Overview
New Zealand has no dedicated crypto-asset licensing regime. VASPs are regulated by the intersection of three frameworks: FSP Registration under the Financial Service Providers (Registration and Dispute Resolution) Act 2008, AML/CFT supervision under the AML/CFT Act 2009 (DIA), and the Financial Markets Conduct Act 2013 (FMA) where a token meets the definition of a financial product. Pure exchange tokens like BTC and ETH are generally not financial products; tokenised funds, derivatives and certain advice triggers do bring an FMA licence into play.
The base path — FSP plus AML/CFT — runs in 3 to 5 months with no statutory minimum capital. From 1 April 2026 the OECD Crypto-Asset Reporting Framework adds a data-collection obligation, with first reports due to Inland Revenue by 30 June 2027.
Regulators
DIA (Department of Internal Affairs, Anti-Money Laundering Group) is the AML/CFT supervisor for most VASPs. FMA (Financial Markets Authority) is the financial-markets conduct regulator and licenses derivatives issuers, MIS managers and financial advice providers. Companies Office (within MBIE) operates the Financial Service Providers Register. RBNZ is the prudential regulator for banks and NBDTs and is consulted on broader policy.
Track 1 — FSP Registration
Mandatory under the FSP Act 2008 for any person in the business of providing a financial service. VASPs typically register under the financial services operating a value transfer service, issuing and managing means of payment, changing foreign currency, and/or keeping, investing, administering, or managing money, securities or investment portfolios on behalf of other persons.
Membership of an approved Dispute Resolution Scheme (FSCL, FDRS, IFSO, or Banking Ombudsman) is mandatory if retail-facing. At least one NZ-resident director (or Australian-resident director who is also a director of an Australian-incorporated company) is required at corporate level under Companies Act 1993 s.10(d) — the FSP Act 2008 itself does not impose a separate director residency test, but residency anchors via Companies Act registration as a precondition to FSPR.
Track 2 — AML/CFT Act 2009 (DIA supervision)
FMA, RBNZ and DIA have publicly confirmed most VASPs (exchanges, brokers, custody providers, token issuers) are reporting entities under the AML/CFT Act 2009. Obligations include:
- Risk assessment and AML/CFT programme.
- Customer due diligence — standard and enhanced.
- Ongoing transaction monitoring.
- Prescribed Transaction Reports (PTR) and Suspicious Activity Reports (SAR).
- Annual AML/CFT report to DIA.
- Biennial independent audit of the AML/CFT programme.
Track 3 — Financial Markets Conduct Act 2013 (only if token = financial product)
A token is a "financial product" under the FMCA if it meets the definition of equity security, debt security, managed investment product, or derivative. Pure exchange tokens are generally outside scope. Where the FMCA bites, a case-specific FMA licence is required:
- Derivatives issuer licence — for crypto-derivative platforms serving retail.
- Managed Investment Scheme (MIS) licence — for tokenised funds.
- Financial Advice Provider (FAP) licence — for crypto advice.
CARF / OECD reporting (2026–2027)
Under New Zealand's adoption of the OECD Crypto-Asset Reporting Framework, CASPs must collect user transaction data from 1 April 2026 and file reports to Inland Revenue by 30 June 2027. Build the data-collection workflow into FSPR registration from day one — retrofitting after the fact is costlier.
High-level checklist (FSP + AML/CFT)
- NZ Limited company under the Companies Act 1993 with at least one NZ-resident director.
- Registered office in New Zealand.
- FSPR registration via the Companies Office for relevant financial services.
- Dispute Resolution Scheme membership (FSCL, FDRS, IFSO or Banking Ombudsman) if retail-facing.
- AML/CFT risk assessment and AML/CFT programme aligned with DIA expectations.
- Customer due diligence framework — standard and enhanced.
- PTR and SAR reporting workflows; annual DIA AML/CFT report.
- Biennial independent audit of the AML/CFT programme.
- CARF data-collection workflow operational from 1 April 2026.
- For financial-product activities: FMA licence application (derivatives issuer, MIS or FAP) on the parallel timeline.
Process and timeline
| Step | FSP + DIA AML only | + FMA licence |
|---|---|---|
| Entity setup, NZ-resident director appointment | 2–4 weeks | 2–4 weeks |
| AML/CFT programme drafting and risk assessment | 4–8 weeks | 4–8 weeks (parallel) |
| FSPR registration | 2–6 weeks | 2–6 weeks |
| DIA AML-CFT notification and onboarding | 2–6 weeks | 2–6 weeks |
| FMA licence application and assessment | n/a | 6–12 months |
| Total realistic | 3–5 months | 9–15 months |
Taxation
- Corporate tax: 28% flat.
- GST: 15% standard. Cryptoasset supplies are zero-rated or outside-scope under the GST Act 1985 as amended (from 1 April 2022, “cryptoassets” excluded from the definition of “services” for GST).
- No dedicated crypto tax rate. Crypto profits are ordinary income when acquired with a purpose of disposal, with full deduction of costs.
- CARF reporting from 1 April 2026; first filings due 30 June 2027.
FAQ
Is there a crypto licence in New Zealand?
No dedicated crypto licence. The combination is FSP Registration plus AML/CFT supervision under DIA, with FMA on top where tokens are financial products.
What about minimum capital?
None statutory. Economic floor is the AML/CFT programme, biennial audit, DRS membership and any FMA licence requirements.
Can I use an Australian director?
Yes — an Australian-resident director who is also a director of an Australian-incorporated company satisfies the residency requirement under Companies Act 1993 s.10(d). The FSP Act 2008 itself does not impose a separate director residency test.
How does NZ compare with Australia?
Australia is more comprehensive in 2026 — DCE plus Tranche-2 plus the new ASIC AFSL DAP regime. New Zealand remains lighter, faster and cheaper for non-financial-product crypto activities.
When does the CARF rule start?
1 April 2026 for data collection; 30 June 2027 for first reports to Inland Revenue.