with your platform.
How Do You Apply For An Australian Credit Licence?
The application process can feel daunting, but it becomes much more manageable when you break it down into steps.
Here’s the typical pathway.
Step 1: Map Your Business Model To The Credit Regime
Before you apply, be very clear on:
- exactly what you do (and don’t do),
- your target customers (consumer vs business),
- how you make money (fees, commissions, interest, subscriptions), and
- who your partners are (lenders, brokers, platforms, affiliates).
This mapping step often determines whether you:
- need an ACL at all,
- need an ACL immediately or later (e.g. post-MVP), or
- can operate as a credit representative while you scale.
Step 2: Set Up The Right Legal Structure
ASIC will want to see a business set up properly, with clear ownership and governance.
Many startups apply through a company structure, particularly if they’re raising capital or managing regulatory risk. If you’re still deciding, getting your Company Set Up done early can prevent messy restructuring later.
Step 3: Build Your Compliance Framework
This is where you document and implement the policies and procedures you’ll rely on day-to-day.
For example:
- customer onboarding and verification steps,
- how you assess suitability (if relevant),
- record-keeping,
- breach reporting and incident management,
- complaints handling, and
- third-party oversight.
Step 4: Prepare Your People And Proof
ASIC often expects evidence supporting your application - particularly around your team’s experience and your resourcing.
That might include:
- responsible manager details and experience summaries,
- training plans,
- organisation charts, and
- proof your systems are ready (not theoretical).
Step 5: Lodge The Application And Engage With Follow-Up Questions
Once lodged, ASIC may ask follow-up questions (and timing can vary). The better prepared you are upfront, the smoother this stage tends to be.
It’s also important to avoid “over-applying” (adding credit activities you don’t need), because broader permissions can create broader compliance obligations.
What Ongoing Compliance Obligations Apply After You’re Licensed?
One of the biggest traps for founders is thinking the licence is the finish line.
In reality, an ACL is more like a permission slip - and you need to keep earning it through compliance.
1) Maintain Policies, Training And Supervision
ASIC expects your compliance settings to be maintained, updated, and followed. If you scale quickly (new products, new states, new channels, new partners), you’ll likely need to update your framework as you go.
2) Keep Records And Handle Complaints Properly
Credit businesses must keep clear records that show what happened, when, and why - especially where suitability or consumer outcomes are involved.
3) Manage Third Parties (Referrers, Affiliates, Platforms)
If other people are effectively selling or promoting credit through your systems, their conduct can create risk for you.
That’s why strong contracts and controls matter - not just for customers, but across your commercial ecosystem.
4) Keep Your Customer-Facing Documents Tight
Even if your product is digital-first, your legal documents need to match your customer journey.
- Privacy compliance: if you collect personal information (and most credit businesses do), a tailored Privacy Policy is a baseline requirement.
- Clear customer terms: your fees, payment obligations, and dispute pathways should be clearly documented.
5) Be Ready For Change
Credit regulation evolves, and regulators regularly update guidance and expectations (especially in areas like digital lending, BNPL-style products, and credit advertising).
Building a compliance culture early is one of the best ways to avoid nasty surprises later.
Key Takeaways
- Australian Credit Licence requirements can apply to more businesses than you might expect, especially if you provide, arrange, or assist with consumer credit.
- An ACL is issued by ASIC and is usually required if your business engages in regulated “credit activities” (not just if you call yourself a lender or broker).
- Some businesses may be able to rely on an exemption or operate as a credit representative, but it depends heavily on the exact structure of your product and customer journey.
- ASIC generally expects competence, adequate resourcing, and a working compliance framework - not just a business plan.
- Getting licensed is only the start; ongoing obligations around advertising, complaints, record-keeping, and third-party oversight are crucial.
- Strong legal documents (like website terms and a privacy policy) help support compliance and reduce risk as you scale.
If you’d like a consultation about Australian Credit Licence requirements for your small business or startup, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.
