On 6th July 2026, the Australian Transaction Reports and Analysis Center (AUSTRAC), issued a legally binding mandate to the gambling firm Bet365 to strengthen its Anti-Money Laundering (AML) processes after finding “serious gaps” in its risk assessments and suspicious activity reporting.
Bet365 Significant AML Violations
Bet365 is a British online bookmaker, founded in 2000, offering sports betting and online casino services to consumers. During an independent audit of Bet365’s operations, it was found that the firm had several compliance weaknesses, prompting AUSTRAC to launch its own investigation into the business.
Under AUSTRAC’s mandate, Bet365 is required to overhaul its AML and Counter-Terrorist Financing (CTF) processes. The company has to implement an updated, comprehensive, and ongoing risk assessment, backed with clear methodology. Additionally, the company must document and prove how it can effectively combat suspicious transactions as risks evolve. The message to Bet365 is straightforward: implement the required standards or face civil penalties.
Unique AML Risk in the Gambling Industry
Global regulatory standards deem the gambling and casino sector as highly vulnerable to money laundering and terrorist financing risks. This is due to several factors, including the cash-intensive nature and rapid speed of transfers. AUSTRAC’s CEO, Brendan Thomas, echoes this message, “The gambling industry processes large volumes of money at high speed, often through anonymous digital channels. This creates opportunities that criminals look to exploit.”
According to the National Crime Agency’s 2025 Annual Suspicious Activity Report (SAR), gambling firms submitted over 7000 SARs, pointing to the industry’s ongoing exposure to suspected money laundering risks. Furthermore, in the same year, the Gambling Commission took enforcement action against 24 operators, resulting in regulatory fines totaling up to £4.2 million.
The gambling industry processes large volumes of money at high speed, often through anonymous digital channels.
The level of enforcement indicates that AML weaknesses remain a challenge for many firms. Additionally, these cases show how regulators are slowly moving gambling companies under banking compliance standards. As such, strong Customer Due Diligence (CDD), ongoing monitoring, and risk assessments are no longer optional or a “quarterly task.”
How to avoid this scenario
For compliance teams in the gambling sector, non-compliance now carries legal, financial, and reputational risks. Harry Varatharasan, Chief Product Officer at ComplyCube, mentions, “Global regulators are not holding back on applying an aggressive enforcement model on those that cannot prove the resilience of their compliance infrastructure against today’s risks.”
Bet365’s AUSTRAC enforcement shows what happens when risk assessment and governance do not align with sectoral risks. To avoid the critical, systematic failures in Bet365, businesses must take the following into account:
1. Deficient Risk Assessments
Compliance Failure: Bet365 failed to maintain an ongoing risk assessment approach. This meant its underlying AML and CTF infrastructure did not evolve alongside changing money-laundering risk across its services, channels, geography, and customer types.
How to Avoid: In practice, AML teams must review risk assessments periodically, document clear decisions, and define clear triggers where risks change. Additionally, obtain senior management sign-off to demonstrate auditable controls. You can learn more here: What is AML Risk?
2. Ineffective Reporting Mechanism
Compliance Failure: Under Australia’s AML/CTF Act, businesses must submit Suspicious Matter Reports (SMRs) within 24 hours to 3 days according to the level of risk present. Bet365 failed to detect and escalate high-risk transactions to AUSTRAC.
How to Avoid: Gambling firms should tailor their monitoring rules to specific high-risk gaming patterns. Common examples include rapid deposit and withdrawal behavior or the use of multiple accounts. A clear SMR escalation path, including for alert review, decision, and submission, is critical for compliance.
3. Weak Compliance Governance
Compliance Failure: According to AUSTRAC, Bet365’s compliance processes did not evolve with the business. As such, criminals can exploit certain gaps to bypass controls. This mirrors the 2024 UK Gambling Commission £582,120 (USD $777,112) fine for ineffective Enhanced Due Diligence (EDD) and Know Your Customer (KYC) triggers, pointing to deeper governance challenges.
How to avoid: Businesses should implement clear oversight and accountability for AML risk reporting, monitoring, and SMR quality. KYC and AML controls should be continuously stress-tested so it can scale with business growth or change. You can learn more here: When is Enhanced Due Diligence Needed?
Building Resilient Gambling AML Program
Regulatory authorities are increasing oversight of online bookmakers, with leading firms such as Entain Group and Sportsbet currently undergoing similar overhauls of their AML and CTF frameworks. Given the unique nature of this industry, compliance teams must continuously maintain clear, strong audit trails that keep pace with today’s risks.
Find out more AML news in ComplyCube’s Trust Edition newsletter. We explore the latest in developments across identity verification and AML globally.
