Australia’s evolving approach to digital asset regulation includes a key concept known as “token mapping”—categorising different types of crypto assets based on their function and regulatory implications. While the concept supports a tailored regulatory response, AUSTRAC’s position suggests a more simplified and risk-focused approach, especially when it comes to non-fungible tokens (NFTs). This article explains AUSTRAC’s views on token mapping, how it contrasts with global standards, and where NFT exemptions might be limited.

What Is Token Mapping?

Token mapping is the process of identifying and classifying crypto assets according to their use case, structure, and function. The purpose is to determine which regulatory frameworks should apply—for example, whether a token is a financial product, a payment instrument, or simply a collectible.

Australia’s Treasury is developing a comprehensive token mapping framework as a basis for future legislation. Categories include:

• Means of payment (e.g. Bitcoin)
• Stablecoins
• Utility tokens
• Governance tokens
• NFTs
  
  

AUSTRAC’s Position on Token Mapping

AUSTRAC takes a functional and risk-based approach. While it acknowledges the usefulness of token mapping for regulatory purposes (e.g. consumer protection, financial services licensing), AUSTRAC urges caution in over-complicating definitions, especially in the context of AML/CTF obligations.

Key points from AUSTRAC’s submission:

• All crypto assets—regardless of category—should trigger AML/CTF obligations if used in a VASP activity.
• The definition of regulated crypto assets should be linked to their digital nature, not to specific technology (e.g. cryptography or blockchain).
• AUSTRAC supports technology-neutral definitions, similar to the current AML/CTF Act definition of “digital currency”.
  
  

NFTs: The Exception or the Rule?

AUSTRAC recognises that not all NFTs should be regulated under AML/CTF laws. It agrees with the FATF position that “collectible” NFTs—used purely as digital representations of art, media, or collectibles—generally fall outside the scope of AML/CTF regulation.

However, AUSTRAC also warns against blanket exemptions, stating that:

• NFTs used as investment products, means of payment, or vehicles for fundraising should be regulated.
• The function and use of an NFT matters more than its label.
• Flexibility should be built into the framework to allow for the inclusion of specific NFTs or classes of NFTs if financial crime risks materialise.
  
  

In other words, not all NFTs are exempt, and their treatment depends on how they are used in practice.

Why This Matters for Businesses

AUSTRAC’s views suggest that businesses dealing with NFTs must:

• Assess how their NFTs are used by customers.
• Determine whether their platform facilitates secondary trading, payment services, or investment-like features.
• Prepare for AML/CTF obligations if NFTs are used beyond pure collection purposes.
  
  

Failing to properly assess NFT-related risks could lead to misclassification and regulatory breaches under future licensing laws.

Technology-Neutral Regulation: AUSTRAC’s Long-Term View

A core recommendation from AUSTRAC is to avoid definitions that lock regulation into specific technologies, such as:

• Requiring cryptographic key structures
• Requiring blockchain or distributed ledger technology
  
  

Instead, AUSTRAC promotes a principle-based approach, where any digital asset—regardless of technical structure—should be subject to regulation if it serves financial, exchange, or investment functions.

This approach is intended to future-proof the regime and prevent regulatory arbitrage.

Conclusion

Token mapping is a useful regulatory tool, but AUSTRAC urges simplicity and risk-based logic when applying it to AML/CTF obligations. For NFTs, AUSTRAC supports limited exemptions, but only for those that function purely as digital collectibles. As NFTs continue to evolve and blur the lines between art, utility, and investment, businesses must stay alert to their real-world use cases and be prepared to comply with financial crime regulations when applicable.