AUSTRAC compels bet365 to sign court-enforceable undertaking over AML failures

Australia’s AUSTRAC has forced bet365 into a court-enforceable undertaking after finding serious gaps in how the bookmaker assesses money laundering risk and reports suspicious activity. For high-risk operators and their PSPs, the point is simple: stale AML controls are now an enforcement trigger, not just a compliance housekeeping issue.

1. The undertaking was entered on 6 July 2026 and carries the same legal weight as a court order, so a breach could lead to civil litigation rather than another warning from the regulator.
2. AUSTRAC requires bet365 to rebuild its risk assessment methodology from the ground up. That means a documented process, senior management sign-off, and clear triggers for reassessment as new risks emerge. AUSTRAC said these expectations are the same ones it applies to all reporting entities, not a special standard for bet365.
3. AUSTRAC CEO Brendan Thomas said “gambling businesses pose an inherent money laundering risk,” pointing to the sector’s exposure as the reason for heightened scrutiny. The Financial Action Task Force has long flagged gambling’s high transaction volumes, rapid settlement speeds and cash-intensive channels as conditions criminals can exploit.
4. The UK numbers show how broad that pressure is. Gambling firms filed more than 7,000 Suspicious Activity Reports in 2025 alone, while the UK Gambling Commission took enforcement action against 24 operators over the same period.
5. Bet365’s case sits alongside other actions in the sector. AUSTRAC accepted a similar undertaking from Sportsbet in May 2024, completed it in July 2026, and is also pursuing Entain in Federal Court. Bet365 has separately been fined £582,120 by the UK Gambling Commission in 2024 for AML and social responsibility failures, which is a neat reminder that the same control gap can travel across jurisdictions and keep generating penalties.

For PSPs, acquirers and banking partners, the operational takeaway is not subtle: risk assessments that only get revisited on audit cycles are too slow for new products, new geographies and new customer types. Regulators are looking for automated transaction monitoring tuned to sector-specific typologies, a clean escalation path from alert to suspicious activity report, and governance that keeps up with the business instead of lagging behind it.