Regulatory and Compliance Update – April 2026

This update directly affects AFSL licensees, credit licensees, compliance managers, and advisers responsible for AML programs, complaint handling, and superannuation advice.

April 2026 was not a routine compliance month. It showed a clear shift from guidance to intervention. The dominant pattern is ecosystem accountability: regulators and government are looking beyond the immediate adviser or product issuer and examining platform trustees, licensee supervision, lead generation, advice fee controls, product onboarding, complaint handling, and compensation funding.

For AFSL compliance teams, the highest-risk areas are now adviser supervision, platform and menu governance, AML/CTF transition readiness before 1 July 2026, complaints/breach/consumer outcome data quality, and AI/cyber/scam/finfluencer controls.

Top 5 Developments

1. Shield / First Guardian fallout drove the month’s dominant regulatory theme. Treasury released three consultations on 7 April 2026 covering curbing lead generation, enhancing member protections in superannuation, and CSLR sustainability, with submissions open until 22 May 2026. The Minister linked the package to Shield and First Guardian, consumer protection, high-pressure sales tactics, and CSLR funding sustainability.

2. ASIC intensified action against advice misconduct, platforms, finfluencers and scams. April ASIC actions included bans connected to Shield and First Guardian advice, a proposed receiver for the Interprac sale, action on AI-powered investment scams, and warning notices/reviews targeting finfluencers and AFS licensee supervision of finfluencers.

3. APRA escalated platform governance and operational resilience expectations. APRA imposed additional licence conditions on Fiducian over platform investment governance and board oversight, finalised targeted CPS 230 amendments effective 1 July 2026, and called for a step-change in AI-related risk management and governance across banks, insurers and superannuation trustees.

4. AML/CTF reform moved from design to implementation. AUSTRAC published transitional guidance explaining how certain reporting entities may continue using pre-reform customer identification procedures for initial CDD until 31 March 2029, subject to transitional policies by 1 July 2026. AUSTRAC also highlighted expanded virtual asset oversight and directed MHITS to appoint an external auditor over AML/CTF concerns.

5. Transparency and data-driven supervision continued to expand. ASIC’s complaints and breach reporting dashboards, AFCA’s Datacube, APRA/ASIC life insurance claims data, and industry commentary all point to a more visible compliance environment where IDR, EDR, breach, platform and product governance metrics are increasingly open to regulator, consumer and media scrutiny.

Ashurst notes that ASIC’s public IDR dashboard positions complaints data as a publicly visible measure of conduct, governance effectiveness and consumer outcomes. This supports treating IDR, AFCA, breach and remediation data as board-level risk indicators, rather than back-office compliance reporting.

Legislative Changes

Key April legislative and instrument developments included:

• AML/CTF Act compilation in force as at 31 March 2026, showing the amended regime following the 2024 reforms.
• AML/CTF Transitional Rules 2026, registered 30 March 2026, covering initial CDD transition, reporting obligations, VASPs, financial advisers, independent evaluations and compliance officers.
• Treasury Laws Amendment (Supporting Choice in Superannuation and Other Measures) Act 2026, assented 26 March 2026, including employee onboarding reforms and a ban on advertising superannuation funds during onboarding.
• Treasury Laws Amendment (Minor and Technical Amendments No. 1) Regulations 2026, registered 20 April 2026, covering minor and technical amendments across SIS Regulations, RSA Regulations and Corporations Regulations, including financial services guides.
• ASIC Corporations instruments on electronic lodgement of financial and sustainability reports and AFS licence treatment of lease assets.

Implications for AFSL teams:
Compliance registers should be updated for AML/CTF transition, super onboarding advertising restrictions, sustainability reporting lodgement changes and AFS financial resource calculations affected by lease asset treatment.

Regulatory Themes

1. Platform governance is now a core consumer-protection issue

APRA’s Fiducian licence conditions, FSC’s platform standard and Treasury’s member protection consultation all point in the same direction: platforms and trustees must evidence robust product onboarding, menu monitoring, conflicts management and advice fee controls.

