Is Cryptocurrency Legal In New Zealand? Crypto Compliance For Businesses

If you’re running (or starting) a business and you’re wondering whether cryptocurrency is legal in New Zealand, you’re not alone. More and more customers, investors and founders are looking at crypto as a payment option, an investment, or even a key part of their product.

The good news is that crypto is generally legal to own, trade and use in NZ. But “legal” doesn’t mean “unregulated” - and the compliance side can get tricky fast once your business starts accepting crypto, holding it, issuing tokens, or providing any crypto-related service.

Below, we’ll walk you through what “legal” really means in practice, what laws you need to care about, and a practical compliance checklist to help you get your legal foundations right from day one.

So, Is Crypto Legal In NZ For Businesses?

In most ordinary business scenarios, the answer is yes: crypto is generally legal in New Zealand.

That means your business can generally:

• accept cryptocurrency as payment (if you structure it properly)
• buy and sell cryptocurrency (for treasury/investment purposes)
• build products and services that use blockchain technology
• hold crypto as an asset on your balance sheet (with the right accounting and risk controls)

However, there are a few important “yes, but…” points to understand.

Crypto Isn’t “Illegal” - But It’s Not Legal Tender Either

In New Zealand, cryptocurrency isn’t generally treated the same way as NZD. It isn’t “legal tender” in the way cash is. Practically, this means:

• you can agree with a customer to accept crypto as payment, but you’re usually doing that under a contractual arrangement
• you should be very clear about pricing, exchange rates, refunds, and what happens if a transaction fails
• you’ll still need to meet your normal business obligations (like consumer law, tax, and privacy)

So if your real question is whether crypto is legal in NZ for your business to use, the better follow-up is: what exactly are you doing with crypto?

Different Activities = Different Legal Risk

There’s a big difference between:

• a café accepting crypto payments (payments and consumer-facing terms)
• an online store holding crypto (treasury management, accounting and security)
• a fintech building a crypto platform (financial services regulation, registration and AML/CFT)
• a startup issuing tokens (financial markets rules, fundraising rules, advertising rules)

If you’re anywhere near the “platform”, “custody”, “exchange”, “token issuance” or “investment product” side of things, you’ll want tailored advice early. That’s where businesses can accidentally step into heavily regulated territory.

Which NZ Laws Apply To Crypto Businesses (And Businesses Using Crypto)?

Even though the technology is new, a lot of your obligations come from existing NZ laws that apply to any business. The key is understanding how they map onto crypto activities - and knowing that whether they apply is often activity-specific.

Anti-Money Laundering (AML/CFT)

One of the biggest compliance issues in crypto is the risk of being used for money laundering or financing terrorism. In New Zealand, the Anti-Money Laundering and Countering Financing of Terrorism Act (often shortened to AML/CFT) can apply depending on what your business does.

You’re more likely to have AML/CFT obligations if you’re providing a service that makes you a “reporting entity” - for example, if you:

• operate an exchange service (crypto to fiat, fiat to crypto, or crypto to crypto)
• provide custody or hold crypto on behalf of customers
• run a payment service that meaningfully handles funds/transactions for others
• facilitate transfers between parties as an intermediary

AML/CFT compliance usually isn’t just “tick a box”. It can involve customer due diligence (KYC), ongoing monitoring, record-keeping, reporting suspicious activity, and having an AML programme.

If your business might fall into this category, it’s worth getting advice early - fixing AML/CFT issues after launch is painful and expensive.

Financial Markets Regulation (Including “Financial Products”)

If your business is issuing a token, raising capital through token sales, or offering returns/yields, you may trigger NZ financial markets rules (including under the Financial Markets Conduct Act).

This often comes up where a token looks like:

• an investment
• a share-like interest
• a managed investment product
• a debt-like product

Even if you call it a “utility token”, what matters is how it works in practice - including what you promise buyers and how it’s marketed.

Because these issues are highly fact-specific, getting advice before you publish a whitepaper or open a presale can save you major headaches later.

