The AFSL Variation: When Do You Need to Vary Your AFSL & How Do You Apply?

An Australian Financial Services Licence (AFSL) is not a general permission to conduct any financial services business.

It is a permission to provide the particular financial services, in relation to the particular financial products and client classes, recorded on the licence and subject to its conditions.

That distinction becomes critical when a licensee changes its products, services, distribution model, client base or key personnel.

A commercially sensible expansion can create a regulatory gap if the current licence does not cover the proposed activity.

The business should not begin providing the new financial service merely because a variation application is being prepared or assessed.

The practical question is therefore not simply, “Do we already hold an AFSL?” It is:

Does every regulated step in the proposed operating model fall within the exact authorisations and conditions of our existing licence?

If the answer is no, or is not clear, the licensing perimeter should be resolved before launch, before contracts are finalised and before public statements are made about the expanded service.

The short answer

You will generally need to apply to vary your AFSL if your financial services business will move beyond the authorisations or conditions currently recorded on the licence. Common examples include:

• adding a new financial service, such as financial product advice, dealing, making a market, operating a registered scheme, providing a custodial or depository service, claims handling or a crowd-funding service;
• adding a new financial product category, such as securities, derivatives, foreign exchange contracts, managed investment schemes, government debentures, superannuation products or miscellaneous financial investment products;
• expanding from wholesale clients to retail clients;
• changing the permitted form of advice, for example from general advice only to personal advice;
• adding a dealing activity or subtype not currently authorised;
• changing or removing a key person condition or another specific licence condition; or
• making a material change to the business model that is inconsistent with the scope on which ASIC granted the current licence.

Under section 914A of the Corporations Act 2001 (Cth), an AFSL is subject to the conditions specified or imposed on it, and ASIC may vary or revoke conditions on application by the licensee.

Section 914B permits ASIC to request information in relation to an application to vary conditions.

ASIC also has statutory powers concerning licence variation under section 915A.

ASIC’s current central guide is Regulatory Guide 1: Applying for and varying an AFS licence (RG 1).

ASIC states that a licensee whose financial services business changes, including where it wishes to cover additional financial services, products or client types, is likely to need a variation.

Interactive tool: Check if you may need an AFSL variation

Variation, notification or a new licence? Do not confuse the pathways

Not every business change requires a licence variation. Some changes are dealt with by notifying ASIC. Others may require a new licence application or a restructuring of the proposed model.

A variation is generally the correct pathway where

The existing licensee will remain the regulated service provider, but its authorisations or licence conditions need to change. The variation may concern:

• financial service authorisations;
• financial product authorisations;
• retail or wholesale client coverage;
• limitations attached to advice or dealing activities;
• a key person condition;
• a named scheme or asset-class limitation; or
• another tailored or standard condition.

A notification may be sufficient where

The change does not alter the licence authorisations or conditions, but ASIC must be told about updated licence details.

Examples can include changes to responsible manager details, control, auditor appointments or website addresses.

The correct notification, deadline and consequences of late notification depend on the change.

See ASIC’s lodgement requirements for AFS licensees and guidance on changing responsible managers.

A change to a responsible manager is not automatically “only a notification”. If the departing person is named in a key person condition, a variation will generally be required. ASIC’s current portal process also requires a new responsible manager on whom the variation relies to be added through the responsible-manager notification transaction before the variation is started.

A new licence may be required where

A different legal entity will carry on the financial services business. An AFSL belongs to the named licensee. It does not automatically extend to another group company, a new special purpose vehicle or an acquired business. Group branding, common directors and shared systems do not transfer the licence.

Cancellation may be appropriate where

The licensee no longer provides financial services or intends to move entirely to an authorised representative model.

Cancellation has its own legal and operational consequences and should not be treated as an administrative clean-up exercise.

ASIC’s overview is available at Varying or cancelling your AFS licence.

The first task: map the proposed business before touching the portal

The quality of an AFSL variation application is largely determined before the online form is opened, making early input from AFSL variation application lawyers valuable.

The licensee should be able to describe, consistently and in plain English:

• who provides each service;
• to whom the service is provided;
• whether the client is retail or wholesale;
• what financial product is involved;
• whether the licensee gives advice, deals, arranges, issues, underwrites, makes a market, operates a scheme, handles claims or provides custody;
• whether the licensee acts as principal, agent, trustee, responsible entity, intermediary, platform operator or service provider;
• how money and assets move;
• which functions are outsourced;
• how the licensee earns revenue; and
• which entity is legally responsible at each step.

