Australian credit licence — what it is and how to get one

Updated 12 Mar 2026Content was accurate at the time of publication

If you plan to provide, vary, or assist consumers with credit products — such as loans, consumer leases or acting as a broker — you need to understand the Australian credit licence (ACL). This practical guide explains what an Australian credit licence is, who must hold one (and when you can operate as an authorised credit representative or ACR), how to apply for an ACL, what ASIC expects, and the everyday compliance controls that keep your business out of enforcement trouble.

What is an Australian credit licence?

An Australian credit licence (ACL) is the statutory authorisation required to engage in credit activities regulated by the National Consumer Credit Protection Act (NCCP Act). ASIC is the regulator responsible for licensing and supervision; the ACL authorises the licence holder to provide credit, act as a credit provider, or provide credit assistance (including brokers and intermediaries). The ACL framework embeds responsible lending obligations that require suitability assessments and clear disclosure when dealing with consumers.

Legal basis and regulator: The NCCP Act 2009 establishes the framework. ASIC's credit licensees guidance (https://asic.gov.au/for-finance-professionals/credit-licensees/) provides licensing guidance, and the ASIC register (https://asic.gov.au/online-services/search-asics-registers/) allows you to search licence details. Consumer standards are enforced through responsible lending obligations and dispute resolution via AFCA (https://www.afca.org.au/).

If you are unsure whether a particular activity is "credit activity" under the NCCP Act, consult ASIC guidance or get legal advice before assuming you are exempt.

Who needs a licence and who is exempt?

Who needs an ACL:

Credit providers who offer, provide or vary consumer credit contracts or consumer leases.
Credit assistance providers: brokers who arrange or suggest credit products for consumers.
Lessors who enter consumer goods leases that fall within the NCCP framework.

Common exemptions and limited activities:

Certain intra-group lending and small-scale or incidental activities may be exempt — exemptions are narrow and depend on the specific arrangement.
Commercial lending to sophisticated corporate borrowers may fall outside the consumer credit definitions, but careful analysis is required.
Where appropriate, a business may authorise staff as an Authorised Credit Representative (ACR) under a holder's licence rather than holding an ACL itself.

If your model is to arrange finance but not provide credit, consider whether you should apply for a credit licence or rely on an ACR arrangement.

How to apply for a licence

A concise, practical step-by-step roadmap to applying for an ACL.

Step 1 — Confirm eligibility and business model

Decide whether your entity will hold the licence or operate as an ACR under another licence. See the comparison table below.
Ensure responsible persons meet "fit and proper" requirements (honesty, integrity, competence, no relevant disqualifying criminal history). ASIC assesses fit and proper at both the entity and officer level.

Step 2 — Prepare core documents (application checklist)

Company and ownership structure, ACN/ABN and ASIC extracts.
Business plan describing credit activities, projected volumes, product types and distribution channels.
Financial statements and cashflow forecasts showing solvency and financial capacity.
Detailed compliance arrangements: compliance plan, policies and procedures (responsible lending policy, dispute handling, privacy, AML/CTF where relevant).
Staff training records and evidence of competence for responsible officers.
Copies of standard consumer-facing documentation (pre‑contractual disclosure, loan contracts, credit guide).
Key personnel background checks (criminal history, bankruptcies, regulatory history).
AFCA membership evidence or complaints-handling procedures (https://www.afca.org.au/).

Step 3 — Lodge application with ASIC

Complete ASIC's online application form, attach documents and pay the fee. Check ASIC's licensing page for current fees and processing guidance (https://asic.gov.au/for-finance-professionals/credit-licensees/).
Typical processing time varies by complexity and completeness. Expect initial checks to take several weeks; complex or incomplete applications can take months.

Step 4 — Respond to ASIC queries promptly

If ASIC requests further information, respond promptly and provide complete, substantiated documentation. Common reasons for delay: incomplete financials, weak compliance arrangements, or insufficient evidence of staff competence.

Tips to avoid common rejections:

Provide a clear compliance plan with tangible controls and named responsible officers.
Ensure financial projections are realistic and consistent with trading history.
Demonstrate experience and competence in credit activities for key personnel.
Include a succinct risk register showing top compliance risks and mitigations.

