Australian Credit Licence Explained: Essential Compliance Guide

Stepping into the lending or broking space in Australia is exciting - whether you’re planning a mortgage brokerage, a fintech platform with credit features or a specialty finance business. But before you start offering consumer credit, you’ll need to work out if you require an Australian Credit Licence (ACL) and what staying compliant actually means day to day.

In this guide, we’ll explain what an ACL is, who typically needs one, how to apply, and the key compliance duties once you’re licensed. We’ll also outline the essential legal documents every credit business should have in place so you can operate with confidence and build trust with customers from day one.

What Is An Australian Credit Licence?

An Australian Credit Licence is authorisation from the Australian Securities and Investments Commission (ASIC) that permits a person or company to engage in “credit activities” under the National Consumer Credit Protection Act 2009 (often called the National Credit Act).

Credit activities generally include:

• Providing credit under a credit contract (for example, being the lender for a personal loan or mortgage)
• Acting as an intermediary (such as a mortgage broker or aggregator)
• Providing credit assistance to a consumer (helping someone apply for or remain in a credit contract)
• Varying or enforcing credit contracts

If your product or service involves consumer credit (personal, domestic or household purposes), an ACL is often required unless an exemption applies. Business-purpose lending is usually outside the consumer credit regime, but you still need to comply with other laws - including the Australian Consumer Law for your marketing and customer interactions.

It’s also common for lenders to protect their position by taking security over a borrower’s assets. If that’s part of your model, think about how you’ll register these interests on the PPSR early in your setup. A quick primer on what the PPSR is can be helpful when designing your processes.

Do You Need An ACL For Your Business?

This is one of the first decisions to make. You’ll typically need an ACL if:

• You engage in “credit activities” with consumers (not just businesses), and
• Your product or service falls within the National Credit Act (for example, personal loans, mortgages, credit assistance or broking)

Common examples that generally require an ACL include consumer lenders, mortgage or finance brokers, and businesses that provide credit assistance for consumer credit products.

There are important nuances and exemptions. For instance:

• Business-purpose credit: Purely business/commercial lending is usually outside the consumer credit regime (so an ACL may not be required). Be careful with mixed-purpose loans - your documents and processes should clearly record intent.
• Incidental credit: If credit is truly incidental to your main business and falls within specific exemptions, you might not need a licence. Always test assumptions against the legislation and ASIC guidance.
• Credit representatives: You may be able to operate as an authorised credit representative of an existing licensee instead of holding your own licence (more on this below).
• BNPL and evolving regulation: “Buy now, pay later” offerings have historically operated outside the National Credit Act. Regulation is changing, and proposals aim to bring BNPL into the credit regime. At the time of writing, not all BNPL providers require an ACL, but the landscape is moving - build flexibility into your compliance plan.

If you’re unsure where your model lands, it’s worth getting tailored legal guidance before you launch your product or advertise credit features. This can save time, cost and re-work.

How To Apply For An Australian Credit Licence

Applying for an ACL is a structured process with ASIC designed to ensure licensees are competent, well resourced and ready to meet consumer protection standards.

1) Map Your Authorisations And Business Model

Start by defining what you’ll actually do: lending, broking, credit assistance, or a mix. Your proposed authorisations must match your activities. This is also the time to decide on your business structure and register your entity. Many founders set up a company for limited liability and growth potential - if you’re heading that way, you can handle your company set up and obtain an ACN before lodging your application.

2) Nominate Responsible Managers (RMs)

Every licensee needs at least one Responsible Manager who meets ASIC’s benchmarks for skills, knowledge and experience relevant to the credit activities you’ll undertake. You’ll provide evidence of each RM’s competence and how they oversee your compliance systems.

3) Build Your Compliance Framework

ASIC expects documented, tailored policies and procedures. At a minimum, prepare:

• Internal dispute resolution policy and AFCA membership details
• Compliance manual covering obligations under the National Credit Act and related regulations
• Training policies, record-keeping processes and supervision arrangements
• Documented credit processes (for example, application assessment and verification steps)
• Privacy and data protection measures, including a clear Privacy Policy

If your business is digital-first, align your online journey with your legal disclosures and customer consent flows. It’s also smart to publish Website Terms and Conditions that reflect your platform’s features.

4) Prepare Your Supporting Documents

ASIC will ask for details about your business, financial resources, RMs, compliance arrangements and external dispute resolution membership. Complete and accurate supporting documents help avoid assessment delays.

5) Lodge Your Application And Pay The Fee

Applications are submitted online via the ASIC portal. Fees vary based on the authorisations sought. ASIC may ask follow-up questions during assessment, so be ready to explain how your policies operate in practice.

6) On Approval: Use Your Licence Correctly

When ASIC grants your licence, you’ll receive an ACL number. You need to include specific disclosures - for example, in your Credit Guide and certain customer documents. Many businesses also display their ACL or credit representative number in website footers and key customer journeys, even where not strictly mandated, to promote transparency.

Ongoing Obligations: What Compliance Looks Like In Practice

Holding an ACL isn’t a “set and forget” exercise. You must maintain systems, resources and oversight that keep your customers safe and your licence in good standing.