This is the licensing perimeter map. It should reconcile the commercial pitch, website, product documents, agreements, transaction flow and compliance framework. If those materials describe different businesses, ASIC is likely to ask questions.

Click Legal tip: test the verbs, not the labels

Descriptions such as “technology platform”, “introducer”, “fund manager”, “broker”, “payments solution” or “administration service” are not determinative.

The Corporations Act focuses on what the entity actually does.

For example, a platform described as “technology only” may still arrange for a person to deal.

A manager described as providing “information” may be giving financial product advice.

A business that says it does not provide custody may nonetheless hold a financial product or beneficial interest on behalf of a client.

A principal trader may require both dealing and market-making authorisations depending on its conduct.

The relevant financial service concepts are primarily in Part 7.6 and Division 4 of Part 7.1 of the Corporations Act, including:

• section 766A, which identifies financial services;
• section 766B, financial product advice;
• section 766C, dealing in a financial product;
• section 766D, making a market;
• section 766E, custodial or depository services;
• section 766G, claims handling and settling services; and
• section 911A, the requirement to hold an AFSL unless an exemption applies.

Common AFSL variation triggers

1. Adding a financial product

A licence authorising advice or dealing in securities does not necessarily cover derivatives, foreign exchange contracts, managed investment schemes or another product category. The product must be legally classified and matched to the licence wording.

Particular care is required for products with hybrid, digital or structured features. ASIC’s RG 1 states that a miscellaneous financial product category should generally be selected only in rare cases and may require a legal opinion explaining why the product does not fit another category.

2. Adding a financial service

The product may already be covered while the proposed service is not. A licensee authorised to provide advice is not automatically authorised to deal. A dealing authorisation does not automatically permit market making, custody or operation of a registered scheme.

3. Expanding from wholesale to retail clients

Retail expansion is not merely a client-segmentation change. It can activate materially different obligations, including disclosure, internal and external dispute resolution, compensation and professional indemnity insurance, design and distribution obligations and, in advice businesses, professional-standards requirements.

The retail and wholesale client rules are principally in sections 761G and 761GA of the Corporations Act and Division 2 of Part 7.1 of the Corporations Regulations 2001.

4. Moving from general advice to personal advice

The distinction depends on whether the provider considered one or more of the client’s objectives, financial situation or needs, or whether a reasonable person might expect that consideration. A change in scripts, algorithms, data inputs, onboarding questions or recommendation logic can move a service across the boundary even if the business continues to call the output “general information”.

5. Changing the dealing model

ASIC’s current application architecture distinguishes between dealing and arranging, and between dealing subtypes. The exact transaction steps matter. Changes to who issues, applies for, acquires, varies or disposes of the product can require a different authorisation.

6. Adding custody or client-asset handling

Custody issues often arise indirectly. The analysis should follow legal title, beneficial ownership, account control, signing authority, wallet control, settlement and the role of payment or technology providers. ASIC’s Regulatory Guide 133: Funds management and custodial services: Holding assets is a key reference.

7. Operating a fund or registered scheme

Fund structures may require several authorisations, not only an authorisation to operate a registered scheme.

Depending on the model, dealing, advice, custody and authorisations relating to underlying assets may also need to be considered.

Named-scheme or asset-kind restrictions on the existing licence must be reviewed.

8. A responsible manager or key person changes

Responsible managers are the people responsible for significant day-to-day decisions about the financial services business. ASIC assesses organisational competence under section 912A(1)(e) by looking at the knowledge and skills of those people.

If the business depends heavily on one or more responsible managers, ASIC may name them in a key person condition.

Departure of a named key person can require an urgent variation and replacement competency case. See RG 105: AFS licensing: Organisational competence.

Before you apply: the readiness test

Before commencing the portal application, the licensee should be able to answer “yes” to each of the following:

• We have legally classified every proposed service, product and client class.
• We have identified the precise authorisations and condition changes sought.
• The application matches the actual business model, website, agreements and transaction flow.
• The board or authorised decision-maker has approved the proposed model and variation.
• Our responsible managers collectively cover every requested authorisation.
• Any new responsible manager has been properly appointed and notified to ASIC before the variation is started, where required.
• Fit and proper information is current, complete and consistent.
• Compliance policies, supervision, conflicts, risk, resources and outsourcing arrangements have been updated for the expanded business.
• Financial requirements have been recalculated for the proposed authorisations.
• Retail-client infrastructure is operational if retail authorisations are sought.
• We can substantiate every declaration and certification made in the application.
• We have a controlled launch plan that prevents the new service starting before the variation takes effect.

