AUSTRAC Civil Penalties — What Pubs and Clubs Actually Face
The headline numbers from AUSTRAC’s recent enforcement actions are eye-watering: $450M against Crown, $67M against SkyCity, civil penalty proceedings against Mounties. The instinct in a pub or club is to assume those numbers are casino territory. They are not. The same statutory penalty framework applies to every reporting entity, including a single-venue RSL. Here is what the framework actually says, what shapes the size of penalties, and what realistic exposure looks like for community venues.
The Statutory Penalty Framework
Civil penalties under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) are calculated in penalty units. The Act provides a maximum penalty per contravention of:
- For an individual: 20,000 penalty units (currently around $6.6 million, depending on the prevailing penalty unit value).
- For a body corporate: 100,000 penalty units (currently around $33 million per contravention).
The phrase “per contravention” matters. AUSTRAC’s larger enforcement matters have not turned on a single contravention; they have turned on a pattern of contraventions across thousands of transactions, with the penalty calculation applied to each. That is how a $450M number is reached — not from one big sin but from many small ones, multiplied by the contravention count.
Criminal penalties also exist for specific offences in the Act — tipping-off under section 123, providing false or misleading information, and certain governance failures. Criminal exposure sits on individuals, not on the corporate body. Civil exposure is the vehicle for corporate consequences.
What the Headline Cases Actually Reveal
Crown ($450M, 2023)
Crown’s penalty arose from systemic failures across multiple obligation areas: AML/CTF program inadequacy, customer due diligence gaps, transaction monitoring deficiencies, and reporting failures. The penalty calculation reflected the duration of the contraventions, the number of transactions affected, and the cooperation Crown provided during the investigation. Critical detail: Crown’s settlement involved an admission of contraventions across many years.
SkyCity ($67M, 2024)
SkyCity’s penalty was smaller but reached on similar grounds — ECDD failures, monitoring gaps, and program inadequacy. The reduction reflected the smaller scale of operation and a different pattern of cooperation. The point is not that SkyCity got off lightly; it is that the same framework produced two different numbers because the underlying conduct had different scale.
Mounties (civil proceedings underway, 2026)
Mounties is the closest pub-and-club analogue to date. AUSTRAC commenced civil penalty proceedings on grounds that include AML/CTF program inadequacy and customer due diligence failures. The matter has not yet resolved. What is already clear is that AUSTRAC’s enforcement attention has reached community-club scale. The Crown and SkyCity numbers are not the only data points; Mounties shows AUSTRAC is willing to litigate against community venues, not only casinos.
What Shapes the Size of a Civil Penalty
The Act and the Federal Court’s discretion combine to produce penalty figures. The factors AUSTRAC and the court consider include:
- Number of contraventions. Each affected transaction is potentially a separate contravention. Big numbers come from multiplying small unit penalties by large contravention counts.
- Duration of the conduct. A program that failed for six years carries a different penalty profile from a program that failed for six weeks.
- Severity of the underlying risk. Failures that allowed actual money laundering through the venue are weighted differently from failures that did not produce demonstrated harm.
- Cooperation with AUSTRAC. Reporting entities that engage early, disclose voluntarily, and cooperate during investigation receive materially lower penalties.
- Remediation. Concrete steps to fix the underlying failure — new platform, new compliance officer, independent evaluation — affect the penalty figure.
- Capacity to pay. Penalties have to be meaningful but proportionate. AUSTRAC and the court consider the entity’s capacity to pay so that the penalty deters without destroying.
- Specific or general deterrence. Where the matter is one of several similar cases AUSTRAC wants to make a sector-wide signal of, the penalty may reflect a general-deterrence element.
Realistic Exposure for Community Venues
For a community pub, club, or RSL the realistic civil penalty range is far below the headline cases — but it is not zero, and the trajectory is upward.
From the published enforcement record, AUSTRAC’s pattern with non-casino reporting entities has involved:
- Infringement notices for narrowly defined breaches (compliance reports, late filings).
- Enforceable undertakings where the entity commits to a defined remediation program in lieu of penalty.
