Launching NFTs in Australia, who owns the art, what buyers get and what you can promise

Your business has decided to launch an NFT collection, or you are deep into planning one. The artwork is being created, the marketing deck promises community access and future drops, and the mint date is approaching. Before you press go, the technology will not answer the questions that actually decide whether the project ends in revenue or in complaints: who owns the content you are minting, what your buyers genuinely receive, what you are allowed to promise, and whether what you are selling is something a regulator has an interest in. This guide works through those questions in the order they will bite.

Do you actually own the content you want to mint?

The most common mistake we see is a business minting NFTs out of content it does not fully own. Paying for artwork does not, by itself, buy the copyright in it. Under the Copyright Act 1968 (Cth), the author of an artistic or literary work is generally the owner of the copyright, and that default only changes in specific, documented ways.

The three ownership rules that matter for an NFT project are these:

• Employees: if one of your employees creates the work in the course of their employment, you own the copyright by operation of law, under s 35(6) of the Copyright Act. That applies to works made in pursuance of the terms of employment, so work clearly outside the employee's role can fall outside the rule.
• Independent contractors and freelancers: there is no equivalent rule. A designer, animator or developer you commission owns the copyright in what they create unless the copyright is assigned to you. And under s 196(3) of the Copyright Act, an assignment of copyright has no effect unless it is in writing and signed by or on behalf of the assignor. A verbal "you keep the rights" conversation, an email exchange, or a purchase order that says nothing about copyright does not transfer it.
• Collaborators: each collaborator keeps copyright in their own contribution unless the agreement says otherwise, which matters when generative art, music and written content from different people are bundled into one collection.

A worked example: you pay a freelance artist $5,000 to generate 1,000 profile-picture images for your collection. There is no written assignment in the engagement agreement. The artist owns the copyright in every image. You have no right to mint them, sell them, or grant your buyers any licence to use them, and the artist could grant a licence over the same images to a rival project or pull the work. The fix is cheap and is done before the work starts: a written agreement that assigns copyright to you, expressly includes the right to mint, sell and sub-licence via NFTs, and is signed by the artist.

There is a second layer most founders do not expect. Even where you own the copyright, the human creator keeps moral rights: the right to be attributed, the right not to have the work falsely attributed, and the right of integrity (not to have the work treated in a way that is prejudicial to their reputation). Moral rights cannot be assigned, but a creator can consent in writing to acts that would otherwise infringe them. If you plan to alter, remix or present commissioned art in ways the artist might not expect, obtain that written consent as part of the engagement. The consent mechanism is set out in s 195AW of the Copyright Act.

Brand elements raise a separate set of questions. If your NFT artwork features your brand name, logo, slogans, character names or anything customers associate with your business, consider protecting it with a registered trade mark before you launch. Registration under the Trade Marks Act 1995 (Cth) gives you the exclusive right to use the mark for the goods and services it covers, and a registration obtained early is a much stronger basis for stopping copycats selling confusingly similar NFTs under a similar name. It is equally important to search before you brand: an NFT collection name that collides with an existing registration can create infringement exposure of its own. Trade mark class selection for digital goods and services is a judgement call, which is exactly where advice is worth taking.

Finally, do not assume third-party content is usable. Images, characters, memes, fonts, stock assets and music found online, even content that feels like part of internet culture, come with copyright owners. Minting them into a commercial NFT collection without permission is infringement risk in its purest form. The safe paths are original content or content licensed with express rights that cover NFT minting and resale.

What buyers actually get when they buy your NFT

The second most common gap is the mismatch between what you intend to sell and what buyers think they have bought. An NFT is a unique token recorded on a blockchain. Buying the token gives the buyer the token, and whatever rights you grant in your terms. It does not, by itself, transfer the copyright in the underlying image, the trade marks in your brand, or any right to exploit the content commercially.