This is not a paperwork threshold. Under sections 912A and 912B of the Corporations Act, licensees must have the required competence, resources, systems, dispute-resolution and compensation arrangements. ASIC’s RG 104: AFS licensing: Meeting the general obligations and RG 166: AFS licensing: Financial requirements should be considered alongside RG 1 and RG 105.

Responsible Managers: the competency case must fit the variation

ASIC does not treat a responsible manager as a ceremonial nominee.

The person should be directly responsible for significant day-to-day decisions about the ongoing provision of financial services.

For a variation, the existing responsible-manager matrix should be re-tested against the new authorisations. The key questions include:

• Which responsible manager covers each requested service, product and client class?
• Does that person’s recent experience correspond to the actual proposed business, not merely the broader industry?
• Do qualifications and training satisfy one of the pathways in RG 105?
• Is the experience sufficiently current and of an appropriate depth?
• Will the person have genuine authority, access to information and adequate time?
• Is the licensee overly dependent on one person, creating key-person risk?
• If the person acts for multiple licensees, can time allocation and conflicts be managed?

ASIC’s RG 1 says that each responsible manager must meet one of the five options in RG 105 for demonstrating appropriate knowledge and skills. ASIC generally expects an AFSL holder to have at least two responsible managers, although the appropriate number depends on the nature, scale and complexity of the business.

Where new responsible managers or relevant fit and proper persons are involved, supporting material may include a Statement of Personal Information, criminal-history checks, bankruptcy checks, qualifications, detailed role history and overseas checks.

Under current RG 1, relevant People Proofs generally must be no more than 12 months old, with overseas checks required for countries in which the person has lived for more than 12 months in the previous 10 years. Non-English documents require certified translations.

Click Legal tip: build an authorisation-to-competency matrix

Do not provide disconnected CVs and hope ASIC will infer coverage.

Map each requested authorisation to:

1. the responsible manager who covers it;
2. the relevant roles and dates;
3. the financial services and products involved in those roles;
4. the client class;
5. the level of decision-making responsibility; and
6. the applicable RG 105 pathway.

The matrix should show collective competence across the complete variation, identify any gaps and avoid overstating experience.

Supporting documents: what should be prepared?

The required documents depend on the variation. ASIC’s Regulatory Portal tailors questions to the selected authorisations and ASIC may request further documents during assessment.

A well-prepared variation pack may include:

• a concise business description explaining the existing and proposed business;
• a table comparing current and requested authorisations;
• a legal perimeter analysis for complex, hybrid or novel services;
• an organisational chart showing the licensee, controllers, key personnel and material service providers;
• a transaction-flow diagram showing the contractual, money and asset flows;
• a detailed worked transaction example where the model is difficult to explain abstractly;
• a responsible-manager competency matrix;
• fit and proper information and People Proofs where required;
• updated compliance, supervision, risk management, conflicts and outsourcing arrangements;
• evidence of adequate human and technological resources;
• updated financial-resource calculations and forecasts;
• retail-client readiness materials, where relevant, including AFCA membership, professional indemnity insurance and complaint-handling arrangements; and
• product-specific documents required by the authorisation sought.

Not every document should be uploaded merely because it exists. The objective is to give ASIC the information required to assess the variation, in a coherent and proportionate form. Overproduction can obscure the case, create inconsistencies and invite questions about material that was not necessary to the application.

Click Legal tip: use diagrams strategically

ASIC’s RG 1 expressly recommends diagrams showing the business model, significant service providers, material outsourcing and relevant transaction and money flows.

The portal permits supporting uploads.

A clear organisational chart and, where necessary, one detailed transaction example can make the assessment materially easier.

The diagram should not be decorative. It should identify:

• each legal entity and its role;
• ACN or ABN details where relevant;
• client, product issuer, licensee and service-provider relationships;
• contractual flows;
• money flows;
• asset or custody flows;
• outsourcing; and
• the point at which each regulated service is provided.

How do I apply to vary an AFSL?

Since 16 June 2025, the application is completed online through ASIC’s Regulatory Portal.

