Victorian Commission Fines Tabcorp $350,000 for Incomplete Multi-Factor Authentication rollout
Tabcorp received a $350,000 fine from the VGCCC for non-compliance with MFA standards from January to June 2025, during which unauthorised access occurred. The operator completed implementation in June 2025 and reimbursed customers. This follows a prior $4.6m penalty and reform directive in the same year.
SCCG Take — Regulators continue to impose direct financial penalties for delayed security upgrades that expose customer funds. Operators must treat mandated controls as non-negotiable baselines rather than phased projects.
The Victorian Gambling and Casino Control Commission has fined Tabcorp $350,000 after the operator failed to implement mandatory multi-factor authentication controls across its wagering and betting system.
The Commission determined that Tabcorp did not comply with four Wagering and Betting Technical Standards between 30 January and 23 June 2025. Some customer accounts suffered unauthorised access during this period, with funds withdrawn without permission. As reported by G3 Newswire, Tabcorp advised that it completed full MFA implementation in June 2025, including an app upgrade for remaining customers. Affected users were reimbursed by their banks or by Tabcorp.
Regulatory Findings and Customer Impact
Multi-factor authentication requires more than one form of verification before account access. Its absence left Tabcorp’s platform vulnerable. VGCCC Chairperson Chris O’Neill APM said the operator had failed to meet the standards expected of a Wagering and Betting Licence holder. O’Neill stated: “We expect strong systems to prevent breaches and protect customers. If breaches occur it is our expectation that licensees identify and resolve them quickly and address their underlying cause.” He added that the penalty was intended to reinforce compliance with customer-protection requirements.
Prior Actions Against Tabcorp
The Commission has previously imposed a $4.6 million fine on Tabcorp in 2025 and directed broad reforms to strengthen compliance systems, governance and harm-minimisation capability. O’Neill noted: “Customer-protection requirements are necessary to safeguard Victorian customers and maintain confidence in regulated wagering products and services. This penalty reinforces to all gambling providers that they must fully implement and maintain those protections.”
Reporting: G3 Newswire
Generated by SCCG’s automated editorial system from published source reporting. SCCG Management holds editorial responsibility.
Gaming, betting and prediction markets — the desk’s read, every weekday.
Subscribe →