ASIC Charges Panacea Capital Director Over Unlicensed Crypto Fund

Australia's securities regulator has filed criminal charges against the director of a Queensland-based crypto investment operation, alleging he ran a digital asset fund without the required Australian Financial Services licence and channelled $4.4 million that is alleged to be proceeds of crime. The case is a sharp reminder that unlicensed crypto fund activity in Australia now carries penalties measured in decades of potential imprisonment, not just regulatory fines. For accounting firms, auditors, and CFOs who service digital asset clients, the Panacea Capital matter deserves close reading.

What ASIC Alleges Against Brian Creigh

Brian Jacques Creigh, of Moreton Bay in Queensland, has been charged with two criminal offences following a referral by the Australian Securities and Investments Commission (ASIC) to the Office of the Director of Public Prosecutions (Commonwealth).

The Two Charges in Detail

The first charge is carrying on a financial services business without an AFS licence, contrary to section 911A(1) of the Corporations Act 2001 (Cth). ASIC alleges that between 22 April 2021 and 17 June 2022, Creigh offered investors a product called the "Panacea Capital Cryptocurrency Investment Fund" through his vehicle, Panacea Capital Pty Ltd. The fund was promoted as investing in a diversified portfolio of digital assets with the aim of generating returns for participants. At no point during the fund's operation did either Creigh or Panacea Capital hold an AFS licence, nor were they authorised representatives of any licensed entity.

The second charge is dealing in proceeds of crime worth $1 million or more under section 400.3(1) of the Criminal Code (Cth). ASIC's referral relates to $4.4 million in investor funds directed into the unlicensed business, which the prosecution alleges Creigh knew or believed to be proceeds of crime.

Penalties the Charges Carry

The maximum penalty for the AFS licence offence is five years' imprisonment, a fine of $133,200, or both. The proceeds-of-crime charge carries a significantly heavier maximum: 25 years' imprisonment, a fine of $333,000, or both. These are not civil penalty proceedings. They are criminal prosecutions that, if proven, could result in custodial sentences.

It is also worth noting the timeline of regulatory action. ASIC permanently banned Creigh from providing financial services in March 2024, specifically in connection with conduct related to the Crypto Fund. The criminal charges, announced in October 2026, represent an escalation from that administrative sanction to full criminal prosecution. Regulators around the world increasingly treat the administrative and criminal tracks as sequential steps rather than alternatives, and ASIC is following that pattern here.

The AFS Licensing Requirement and Digital Assets

Section 911A of the Corporations Act requires any person carrying on a financial services business in Australia to hold an AFS licence. The question of whether a crypto-related product constitutes a "financial product" under the Act has been contested for years, but ASIC has consistently taken the view that pooled digital asset investment arrangements, where investors contribute capital and a manager invests it on their behalf, qualify as managed investment schemes or at minimum as financial products requiring licensing.

What Qualifies as a Financial Service in a Crypto Context

The Panacea Capital structure, as alleged, had the hallmarks of a managed investment scheme: pooled investor funds, a stated investment strategy across diversified digital assets, and a manager (Creigh) making investment decisions. Under Chapter 5C of the Corporations Act, a managed investment scheme with more than 20 members must be registered with ASIC unless an exemption applies. Operating one without registration or an AFS licence is itself an offence, separate from any fraud allegation.

Accounting professionals need to understand this because the label a client uses for their structure does not determine its regulatory treatment. A "crypto fund," a "token pool," a "yield-sharing arrangement," or a "community portfolio" can each fall within the statutory definition if the economic substance matches it. The name on the term sheet is irrelevant; the underlying arrangement is what matters.

Proceeds of Crime Exposure in Unlicensed Structures

The second charge is where the criminal exposure becomes particularly serious. Section 400.3(1) of the Criminal Code targets a person who deals with money or property, believing it to be the proceeds of crime, where the amount at stake is $1 million or more. The prosecution's case appears to be that because the $4.4 million was raised through an unlicensed financial services business, those funds themselves constituted proceeds of an underlying criminal act.