The previous RG 2 and RG 3 licensing-kit guides have been withdrawn and replaced by the consolidated RG 1.

Step 1: confirm the legal scope

Review the current AFSL certificate, all authorisations, client limitations, advice limitations, dealing subtypes, key person conditions and tailored conditions. Map the proposed operating model against them.

Step 2: define the exact variation

Identify whether the application seeks to vary:

• authorisation conditions concerning financial services and products;
• client coverage or limitations;
• dealing or advice limitations;
• a key person condition; or
• another standard or tailored condition.

Avoid one of the common AFSL application mistakes: applying for authorisations ‘just in case’. ASIC warns that unnecessary authorisations may increase fees, industry funding levies and assessment time. They also create ongoing compliance obligations.

Step 3: establish organisational competence

Confirm that the nominated responsible managers collectively cover the proposed authorisations. If the variation relies on a new responsible manager, complete the responsible-manager notification transaction before starting the variation, as required by ASIC’s current process.

Step 4: prepare the supporting pack

Prepare the business description, charts, transaction flow, competency matrix, People Proofs and compliance or resource materials relevant to the variation. Check every document for consistent entity names, roles, products, client classes and terminology.

Step 5: update operational readiness

The licensee should be capable of complying with the obligations attaching to the varied licence. Update policies, procedures, registers, monitoring, training, resourcing, financial requirements, insurance, complaints arrangements, product governance and outsourcing controls before making unsupported declarations of readiness.

Step 6: complete and review the portal application

The portal asks questions about the licensee, proposed changes, fit and proper people, responsible managers and the ability to meet general obligations.

It calculates the statutory fee payable at lodgement. Current fees should be checked on ASIC’s fees for commonly lodged documents page because fee settings can change.

Before submission, conduct a line-by-line legal and factual review. ASIC states that submitted answers cannot be changed through the application after lodgement, and false or misleading statements are criminal offences. See, relevantly, sections 1308 and 1309 of the Corporations Act.

Step 7: manage ASIC’s assessment

ASIC assigns the application to a licensing analyst and applies a risk-based assessment. ASIC may seek clarification, documents or further evidence. Under section 914B, a formal request may specify a response period. Failure to respond can result in the application being treated as withdrawn, with no refund of the application fee.

Maintain a requisition tracker showing each question, owner, document, due date, response and approval. If additional time is genuinely required, request an extension before the due date.

Step 8: review the draft variation and satisfy conditions

If ASIC is prepared to approve the variation, it may issue a requirements letter and draft licence or varied conditions. Check every authorisation and limitation against the application. Outstanding matters may include professional indemnity insurance, AFCA membership, financial requirements or other implementation steps.

Step 9: obtain the final varied licence before launch

Do not treat an application, an indication from an analyst or a draft licence as the operative variation. The business should commence the expanded service only after the final varied licence takes effect and all operational conditions have been satisfied.

How long does an AFSL variation take?

There is no guaranteed assessment period. ASIC’s service charter states that it aims to decide 70% of complete applications to grant or vary an AFSL within 150 days and 90% within 240 days.

Complex applications, novel issues and incomplete information can take longer.

The commercial timetable should therefore work backwards from a realistic regulatory lead time.

Product launch, marketing, contractual commitments, staffing and funding should not assume a rapid approval.

Factors that commonly delay an application include:

• unclear or inconsistent business descriptions;
• selecting the wrong or unnecessary authorisations;
• responsible-manager experience that does not match the variation;
• stale, incomplete or overseas People Proofs;
• inconsistent websites, agreements and transaction flows;
• unresolved custody, client-money, outsourcing or issuer questions;
• insufficient financial or technological resources;
• generic policies that do not address the proposed model; and
• late or incomplete responses to ASIC requisitions.

The risks of operating outside your AFSL

Providing a financial service outside the scope of the licence can expose the licensee and relevant individuals to significant consequences. Depending on the circumstances, these may include:

• contravention of the licensing requirement in section 911A;
• ASIC investigation, surveillance or enforcement;
• civil or criminal consequences;
• breach reporting and remediation issues;
• inability to enforce certain claims under section 925E of the Corporations Act;
• disputes with clients, counterparties, insurers or product issuers;
• professional indemnity coverage issues;
• director, officer and responsible-manager exposure;
• adverse due diligence findings in a capital raise, sale or institutional partnership; and
• launch delays, re-papering and customer remediation.