This is where a lot of NFT disputes start. Buyers assume they can print the art on merchandise, use it in their own marketing, or resell commercial rights. You assume they cannot. Your terms are the document that decides who is right, and if the terms are silent, the ambiguity is the problem.

A useful way to design the sale is to decide first what kind of product the NFT is, because each type carries a different set of promises:

If you do allow commercial use, put boundaries around it. Common limits include: whether the buyer can sub-licence to others, revenue or volume caps on what the buyer may produce, whether the licence survives a resale of the token, and whether the buyer may use your trade marks (usually they should not be able to). The default position, and the safest one for most small projects, is a personal use licence only: the buyer can display the art, perhaps use it as a profile picture or on a personal website, and nothing else.

Whatever you decide, your NFT terms are a customer contract for a digital product, and they need to say what the NFT includes and does not include, what rights the buyer gets in the underlying content, what benefits you promise and how they can change, what conduct is prohibited, your refund and cancellation position, and the risk warnings a buyer needs to see. Depending on how you sell, these terms sit inside your website terms or as a separate NFT-specific document referenced at checkout, but they must be presented before the buyer commits, not buried after purchase.

What you can promise buyers without falling foul of consumer law

NFTs feel new, but the rules that apply to your marketing are the same ones that apply to any Australian business promoting a product to customers. The Australian Consumer Law (ACL), which is Schedule 2 of the Competition and Consumer Act 2010 (Cth), prohibits misleading or deceptive conduct in trade or commerce under s 18, and a series of specific false or misleading representations under s 29, including representations about the benefits, sponsorship, approval or affiliation of what you sell.

Two provisions deserve special attention in an NFT context. First, s 29 catches claims that imply scarcity, official status or endorsement that is not accurate, such as describing a collection as "limited" when the supply is unlimited, or implying a partnership with, or approval from, a well-known brand or regulator that you do not have. Second, future promises are treated seriously. If your roadmap says buyers will get future access, events, discounts or upgrades, the law treats that as a representation about a future matter, and under the ACL's future-matters rule (s 4) the representation is misleading unless you had reasonable grounds for making it. Hype copy such as "guaranteed to moon" or "this collection will change the game" is exactly the kind of language that creates exposure.

The Federal Court's decision in ASIC v BPS Financial Pty Ltd [2024] FCA 457 shows how strictly promotional language is read. The case concerned Qoin, a crypto payment token, and the Court found the operator had made misleading representations that token holders could exchange Qoin on independent exchanges when no such exchanges existed, that the merchant network accepting Qoin was growing when merchant numbers were actually in decline, and that the product had been officially approved or registered when it had not. Notably, the Court assessed what the ordinary reader would understand from the marketing materials as a whole, not what the company intended. A disclaimer buried on page 29 of a white paper did not rescue statements made on page 6, and a claim that the product was "fully compliant" was treated as opinion only because it was expressly based on legal advice.

The practical translation for your NFT project is straightforward. If a customer buys because of the benefits you described, you need to be able to deliver those benefits as described. For roadmap features, decide which are firm commitments and which are aspirational, state the assumptions they rely on, and give yourself a documented ability to change, delay or cancel features. Drafting terms that allow changes does not override the ACL, but being transparent about limits builds trust and reduces the disputes that actually cost you.

Refunds deserve a separate mention. Blockchain sales are often marketed as final and non-refundable, but that position is weaker than it looks. The ACL's consumer guarantees apply to goods and services supplied to consumers, and s 64 makes any term that tries to exclude or restrict those guarantees void. A buyer is a consumer for goods priced at $100,000 or less, or acquired for personal, domestic or household use, and s 3 of the ACL presumes a buyer is a consumer unless you prove otherwise. Whether the consumer guarantees bite on a particular NFT is not always a clean question, because the token, the digital file it points to and any promised access rights could each be characterised differently, but you cannot contract your way out of the inquiry. On top of the guarantees, customers can complain to the ACCC or state consumer regulators, pursue chargebacks through payment providers, and seek remedies for misleading conduct. Your terms set expectations; they do not override the law.

