Operating Outside Your AFSL: Risks and How an AFSL Variation Can Help

Introduction

An Australian financial services licence (AFSL) only authorises the financial services covered by its conditions. If a business changes, its activities can move beyond the services or financial products covered by its existing licence. Section 911A(1) of the Corporations Act 2001 (Cth) (‘Corporations Act‘) requires a person carrying on a financial services business in Australia to hold an AFSL covering the financial services it provides, unless an exemption applies.

This is particularly relevant when an AFSL holder launches a new product, adds an advice or dealing service, starts servicing a different client category, acquires another business or changes its distribution model. In this article, we explain how to identify an AFSL scope gap, the regulatory and commercial consequences of operating outside your licence, and how an AFSL variation can address the authorisations required for future activities.

Interactive Tool: Check Your AFSL Coverage & Whether You Need a Variation

Your AFSL Authorisations Set the Boundary

For an existing AFSL holder, the question is not simply whether the business has a licence. It is whether the licence covers the particular financial service being provided.

Section 911A(1) of the Corporations Act creates that licensing requirement. Sections 914A(6)–(7) require an AFSL to specify the financial services or classes of financial services the licensee is authorised to provide, which may be specified by reference to particular financial products or product classes.

In practice, licence scope commonly turns on the combination of:

• the financial service being provided, such as financial product advice or dealing;
• the financial product or product class to which the service relates; and
• where relevant, whether the authorisation extends to retail clients, wholesale clients or both.

This distinction matters because authority to provide one service does not necessarily cover another service involving the same product. For example, authority to deal in a financial product does not itself authorise financial product advice about that product.

A commercially new product also does not automatically require a licence variation. If the underlying financial service, product class and relevant client category are already within the existing authorisations, the AFSL may already cover the activity. The analysis should therefore start with the actual licence conditions and the legal character of the proposed activity.

Business Changes That Can Create an AFSL Scope Gap

AFSL scope problems often arise because the business changes while its licence remains the same. The statutory question remains whether the proposed activity is already covered or another valid licensing pathway applies.

Common triggers include:

• Adding a different financial service: A business authorised to deal may begin making recommendations or statements of opinion that amount to financial product advice under Section 766B of the Corporations Act.
• Moving into another financial product class: Existing authorisations may cover securities but not another product class involved in the new offering.
• Expanding from wholesale to retail clients: The underlying service may remain the same, but the existing authorisation may not extend to retail clients.
• Changing the business’s role in a transaction: A platform, intermediary, or distributor may take on functions that change the financial services it provides.
• Acquiring a business or launching a new division: The new activities need to be mapped against the acquiring entity’s existing AFSL rather than assumed to fall within it.
• Changing an activity that relies on an exemption. Exemptions under Section 911A(2) and other regulatory relief depend on particular conditions. A change in the facts can change whether the exemption remains available.

An authorised representative structure cannot fill a gap in the principal AFSL. Section 916A(2) limits an authorised representative to some or all of the financial services covered by the licensee’s AFSL, and Section 916A(3) makes an authorisation void to the extent it purports to cover a service outside that licence.

Risks of Operating Outside Your AFSL

Unlicenced Financial Services Exposure

Providing a financial service that the existing AFSL does not cover can contravene Section 911A(1) of the Corporations Act, unless an exemption applies. Failure to comply with Section 911A(1) is an offence through Section 1311(1), while Section 911A(5B) separately makes the contravention a civil penalty provision.

For an existing licensee, the same conduct can also engage its general obligations. Section 912A(1)(b) requires compliance with licence conditions, while Section 912A(1)(c) requires compliance with the financial services laws. Repeated out-of-scope activity may indicate weaknesses in product approval, licensing controls or supervision.

Breach Reporting Can Be Triggered

An established contravention of Section 911A(1) of the Corporations Act by an AFS licensee also requires prompt consideration under the reportable situations regime.

Section 912D(3)(b) treats the Section 912A(1)(c) obligation to comply with relevant provisions of the Corporations Act as a core obligation. Under Section 912D(4)(b), a breach of a core obligation is taken to be significant where it is constituted by a contravention of a civil penalty provision, subject to prescribed exclusions. Because Section 911A(5B) makes a contravention of Section 911A(1) a civil penalty contravention, this statutory pathway needs to be assessed when out-of-scope conduct is identified.

Where there are reasonable grounds to believe a reportable situation has arisen, Section 912DAA(1) requires a report to the Australian Securities and Investments Commission (ASIC). Under Section 912DAA(3), the report must generally be lodged within 30 days after the licensee first knows, or is reckless as to whether, there are reasonable grounds to believe the reportable situation has arisen.

Client Agreements and Fees May Be Affected

Operating outside licence scope can also affect agreements connected with the unlicenced service.

Division 11 of Part 7.6 of the Corporations Act applies in defined circumstances. Under Section 924A, it can apply where:

• a person enters into an agreement with a client who is not itself an AFS licensee,
• the agreement constitutes or relates to a financial service provided in the course of the provider’s financial services business, and
• the provider neither holds an AFSL covering the service nor is exempt.

