Suspicious Matter Reports – The Definitive Guide for Gaming Venues

Table of Contents

1. What Is a Suspicious Matter Report?
2. Legal Basis — Sections 41–43
3. Grounds for Suspicion
4. Filing Deadlines (24 Hours and 3 Business Days)
5. What Goes Into an SMR
6. The AUSTRAC Online Filing Process
7. The Tipping-Off Offence (Section 123)
8. Internal Escalation Procedures
9. Common Scenarios in Gaming Venues
10. SMR Record Keeping
11. State Incident Register Overlap
12. Frequently Asked Questions
13. Partners & Next Steps

What Is a Suspicious Matter Report?

A Suspicious Matter Report (SMR) is a formal report filed with AUSTRAC when a reporting entity suspects, or has reasonable grounds to suspect, that a person or transaction may relate to money laundering, terrorism financing, tax evasion, proceeds of crime, or other serious criminal activity.

For gaming venues, SMRs are the most frequent and operationally important reporting obligation. Unlike threshold transaction reports (TTRs), which apply only to cash transactions at or above $10,000, SMRs have no dollar threshold. A $20 payout can require an SMR if the circumstances are suspicious.

SMRs are one of the main reasons AUSTRAC exists. The reports feed the national financial intelligence database, supporting investigations by police, tax authorities, intelligence agencies, and international partners. A well-filed SMR can be the single piece of information that connects a pub payout to an organised crime investigation.

Legal Basis — Sections 41–43

The SMR obligation sits in Part 3, Division 4 of the AML/CTF Act 2006. The key provisions:

Failure to file an SMR when required is a civil penalty provision. Civil penalties of up to $33 million per contravention apply for corporations. Individuals who knowingly fail to file can face substantial personal civil penalties.

Grounds for Suspicion

“Reasonable grounds to suspect” is a legal standard that falls below “belief” but above “speculation.” AUSTRAC guidance and case law identify several approaches to forming grounds:

Behavioural Indicators

• Nervousness, evasiveness, or inconsistent information when identification is requested
• Reluctance to be seen on CCTV
• Attempts to avoid identification procedures
• Pressure on staff to waive procedures
• Unusual interest in structuring or threshold questions

Transaction Indicators

• Multiple payouts just below identification or reporting thresholds
• Sudden changes in a patron’s payout frequency or volume
• Large cash-outs relative to gameplay (bill-stuffing)
• Third-party collection attempts
• Repeated loss then rapid recovery patterns
• Cash-outs at unusual hours for that patron

Contextual Indicators

• Patron’s apparent means inconsistent with payout levels
• Connection to known persons of interest or related suspicious activity
• External information (media, police enquiries, bank questions) raising questions
• Prior SMRs on the same patron under different circumstances

Filing Deadlines — 24 Hours and 3 Business Days

The Act imposes two filing deadlines, and the clock starts the moment suspicion is formed — not the moment the underlying transaction occurred.

Missing a deadline is a civil penalty contravention. Each missed deadline is a separate contravention. Repeated missed deadlines — a common finding in enforcement actions — can produce substantial aggregate exposure.

What Goes Into an SMR

An SMR is filed through AUSTRAC Online. The form asks for specific information. A well-written SMR tells a clear, concise story that a reader unfamiliar with the venue can follow.

Required Information

• Details of the reporting entity (your venue)
• Details of the compliance officer or contact person
• Details of the person who is the subject of the SMR (where known)
• Details of the transaction(s) involved
• The nature of the suspicion — specifically, what the reporting entity suspects may be happening
• The grounds for the suspicion — the facts that led to it
• Any other information the entity considers relevant

What Makes a Strong SMR

The AUSTRAC Online Filing Process

SMRs are filed through the AUSTRAC Online portal. Your venue must be enrolled and have active user credentials with SMR submission permission. Most commonly this permission sits with the nominated compliance officer.

Filing Steps

1. Log into AUSTRAC Online with a user account that has SMR submission permission
2. Select “Submit a Suspicious Matter Report”
3. Complete the SMR form — reporting entity details, subject details, transaction details, grounds for suspicion, narrative
4. Review for accuracy, clarity, and completeness
5. Submit and record the SMR reference number
6. Save an internal copy of the submitted SMR

The form supports drafts. A compliance officer can begin drafting, save, and return to complete before the statutory deadline. This is particularly important for 3-business-day SMRs where additional investigation may refine the narrative.