When does an NFT become a financial product?

Many NFTs are sold as collectibles or access passes and are not financial products. But the line is drawn by substance, not by the label "NFT", and some structures fall on the wrong side of it.

Under s 763A of the Corporations Act 2001 (Cth), a financial product is a facility through which a person makes a financial investment, manages financial risk, or makes non-cash payments. A managed investment scheme, defined by reference to people contributing money to acquire benefits generated by the efforts of others, may need to be registered under s 601ED if it has more than 20 members, and a person who carries on a financial services business in Australia must generally hold an Australian financial services licence (AFSL) under s 911A.

The Qoin case is again the clearest illustration of how this applies to crypto projects. The Court found that the Qoin wallet was a financial product, specifically a facility through which users made non-cash payments under s 763D, and that BPS had carried on a financial services business by issuing it and providing financial product advice without holding an AFSL, other than during a period when it acted as an authorised representative of a licensee. The lesson is that a crypto project can be a regulated financial product even when its operators describe it as a payments or ecosystem product rather than an investment.

For an NFT project, the features that tend to pull a product toward financial services regulation include:

• profit-sharing, revenue splits or royalty structures that flow to token holders based on the project's performance;
• pooled funds that are applied by you to generate returns;
• staking, lending or yield features attached to the NFT;
• buy-back or price-support promises;
• marketing that emphasises the investment or resale value of the token; and
• payment functionality that operates like a stored value or non-cash payment facility.

If any of these features are present, or if your roadmap promises them, treat the financial services question as live rather than hypothetical. Regulators and courts look at the substance of what is offered, including the marketing, not just the label. This is an area where early advice is genuinely important, because the licensing, disclosure and conduct obligations that apply to financial products are extensive and the consequences of breaching the AFSL requirement are serious.

Do the privacy laws apply to your NFT project?

An NFT launch is rarely just a token sale. It is a community business, which means you will collect personal information: email addresses for whitelists and updates, customer support tickets, user accounts, shipping details for physical perks, and transaction data that can be linked to identifiable people.

Many small businesses assume the Privacy Act does not apply to them because of the small business exemption, and it is true that under s 6D of the Privacy Act 1988 (Cth), a business with an annual turnover of $3 million or less is generally not required to comply with the Australian Privacy Principles. But the exemption is narrower than it sounds, and s 6D(4) removes it in situations that are common in NFT projects:

• the business discloses personal information about someone to anyone else for a benefit, service or advantage, which covers selling, swapping or sharing mailing lists and customer data;
• the business provides a benefit, service or advantage to collect personal information about someone from anyone else;
• the business is a contracted service provider under a Commonwealth contract;
• the business is related to a body corporate that does not qualify as a small business; or
• the business handles health information in connection with providing a health service.

The turnover test itself is also applied across your whole business, so a project that sits inside a larger group cannot shelter behind a low turnover for the NFT arm alone. If any of these situations apply, you are an APP entity and the full set of privacy obligations, including the requirement to have a privacy policy, applies to you.

Even where the exemption does apply, privacy is a practical compliance issue from the first day of an NFT launch. If you are building an email list for launch updates and then use those addresses for broader marketing, you are inviting complaints. Commercial electronic messages to Australian recipients are also regulated by the Spam Act 2003 (Cth), which requires consent, accurate sender identification and a working unsubscribe mechanism. Match your signup promise to what you actually send, and make opt-out management part of your process as the community grows.

Access controls deserve attention too. If NFT ownership unlocks discounts, gated content or digital downloads, think about what happens when links leak or are shared widely. That is partly a technical problem, but it is also a contractual one: your terms should set boundaries around sharing access, attempting to bypass gating, and misuse of the platform, so you have a documented position when abuse happens.

What agreements and structure should you put in place before launch?