Financial Service Providers Register (FSPR) And Dispute Resolution

If you provide certain financial services in New Zealand (which can include some crypto-related services, depending on how they’re structured), you may need to consider whether you must:

• register on the Financial Service Providers Register (FSPR), and
• join an approved dispute resolution scheme (particularly if you provide services to retail clients)

These requirements are separate from (and can apply in addition to) AML/CFT and the Financial Markets Conduct Act. Whether they apply depends on the exact service you’re offering, who your customers are, and how funds/crypto move through your product.

Consumer Law: Fair Trading Act And Consumer Guarantees Act

If you sell products or services to consumers (including online), you need to comply with core NZ consumer law, including the Fair Trading Act 1986 (misleading and deceptive conduct, unfair practices) and the Consumer Guarantees Act 1993 (minimum guarantees for consumer purchases).

Crypto doesn’t give you a free pass. Some common risk areas include:

• pricing clarity: if prices fluctuate, you must clearly explain how pricing is calculated and when the exchange rate is locked in
• refunds and chargebacks: crypto payments can be irreversible, but your consumer law obligations may still require refunds in certain cases
• marketing claims: if you say customers will “save money” or “earn rewards”, those claims must be accurate and not misleading

This is where having solid customer-facing terms really matters. For many businesses, a good starting point is clear Website Terms And Conditions that explain crypto payments, refunds, failed transfers, and volatility.

Privacy Act 2020 (Especially If You’re Doing KYC Or Analytics)

If you collect personal information (names, emails, wallet addresses linked to identity, ID documents for verification, IP addresses, etc), you’ll need to comply with the Privacy Act 2020.

Crypto businesses often forget that privacy risk isn’t only about hacks - it’s also about:

• collecting only what you reasonably need
• storing customer data securely
• being transparent about what you collect and why
• responding properly to access/correction requests

If you’re collecting customer data online, you’ll usually want a proper Privacy Policy in place from day one.

Contract Law (Because Crypto Transactions Are Often “Terms-Based”)

A lot of crypto-related risk is really contract risk. If you accept crypto payments, offer subscriptions, or provide a platform, your terms need to clearly set expectations on things like:

• what happens if a customer sends crypto to the wrong address
• what counts as “payment received” (broadcast vs confirmed on-chain)
• who pays network fees
• how you handle refunds, partial refunds, and overpayments
• your liability limits (to the extent the law allows)

Many businesses also use a tailored Disclaimer where they share general information (especially if you publish educational content about crypto).

Accepting Crypto Payments: What You Need To Set Up

For a lot of small businesses, the first step into crypto is simply accepting it as payment. Done right, this can be a legitimate and customer-friendly option.

But you’ll want to treat it like any other payment method - with clear internal processes and customer-facing rules.

1) Decide What You’re Actually Accepting (And Why)

Start with the basics:

• Which cryptocurrencies will you accept?
• Will you hold crypto, or convert immediately to NZD?
• How will you manage volatility risk?
• Will you accept crypto for all products/services, or only some?

If you want a practical overview of payment setup and common pitfalls, this guide on How To Accept Cryptocurrency is a useful starting point.

2) Update Your Customer Terms (Don’t Leave This To A Quick Website Line)

If you accept crypto without updating your terms, you risk disputes like:

• a customer claims they “paid” but the transaction is unconfirmed or stuck
• a customer overpays or underpays due to exchange rate movement
• a refund is requested and you don’t have a clear refund method (NZD vs crypto)

Your terms should clearly state:

• how the crypto price is calculated (and when it’s locked)
• what wallet address to use (and that customers are responsible for sending to the correct address/network)
• confirmation requirements (e.g. payment is complete after X confirmations)
• refund policy for crypto payments (including how you handle volatility)

3) Set Internal Controls For Wallet Access And Security

Even if you’re not a “crypto business”, if you hold crypto you’re holding a digital asset that can be difficult (or impossible) to recover if something goes wrong.

Consider:

• who has access to private keys or seed phrases
• multi-signature arrangements for business wallets
• approval steps for transfers (e.g. two-person sign-off)
• how you record transactions for accounting and audit purposes

This is partly a cybersecurity issue, but it’s also a governance issue. If you ever have a dispute between co-founders, good internal processes become incredibly important.