The Tipping-Off Offence — Section 123

Section 123 of the AML/CTF Act creates one of the most important and most misunderstood offences in the Act. It makes it a criminal offence to disclose information about an SMR — before, during, or after filing — in a way that could prejudice an investigation.

What Cannot Be Disclosed

• That an SMR has been filed
• That an SMR is being prepared or considered
• That a matter has been or is being escalated for SMR assessment
• Any information that would tend to reveal the above

Who Cannot Be Told

• The patron who is the subject of the SMR
• Anyone who might repeat the information to the patron
• Other staff who do not have a need-to-know
• Friends, family members, or industry contacts
• Media or anyone on social media

What Is Permitted

• Internal disclosure on a strict need-to-know basis — compliance officer, senior management
• Disclosure to AUSTRAC and law enforcement
• Disclosure to your legal advisers (subject to specific conditions)
• Disclosure required by court order

Internal Escalation Procedures

Because the statutory clock starts at the moment of suspicion, internal escalation must be fast, clear, and documented. A well-designed escalation process has three elements:

1. Staff-Level Recognition

Front-line staff must know what to look for and what to do when they see it. This is a training obligation. The procedure should include a simple, fast way for staff to flag a matter to the compliance officer — a dedicated phone line, internal system alert, or direct escalation channel.

2. Compliance Officer Assessment

The compliance officer receives the flag, assesses the information, and decides whether reasonable grounds exist. The assessment must be documented — the information considered, the decision made, the reasoning. This record is the evidence that the obligation was met.

3. Filing and Record

If grounds exist, the compliance officer prepares and files the SMR within the statutory deadline. The filed SMR, the decision rationale, and supporting records are retained for seven years.

Common Scenarios in Gaming Venues

AUSTRAC guidance and enforcement decisions identify patterns that frequently warrant SMR consideration in a gaming context.

Structured Payouts

A patron requests multiple payouts just below an identification or reporting threshold, in a way that appears deliberately designed to avoid the threshold. Classic example: four payouts of $4,900 in a single week from a patron who previously had no comparable activity.

Bill-Stuffing

A patron feeds a large amount of cash into a machine, plays minimally, then cashes out the balance. The pattern converts cash into a venue-issued payout that looks like legitimate winnings.

Third-Party Collection

A person attempts to collect a payout on behalf of the patron who won it. This may be innocent (a spouse), but the pattern warrants scrutiny — particularly if the original patron is unknown, avoids identification, or the third party is known to collect for multiple unrelated patrons.

Inconsistent Means

A patron’s apparent means (clothing, vehicle, known occupation, membership history) are inconsistent with their gaming activity. A patron claiming to be unemployed who is regularly cashing out $4,000+ is not, on its face, suspicious — but it warrants attention if other indicators are present.

Collaboration

Multiple patrons appear to be coordinating play, with one feeding machines while another cashes out, or rotating who holds the credits. This pattern is sometimes called “confederate play” and is a recognised money-laundering technique.

Pressure or Evasion on Identification

A patron who pushes back against identification procedures, attempts to deflect with sympathy stories, or becomes evasive when asked routine questions. Not every ID-reluctant patron is suspicious, but the combination of reluctance and another indicator usually is.

SMR Record Keeping

SMRs and their supporting records must be retained for a minimum of seven years from the date the SMR was filed. Many venues retain SMRs longer as a matter of good practice, particularly for cases where AUSTRAC or law enforcement may subsequently request further information under section 43.

Records must be secured consistent with APP 11. They must be retrievable on request. And access must be strictly controlled — the tipping-off offence applies not just to external disclosure but to inappropriate internal access.

State Incident Register Overlap

Many events that warrant SMR assessment also warrant entry on your state incident register. In NSW, for example, the Digital Incident Register (mandatory since July 2024) captures a broad range of gaming-floor incidents, some of which are the same events that trigger SMR consideration.

A well-designed compliance system records the event once and applies both frameworks: state incident register entry (with state-specific fields, timing, and retention) and SMR assessment (with tipping-off controls and AUSTRAC filing workflow). A dual-tool setup creates two partial records where one complete record would serve both regulators.

Importantly, while state incident register entries may be visible to multiple staff members (and sometimes to the patron), the SMR assessment must remain tightly restricted to the compliance officer and senior management. A single platform has to enforce that visibility split automatically — or the tipping-off risk multiplies.

Frequently Asked Questions