NFT projects bring together multiple collaborators, and the internal documents are often the last thing anyone thinks about before launch. That is a mistake, because the disputes that sink projects are frequently between the founders and the people who built the project, not with buyers.

Before you share your concept, launch strategy, unreleased artwork, customer lists or technical plans with designers, developers, community managers or potential partners, use a non-disclosure agreement. It is a simple document that makes the confidentiality of your plans enforceable rather than assumed. For every person who contributes work, use a written services agreement that covers ownership of intellectual property (including the written assignment discussed above), deliverables, timelines, and what happens if the project changes direction or ends.

If the NFT project sits inside a startup with co-founders or investors, decide in advance who owns what equity, who controls key decisions including IP decisions, and what happens if a founder exits. A shareholders agreement and, if you operate as a company, a constitution set those expectations in writing before revenue creates pressure. If you are operating as a sole trader, remember that you are personally exposed to the disputes this article describes, including claims for misleading conduct or IP infringement. Many founders choose a company structure to manage that liability and to be investor-ready, but the right structure depends on your situation, risk tolerance and growth plans, so it is a decision to make deliberately rather than by default.

The tax side is the one area this article will not give you figures for, because the treatment of NFT revenue, crypto payments and token-linked benefits depends heavily on how your business is structured and how you operate. What can be said safely is that the tax treatment should be considered before launch, not after the first mint, and that your contracts, pricing and record-keeping should match how you actually operate. Speak with an accountant about the treatment of your sales, and if your NFT has any investment-like features, take financial services advice in parallel.

Getting help before you mint: how an Artificer Legal lawyer can de-risk your NFT launch

Most of the risk in an NFT project concentrates in a handful of documents and decisions, and a lawyer's role is to make sure those are right before the public is involved. An Artificer Legal lawyer can audit the chain of title in your content, checking that every artist, developer and collaborator has assigned copyright in writing with the right to mint and sub-licence, and that moral rights consents are in place. They can draft the NFT terms that define exactly what buyers receive, including the personal or commercial licence boundaries that most disputes turn on. They can review your marketing and roadmap language against the ACL and its future-matters rule, and give you a documented basis for the claims you make. They can assess whether your structure crosses into financial services territory and advise on licensing or redesigning the offering before you commit. And they can put the foundation documents in place: contractor agreements, NDAs, privacy policies and collection notices, and the founder and governance documents that keep a successful project from splitting apart.

The judgement calls are yours to make with advice, because they depend on your facts. Whether a royalty feature makes your NFT a managed investment scheme, whether your roadmap promises are reasonable-grounds representations, and whether a personal use licence or a commercial licence fits your business model are all questions that have no single right answer. That is what the advice is for, and it is cheaper before the mint than after a regulator's letter or a buyer's complaint.

Why the blockchain will not answer the legal questions for you

The sharpest lesson from the material in this article is that the technology does the record-keeping and the law does the rest. A blockchain records which wallet holds which token; it says nothing about who owns the copyright in the artwork, what buyers may do with the image, what you promised in the marketing, or whether the offering is a financial product. The Qoin case shows courts and regulators reading promotional language strictly, holding a crypto project to the ordinary meaning of words like "approved", "registered", "growing" and "you can trade it". The copyright rules show that paying for art does not buy the rights unless the paperwork says so in writing. Both lessons point to the same conclusion: the legal architecture of your NFT project, the assignments, the terms, the marketing language and the structure, is the part you cannot mint your way around.

To summarise the key points: confirm in writing that you own or are licensed to use every element of the content before you mint; decide and document exactly what buyers receive, with personal use as the safe default; keep marketing and roadmap claims accurate, because misleading conduct and future-matter promises are enforceable against you; check whether your structure engages financial services regulation, remembering the Qoin case; treat privacy as a live obligation even if you think the small business exemption applies; and put the agreements, structure and tax advice in place before launch rather than after the first complaint.