AML/CTF Guide for Casinos and Gambling in Australia

Part 1

When AML/CTF May Apply

Cash, chips, betting accounts, payouts and the movement of value through gambling products can create several designated services and reporting duties.

• Providing casino gaming and relevant gambling services.
• Opening or operating betting or gambling accounts.
• Accepting, holding, transferring or paying customer funds in a designated way.
• Exchanging cash, chips, tickets or other value where the Act applies.
• Providing another financial or payment designated service.

Part 2

Main Risks in This Sector

These are starting points, not a ready-made risk rating. The business still needs to assess its own customers, services, countries, channels, transactions and technology.

• Cash can be converted into chips, tickets, credits or apparently legitimate winnings.
• Minimal play, matched betting or rapid deposits and withdrawals can move value without genuine gambling.
• Third parties, junkets, nominees or shared accounts can hide the real customer.
• Online channels can add identity, device, payment and country risk.
• High-value customers and hospitality relationships can weaken challenge or source checks.

Part 3

A Practical Control Plan

1. Step 1

   Confirm scope

   Map every gambling, account, cash, chip, payment and payout service.

2. Step 2

   Build the customer process

   Identify the customer and reporting point for each product and channel.

3. Step 3

   Set the risk controls

   Connect player, payment, device, venue and transaction information.

4. Step 4

   Train and connect people

   Set enhanced controls for high-value, third-party, remote and high-risk behaviour.

5. Step 5

   Test and improve

   Reconcile threshold, suspicious and other reports with gaming and cashier data.

Part 4

Worked Examples

These examples show how the scope and risk questions can be joined. They do not replace the law or the facts of a real matter.

Part 5

Evidence That Should Be Easy to Find

• The designated-service and geographical-link analysis.
• The current sector risk assessment and the official sources used.
• A service map across venue, online, cashier, account and payout activity.
• A single customer view joining play, payments, devices and related people.
• Source, approval and monitoring records for higher-risk customers.
• Reconciliation of gaming data with regulatory reports and closed alerts.
• Customer, beneficial ownership, risk, monitoring and reporting records.
• Training, internal review, independent assurance and remediation records.

Part 6

Common Mistakes

• Looking at buy-in, play and payout as separate events.
• Treating player status as a reason for weaker controls.
• Monitoring only cash and missing card, transfer or virtual-asset patterns.
• Failing to join accounts, devices, payment sources and related patrons.
• Measuring report volume without testing report quality and timeliness.