Tax And Accounting: Crypto Compliance Isn’t Optional

For many business owners, the most immediate compliance question isn’t whether crypto is legal in New Zealand - it’s “how do we handle tax and reporting?”

Important: this section is general information only and isn’t tax advice. New Zealand tax treatment can depend on what you’re doing (trading, investing, paying staff, accepting crypto revenue), so you should get advice from a qualified tax adviser or accountant for your circumstances.

At a practical level, you should assume:

• income is still income even if you’re paid in crypto
• you’ll need good records of transactions, exchange rates, dates and counterparties
• your pricing and invoicing practices need to be consistent and defensible

Keep Records Like You’d Need To Explain It To Someone Else

A good rule of thumb: if your accountant (or an auditor, investor, or regulator) asked you to explain a crypto transaction six months later, could you?

Make sure you can track:

• the NZD value at the time of the transaction
• the purpose of the transaction (sale, refund, treasury transfer, supplier payment)
• transaction IDs and wallet addresses (where appropriate)
• fees paid and who paid them

Issuing Tokens Or Building A Crypto Platform: Extra Compliance Triggers

If your business is moving beyond “accepting crypto” into building a crypto product, issuing a token, or holding assets for customers, the legal risk profile changes significantly.

This is where businesses often run into problems without realising it - especially if they’ve built something innovative and only later ask whether it’s regulated.

Token Launches Can Look Like Fundraising

If you’re issuing tokens to raise money (even to build a product), you should treat it as a serious legal project, not just a marketing launch.

Key questions include:

• Are you making any promises about returns, price increases, “yield”, or buybacks?
• Does the token represent rights (like revenue share, governance, or access to profits)?
• Are you targeting NZ customers (or overseas jurisdictions too)?
• Are you taking money now for future delivery (and what happens if delivery is delayed)?

Depending on the structure, you may also need robust investor terms, risk disclosures, and clear documents that set expectations and limit disputes.

Custody And “Holding For Others” Is A Big Line In The Sand

Many founders don’t realise how much regulation can be triggered once you hold assets for users - even if you’re “just helping them store it” or “holding it temporarily”.

If you’re building a platform with user wallets, pooled wallets, or any kind of custody model, you’ll want tailored advice on:

• AML/CFT obligations (if you’re a reporting entity)
• privacy and security duties
• contract terms and limitation of liability
• complaints handling and dispute resolution

Business Structure And Governance Matters More Than You Think

Crypto ventures often grow quickly - and that’s when ownership, decision-making, and risk allocation can become messy if it wasn’t sorted early.

If you’re setting up (or scaling) a venture, consider getting your structure right upfront with a proper Company Set Up.

And if you have multiple founders or investors, a Shareholders Agreement can help prevent disputes about control, exits, funding rounds, and what happens if someone wants to leave.

Key Takeaways

• If you’re asking whether crypto is legal in New Zealand, the general answer is yes - but what matters is how your business uses crypto.
• Accepting crypto payments is usually legal, but you should clearly document pricing, confirmation requirements, refunds, and volatility risk in your customer terms.
• Crypto-related activities can trigger major compliance areas like AML/CFT (especially for exchanges, custody, and some payment services) and financial markets laws if your token functions like an investment.
• Depending on your service, you may also need to consider FSPR registration and joining a dispute resolution scheme.
• Consumer law still applies, including the Fair Trading Act 1986 and Consumer Guarantees Act 1993, so make sure your advertising and customer promises are accurate and not misleading.
• If you collect personal information (including for KYC), you’ll likely need to comply with the Privacy Act 2020 and have a fit-for-purpose Privacy Policy.
• Tax and record-keeping are essential - being paid in crypto doesn’t remove your obligations to keep proper accounts and report income correctly.
• If you’re issuing tokens or building a platform, get advice early - it’s much easier to build compliant foundations than to “patch” legal risk after launch.

If you’d like help setting up your crypto-related business the right way - or reviewing your terms, privacy documents, or compliance risk - you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.