Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
- What Is An AFSL (And What Does It Cover)?
AFSL Registration: Step‑By‑Step
- 1) Define your services, products and clients
- 2) Choose a business structure and set up your company
- 3) Identify Responsible Managers (RMs)
- 4) Build your compliance framework and documents
- 5) Prepare and lodge your application via ASIC’s portal
- 6) Respond to ASIC queries
- 7) Decision: granted, conditional or refused
- Essential Legal Documents For Financial Services Startups
- Key Takeaways
Thinking about launching a business that gives financial advice, deals in investments, or operates funds in Australia? If so, Australian Financial Services Licence (AFSL) registration may be a crucial legal step.
Financial services is a high‑opportunity space, but it’s also highly regulated. ASIC (the Australian Securities and Investments Commission) licenses and supervises financial services businesses, and getting licensed is often the foundation for building a compliant, trustworthy and scalable venture.
In this guide, we break down what AFSL registration is, who needs one (and who might need a different licence), how the application works, and the ongoing obligations you’ll need to meet once you’re licensed.
What Is An AFSL (And What Does It Cover)?
An Australian Financial Services Licence (AFSL) is a licence granted by ASIC under the Corporations Act 2001. It authorises a business to legally provide specified “financial services” in Australia.
“Financial services” is a defined term. In practice, AFSL authorisations commonly cover activities such as:
- Providing financial product advice (for example, about investments, superannuation or insurance)
- Dealing in financial products (arranging, applying for, acquiring or disposing of products such as shares and managed fund interests)
- Making a market in financial products
- Operating registered and unregistered managed investment schemes
- Providing custodial or depository services
An AFSL is not just for big institutions. Plenty of boutique advice firms, fintechs, brokers and fund operators rely on AFSL authorisations tailored to their specific activities and client types (retail, wholesale or both).
Important distinction: AFSLs generally do not cover “credit activities” such as providing consumer loans, credit assistance or broking consumer credit. If your business offers consumer loan products or assists consumers to apply for credit, you’ll usually need an Australian Credit Licence (ACL) under the National Consumer Credit Protection Act, not an AFSL.
Do You Need An AFSL Or Another Licence?
Whether you need an AFSL comes down to the activities you carry on “in the course of a financial services business” in Australia.
When an AFSL is typically required
- You give personal or general advice about financial products (e.g. investment advice)
- You deal in financial products for clients (e.g. arrange applications for units in a managed fund)
- You operate a managed investment scheme or a platform
- You provide custody or depository services
These activities usually require an AFSL (unless a narrow exemption applies), and the authorisations on your licence must match what you actually do and who you serve.
When another licence or pathway may apply
- Credit activities: Consumer lending, credit assistance and consumer credit broking generally require an ACL, not an AFSL.
- Being an authorised representative: Instead of holding your own AFSL, you may operate as an “authorised representative” of an existing AFSL holder. This requires a formal authorisation and robust supervision arrangements.
- Limited or incidental advice: Some narrow exemptions exist (for example, certain incidental services by accountants), but these are specific and often misunderstood. Always confirm your position before relying on an exemption.
If you’re unsure which licence fits your model, it’s best to get tailored advice early so you can structure your business and compliance program the right way from day one.
AFSL Registration: Step‑By‑Step
Applying for an AFSL is a detailed process. With preparation, it’s manageable. Here’s a practical roadmap.
1) Define your services, products and clients
Be precise about what you’ll do and for whom. For example, will you provide personal advice to retail clients on managed funds and superannuation? Will you operate a wholesale fund for sophisticated investors? Your answers determine your authorisations, disclosure obligations and systems.
2) Choose a business structure and set up your company
Most AFSL applicants operate through a company for governance and liability reasons. If you’re incorporating, sort out directors, shareholding, your ACN and foundational documents before you apply. A structured approach to company set up at this stage makes the licence application smoother later.
If a director will reside overseas, remember the Australian residency rules for directors and make sure you meet the Australian resident director requirements.
3) Identify Responsible Managers (RMs)
Responsible Managers are key people who demonstrate your organisation’s competence for each authorisation you seek. ASIC will look at their relevant experience, qualifications and good fame and character. Many applicants recruit experienced RMs early, or invest in training to close any gaps.
4) Build your compliance framework and documents
ASIC expects evidence that your systems are fit for purpose. Common inclusions are:
- Compliance policies and procedures (including conflicts management, training and supervision, and incident/breach handling)
- Risk management framework tailored to your services and client types
- Internal dispute resolution (IDR) procedures aligned with ASIC Regulatory Guide 271
- Disclosure templates (e.g. Financial Services Guide; where relevant, Statements of Advice and Product Disclosure Statements)
- Financial resource policies and budgets demonstrating you can meet capital requirements
5) Prepare and lodge your application via ASIC’s portal
You’ll complete detailed forms through ASIC’s online portal, nominate your authorisations, upload supporting documents, and pay the application fee (which varies by scope). Accuracy and completeness matter-well-prepared applications are assessed more efficiently.
6) Respond to ASIC queries
ASIC often requests clarifications or extra documentation. They’ll focus on whether you have competent people, adequate resources, robust systems and appropriate supervision of representatives. Expect iterative questions and be ready to show how your systems work in practice.
7) Decision: granted, conditional or refused
If granted, your AFSL will set out your authorisations and any conditions. Sometimes ASIC grants licences on conditions (for example, to strengthen certain controls). If refused, you may be able to re‑apply after addressing identified gaps.
