AU v13.3.0

Australia (AU) · Module Detail

Australia: Consumer Protection & APP Fraud

← Full Australia overview Build report with Australia Request deeper dive

#

Entities designated under the Scams Prevention Framework (banking, telecommunications, digital platforms) were required to be AFCA members by 1 September 2026. Most substantive SPF obligations are scheduled to commence 31 March 2027, with the remaining tranche expected by end-2027; SPF codes and rules remained under development by Government as of 20 August 2026.

Movement — CHANGEDSPF Rules commenced 1 September 2026; AFCA membership deadline met.SPF implementation milestone reached.
Horizon · 2026-09-01 (± a quarter)SPF Rules commence (EDR-scheme membership)Adopted, not yet in force · Tier 1 source
Horizon · 2027-03-31 (± a quarter)SPF full substantive obligations commenceAdopted, not yet in force · Tier 3 source
Horizon · 2026-07 (± a quarter)Scams Prevention Framework first sector obligations take effectAdopted, not yet in force · Tier 3 source
Horizon · 2027-03-31 (± a quarter)Scams Prevention Framework substantive obligations commenceAdopted · Tier 1 source
Horizon · 2027-Q4 (± six months)Remaining SPF obligations expected to commenceProposed · Tier 1 source
Horizon · 2027-03-31 (± a quarter)SPF substantive obligations and AFCA EDR instrument commenceAdopted · Tier 1 source
Standing sub-brief · as of 5 July 2026204 words · last cycle 2026-10-18

Consumer Protection & APP Fraud

The Scams Prevention Framework, established under Part IVF of the Competition and Consumer Act 2010 via the Scams Prevention Framework Act 2025 and commenced 21 February 2025, is a principles-based, whole-of-ecosystem regime - govern, prevent, detect, disrupt, respond, report - applying first to banks (regulated by ASIC), telecommunications carriers (ACMA) and digital platforms (ACCC), with civil penalties reaching A$50 million per contravention. Unlike the UK Payment Systems Regulator's reimbursement model, the SPF originally did not mandate reimbursement, with redress running through internal and external dispute resolution (AFCA) and court action; first sector obligations target effect from 1 July 2026. On 28 May 2026, Treasury released draft SPF rules and sector codes proposing a reimbursement scheme with a A$3,000 threshold and an equal-liability apportionment model - a shift toward automatic reimbursement below that threshold and a degree of convergence with the UK approach. Scam losses were around A$2 billion in 2025, down from a 2022 peak of A$3.1 billion, though the trend is reversing.

Periodic update · new data 2026-10-18

Consumer Protection & APP Fraud

The Scams Prevention Framework Rules commenced 1 September 2026, establishing a phased compliance timeline for entities in the banking, telecommunications and digital-platform sectors. By the 1 September 2026 commencement date, covered entities were required to be members of the Australian Financial Complaints Authority. The more substantive obligations — to prevent, detect, disrupt, report and respond to scams, together with compliance-statement and record-keeping duties — commence 31 March 2027. These substantive obligations are backed by civil penalties of up to AU$50 million per contravention, a substantial deterrent figure reflecting the framework's intent to drive genuine operational investment in scam prevention rather than nominal compliance.

The framework's enforcement architecture is split across three regulators by sector: ASIC for banks, ACMA for telecommunications providers, and the ACCC for digital platforms and as the framework's general regulator. Affected consumers additionally gain a private right of action for damages, and AFCA is designated as the sole external dispute-resolution body for scam-related complaints across all three covered sectors, giving consumers a single point of recourse regardless of which sector failed to prevent, detect or respond to a scam.

Outlook

31 March 2027 is the date by which the Scams Prevention Framework's substantive prevent, detect, disrupt, report and respond obligations, and the associated compliance-statement and record-keeping duties, take full effect, alongside the instrument expected to authorise AFCA as the sole external dispute-resolution scheme. Banking, telecommunications and digital-platform entities should treat the period between now and that date as the implementation window for building out the operational capability the civil-penalty regime is designed to incentivise.

2 earlier distinct update(s)
Periodic update · new data 2026-10-06

Consumer Protection & APP Fraud

Australia's Scams Prevention Framework reached a first compliance milestone on 1 September 2026: entities in the banking, telecommunications and digital-platforms sectors that provide services designated under the Framework were required to be members of the Australian Financial Complaints Authority by that date. This membership obligation is now in force, but it is only the first tranche of a larger set of obligations. As at 20 August 2026, the substantive SPF codes and rules were still being developed by government, with Treasury having recently consulted on a draft banking-sector code and the first set of SPF rules. Most of the Framework's substantive obligations are scheduled to commence on 31 March 2027, with additional obligations expected to commence by the end of 2027.

No final reimbursement threshold or liability-allocation model under the Framework has been verified from the available evidence, and none is asserted here pending the finalisation of the underlying codes and rules.

Outlook

The period between now and 31 March 2027 is a construction phase for the Scams Prevention Framework: AFCA membership is a structural prerequisite now satisfied, but the substance of what banking, telecommunications and digital-platform entities will actually owe consumers under the Framework depends on codes and rules that were still in consultation as at August 2026. The draft banking-sector code is the most concrete document to track as it moves toward finalisation ahead of the March 2027 commencement date, with a further tranche of obligations expected to follow by the end of 2027.

Periodic update · new data 2026-09-21

Consumer Protection & APP Fraud

ASIC warned of a sharp rise in AI deepfake investment-scam networks impersonating Australian public figures in the 2026 financial year, reporting removal of over 19,400 online scams -- up 182% year-on-year -- and urging consumers to verify AFS licence numbers before investing. The finding is tagged as most relevant to non-bank payment institutions and e-money issuers within the module's bank/non-bank tracking convention, and is carried at dashboard tier as a dated warning rather than a standing structural finding.

Outlook

No dated regulatory action beyond the warning itself is scheduled this cycle; the module will track any escalation into formal enforcement or scam-reimbursement policy in future cycles.

1 earlier update recorded under a different module label

An early cycle filed this entry under this module code with a heading naming another subject. Kept for the record; not this module's latest position.

Periodic update · new data 2026-07-08

Data, Privacy & Open Banking

No material W10-specific data, privacy, or open-banking developments were identified for Australia this cycle. Australia's Consumer Data Right framework, which underpins open banking, was not the subject of any new regulatory development captured this cycle.

Outlook

The W10 surface for Australia remains stable this cycle. Future cycles should monitor CDR expansion to additional sectors and any interaction between the CDR framework and the new payment-initiation service category introduced under the Tranche 1 licensing reforms.

1 further periodic run re-emitted the standing brief unchanged and is not shown.

Sources and findings (4)
  1. T3https://www.corrs.com.au/insights/the-new-scams-prevention-framework-key-considerations-for-regulated-entitiesretrieved
  2. T3https://www.gtlaw.com.au/insights/click-here-australias-scam-prevention-framework-takes-shaperetrieved
  3. T3https://amjid.au/insights/australias-scams-prevention-framework-operators-guide/retrieved
  4. T3https://www.gtlaw.com.au/insights/the-scams-prevention-framework-legislation-passes-parliament-time-to-get-your-house-in-order2retrieved