This is a critical analytical point for compliance teams. When a business operates without an AFS licence, the funds it receives may be characterised as proceeds of crime, not merely as civil penalty exposure. That characterisation triggers the full weight of Australian anti-money laundering law, with penalties dwarfing those available in the civil space. Firms that discover a client has been operating an unlicensed structure face immediate obligations under their own AML/CTF Act compliance programmes, including suspicious matter reporting to AUSTRAC where thresholds are met.

Implications for Accounting Firms, Auditors, and CFOs

Cases like this one land directly in the in-tray of accounting professionals in several ways. Three categories of professional risk stand out.

Client Due Diligence on Digital Asset Structures

Any accounting firm that prepares financial statements, performs agreed-upon procedures, or provides tax advice for a client operating a crypto pooling arrangement should be conducting enhanced due diligence on that client's regulatory status. Specifically, the firm needs to confirm whether the client holds an AFS licence or is operating as an authorised representative of a licence holder. If the client cannot produce evidence of either, the firm faces a choice: require remediation before continuing the engagement, or exit the relationship.

Under the Tax Agent Services Act 2009 and the relevant professional codes of conduct for accountants, practitioners must not knowingly assist a client in conduct that is unlawful. Providing ongoing accounting services to a manifestly unlicensed fund manager is a professional conduct risk as well as a potential aiding-and-abetting exposure if the matter escalates to criminal proceedings.

Audit and Assurance Considerations

For auditors, the Panacea Capital case highlights a specific going-concern and fraud risk indicator: a client operating in a regulated space without the necessary licence. Under Australian Auditing Standards (ASA 570 and ASA 240), an auditor who becomes aware that a client may be operating in breach of law is required to assess the implications for the audit opinion and to consider whether a fraud risk factor has been identified. Unlicensed operation is not a trivial breach; as this case shows, it can underpin a proceeds-of-crime allegation that renders the entire balance sheet suspect.

Auditors should also note that the absence of an AFS licence in a pooled crypto arrangement is likely to be material by nature, regardless of the quantum involved. Disclosure in the financial statements of the regulatory breach and the consequent legal proceedings would ordinarily be required under AASB 137 (Provisions, Contingent Liabilities and Contingent Assets) once charges are laid, and potentially earlier if the risk was known to management.

CFO-Level Governance and Crypto Accounting Software Hygiene

For CFOs at entities that operate or are considering crypto investment products, the Panacea Capital matter is a governance prompt. Any crypto accounting software or digital asset accounting software stack used to record fund positions, track investor balances, and produce NAV calculations must sit within a licensed operational framework. Clean books do not cure unlicensed operation, but poor records can compound it. Regulators in AML investigations will examine transaction records, wallet addresses, and investor ledgers as part of the evidentiary picture.

CFOs should also confirm that their entity's legal opinion on AFS licensing covers the specific product being offered, not just a general view on crypto. ASIC's enforcement posture has hardened since 2021, and a comfort letter from three years ago may not reflect the current regulatory position. For context on where ASIC's licensing framework is heading, see our detailed breakdown of ASIC's 2027 crypto licensing rules and what Australian firms must do now.

The Broader Australian Regulatory Picture

The Panacea Capital prosecution does not stand alone. ASIC has been systematically escalating enforcement against unlicensed crypto operators since at least 2022, and the Commonwealth DPP's willingness to run a dual-charge proceeding (licence breach plus proceeds of crime) signals that the prosecutorial template is now established. Future cases in this space are likely to follow a similar structure.

AUSTRAC and the AML Dimension

There is an AML overlay here that accounting professionals should not miss. Under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006, digital currency exchange providers that fall within the statutory definition must be registered with AUSTRAC and must maintain AML/CTF programmes, conduct KYC on customers, and file threshold transaction reports and suspicious matter reports. Operating outside that framework, as appears to be the case with Panacea Capital, means investors had no KYC conducted on them and no AML controls around fund flows.

