What the Mounties Matter Would Show in an Independent Review
A view from the independent review side of the desk.
The AUSTRAC civil penalty proceedings against Mount Pritchard and District Community Club — the Mounties group — have drawn a lot of industry commentary this week. The AUSTRAC media release is measured but the message to the sector is clear: the era of untested AML/CTF programs in pubs and clubs is over.
Independent reviews exist precisely to stop matters like Mounties reaching the Federal Court. The AML/CTF Rules require every reporting entity to have its program reviewed by an independent reviewer at regular intervals. The review is meant to find the gaps while there is still time to close them — before AUSTRAC finds them and frames the answer as a penalty notice.
When we step through a venue’s program during an independent review, the patterns that appear in the Mounties allegations are the patterns we are looking for. This piece is about what those patterns look like on the ground, and why venues who think they are fine often are not.
The gaps we find, venue after venue
Independent reviewers see the same categories of weakness repeatedly. They are not exotic. They are not hidden. A reviewer who knows where to look finds them within a week of walking into a venue.
1. The program says one thing; the floor does another
Every program document we have reviewed talks about risk-based customer due diligence. The question we ask, every time, is whether the venue’s staff can describe — in their own words — what would make them ask one patron for ID and not another. When the answer is “we ask everyone” or “we ask nobody,” the program is not operating as documented. The program becomes a reference document that the operation does not follow.
This is not a paperwork issue. It is a control environment issue, and it is the precise category of failure AUSTRAC has alleged against Mounties.
2. The evidence is sampled, not continuous
When we ask for a week’s worth of random evidence — CDD records, SMR narratives, training completion logs, transaction monitoring outputs — the weak programs produce bits and pieces. The strong programs produce a complete picture across every day, every shift, every venue.
The AML/CTF Rules do not require sampling. They require retention. If a venue cannot produce the full evidence trail for any given day, the program is not generating what it is supposed to generate. In a Federal Court matter, that gap becomes visible very quickly.
3. The training is paperwork, not competency
Staff awareness training is one of the clearest program obligations. The failure mode is almost always the same: annual online modules that staff click through to get the certificate, with no evidence that the staff actually know what they learned. We often pick three gaming room staff at random during a review and ask them to describe, in their own words, what a suspicious matter report is and when they would escalate. The answers we get tell us whether the training worked.
For Mounties — and for any venue of that size — the training obligation spans hundreds of staff across multiple venues. When that scale of training is treated as a compliance tick-box rather than an ongoing capability, the gap shows up exactly where AUSTRAC is now testing.
4. The independent review was not, in fact, independent enough
This is the uncomfortable one. We see independent reviews that conclude a program “meets the requirements of the Act” when a serious walk-through would surface half a dozen substantive findings. The quality floor for independent reviews across the industry is not where it should be, and venues that have relied on weak reviews have been told they are fine when they are not.
Our position has always been that a useful review finds things. A review that finds nothing in an operation with hundreds of staff, thousands of gaming machines, and millions of dollars in annual payouts is a review that did not look hard enough.
5. Group-level oversight is assumed, not demonstrated
For group operators — and Mounties is a group operator — the governance obligation sits at the group level. That means the group’s board and its compliance function need to be actively supervising the program across every venue, not just collecting reports. In practice, we regularly find that group-level supervision is notional: each venue has its own records, each venue’s compliance officer does their own thing, and the group’s central view is a quarterly summary that nobody has truly stress-tested.
When AUSTRAC moves against a parent entity, this gap is where the spotlight lands.
What an independent review actually does — well
A rigorous independent review is not a desk exercise. It involves spending time on the floor, talking to staff, watching the workflow, pulling random evidence samples, testing the transaction monitoring outputs, examining the SMR history, and asking hard questions about governance. It is uncomfortable work, and the outputs should make the operator uncomfortable too — because discomfort is the signal that findings are real.
The deliverable is a report that the venue can hand to their board, to their bank, and ultimately to AUSTRAC if the question is asked. The report should say what is working, what is not, what needs to be remediated and by when, and what the venue has committed to do. A credible review supports the governance obligation; a weak review does not, and in a matter like Mounties, the weak review becomes part of the problem rather than part of the defence.
What boards and compliance officers should do this week
The Mounties proceedings are a signal. The response does not have to wait for the judgment.
- Commission a genuine independent review if your last one was light, superficial, or produced by a party too close to the program to test it rigorously.
- Walk the floor with your compliance officer. Ask three staff members to describe what they would do if a patron triggered a suspicious behaviour indicator. If the answers are inconsistent, the training is not working.
- Pull random evidence. Ask for a full week’s compliance records from each venue in the group, and see whether the records are actually complete.
- Test your governance. When did your board last see an operational compliance report that showed weaknesses as well as strengths? If the board only ever sees green-light reports, the governance is not working.
- Review your technology. Paper registers and spreadsheets do not produce the evidence AUSTRAC expects. Compliance technology — integrated, always-on, audit-ready — is increasingly the baseline, not a nice-to-have.
Where we fit
RCA Group has been conducting independent reviews and delivering AML/CTF staff awareness training to Australian pubs and clubs for years. The review findings we produce are designed to be used — not to decorate a compliance file.
Final note
Independent reviews are the mechanism the AML/CTF Rules built to stop matters like Mounties reaching the Federal Court. When a matter does reach the court, it is almost always because either the review did not find the problem or the review found it and nobody acted. Both failures are avoidable.
If you would like a genuine independent review — or a second opinion on one that has been done — get in touch. The venues that take this step before the regulator arrives are the ones who keep running.