Staff Training AML/CTF for Gaming Venues Beyond the Tick-Box
Most pubs and clubs deliver AML/CTF training. Most of that training is a one-off online module, completed in less than an hour, never refreshed, and forgotten the next day. AUSTRAC’s testing of staff competence has hardened. Tick-box training does not produce the operational competence the regulator now expects. Here is what training that actually works looks like and how to evidence it.
The Statutory Obligation
Part 7 of the AML/CTF Act requires reporting entities to provide AML/CTF training to staff who handle the designated service in a pub or club, the gaming-machine payout. The training must cover:
- The reporting entity’s AML/CTF program (the staff member’s role within it).
- The obligations of the entity under the Act.
- The consequences of contravention.
- The types of money laundering and terrorism financing risks the entity is likely to face.
- How to recognise indicators of those risks.
- How to escalate suspicions.
- The tipping-off offence under section 123 and its operational consequences.
Training records must be maintained and produceable to AUSTRAC on request. Records must show that each staff member has been trained, what was covered, when, and (in current AUSTRAC practice) some evidence that the training was effective.
Why Tick-Box Training Fails
The standard pattern: new staff complete an online module on day one or in their first week, the module records completion, the venue files the certificate. Year later, the staff member has forgotten everything. Year after that, the regulator audits the program. The certificate exists; the competence does not.
From the field reviews this consistently produces three findings:
1. Staff cannot recognise AML/CTF risk indicators
The reviewer asks a floor staff member: “what would make you suspicious that a patron might be laundering money?” The answer is generic (“if they were doing something dodgy”) or absent. The training was completed; the recognition was not retained.
2. Staff cannot describe the escalation path
The reviewer asks: “if you suspected something, what would you do next?” The answer is “tell my manager.” The compliance officer’s name is not known. The escalation procedure is not understood.
3. Staff are unaware of section 123
The reviewer asks about tipping-off. The staff member has not heard the term. The criminal offence under section 123 is not on their radar. The training covered it; the retention did not.
None of these findings reflect on the staff personally. They reflect on the training architecture. Tick-box modules do not produce retained competence in a hospitality workforce.
What Effective Training Looks Like
1. Initial training before first gaming-floor shift
New staff complete AML/CTF training and assessment before they handle a gaming-machine payout. Day-one online module supplemented by a short in-person session covering the venue-specific procedures. Assessment with a passing threshold, not just completion.
2. Refresher training annually at minimum
Annual refresher with updated content reflecting changes in regulation, the venue’s risk picture, and any incidents from the prior year. Refresher includes scenario-based exercises “what would you do if” rather than slide-deck recap.
3. Just-in-time guidance
Staff have access to short, role-specific reference materials at the gaming floor the indicators to watch for, the escalation contact, the tipping-off line. Not a 30-page program document; a one-page reference that lives where the work happens.
4. Reinforcement at handover
Shift handover briefly references AML/CTF awareness alongside the operational handover. Not formal training; a normal-rhythm reminder that keeps the topic present.
5. Scenario walk-throughs
Quarterly or six-monthly tabletop exercises run by the compliance officer. Pick a hypothetical patron interaction, walk it through the team’s response, identify the gaps, address them. Document the exercise as part of the training record.
6. Compliance officer competence
The compliance officer’s training is at a different depth from the floor staff’s. AML/CTF Act detail, AUSTRAC guidance currency, peer-network engagement (AML consultants, regulator liaison). The compliance officer is the in-house authority their competence has to support the team.
Records That Survive an Audit
Training records must demonstrate competence, not just completion. Specifically:
- Staff member name and role.
- Date of initial training.
- Content covered (curriculum, not just module name).
- Assessment used and result (passing score, not just completion flag).
- Trainer/assessor name (where applicable).
- Refresher cadence and dates of completed refreshers.
- Any scenario exercises participated in.
- Certification expiry per staff member (so the next refresher can be triggered automatically).
The record should answer a single question: “is this person trained for the role they are performing today, with evidence?” “Yes here is the evidence” passes review. “Yes here is a completion certificate from 2022” does not.
Training Plus Where Other Curricula Intersect
Staff in Australian gaming venues need multiple training streams, each with its own statutory basis:
- AML/CTF training AUSTRAC, this article.
- Responsible Conduct of Gambling (RCG) in NSW or Responsible Service of Gaming (RSG) in VIC state gaming regulator, harm minimisation.
- Responsible Service of Alcohol (RSA) state liquor regulator.
- Workplace health and safety SafeWork.
- First aid, emergency procedures, fire safety venue and state requirements.
The streams are distinct but operationally connected. A staff member intervening in a harm-minimisation scenario may also be observing AML/CTF indicators. The platform should track each curriculum separately while presenting a single “is this staff member compliant” view to the compliance officer.
Frequently Asked Questions
Can we use a generic AML/CTF training package from a vendor?
Generic packages can satisfy the baseline content requirement but typically need supplementing with venue-specific procedures (the venue’s program, the venue’s compliance officer, the venue’s escalation path). A vendor module plus a 15-minute in-person session covering venue specifics is a common and defensible approach.
How often should refresher training happen?
Annually at minimum. More frequent for high-turnover roles or where the regulatory environment has changed (e.g. post-March 2026 reforms triggered an out-of-cycle refresher across the sector).
What about casual and seasonal staff?
Casuals and seasonal staff who handle the designated service must be trained before they do so. The compliance program does not exempt non-permanent roles. The training records should distinguish casual completions from permanent so the compliance officer can track currency across both cohorts.
Does the compliance officer need separate training?
Yes, at materially greater depth. The compliance officer is the venue’s expert; their training and continuing education is its own discipline (often through external consultants like The AML Company and through professional bodies).
What evidence does AUSTRAC actually ask for?
Training records by staff member, current and historical. Curriculum reference. Assessment results where applicable. Refresher dates. Where exercises have been run, exercise records. AUSTRAC’s recent practice has emphasised competence outcomes over completion logs.
Training Records That Demonstrate Competence
ComplyIQ tracks AML/CTF training alongside RCG/RSG, RSA, and other staff certifications per staff member, per curriculum, with content covered, assessment, expiry, and refresher cadence. Single view for the compliance officer. Audit-ready records by default. Built for Australian pubs and clubs.
References
- Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), Part 7 legislation.gov.au
- AUSTRAC, AML/CTF programs overview austrac.gov.au
- AUSTRAC, Pubs and clubs guidance austrac.gov.au