The provision applies whether the client receives the service as a wholesale or retail client.

Where Division 11 applies:

• Section 925A may allow the client to give notice rescinding the agreement, subject to the limitations in that section;
• Section 925E can make the agreement unenforceable against the client while the statutory conditions are met and after rescission; and
• Section 925F can prevent recovery of brokerage, commission or other fees connected with the agreement while that provision applies.

These consequences should not be described as automatic invalidity of every agreement impacted by a licence issue. Division 11 contains specific conditions and limitations, so the relevant contracts and circumstances need to be assessed individually.

How an AFSL Variation Can Help

AFSL Variation Addresses the Scope Gap

Where the proposed financial service is not covered by the current licence and no exemption or other lawful pathway applies, the licensee can seek to expand its authorisations.

Although commonly described as an “AFSL variation”, adding or changing financial service and product authorisations is technically an application under Section 914A(2)(b) of the Corporations Act for ASIC to impose, vary or revoke licence conditions. That is because Sections 914A(6)–(7) place the financial services and product authorisations in the conditions on the AFSL. By contrast, Section 915A concerns varying the licence itself to reflect a change in the licensee’s name.

ASIC nevertheless describes the process operationally as varying the AFS licence. Applications to vary authorisations or conditions are now made through the ASIC Regulatory Portal.

ASIC Assesses the Business Behind the New Authorisations

A variation application is not simply a request to add wording to the licence. The licensee needs to show that it can support the proposed expanded activities.

ASIC’s current application guidance requires applicants to identify the authorisations sought and provide supporting information relevant to the proposed financial services and products. Depending on the variation, this can include information about the business model, compliance processes, responsible managers and fit and proper people.

ASIC also has statutory information-gathering powers during the application process. Under Section 914B(3) of the Corporations Act, it may request information, an audit report or other specified material relevant to the application. Section 914B(2) also empowers ASIC to refuse the application if the fit and proper person requirement in Section 913BA is not satisfied in relation to the applicant and the licence as proposed to be varied.

The practical task is therefore two-fold:

• identify the correct additional authorisations; and
• ensure the people, resources, and compliance arrangements can support them.

Variation Is Not a Retrospective Cure

Lodging a variation application does not itself expand the current AFSL. Until ASIC varies the relevant conditions, the business remains subject to its existing authorisations and any applicable exemption. Section 911A(1) of the Corporation Act continues to require the licence to cover services being provided.

A later variation also does not retrospectively change what the AFSL covered before approval. If the service has already commenced, the business should separately determine:

• when the affected activity began;
• which services, products, and clients were involved;
• whether another exemption or authorisation applied at the time;
• whether the activity should be stopped or modified pending resolution;
• whether breach reporting is required; and
• whether contracts, fees or remediation require further review.

This separates two different problems: dealing with past conduct and establishing the correct authority for future conduct.

Common AFSL Scope Mistakes

Scope gaps often arise from ordinary commercial decisions rather than deliberate non-compliance. Common examples include:

• relying on an internal summary of the AFSL instead of checking the actual authorisations and conditions;
• confirming that the licence covers the financial product, but not the particular financial service;
• moving from wholesale to retail clients without checking whether the relevant authorisations extend to retail clients;
• assuming an authorised representative can operate beyond the principal licence;
• treating lodgement of a variation application as authority to commence the new activity;
• carrying out the licensing review only after contracts or onboarding processes have been finalised; and
• seeking additional authorisations “just in case” without identifying whether the business genuinely intends to use them.

AFSL Scope and Variation Review Process

Before a new activity is launched, an AFSL holder can structure the review around six steps:

1. Map the proposed activity: Identify the service, financial product, client category and role performed by each entity involved.
2. Compare it with the existing AFSL: Review the actual licence authorisations and conditions rather than relying on internal descriptions.
3. Check alternative pathways: Determine whether the activity is already covered or whether a specific exemption or representative arrangement applies on the facts.
4. Identify historical exposure separately: If the activity has commenced, establish the affected period and clients and assess breach-reporting, contractual and remediation issues.
5. Scope the variation precisely: Identify the additional authorisations required and whether the responsible managers, resources, and compliance arrangements support them.
6. Align the commercial timetable with the licensing position: Do not assume a pending application expands the existing AFSL.

For businesses undertaking a broader review of their licence and compliance arrangements, Click Legal’s free AFSL Compliance Checklist provides a structured framework covering licensing, governance, breach reporting and other ongoing AFSL obligations.

Conclusion

An AFSL can remain valid while becoming too narrow for the business operating under it. The relevant test is whether the services actually being provided remain within the licence’s authorisations or are covered by another valid licensing pathway.

Where future activities sit outside that scope, contact the AFSL variation application lawyers at Click Legal to add the necessary authorisations. Where out-of-scope conduct has already occurred, the historical licensing, breach-reporting and client consequences need to be assessed separately rather than relying on the later variation to cure them.

Frequently Asked Questions