TL;DR: Australia has made its VASP register public and, from July 1, Travel Rule obligations apply to newly regulated virtual asset services, requiring sender and recipient information plus seven-year retention, according to SumSub. The shift makes registration status, transfer-chain data, and offboarding discipline central to virtual asset governance rather than back-office compliance.
Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “Australia Launches Public VASP Register as Travel Rule to Take Effect”.
Key questions
A: When registration state drifts from actual service delivery, counterparties can continue routing activity to a provider that should no longer be treated as active.
A: They should prioritise transfer-chain identity data whenever the business moves value between platforms, wallets, or intermediaries.
Q: What are the signs that Travel Rule controls are not working as intended?
A: Common warning signs include missing payer or recipient fields, inconsistent data between transfer participants, manual exceptions that are not tracked, and records that cannot be reconstructed later.
Practitioner guidance
- Map registration status to operating reality Create a control that reconciles public register status with actual services offered, so inactive or suspended providers are removed from your trusted counterparties list.
- Validate payer and recipient data capture Check that the information collected for virtual asset transfers is complete, verified, and passed through every intermediary that touches the transaction.
- Test seven-year record retrieval Prove that registration, transfer, and customer records can still be reconstructed after long retention periods and platform changes.
Bottom line: Australia's public VASP register makes provider status part of the trust decision for consumers, businesses, and supervisors.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
Public registration turns provider status into an identity control, not a directory listing. The moment a VASP register becomes public, the trust decision moves outward to consumers, counterparties, and supervisors. That makes registration status part of the assurance model for virtual asset services, and it exposes a common governance weakness: organisations often treat licence state as administrative metadata rather than an active control. The practitioner takeaway is that visibility changes accountability.
A question worth separating out:
Q: Who is accountable when a VASP registration lapses but the service continues to operate?
A: Accountability sits with the provider, but the governance failure usually spans compliance, operations, and risk ownership. If a business continues offering covered services after its registration status changes, that is a lifecycle control failure. The organisation needs a single owner for status reconciliation, because fragmented responsibility leaves gaps between licensing and delivery.
👉 Read our full editorial: Australia’s public VASP register changes crypto compliance governance