Bet365 Agrees to AML Remediation Plan with AUSTRAC

On July 6th, 2026, the Australian Transaction Reports and Analysis Centre (AUSTRAC) required online bookmaker bet365 to enter a legally binding, court-enforceable undertaking after identifying serious gaps in how the company assesses money laundering risk and reports suspicious activity. The undertaking compels bet365 to rebuild its risk assessment methodology and strengthen the processes it uses to detect and escalate suspicious transactions, with civil penalties attached to any breach.

The action places bet365 alongside a growing list of gambling operators facing formal AUSTRAC intervention. It follows a similar undertaking with Sportsbet and coincides with ongoing Federal Court proceedings against Entain, underscoring a broader shift in how Australian regulators treat wagering platforms. For compliance teams across the gambling and broader regulated-entity landscape, the case is a clear signal that anti-money laundering (AML) programs must evolve continuously alongside the business, not sit static between periodic reviews.

Key Highlights

• AUSTRAC entered a court-enforceable undertaking with bet365 on July 6, 2026, after identifying “serious gaps” in the operator’s risk assessment and suspicious activity reporting.
• The undertaking requires bet365 to build an ongoing, methodology-backed risk assessment approach and to strengthen how it detects and escalates suspicious transactions.
• Breaches of the undertaking carry civil penalty consequences under both the agreement itself and Australia’s AML/CTF Act.
• The investigation traces back to an independent audit ordered in November 2022, with AUSTRAC’s formal inquiry launched in March 2024.
• bet365 joins Sportsbet and Entain among gambling operators under active AUSTRAC scrutiny, reflecting a sector-wide enforcement pattern.
• The case reinforces why ongoing risk assessment, disciplined suspicious activity reporting, and scalable governance are foundational to any AML program, in gambling and beyond.

What AUSTRAC’s Enforceable Undertaking Requires

An enforceable undertaking is a legally binding agreement between a regulated entity and its regulator. Once signed, its terms carry the same weight as a court order, and non-compliance can trigger immediate civil litigation rather than a further round of warnings.

Under its undertaking, bet365 must establish an ongoing risk assessment process backed by a clear, documented methodology, and demonstrate that its systems can detect and report suspicious transactions as new risks emerge. AUSTRAC has stated that these expectations mirror what it requires of all reporting entities.

AUSTRAC Chief Executive Officer Brendan Thomas said, “gambling businesses pose an inherent money laundering risk,” and that the regulator is focused on the risks the sector poses to the Australian economy. For a closer look at how the regulator structures these obligations, see AUSTRAC’s regulatory framework, which walks through the reporting entity requirements underpinning cases like this one.

In practice, this means bet365’s compliance function must move from static, point-in-time reviews to a living program: one that documents senior management sign-off, defines clear triggers for reassessment, and can withstand an unannounced regulatory audit at any point during the remediation period.

Why Gambling Platforms Carry Elevated Money Laundering Risk

Global standard-setters have long flagged the gambling and gaming sector as particularly exposed to money laundering and terrorist financing risk. The combination of high transaction volumes, rapid settlement speed, and often cash-intensive or anonymous payment channels creates conditions criminals can exploit, a vulnerability documented in detail by the Financial Action Task Force (FATF), the global body that sets AML and counter-terrorist financing (CTF) standards.

Reporting data reinforces the point. The National Crime Agency’s 2025 annual Suspicious Activity Report (SAR) figures show gambling firms filed more than 7,000 SARs that year, and the UK Gambling Commission took enforcement action against 24 operators over the same period. Alessa’s guide to casino anti-money laundering regulations outlines how these obligations apply across jurisdictions.

That risk profile is exactly why regulators like AUSTRAC increasingly hold gambling operators to standards once reserved for banks: robust customer due diligence at onboarding, continuous transaction monitoring, and documented escalation paths for anything that looks unusual.

A Pattern of Escalating Enforcement in the Gambling Sector

bet365’s undertaking is not an isolated event. AUSTRAC has been steadily increasing pressure across the wagering industry, and recent actions show a consistent trajectory from audit to formal enforcement.

The UK Gambling Commission’s separate action against the bet365 group for anti-money laundering and social responsibility failures illustrates how the same underlying control gaps can trigger parallel enforcement across multiple jurisdictions. Alessa’s overview of UK Gambling Commission enforcement trends tracks how these penalties have evolved.

Lessons for Compliance Teams

The specific failures behind bet365’s undertaking, an outdated risk assessment approach and gaps in suspicious activity escalation, are common across regulated industries, not unique to gambling. Three areas deserve particular attention.

Ongoing Risk Assessment as a Living Process

A risk assessment completed once and revisited only during an audit cycle cannot keep pace with new products, geographies, or customer types. Programs need a documented methodology, defined reassessment triggers, and senior management sign-off, supported by customer risk scoring models that update as customer behavior changes rather than on a fixed schedule.

Suspicious Activity Reporting Discipline

Australia’s AML/CTF Act requires Suspicious Matter Reports within tight windows once risk indicators are identified. Meeting that standard depends on monitoring rules tuned to sector-specific typologies, such as rapid deposit-and-withdrawal cycles or multiple linked accounts, and a clear internal path from alert to suspicious activity report submission. Automated, transaction monitoring systems that flag deviations in real time reduce the reporting lag that regulators frequently cite as a failure point.

Governance That Scales With the Business

Controls designed for an earlier stage of growth rarely hold up once transaction volumes and customer bases expand. Regular stress-testing of enhanced due diligence triggers and clear ownership of AML outcomes at the leadership level help ensure controls scale alongside the business rather than trailing behind it. Consolidated platforms that connect risk scoring, transaction monitoring, and case management in one system, an approach used by providers such as Alessa, make that kind of continuous oversight easier to sustain and document for examiners.

Building an AML Program That Withstands Regulatory Scrutiny

AUSTRAC’s action against bet365 confirms what recent enforcement history across the gambling sector already suggested: regulators are no longer content with AML programs that exist on paper but fail to evolve with the business. The operators facing the most serious consequences share a common thread, risk assessments that went stale, reporting processes that lagged behind emerging typologies, and governance that did not keep pace with growth. For compliance teams in gambling and other high-risk sectors, the takeaway is straightforward: an AML program is only as strong as its weakest, most outdated component, and regulators are actively looking for exactly that gap.