Regulator update: Zutopia rapidly responds to AUSTRAC VASP further information request

10 August 2026

Zutopia has submitted a revised AML/CTF program to AUSTRAC after the regulator issued a formal request for further information about the marketplace's Virtual Asset Service Provider (VASP) registration application.

AUSTRAC sent the request on Saturday, 8 August 2026, under section 76Q(1) of the Anti-Money Laundering and Counter-Terrorism Financing Act 2006. The notice asked Zutopia to provide a comprehensive program with a detailed money laundering, terrorism financing, and proliferation financing risk assessment, together with the policies, procedures, systems, and controls that will manage those risks.

The requested material was due by 5:00pm on 7 September 2026. Zutopia says it responded on Sunday, 9 August 2026, within 24 hours, with a revised 44-page program.

The program covers customer due diligence, sanctions, transaction monitoring, reporting, third-party oversight, staff training, control testing, and pre-launch assurance. It also includes specific controls for the CTO, developers, and other privileged technology personnel, including segregation of duties, code and deployment approval, production access controls, testing, audit trails, and cryptographic key governance.

The Zutopia team is working efficiently and doing everything it can to move the application forward, meet AUSTRAC's requirements, and prepare the marketplace so trading may resume after regulatory approval.

What happens next

Zutopia's application remains under AUSTRAC assessment. AUSTRAC did not refuse the application in the notice, and the revised program is now with the regulator.

AUSTRAC's registration guidance says it may take up to 90 days to assess an application. If AUSTRAC requests further information, this period resets from the date the information is provided. This gives AUSTRAC a further review period from Zutopia's 9 August 2026 response, but it does not indicate how long the regulator will take or what decision it will make.

Zutopia has told AUSTRAC that it will not provide designated VASP services until its registration is approved and the program's pre-launch controls and assurances are fully implemented.

Read the original newsletter for the full update.

Read AUSTRAC's original request for further information.

More on this topic:

Zutopia launches new website ahead of expected AUSTRAC regulator update

Zutopia submits official VASP application to AUSTRAC

How does Zucoin do KYC and compliance?

If you liked this newsletter, please forward it to someone who might like it too.

-

All the best,
-Rob
MyZucoins

Disclaimer: Of course, this is not advice, financial or otherwise. It’s also important to consider the risks and challenges associated with any potential benefits.