Comparison: ACL vs ACR

Feature	Hold ACL	Use ACR route
Regulatory responsibility	Licence holder	Licence holder remains responsible for ACR
Cost/administration	Higher	Lower for representative
Suitability	Needed if you control credit processes	Good for small brokers or referral partners
Best for	Lenders, large brokers	Small brokers, third‑party introducers

Authorised credit representatives (ACRs)

An authorised credit representative (ACR) is a person or business authorised by an ACL holder to engage in credit activities on the holder's behalf. The ACL holder remains legally responsible for the conduct of its ACRs.

How the ACR model operates:

Agreement: ACL holder and ACR enter a written authorisation agreement setting scope, reporting, supervision and termination rights.
Supervision: ACL holders must actively supervise ACRs and ensure they comply with responsible lending and disclosure obligations.
Notification: ACL holders must notify ASIC of authorised representatives and ensure records are maintained.

When to choose the ACR route:

You are a small broker or a third‑party referrer with limited credit activity and want to rely on a sponsor licensee.
You lack senior management capacity to satisfy ASIC's fit-and-proper and compliance requirements.
You want a lower-cost entry route while building capacity to hold an ACL later.

Key obligations of licence holders

Licence holders must meet ongoing obligations across conduct, governance and reporting. Below is a plain-English breakdown of core duties.

Responsible lending obligations:

Make a reasonable assessment of a consumer's financial situation, objectives and needs before providing or suggesting credit.
Avoid unsuitable credit: loans and contracts must not be likely to cause substantial hardship.

Compliance plan and governance:

Maintain a written compliance plan that identifies compliance risks, allocates responsibility and describes monitoring and remedial steps. Regularly review and update the plan.
Senior managers must be competent and accountable; maintain training records and evidence of ongoing competence.

Record-keeping and retention:

Keep accurate records of credit assessments, disclosures, contracts, complaints and remediation actions for statutory retention periods. Records should be accessible for ASIC review and AFCA disputes.

Dispute resolution and AFCA membership:

Join and use AFCA for consumer disputes or have a compliant external dispute resolution (EDR) mechanism. Provide dispute-handling information to customers. See AFCA (https://www.afca.org.au/).

Notifications to ASIC:

Notify ASIC of changes to licence details, key personnel, insolvency events or serious breaches as required by the NCCP Act and ASIC guidance.

Training and competence:

Maintain a training and competence program for staff engaged in credit activities. Keep training logs and evidence of refresher training.

Reporting and financial viability:

Maintain financial capacity to meet obligations and produce financial reports if requested by ASIC. Insolvent or near‑insolvent licensees attract immediate regulatory scrutiny.

Practical obligations checklist:

Written compliance plan and calendar.
Responsible lending policy and assessment templates.
AFCA membership evidence.
Staff training logs and job‑descriptions.
Record‑retention system (secure and searchable).
Incident and remediation register.

ASIC's powers, enforcement and penalties

ASIC has a broad enforcement toolkit and will act where consumer harm, systemic failures, or serious non‑compliance is identified.

ASIC enforcement powers:

Suspend or cancel an ACL.
Issue infringement notices and civil penalty proceedings.
Seek injunctions and freezing orders.
Accept enforceable undertakings.
Commence criminal prosecutions in cases of deliberate wrongdoing.

Typical breaches that trigger action:

Failures in responsible lending (no or inadequate suitability assessment).
Misleading or deceptive conduct in marketing or disclosures.
Inadequate dispute-handling and failure to join AFCA.
Poor supervision of ACRs or systemic compliance plan failures.

ASIC publishes enforcement summaries and licensing information (https://asic.gov.au/for-finance-professionals/credit-licensees/) and maintains a register (https://asic.gov.au/online-services/search-asics-registers/). Review recent enforcement action summaries to understand common failure patterns and regulator expectations.

Consequences and practical implications:

Licence suspension or cancellation halts your ability to carry on regulated credit activities — causing immediate operational disruption and reputational damage.
ASIC investigations often lead to remediation orders, compensation requirements and increased supervision. Prepare for high documentation demands during any inquiry.