- Civil penalty proceedings reserved for systemic, multi-year failures with material risk consequences.
The financial exposure for a community venue in the most serious civil penalty scenario would not approach the Crown number. It could comfortably reach a multiple of the venue’s annual gaming revenue if the conduct was systemic enough — and that is enough to be existentially serious for a community club.
The non-financial exposure can be larger than the financial one:
- Reputational damage in the local community where the venue operates.
- Effect on liquor and gaming licence renewal — state regulators take note of federal AML/CTF findings.
- Insurance and banking relationships affected.
- Board director liability where governance failures are part of the finding.
What Reduces Penalty Exposure
The same factors that increase exposure also work in reverse. Reporting entities that do the following are in a materially different position when AUSTRAC engages:
Documented and operational program
A program that exists on paper and operates in practice is the threshold defence. Where the program is genuinely operating, individual issues can be characterised as exceptions rather than systemic failure. Where the program is paper-only, every individual issue compounds.
Independent evaluation history
A venue that has commissioned and acted on independent evaluations demonstrates good-faith program management. AUSTRAC weights this favourably; the evaluation record can directly affect penalty calculation.
Self-disclosure
Identifying and disclosing a contravention voluntarily is a different conversation with AUSTRAC from being found out. Self-disclosure is not a magic shield, but it is one of the largest single levers a venue has on penalty figure.
Early remediation
Concrete remediation work that has already started by the time AUSTRAC engages is treated as part of the resolution rather than as an obligation imposed on the entity. Demonstrated progress is in the entity’s interest.
Cooperation
Engaging with AUSTRAC investigators, providing requested information promptly, and not requiring the regulator to compel disclosure is consistently rewarded in penalty calculation.
The Practical Posture
For a community venue the practical posture is straightforward: assume AUSTRAC will engage. Treat that engagement as a near-certainty over a 24- to 36-month horizon. Build the program as if the regulator will read it. Document every decision as if a court will weigh it. Operate the program as if the staff member who handles tonight’s payout will be deposed about it next year.
This is not paranoia; it is the position the post-2023 enforcement reality requires. The cost of treating compliance as operational is much lower than the cost of treating it as documentation. And the operational posture is what produces both the lower regulatory risk and the lower commercial cost in the long run.
Frequently Asked Questions
Can a single venue actually be prosecuted, or only large corporate entities?
The Act applies to all reporting entities. AUSTRAC has historically focused on larger entities for resource reasons, but the Mounties matter has shown the regulator’s willingness to act against community venues where conduct warrants it.
What is the difference between an infringement notice and civil proceedings?
An infringement notice is administrative — a defined penalty for a specific category of breach, typically resolved without court involvement. Civil proceedings are litigation in the Federal Court for serious or systemic contraventions, and the penalty is set by the court.
Are board directors personally exposed?
Civil penalties under the Act can apply to individuals where the individual personally caused or contributed to the contravention. Director duties under the Corporations Act also apply where governance failures contributed. Board members of community clubs should treat AML/CTF oversight as part of their fiduciary duty.
Does insurance cover AUSTRAC penalties?
Civil penalties imposed by a court are generally not insurable as a matter of public policy. Defence costs, regulator-investigation costs, and remediation expenses may be insurable depending on the policy.
If we self-disclose a breach, will AUSTRAC penalise us anyway?
Possibly, but materially less than they would in a case AUSTRAC discovered itself. Self-disclosure with cooperation is consistently a multi-times-reduction factor in penalty calculation.
The Lowest Penalty Is the One That Never Happens
ComplyIQ is built around the operational standard regulators expect. Risk profiling at the payout, real-time monitoring, ECDD workflow, SMR pipeline with tipping-off controls, training tracking, audit trail. The platform produces the evidence AUSTRAC asks for — not because of an audit, but because that evidence is the by-product of running the program.
References
- Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) — legislation.gov.au
- AUSTRAC, Enforcement actions taken — austrac.gov.au
- AUSTRAC, Crown civil penalty proceedings — austrac.gov.au
- AUSTRAC, Pubs and clubs guidance — austrac.gov.au