The fact that ASIC later approves a variation does not retrospectively authorise services provided before the variation took effect.

Click Legal’s top tips for a stronger AFSL variation application

Top tip 1: start with the current licence certificate

Do not rely on a summary prepared for a board paper or marketing deck. Read the operative authorisations and conditions line by line.

Top tip 2: separate the legal analysis from the portal exercise

The portal records the result of the analysis. It does not perform the perimeter analysis for the licensee.

Top tip 3: make every document describe the same business

ASIC may compare the application with the website, agreements, product material, diagrams and previous regulatory submissions. Inconsistency is a common source of requisitions.

Top tip 4: explain complex models visually

Use one clean entity-and-role chart and one transaction-flow diagram. Add a worked example where the service cannot be understood from labels alone.

Top tip 5: prove responsible-manager coverage authorisation by authorisation

Use a competency matrix. Do not rely on job titles or general financial-services experience.

Top tip 6: apply only for what the business will genuinely provide

Unnecessary authorisations can increase cost, delay and ongoing compliance burden.

Top tip 7: identify consequential obligations early

A new authorisation may change financial requirements, insurance, audit, AFCA, disclosure, training, product-governance, custody, client-money and compliance arrangements.

Top tip 8: control the pre-approval period

Create a launch gate. Marketing, onboarding, contracting and operations should not drift into providing the new service while ASIC is assessing the application.

Top tip 9: answer ASIC’s question directly

Provide a complete, accurate and proportionate response. Do not volunteer unrelated material that creates new issues or obscures the answer.

Top tip 10: preserve an evidence file

Keep the board approval, legal analysis, final portal record, supporting documents, ASIC correspondence, requisition tracker, requirements letter and final varied licence in a controlled file.

How Click Legal can assist

Click Legal assists AFS licensees with the complete AFSL variation lifecycle, including:

• AFSL perimeter and authorisation analysis;
• current-licence gap assessment;
• application strategy and variation scoping;
• Responsible Manager selection and RG 105 competency mapping;
• fit and proper and People Proof review;
• business descriptions, organisational charts and transaction-flow diagrams;
• preparation and review of Regulatory Portal responses;
• variation-specific compliance, risk, supervision and outsourcing frameworks;
• financial-requirements and operational-readiness coordination;
• ASIC requisition responses and regulatory correspondence; and
• post-approval implementation and ongoing compliance monitoring.

If your business is launching a new product, entering a new client market, changing its distribution model or replacing a key Responsible Manager, the safest time to confirm the licensing pathway is before the commercial launch plan is locked in.

Arrange an AFSL Variation Scope Review with Click Legal. We will review the current licence and proposed model, identify the authorisations and conditions that may need to change, and provide a practical application roadmap. A cost agreement will be provided before substantive legal work begins.

Frequently Asked Questions

Key legislation and ASIC guidance

• Corporations Act 2001 (Cth), particularly sections 761G, 761GA, 766A to 766G, 911A, 912A, 912B, 913B, 913BA, 913BB, 914A, 914B, 915A, 925E, 1308 and 1309.
• Corporations Regulations 2001, including relevant client-classification and licence-condition provisions.
• ASIC Regulatory Guide 1: Applying for and varying an AFS licence.
• ASIC Regulatory Guide 104: AFS licensing: Meeting the general obligations.
• ASIC Regulatory Guide 105: AFS licensing: Organisational competence.
• ASIC Regulatory Guide 126: Compensation and insurance arrangements for AFS licensees.
• ASIC Regulatory Guide 133: Funds management and custodial services: Holding assets.
• ASIC Regulatory Guide 166: AFS licensing: Financial requirements.
• ASIC Pro Forma 209: Australian financial services licence conditions.
• ASIC FAQs: AFS licence applications.
• ASIC Regulatory Portal.

Disclaimer

This article and the inactive checker provide general information only. They do not constitute legal advice and are not a substitute for advice on the circumstances of a particular business. AFSL authorisations and conditions must be interpreted in the context of the Corporations Act, Corporations Regulations, ASIC instruments, applicable exemptions, the licence wording and the actual operating model. Legislation, regulatory guidance, fees, and portal requirements may change.

A legal advice before commencing a new financial service, changing a regulated business model, relying on an exemption or lodging an AFSL variation application, is a must to ensure compliance with the relevant legislation.