AML/CTF Compliance: 7 Critical Changes Every Registered Club CEO Must Know in 2026

aml/ctf compliance

AML/CTF compliance for registered clubs in Australia has significantly changed from 1 April 2026. The expectations placed on clubs under Australia’s anti-money laundering and counter-terrorism financing framework have increased, particularly for those operating electronic gaming machines (EGMs).

For many organisations, these changes are not simply an update to documentation—they represent a fundamental shift in how financial crime risk must be understood, managed, and governed.

For Chief Executive Officers and Boards of registered clubs, this means one thing clearly:

AML/CTF compliance is now a governance issue, not just an operational task.

The organisations that succeed will be those that build practical, risk-based systems that staff can follow every day.

Why AML/CTF Compliance Is Under Increased Scrutiny for Registered Clubs

Registered clubs provide legitimate entertainment and valuable community services. However, clubs that operate gaming machines also create environments where large volumes of cash transactions occur.

This increases exposure to financial crime risks and places greater importance on strong compliance frameworks.

Regulators have consistently highlighted key risk areas, including:

  • cash-intensive environments
  • anonymous gambling behaviour
  • rapid cash-in/cash-out activity
  • minimal gaming before redemption
  • use of cash redemption terminals (CRTs)
  • attempts to avoid identification thresholds
  • suspicious third-party behaviour
  • politically exposed persons (PEPs)
  • organised criminal activity using gaming venues

The expectation is no longer that clubs simply “have a program on the shelf.”

Clubs are now expected to:

  • maintain effective oversight from leadership
  • understand their risks
  • actively monitor behaviour
  • identify suspicious activity
  • conduct customer due diligence properly
  • escalate concerns appropriately

What Changed in AML/CTF Compliance on 1 April 2026

The reforms introduced in April 2026 require reporting entities to adopt clearer, more practical, and risk-based approaches.

For registered clubs, this includes stronger expectations around:

  • customer due diligence (CDD)
  • ongoing due diligence (OCDD)
  • enhanced due diligence (EDD)
  • transaction monitoring
  • risk assessments
  • governance oversight
  • employee screening and training
  • documenting decision-making
  • independent review and continuous improvement

These obligations are defined under Australia’s AML/CTF legislative framework via AUSTRAC:
https://www.austrac.gov.au/about-us/legislation/amlctf-act

Importantly, organisations can no longer rely on generic templates that are not embedded into day-to-day operations.

Regulators increasingly expect evidence that:

  • controls are working in practice
  • staff understand procedures
  • management actively monitors performance
  • risks are reviewed regularly
  • suspicious behaviour is escalated
  • boards receive meaningful reporting

Risks for CEOs and Boards

One of the most dangerous assumptions in the club industry is:

“We’ve always done it this way.”

Financial crime risks have evolved rapidly, and criminals are quick to exploit weak controls, inconsistent staff practices, and poor oversight.

If a club cannot demonstrate that it has taken reasonable steps to identify and manage risk, the consequences can be severe.

Potential impacts include:

  • regulatory investigations
  • enforceable undertakings
  • significant financial penalties
  • reputational damage
  • loss of member trust
  • negative media attention
  • increased scrutiny from regulators and banks
  • governance failures identified against directors and executives

Boards should be asking:

  • Do we genuinely understand our risks?
  • Can we explain our controls confidently?
  • Are staff applying procedures consistently?
  • Is suspicious behaviour actually being escalated?
  • Are transaction patterns being properly reviewed?
  • Are we relying too heavily on manual processes?
  • Would we be comfortable if AUSTRAC reviewed our systems tomorrow?

If the answer is uncertain, improvements are likely required.

Why AML/CTF Compliance Is Now a Governance Issue

This is no longer just an operational responsibility—it is a governance priority.

Boards and executives are expected to play an active role in overseeing financial crime risk, including:

  • understanding exposure
  • reviewing compliance performance
  • ensuring proper escalation processes
  • overseeing monitoring systems
  • validating that controls are effective

For a deeper breakdown of expectations and practical guidance, visit our resource page:
https://www.chdpartners.com.au/resources-page/anti-money-laundering-and-counter-terrorism-financing/

Strong outcomes require visible leadership engagement, not passive oversight.

The Importance of Culture

An effective program is not built only through policies—it is built through culture.

Staff must understand that these obligations are part of protecting:

  • the club
  • the community
  • members
  • employees
  • the integrity of the industry

When leadership treats compliance as a “box-ticking exercise,” staff behaviour reflects that mindset.

When leadership demonstrates that it matters, staff engagement improves significantly.

This cultural shift starts with the CEO and Board.

A strong culture is one of the most critical drivers of effective AML/CTF compliance in practice.

How Registered Clubs Can Strengthen Their Compliance Framework

Clubs building stronger AML/CTF compliance programs focus on practical implementation rather than theory.

Clear Role Accountability

Staff must clearly understand their responsibilities, including:

  • who identifies customers
  • who escalates concerns
  • who reviews suspicious activity
  • who approves high-risk decisions
  • who reports internally and externally

Practical Staff Training

Training should be role-based and scenario-driven.

Staff should be taught:

  • what suspicious behaviour looks like
  • how criminal activity may occur in gaming environments
  • when enhanced due diligence is required
  • how to escalate concerns confidently
  • how to avoid tipping off customers

Stronger Transaction Monitoring

Effective programs require active monitoring of:

  • cancelled credits
  • unusual redemption activity
  • repeated low-play/high-cash-out behaviour
  • structured transactions
  • rapid movement of funds
  • unusual customer patterns

Clubs should not rely solely on automated alerts—manual review remains critical.

Better Customer Risk Assessment

Not every customer presents the same level of risk.

Strong frameworks assess:

  • behaviour and transaction patterns
  • source of funds concerns
  • PEP status
  • sanctions exposure
  • unusual activity indicators

Board Oversight

Strong governance requires meaningful reporting.

Boards should receive insights into:

  • current risks
  • emerging trends
  • suspicious activity themes
  • training completion
  • incidents and breaches
  • effectiveness of controls
  • areas requiring improvement

Why Technology Alone Is Not Enough

Many clubs are investing in systems to support their processes.

While technology can assist with:

  • due diligence records
  • transaction monitoring
  • escalation workflows
  • reporting and audits

Technology alone does not create effective AML/CTF compliance outcomes.

Real protection comes from:

  • leadership engagement
  • trained staff
  • documented processes
  • strong oversight
  • continuous review
  • consistent action

Final Thoughts

The environment has changed, and expectations are higher than ever.

Boards and executives must now move beyond documentation and focus on operational effectiveness in AML/CTF compliance.

A strong AML/CTF compliance approach helps organisations:

  • identify risk early
  • protect staff and members
  • reduce regulatory exposure
  • strengthen governance
  • demonstrate responsible leadership

The question is no longer:

“Do we have a program?”

The real question is:

“Can we demonstrate that it genuinely works in practice?”

Previous Post
ANZAC Day: Remembering Sacrifice and Reflecting on the Importance of Workplace Safety
Next Post
Understanding the Hazardous Manual Tasks Code of Practice