Core Obligations Most Licensees Must Meet

• Competence and supervision: Ensure your people are adequately trained and supervised, keep training records, and update procedures when products or laws change.
• AFCA membership and IDR: Maintain membership with the Australian Financial Complaints Authority and operate a compliant internal dispute resolution process.
• Financial resources: Keep adequate financial and human resources to provide your credit activities efficiently, honestly and fairly.
• Breach reporting: Report significant breaches and certain investigations to ASIC within the required timeframes.
• Compliance attestation: Lodge your annual compliance certificate and meet any periodic reporting ASIC requires.
• Change notifications: Notify ASIC about key changes (for example, RMs, control persons, address) within the required periods.
• Privacy and security: Handle personal information in line with the Privacy Act and your own policies. For higher-risk data environments, consider formalising an incident response approach with a data breach plan.

Responsible Lending - Know Which Rules Apply To You

The “responsible lending” framework has evolved. In broad terms:

• Non‑ADI licensees and certain products (such as small amount credit contracts and consumer leases) remain subject to responsible lending obligations under the National Credit Act.
• Authorised deposit‑taking institutions (ADIs) are primarily governed by APRA prudential standards and internal credit risk frameworks for most consumer lending, rather than the former prescriptive responsible lending checks.

Your policies should reflect the regime that applies to your business and products. Even where prescriptive rules don’t apply, robust, customer‑centric credit assessment remains best practice and reduces dispute risk.

Advertising, Disclosures And Consumer Law

All credit businesses must ensure marketing and sales practices comply with the Australian Consumer Law - for example, avoid misleading claims, be clear about pricing and fees, and honour your advertised offers. If you make retail claims or publish terms online, it’s wise to align them with your consumer law obligations and your credit disclosures.

If your contracts create security interests over customer assets (for example, in equipment finance), consider whether you should register on the PPSR. Understanding what the PPSR is helps you design reliable onboarding and enforcement processes.

You’ll also have general business obligations, like having an ABN, keeping business records and meeting tax requirements for your structure. Because tax settings can be complex and change over time, speak with an accountant about GST registration thresholds and ongoing reporting appropriate to your situation.

Key Legal Documents For Credit And Finance Businesses

Strong documents protect your customers and your business. The right set will depend on your model, but most credit businesses consider the following.

• Credit Guide: A clear, compliant summary of who you are, your ACL or representative status, fees and how customers can access dispute resolution.
• Credit Contract Templates: Loan or facility contracts with mandated disclosures (interest, fees, repayments, hardship rights) tailored to your products and systems.
• Compliance Manual: Practical, internal procedures covering licensing obligations, training, supervision, breach reporting, record keeping and ASIC notifications.
• Responsible Lending/Assessment Policies: Procedures for obtaining and verifying customer information where required, assessing suitability and documenting decisions.
• Privacy Policy: A transparent statement explaining how personal information is collected, used and stored - publish a customer‑friendly Privacy Policy on your website.
• Website Terms And Conditions: Rules for using your site or app, including account conduct, acceptable use, IP rights and liability - align your user journey with your Website Terms and Conditions.
• Internal Dispute Resolution (IDR) Policy: Processes and timeframes that meet ASIC standards and map to AFCA membership requirements.
• Security Documentation: If your loans are secured, ensure your General Security Agreement or specific security documents integrate with your PPSR registration workflow and notices.
• Employment Documents: If you’re hiring, put clear Employment Contracts and workplace policies in place for compliance and consistency.
• Founders And Governance: If you have co‑founders or investors, agree decision‑making and equity terms in a Shareholders Agreement and adopt a fit‑for‑purpose Company Constitution.

No two credit businesses are identical. Your documents should reflect your products, technology stack and risk profile - and they should be kept up to date as laws and your services evolve.

Is Being A Credit Representative A Better Fit?

Many brokers and emerging fintechs start by operating as a credit representative of an established licensee. In this arrangement, the licensee authorises you to engage in specified credit activities under their licence, and you follow their compliance framework.

This can reduce the time and cost to market, but consider the trade‑offs:

• Control and flexibility: You’ll be bound by the licensee’s policies and systems, including product scope, advertising and disclosure formats.
• Brand and customer journey: Some principals impose brand or process requirements that may affect your UX or marketing approach.
• Scaling: As you grow or diversify products, having your own licence often provides more control and credibility with partners and investors.

If you choose the representative route first, invest in your own core documents (like your Privacy Policy and website terms) and ensure your arrangements with the principal are clear on responsibilities, commissions, supervision and termination.

Key Takeaways

• An Australian Credit Licence authorises consumer credit activities and is mandatory for many lenders, brokers and credit assistance providers operating in Australia.
• Whether you need an ACL depends on your exact activities and products - business‑purpose lending and some incidental credit fall outside the consumer regime, while BNPL regulation is evolving.
• ACL applications focus on competence, resources, Responsible Managers and a documented compliance framework that works in practice for your model.
• Compliance is ongoing: supervision and training, AFCA membership and IDR, breach reporting, financial resources, privacy and accurate disclosures all matter.
• Practical documents like Credit Guides, compliant contract templates, a Privacy Policy, website terms and workplace agreements help prevent disputes and build trust.
• Operating as a credit representative can be a useful stepping stone, but factor in control, branding and your growth plans when choosing the best path.

If you would like a consultation on starting a credit or finance business - or applying for an Australian Credit Licence - you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no‑obligations chat.