2. Lead generation and adviser supervision are under direct pressure

Treasury’s lead-generation consultation, ASIC’s Shield/First Guardian bans and ASIC’s Interprac proceeding show that introducer models, lead funnels, high-pressure sales and licensee supervision are high-risk.

3. AML/CTF is now an implementation project, not a horizon issue

The 31 March 2026 reform commencement, 30 May compliance officer notification date and 1 July transitional policy date create immediate compliance deliverables.

4. AI cuts across scams, cyber, operational risk and governance

ASIC’s AI scam warnings and APRA’s AI governance letter show that regulators expect firms to manage both internal AI adoption and external AI-enabled threats.

5. Public data is becoming a supervisory tool

ASIC IDR data, AFCA Datacube, APRA/ASIC insurance claims statistics and breach dashboards create reputational and regulatory risk where firm data is poor, inconsistent or shows weak consumer outcomes.

Immediate actions

1. Run a Shield/First Guardian-style control review.
   Test super switching advice, high-risk product recommendations, private credit exposure, SMSF establishment advice, replacement advice and client vulnerability indicators.
2. Refresh lead-generation and referral controls.
   Map all introducers, digital funnels, referral payments, calculators, seminars, social media campaigns and third-party marketing. Confirm who is responsible for monitoring misleading conduct and unlicensed advice risk.
3. Prepare Treasury consultation positions before 22 May 2026.
   Prioritise CSLR, lead generation and super member protection submissions or industry-body input.
4. Complete AML/CTF transition tasks.
   Confirm compliance officer notification by 30 May 2026, transitional CDD policy drafting by 1 July 2026, updated ongoing CDD procedures, independent evaluation planning and staff training.
5. Review adviser and finfluencer supervision.
   Confirm that authorised representative agreements, social media policies, monitoring tools and breach escalation cover finfluencer-style activity and online promotions.

30–90 day actions

1. Update product governance frameworks.
   Include private credit, platforms, high-risk MISs, DDO/TMD alignment, conflicts, fee opacity, liquidity, valuation and concentration checks.
2. Strengthen platform due diligence.
   Benchmark against the FSC platform governance standard: initial due diligence, holding limits, trigger reviews, adviser behaviour analytics, advice fee deduction controls and unadvised-member protections.
3. Audit complaints and breach data.
   Reconcile IDR records, AFCA complaints, reportable situations, remediation registers and board reporting. Identify repeat advisers, products, cohorts and root causes.
4. Create an AI and scam risk register.
   Cover AI-generated scams, fake endorsements, staff use of AI tools, model/vendor concentration, privacy, cyber and incident response.
5. Review board and compliance committee packs.
   Add metrics for advice quality, high-risk products, complaints, breach trends, lead sources, remediation, AML/CTF readiness and platform exposure.

Strategic actions

1. Move from obligation-by-obligation compliance to compliance infrastructure. Regulators are testing how products, platforms, advisers, referrers, complaints and compensation interact.
2. Adopt “public dashboard readiness” as a compliance standard. Assume complaints, breaches, adviser and product data may be scrutinised externally.
3. Treat operational resilience, cyber and AI governance as AFSL issues. Even when APRA standards do not directly apply, they are becoming regulatory benchmarks.
4. Build evidence files for key governance decisions. Maintain records showing why products were approved, advisers were authorised, platforms were used, complaints were classified, and remediation decisions were made.
5. Prepare for more intervention. April 2026 suggests regulators are increasingly willing to impose licence conditions, appoint external experts, pursue bans, review licensee supervision and use public data to drive behaviour change.

Respond to April’s regulatory focus areas with evidence-ready controls. Use [comply^e] to monitor AML/CTF transition tasks, complaint and breach data, adviser supervision, platform governance, and superannuation advice risks in one auditable compliance framework.