For firms that provide crypto bookkeeping software services or act as outsourced CFOs for digital asset businesses, understanding the intersection of ASIC licensing and AUSTRAC registration is now a baseline competency, not an optional specialisation. Australia's regulatory architecture requires both, and a gap in either produces significant criminal exposure.

Reporting Obligations for Advisers

Australia's tax reporting framework for digital assets is also tightening in parallel. Firms advising crypto clients should be aware of the direction of travel on automatic exchange of information, including the OECD's Cryptoasset Reporting Framework, which Australia has been moving to implement. For a fuller picture of what that means for your practice, our coverage of Australia's draft CARF bill and what crypto tax reporting means for firms is a useful companion read.

Key Takeaways for Professional Practices

The Panacea Capital matter is still before the courts. Creigh is presumed innocent unless proven guilty. What is not speculative, however, is the regulatory and criminal framework that the charges are built on. Section 911A prosecutions, combined with proceeds-of-crime charges under the Criminal Code, represent a documented and now-tested enforcement pathway. Accounting firms, auditors, and CFOs should treat this case as a calibration point for their own risk frameworks.

Practically, that means confirming AFS licence status for every digital asset fund client, reviewing audit engagement letters to ensure scope covers regulatory compliance indicators, and ensuring that any crypto accounting software used by the client produces records that are both accurate and auditable under the evidentiary standards ASIC and the DPP would apply. It also means having a clear internal protocol for what to do if a client cannot produce evidence of licensing: escalate to the firm's risk partner, seek legal advice, and document the decision trail.

The Panacea Capital case shows what happens when those checks are not in place. A $4.4 million unlicensed fund has produced criminal charges carrying a maximum of 25 years' imprisonment. The regulatory cost of not knowing your client's licensing status, in Australia in 2026, is no longer theoretical.

Source: Australian Securities and Investments Commission (ASIC)

Frequently Asked Questions

Does operating a crypto fund without an AFS licence automatically create a proceeds-of-crime exposure?

Not automatically, but it can. The proceeds-of-crime charge in the Panacea Capital case rests on the prosecution's argument that funds received through an unlicensed financial services business constitute proceeds of a criminal act. If a court accepts that reasoning, investor capital flowing into an unlicensed structure can itself be characterised as criminal property. That is why AFS licensing due diligence for any pooled crypto product is a priority, not an afterthought.

What should an accounting firm do if a client cannot prove it holds an AFS licence for a digital asset fund?

The firm should escalate the issue to its risk partner immediately, seek independent legal advice on the engagement risk, and refrain from providing any services that might facilitate continued unlicensed operation. Depending on the circumstances, the firm may also have reporting obligations to AUSTRAC under Australia's suspicious matter reporting framework. Documenting every step of that process is essential.

How does a crypto pooling arrangement become a managed investment scheme under Australian law?

Under Chapter 5C of the Corporations Act 2001, a managed investment scheme exists when people contribute money or assets to a pool, the contributions are used to generate a financial benefit, and the investors do not have day-to-day control over the operation. A crypto fund where a manager selects and holds digital assets on behalf of investors will typically satisfy all three elements, regardless of how it is marketed or named.

Does AUSTRAC registration replace the need for an AFS licence?

No. AUSTRAC registration covers AML/CTF obligations for digital currency exchange providers and is a separate requirement from ASIC's AFS licensing regime. An entity can be AUSTRAC-registered and still be operating an unlicensed financial service, or vice versa. Both frameworks apply independently, and a gap in either creates distinct legal exposure.

What accounting standards apply when an entity faces criminal charges like these?

Once criminal charges are laid, AASB 137 requires the entity to recognise or disclose contingent liabilities arising from those proceedings, depending on the probability and estimability of the outcome. Material uncertainties around going concern under ASA 570 may also become relevant. Auditors encountering a client in this position should reassess the risk profile of the engagement and consider whether additional procedures or disclosures are needed.