Your Ongoing AFSL Compliance Obligations
Licensing is the beginning-not the end-of your compliance journey. AFSL holders must meet general obligations on an ongoing basis (often called the “s912A obligations”), including to:
- Do all things necessary to ensure services are provided efficiently, honestly and fairly
- Maintain the competence to provide the services and ensure representatives are trained and supervised
- Have adequate resources (including financial, technological and human)
- Have adequate risk management systems and a conflicts management framework
- Maintain compliance arrangements, including monitoring, review and record‑keeping
Dispute resolution and compensation arrangements
You must have compliant internal dispute resolution processes and be a member of the Australian Financial Complaints Authority (AFCA) if you deal with retail clients. Most AFSL holders will also need professional indemnity (PI) insurance that meets ASIC’s expectations.
Breach reporting and notifications
Significant breaches and certain other events must be reported to ASIC within prescribed timeframes. You must also notify ASIC about key business changes (e.g. directors, RMs, name or address) and keep your details current-many companies manage these updates using ASIC Form 484.
Financial reporting and audits
AFSL holders are generally required to lodge annual financial statements, and some must arrange an audit of their financials and/or compliance (for example, scheme operators and custodians). Make sure your accounting and audit partners understand financial services requirements.
AML/CTF obligations and AUSTRAC
Most AFSL holders are “reporting entities” under Australia’s Anti‑Money Laundering and Counter‑Terrorism Financing (AML/CTF) regime. You’ll need an AML/CTF program, customer due diligence (KYC) processes, ongoing monitoring, and to enroll with AUSTRAC. Certain businesses (e.g. digital currency exchanges, remittance services) must also register with AUSTRAC.
Privacy and data protection
If you collect personal information, you’ll need a compliant Privacy Policy and robust data handling practices. Many financial services businesses also adopt information security controls and access management to protect client data.
Consumer law and marketing
Even in financial services, the Australian Consumer Law (ACL) applies to your advertising and customer communications. Avoid misleading or deceptive conduct and ensure your promotions are accurate-see how this works in practice under section 18 of the ACL.
Tip: Build a compliance calendar to track reporting dates, training cycles, AFCA membership renewals, policy reviews and any licence variation needs as your business evolves.
Essential Legal Documents For Financial Services Startups
Getting licensed is one part of your setup. Day‑to‑day, strong contracts and policies help you manage risk, clarify responsibilities and demonstrate compliance. Common documents include:
- Client Agreement or Terms: Sets out your services, scope, fees, disclaimers and liability position. For online models, pair this with clear Website Terms and Conditions.
- Privacy Policy: Explains how you collect, use, store and disclose personal information and how clients can exercise their rights. A compliant, up‑to‑date Privacy Policy is essential.
- Conflicts Management Policy: Identifies conflicts and sets out how you’ll manage them (disclosure, controls, or avoidance where required).
- AML/CTF Program: Documents your customer due diligence, ongoing monitoring, reporting and governance.
- Staff Agreements and Policies: Clear Employment Contracts, training requirements and a staff handbook support your supervision and competence obligations.
- Shareholders Agreement: If you have co‑founders or early investors, a Shareholders Agreement covers decision‑making, roles, vesting, exits and dispute resolution.
- NDA (Confidentiality): Use a Non‑Disclosure Agreement when sharing sensitive information with prospective partners, vendors or contractors.
Not every business will need every document from day one, but many will need several of the above. Tailoring these documents to your services, authorisations and risk profile is key.
Common Questions About AFSL Registration
How long does AFSL registration take?
It varies. Straightforward applications can be assessed in a few months, while more complex or under‑prepared applications can take longer. The biggest drivers are your scope of authorisations, the strength of your documentation and how quickly you respond to ASIC queries.
Can I operate under someone else’s AFSL?
Yes-if you are formally appointed as an authorised representative, and your activities are within the principal’s authorisations. You’ll need written agreements, supervision and proper disclosures. You can’t “use someone’s licence” informally.
Do I need AFCA membership?
If you serve retail clients (most advice businesses do), you must have compliant internal dispute resolution and be a member of AFCA. This is separate from your AFSL and must be maintained.
What happens if I provide financial services without an AFSL?
Unlicensed conduct is serious. ASIC can take enforcement action, including civil penalties, criminal prosecution in egregious cases, and orders to stop providing services. It also creates significant reputational and commercial risk.
Do AML/CTF and privacy laws apply to me?
Almost certainly. Most AFSL businesses will be reporting entities under AML/CTF laws and will need an AML/CTF program and AUSTRAC enrollment. If you collect personal information, you also need a compliant Privacy Policy and practices to match.
Key Takeaways
- AFSL registration is required if you carry on a financial services business in Australia (advice, dealing, operating schemes or custody); credit activities generally require an ACL, not an AFSL.
- Define your services and client base clearly, choose the right structure, line up Responsible Managers, and build a robust compliance framework before you apply.
- Apply via ASIC with complete documentation; expect questions and be ready to demonstrate competent people, adequate resources and strong systems.
- Once licensed, you must meet ongoing obligations-AFCA membership for retail clients, AML/CTF and AUSTRAC requirements, breach reporting, financial reporting and privacy compliance.
- Strong contracts and policies-like a Client Agreement, Privacy Policy, Website Terms, Employment Contracts and a Shareholders Agreement-reduce risk and support compliance.
- If you’re unsure whether you need an AFSL, an ACL, or authorised representative status, get advice early so you can structure your business and licence pathway correctly.
If you would like a consultation on AFSL registration or structuring your financial services business, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no‑obligations chat.