Maintaining compliance — practical controls and best practice

Implement practical, proportionate controls to manage regulatory risk. The following controls are targeted, easy to adopt and proven effective.

Governance and written policies:

Maintain a single compliance manual with clear policies (responsible lending, privacy, AML, complaints). Update annually.
Assign named owners and reporting lines for each policy.

Compliance plan and internal audit:

Create a compliance calendar with scheduled reviews, audits and training sessions. Conduct periodic independent internal audits of credit assessments and disclosure practices.

Training and competence:

Use role-based training modules, record completions and perform competency assessments for credit staff. Maintain refresher training at least annually.

Record systems and version control:

Implement a central document management system that timestamps assessments, disclosures and versioned policies. Retain records for required statutory periods.

Supervision of ACRs:

Regular monitoring: sample ACR files, conduct periodic site or systems reviews, and require regular attestations from ACR principals.

Remediation and incident response:

Maintain an incident register and remediation playbook. If a breach is discovered, map affected customers, estimate financial impact and record remediation steps.

Outsourcing vs in-house:

If you outsource credit assessments or compliance tasks, retain oversight: written service-level agreements, defined KPIs and audit rights.

Practical checklist to action this month:

Review and sign off the compliance plan.
Conduct a sample audit of 10 recent loan suitability assessments.
Verify AFCA membership and update dispute-handling information.
Update training logs and schedule refresher sessions.
Ensure minutes of governance meetings record compliance actions.

What happens if your licence is suspended, cancelled or you are sanctioned?

Immediate steps to take:

Notify customers where required, secure records and preserve audit trails.
Freeze new credit activity and follow ASIC directions regarding ongoing contracts.
Activate your remediation plan and begin a file review to identify potential harm and affected customers.

Notification obligations and remediation:

Depending on the suspension/cancellation conditions, you may need to notify affected consumers and provide remediation (refunds, compensation) where inappropriate lending occurred.

Appeal and review options:

Decisions can be subject to merits review or judicial review in some cases; seek legal advice promptly. Administered remediation and negotiating enforceable undertakings may be practical alternatives to contested litigation.

Practical steps after receiving an ASIC enquiry or show-cause notice:

Preserve all relevant documents and communications.
Notify your insurer (professional indemnity) and senior management.
Seek legal/compliance advice and prepare a frank response that addresses ASIC's concerns with evidence of remedial action.

FAQ

Do I need an ACL to arrange leases?

It depends on the lease type. Consumer leases that fall under the NCCP Act generally require the provider or arranger to be licensed. For detailed analysis see ASIC guidance and consider whether an ACR arrangement is appropriate.

Can a company and an individual both hold a licence?

Licences are held by legal entities; individuals can be authorised officers or hold licences if they are incorporated as companies. ASIC assesses the entity and responsible officers for fitness.

How long does approval take?

Times vary. Simple, complete applications may be processed in weeks; complex applications or those needing further information can take several months. Check ASIC for current processing guidance.

How much does it cost?

ASIC charges application fees and there are indirect costs (compliance systems, training, external audits). Verify current ASIC fees on ASIC's site (https://asic.gov.au/for-finance-professionals/credit-licensees/).

What is the difference between an ACL and an ACR?

An ACL authorises a business to carry on credit activities. An ACR is authorised by an ACL holder to act under that holder's licence; the ACL holder remains responsible for ACR conduct.

If I only introduce customers to lenders, do I still need a licence?

Referral-only arrangements can still be credit assistance if you recommend or suggest a product. Seek legal advice or use an ACR arrangement with clear contractual terms.

Key takeaways

An Australian credit licence is the statutory authorisation required to engage in credit activities under the NCCP Act, regulated by ASIC. The application process requires fit-and-proper-person assessments, a comprehensive compliance plan, financial viability evidence and detailed policies. Licence holders face ongoing obligations including responsible lending assessments, record-keeping, AFCA membership and staff training, with ASIC enforcing through suspension, cancellation and civil penalties for serious breaches.