On 30 July 2025, AUSTRAC launched Federal Court civil penalty proceedings against Mount Pritchard District and Community Club, better known as Mounties, for alleged serious and systemic non-compliance with Australia's AML/CTF laws. AUSTRAC describes Mounties as one of the largest and most profitable club groups in NSW: it owns 10 venues, 8 of which operate approximately 1,400 poker machines. (AUSTRAC media release (opens in a new tab))
Law firm Senet described it as the first such action against a licensed club group in Australia. (Senet analysis (opens in a new tab))
The penalty exposure is significant. The legal fees will be significant. The reputational damage is already significant. But for everyone outside the gaming sector, and especially for the lawyers, accountants, conveyancers, real estate agents and dealers who came under AUSTRAC's regime on 1 July 2026, the most important detail isn't the size of the case.
It's the arrangement Mounties allegedly relied on, and why it doesn't move the obligation.
The Numbers That Should Get Your Attention
Between 1 July 2019 and 30 June 2023, according to AUSTRAC's allegations as summarised by Senet:
- Mounties' EGM revenue was $459.16 million (excluding GST)
- Customer EGM deposits exceeded $4.17 billion
- AUSTRAC identified a sample of 10 high-risk customers to whom enhanced customer due diligence was not applied, with combined turnover of more than $139 million and payouts of more than $10.4 million
- Five reviews of the AML/CTF program by an external provider allegedly did not meet the requirements of a formal review under the AML/CTF Rules
The third point is the one to sit with. Ten customers. $139 million through the machines. No enhanced due diligence.
This isn't an obscure technical breach. AUSTRAC CEO Brendan Thomas tied it straight to the most basic question in AML/CTF, where did this money come from?: a club processing hundreds of millions of dollars a year through its poker machines "is going to require a robust approach when it comes to verifying a customer's source of funds."
The Outsourcing Arrangement That Didn't Move the Obligation
Here is where the case stops being about pokies and starts being about every Tranche 2 firm reading this.
AUSTRAC alleges Mounties failed to appropriately maintain its AML/CTF program, with aspects of the program outsourced to a third party provider, Betsafe, which also provides AML/CTF programs to a number of other pubs and clubs. The thinking is one we hear constantly from accountants and law firms: "We don't need to be experts. We pay a specialist consultancy. They handle it."
AUSTRAC's response, through its CEO, was direct:
"Like many other AUSTRAC reporting entities, Mounties outsources aspects of its AML/CTF program but what it can't outsource is its AML/CTF obligations."
"Relying on third party providers doesn't absolve a business of its obligations under the AML/CTF Act."
"All reporting entities, regardless of size, must stay actively involved in how their AML/CTF program is designed, implemented and monitored."
AML/CTF lawyer Fiona Halsey put it more bluntly when she spoke to Accounting Times about the case:
"The thing that can't be outsourced is the responsibility. The ultimate liability sits with the governing body of the firm."
(Accounting Times (opens in a new tab))
If you are a partner at a 6-person accounting firm, this is the sentence to print and stick on the wall.
Why "Set and Forget" AML Programs Fail
AUSTRAC's own phrase for the mindset is a provider treated as "a set and forget solution". The pattern is one consultants have been describing for years:
- A program exists on paper, but not in operation. The AML/CTF Program document is well drafted, often by a third party. But the staff who actually onboard customers haven't read it, can't summarise it, and don't apply it consistently.
- Risk assessments are generic. They describe "risks the gaming industry faces" rather than the risks this venue faces, with these customer demographics, in this geography.
- Transaction monitoring is vague. Triggers exist in writing but no one is named as accountable. No practical guidance on what to do when a flag fires. (What good transaction monitoring looks like)
- Independent reviews are superficial. Limited interviews. No senior management engagement. The reviewer doesn't actually examine how the service is delivered, just that documents exist.
- The board and the compliance officer can't speak to the program. When AUSTRAC sends a notice to produce, the entity is dependent on the external provider for the answers, because no one inside the business has the operational knowledge.
In each of these patterns, the entity is paying for compliance without exercising compliance. AUSTRAC's allegations against Mounties cover most of them: the risk assessment, staff risk awareness training, transaction monitoring, enhanced due diligence and the independent review.
What This Means If You're a Tranche 2 Firm
Since 1 July 2026, the same regime applies to your accounting practice, your law firm, your real estate agency, your conveyancing business, your jewellery store. (Tranche 2 explained)
Many Tranche 2 firms made the same bet Mounties allegedly made: hire an external consultancy to draft an AML/CTF program, file it, and assume the obligation has been discharged.
It hasn't.
