On 21 August 2026 AUSTRAC published its account of a Multi Agency Strike Team operation that dismantled an alleged criminal network importing and distributing illicit tobacco and vapes across Australia. Seven people were arrested, search warrants ran across New South Wales, Victoria and Queensland, and the seizure list is worth reading slowly: cash, gold bullion, luxury watches, luxury handbags, firearms, illicit tobacco and more than 280,000 vapes. (AUSTRAC media release)
The tobacco is the crime. Everything else on that list is what the money became. And almost every asset class the money became passes through a desk AUSTRAC now regulates.
What the Operation Found
The alleged network did not run through burner phones and back alleys. It ran through legitimate freight and logistics businesses. Investigators believe trusted insiders used those businesses to move illicit goods through Australia's supply chains, generating millions of dollars in criminal profits. The Australian Border Force response makes the point in regulatory language: immediate suspension of depot licences in Sydney and Brisbane, and a notice of intent to cancel in Melbourne, for a national freight forwarding company.
The NSW Crime Commission restrained more than $25 million in assets, including properties, bank accounts and shareholdings linked to the alleged networks.
AUSTRAC's part was financial intelligence: an embedded senior intelligence analyst, financial summaries, analysis of AUSTRAC holdings, and information obtained through the agency's intelligence-gathering powers under the AML/CTF Act. That intelligence helped investigators identify financial relationships, trace the movement of funds and map the structure of the groups.
The Second Release in a Week, With the Same Message
This is AUSTRAC's second major financial-intelligence story in three days. On 19 August it published Operation Claw, the mortgage fraud analysis we covered in our piece on the bank loan shortcut. Two days later came this one.
The through-line is a sentence from AUSTRAC CEO Brendan Thomas in the tobacco release:
Criminal networks rely on access to legitimate businesses, financial systems and supply chains to operate at scale.
If you are a newly regulated firm, that sentence is about you. Not as a suspect, but as the access. An accountant's letterhead, a settlement account, a bullion counter and a freight depot all serve the same function in a laundering chain: they make criminal money look like commerce. AUSTRAC's guidance for accountants says it without much diplomacy: your expertise "can also be used to give the impression of respectability and legitimacy", and "you may not be aware you are helping criminals" (AUSTRAC, risks and indicators of suspicious activity).
The Seizure List Is a Sector Map
Walk the asset list and count the regulated desks it crossed.
Gold bullion, luxury watches, handbags. AUSTRAC's risk insights for dealers in precious stones and metals note that authorities often find Australian criminals holding jewellery and luxury watches, and that these goods are attractive precisely because they can be bought and sold readily and anonymously using cash, moved easily, and converted back to legitimate funds (AUSTRAC, risks and indicators of suspicious activity). One profile indicator from that guidance fits the seizure list uncomfortably well: a customer who is not interested in the product and "may be buying it to store value". Since 1 July, a purchase or sale of precious metals, stones or products involving $10,000 or more in physical currency or virtual assets is a regulated designated service, and the threshold also catches split payments that are linked or appear to be linked (AUSTRAC, regulation of dealers in precious metals, stones and products, updated 2 June 2026). We unpacked how that rule works in the $10,000 cash rule explainer.
Properties. The $25 million restrained includes real estate. Every one of those properties was bought through an agent and settled by a conveyancer or lawyer, and the purchase money had a story someone could have asked about. That is the same fragment-of-the-picture argument AUSTRAC made in Operation Claw, pointed at a different sector.
Shareholdings. Restrained shareholdings mean companies, and companies mean someone incorporated them, kept their registers and prepared their accounts. The accountants guidance lists the mechanism plainly: criminals create distance from their profits using business structures, third parties and intermediaries such as lawyers and accountants (AUSTRAC, risks and indicators of suspicious activity).
The Client Who Looks Legitimate
The uncomfortable detail in this operation is not the vapes. It is the phrase "legitimate freight and logistics businesses". A freight company is exactly the kind of client that sails through onboarding: real premises, real trucks, real revenue, an ABN that checks out. The alleged criminality lived inside it, run by insiders.
AUSTRAC's published indicators for accountants describe what that can look like from the outside of the books, and none of it requires a badge to notice (AUSTRAC, risks and indicators of suspicious activity):
- transactions inconsistent with the client's expected and declared business, such as no payroll payments
- a lifestyle or transactions inconsistent with what you know about the client's business and personal information
- high-value assets with no clear funding source
- business documents showing activity that cannot be traced through the company books
- transactions between individuals or entities not usually connected.
A client with a modest declared income and a growing watch collection is not a criminal. It is an inconsistency. The regime does not ask you to resolve it on the spot; it asks you to notice it, and to have a defined next step.
The Routine That Catches It
None of this is caught by a beautifully drafted program document. It is caught by ongoing monitoring, which is the obligation most small firms are still treating as background noise.
AUSTRAC's guidance on monitoring customers is specific about what it expects, and it scales down to a small practice (AUSTRAC, how to monitor your customers, updated 27 March 2026). You must monitor every customer receiving a designated service, continuously, not just at onboarding. Manual monitoring is acceptable if it actually works, and AUSTRAC describes what working looks like: scheduling regular time, such as weekly or monthly, to review customer transactions and behaviour, comparing a customer's activity with their history and with what you know about them, and escalating anything unusual to your compliance officer. It also says the quiet part: if you fail to monitor, the failure cascades into your SMR, enhanced CDD and risk rating obligations, because none of them can fire.
When an inconsistency does surface, the next steps are set by rule:
Enhanced CDD has mandatory triggers. You must apply it where a customer's risk is high, or where a service would involve unusually complex or large transactions, transactions with no apparent economic or legal purpose, or an unusual pattern of transactions (AUSTRAC, enhanced customer due diligence, updated 15 July 2026).
The SMR test is objective and the clock is short. Reasonable grounds means a reasonable person in your position, with the facts you had, would form the suspicion. Once formed, you have 3 business days after the day you formed it, or 24 hours if it relates to terrorism financing (AUSTRAC, suspicious matter reports, updated 8 July 2026). AUSTRAC's own worked example in that guidance is a customer structuring payments under $10,000 to avoid threshold reporting, which in a cash-heavy trade like tobacco retail or luxury goods is not a hypothetical. Our SMR guide with examples covers what a defensible report looks like.
Three Checks This Week
- If you sell high-value goods, know your cash position exactly. Either you do not accept physical currency or virtual assets at all, or you have a hard process for the $10,000 threshold including linked transactions. A policy the counter staff have never heard of is not a position. Our jewellers and precious metals guide covers the setup.
- Put the monitoring review in the calendar. Weekly or monthly, per AUSTRAC's own description of manual monitoring. The question for each active client is one line: is what they did this month consistent with what they told me they do? If your risk ratings were set once and never revisited, start with why a default is not an assessment.
- Rehearse the escalation, not just the suspicion. A named person, a working AUSTRAC Online login, and a habit of writing down what you noticed and what you decided, including the decision that everything was fine. Three business days is very short if the first day is spent finding the password.
Where AML Mate Fits
AML Mate holds the expected-activity picture inside each client record, keeps the risk rating and its review dates attached to the evidence, and gives you the escalation trail when something stops matching. The free compliance check at /check takes about five minutes and will tell you whether your monitoring routine exists on paper only.
AUSTRAC ended its release with partnerships across government disrupting the financial incentives behind organised crime. The quieter lesson for the newly regulated is in the asset list. The money from the trucks was on its way to becoming bullion, watches, property and shares, and at every one of those steps it had to pass a desk like yours.
This article is general information, not legal advice. For advice specific to your circumstances, consult a qualified AML/CTF professional.