Victorian Regulator Levies AU$350,000 Fine on Tabcorp for MFA Control Failures
VGCCC fined Tabcorp AU$350,000 for incomplete MFA rollout on wagering accounts between 30 January and 23 June 2025, enabling unauthorized withdrawals. The regulator questioned Tabcorp’s grasp of MFA’s consumer protection goals and demanded clearer accountability. This follows the operator’s AU$4.6 million compliance penalty in 2024.
SCCG Take — The fine highlights that Australian regulators now weigh an operator’s demonstrated understanding of rules, not just fixes. Repeated penalties indicate remediation must be paired with cultural acceptance of standards to limit future exposure.
The Victorian Gambling and Casino Control Commission has fined Tabcorp AU$350,000 (US$246,000) for failing to implement mandatory multi-factor authentication controls on customer wagering accounts. As reported by Inside Asian Gaming, the lapse left accounts exposed to unauthorized access between 30 January and 23 June 2025.
The period of discrepancy ran between 30 January and 23 June 2025. Some funds were withdrawn from affected accounts. Tabcorp later deployed an upgraded app and confirmed that customers were reimbursed by their banks or the operator.
VGCCC Findings on Compliance Posture
VGCCC Chairperson Chris O’Neill stated, “This penalty reinforces to all gambling providers that they must fully implement and maintain those protections.” The commission’s report noted that certain Tabcorp submissions appear not to acknowledge the non-compliance on technical standards. Regulators added they are not confident Tabcorp appreciates the substance and purpose of the MFA requirements or the consumer protection outcomes those requirements are designed to deliver.
The authority expects Tabcorp to accept accountability, demonstrate genuine contrition, and remediate the breaches as a matter of priority. This action follows a prior AU$4.6 million (US$3.2 million) fine issued to Tabcorp in 2024 for separate compliance matters, after which the operator described undertaking broad reforms.
Enforcement Priorities in Australian Gaming
The case forms part of a broader pattern of strict oversight. Recent industry discussion, including at the IAG Academy Summit, has centered on the regulatory emphasis on technical safeguards and operator accountability. The penalty serves as a direct signal that remediation alone does not satisfy expectations when submissions downplay the underlying violations.
Reporting: Inside Asian Gaming
Generated by SCCG’s automated editorial system from published source reporting. SCCG Management holds editorial responsibility.
Gaming, betting and prediction markets — the desk’s read, every weekday.
Subscribe →