Here is a test built from the Mounties allegations:
| AUSTRAC will ask | And expect to be able to verify |
|---|---|
| Has the governing body approved this program? | Minutes, sign-off, evidence the partners actually read it |
| Who is the AML/CTF Compliance Officer? | A named person at management level in the firm, not the consultant |
| Can your CDD process identify a high-risk customer? | Walk-through of an actual onboarding, with documentation |
| Have you escalated source of funds or source of wealth questions? | Records, not just policy text |
| Has an independent review been completed? | A review that examined operations, not just the document |
| Are staff trained? | Attendance records, content covered, dates |
If your answer to any of those is "the consultant is meant to handle that", Mounties is the case study explaining why that won't work.
The Compliance Officer Question
The reformed AML/CTF regime requires every reporting entity to appoint an AML/CTF compliance officer at management level, who meets the residency and fit and proper person requirements. (AUSTRAC, governing body obligations (opens in a new tab), updated 25 March 2026) (Full breakdown of the Compliance Officer role)
Management level is the point. The role sits inside your business's management, which in a small firm usually means the practice principal, the managing partner, or another senior person with operational authority. A consultant can support that person. A consultant is not that person.
The AUSTRAC notice to produce, when it arrives, lands on the compliance officer's desk, and the governing body is expected to have taken reasonable steps to make sure the business complies.
This is why "we outsource AML" is a category error. You can outsource drafting. You can outsource templating. You can outsource training delivery. You cannot outsource the legal accountability. The Act locates it inside your business by design.
What the Mounties Case Tells Us About AUSTRAC's Posture
Three signals worth reading:
1. AUSTRAC will look through the outsourcing arrangement. It will not stop at "we engaged a third party provider". It will examine your governance, your records, your staff knowledge, your independent review quality. The provider isn't a shield.
2. Independent reviews are going to get scrutinised. Five reviews allegedly didn't meet formal requirements. AUSTRAC reads independent reviews. If your reviewer interviewed three people and ticked boxes, that's now a known weakness.
3. Cash and scale raise the bar. In announcing the case, AUSTRAC itself pointed to the NSW Crime Commission's Project Islington report, which determined that billions of the approximately $95 billion gambled on NSW poker machines in 2021-22 was likely to be dirty money. Tranche 2 sectors now sit in the same regime, and real estate in particular handles the kind of large, one-off values that draw the same attention. (Why real estate is in the spotlight)
What to Do This Week
Your program has been live since 1 July. Treat the Mounties allegations as a free pre-audit and run this short test against it:
- Name your Compliance Officer. Not your consultant. A real person at management level in the firm. Notify AUSTRAC. (Registration walk-through)
- Read your own AML/CTF program. Cover to cover. If you can't summarise Part C (CDD) and Part D (Transaction Monitoring) without checking the document, your governance is exposed. (Parts A to F walkthrough)
- Check your risk assessment is yours. Generic templates copied from a consultancy will not survive scrutiny. The risk assessment must reference your client base, your services, your geographies. (How to build a defensible risk assessment)
- Plan your independent review. And brief the reviewer that you want them to examine operations, not just documents. The Mounties allegations are a useful picture of what AUSTRAC says a deficient review looks like.
- Train your staff and document it. Attendance, content, date, refresher schedule. AUSTRAC's allegations include staff risk awareness training, and Senet's summary notes incomplete staff training records. (Training requirements explained)
The One-Sentence Summary
If you take nothing else from the Mounties case, take this:
AUSTRAC's regime is built around a named, accountable, internal compliance function. Anything you outsource is a tool that function uses, not a substitute for that function.
Tranche 2 firms that build this in during their first year will be in a very different position from those who only learn it in front of a Federal Court judge.
Run a free compliance check with no signup, and see where your firm sits against the same areas AUSTRAC tested at Mounties. Or start a 14-day free trial and have a program drafted with your compliance officer in the same afternoon.
Sources: AUSTRAC media release on Mounties civil penalty proceedings (opens in a new tab) (30 July 2025); AUSTRAC enforcement actions taken (opens in a new tab); Senet analysis (opens in a new tab) (source of the revenue, deposit, customer sample and review figures); Accounting Times, lessons for accountants (opens in a new tab); The AML Company, a consulting view (opens in a new tab). Allegations are as filed by AUSTRAC; the proceedings have not been determined by a court.
Correction, 5 October 2026: an earlier version said the proceedings were filed in late March 2026. AUSTRAC filed them on 30 July 2025. It also misquoted AUSTRAC's CEO and Fiona Halsey, attributed figures from Senet's analysis directly to AUSTRAC, said no source of funds or wealth inquiries were made (the allegation is that enhanced due diligence was not applied), and overstated the compliance officer's personal penalty exposure. These are now corrected.
This article is general information, not legal advice. For advice specific to your circumstances, consult a qualified AML/CTF professional.