Executive Summary
Top 5 developments
1. Shield and First Guardian triggered a system-wide financial services reform package
On 19 August 2026, the Australian Government announced a major package of reforms in response to the Shield Master Fund and First Guardian collapses, which affected almost 12,000 consumers and around $1 billion in retirement savings.
The Government identified weaknesses extending across lead generators, advisers, superannuation trustees, investment products and compensation arrangements. The reform package is intended to strengthen protections across the superannuation, advice and investment ecosystem, improve access to financial advice and place the Compensation Scheme of Last Resort on a more sustainable footing.
Many of these measures were policy announcements requiring further consultation and legislation, rather than operative law at 31 August.
Key areas identified included stronger controls over lead generation, trustee responsibility where failures cause member loss, MIS governance, superannuation investment oversight, financial advice reform and CSLR arrangements.
AFSL significance: The post-Shield regulatory response is moving beyond individual adviser misconduct toward supervision of the complete consumer journey—from lead acquisition through advice, product selection, trustee oversight and eventual remediation.
2. Superannuation investment governance and higher-risk products moved to the centre of regulatory attention
APRA announced on 19 August that, under the Government’s proposed reforms, it would develop capital requirements for trustees offering higher-risk investment options. APRA also foreshadowed broader reforms dealing with trustee investment capability, investment onboarding and offboarding, conflicts, diversification and accountability.
On 28 August, APRA released its 2026 superannuation performance test results. Of 547 products assessed, 12 failed:
- 1 of 50 MySuper products; and
- 11 of 141 platform trustee-directed products.
All 356 non-platform trustee-directed products passed.
The FSC also introduced Standard No. 30 — Private Markets Best Practice Principles, establishing governance expectations around valuation, liquidity, leverage, conflicts management, credit risk, disclosure and transparency. The standard commenced on 19 August, with a transition period before becoming effective from 1 July 2027 for relevant FSC members.
AFSL significance: Product research, approved product lists and advice processes involving private credit, private equity, unlisted property and other illiquid or higher-risk products should be reviewed against increasingly demanding governance expectations.
3. AI, cyber security and operational resilience became active governance priorities
On 27 August, ASIC and APRA jointly warned financial entities that awareness of frontier-AI risk must translate into action.
Nine industry roundtables involving more than 600 participants had identified rapidly developing cyber, technology and operational risks associated with frontier AI. The regulators stressed the need for firms to identify, understand and manage these risks rather than waiting for incidents to occur.
August also provided a significant enforcement example. Bendigo and Adelaide Bank admitted breaches of its obligations under the former Banking Executive Accountability Regime associated with a 2023 cyber incident. APRA said weaknesses in authentication controls had been identified through penetration testing as early as 2020 but had not been adequately addressed before the attack.
On 18 August APRA separately imposed additional licence conditions on the bank after identifying longstanding weaknesses in its broader non-financial risk-management framework.
AFSL significance: Identifying a vulnerability without demonstrable remediation is becoming an accountability issue. Boards should expect evidence of closure, testing and independent assurance—not simply risk-register entries.
4. AUSTRAC moved decisively from AML/CTF implementation into enforcement
August showed that the transition period following the 1 July 2026 expansion of the AML/CTF regime was rapidly giving way to regulatory enforcement.
On 28 August, AUSTRAC began issuing section 167 notices to businesses that appeared to be providing designated services without having enrolled. The notices targeted sectors including accountants, lawyers, real estate businesses and jewellers. AUSTRAC expressly stated that the period for preparation had passed.
Earlier in the month AUSTRAC suspended Cryptolink’s virtual asset service provider registration for three months, taking its 96 cryptocurrency ATMs offline amid continuing AML/CTF compliance concerns.
On 19 August, AUSTRAC’s Fintel Alliance also announced findings from Operation Claw, identifying potentially hundreds of millions of dollars in suspected fraudulent mortgage lending involving falsified income, employment and business information.
AFSL significance: Licensees should re-examine related businesses and referral relationships involving accounting, legal, mortgage, property and digital-asset activities. AML/CTF risk increasingly extends through business ecosystems rather than remaining inside individual regulated entities.
5. Complaint volumes reached record levels while conduct expectations continued to rise
AFCA reported on 4 August that Australians had lodged a record 119,949 complaints in 2025–26, the third consecutive financial year in which complaint numbers exceeded 100,000.
On 10 August AFCA published three Approach papers:
- updated Approach to non-financial loss;
- new Approach to general insurance claims handling; and
- new Approach to uninsured motor vehicles.
The updated non-financial-loss guidance substantially expanded case studies concerning scams, hardship, privacy, insurance and family violence.
AFSL significance: Complaints should be treated as regulatory intelligence. Patterns by adviser, product, lead source and third party should feed directly into adviser supervision, product governance and remediation decisions.
Trend Analysis
August represented an important evolution from the July implementation environment.
July centred heavily on the commencement of Payday Super and the expanded AML/CTF framework. August showed regulators beginning to test whether those and other frameworks operate effectively in practice.
Three regulatory trends stand out.
Whole-of-ecosystem accountability
The Shield and First Guardian response explicitly recognises that consumer harm can be amplified as a person moves between lead generators, advisers, superannuation trustees, investment products and compensation mechanisms.
For AFSLs, this significantly increases the importance of third-party governance. A licensee’s compliance perimeter can no longer be defined solely by its employees and authorised representatives.
Product governance and advice governance are converging
APRA’s investment-governance work, the superannuation performance test, FSC Standard 30 and ASIC’s complex-product surveillance all point in the same direction: firms need evidence demonstrating why products remain appropriate for the intended consumer cohort.
ASIC’s surveillance of nine licensees offering exchange-traded options, futures and fractional shares identified shortcomings in:
- target market determinations;
- client onboarding;
- ongoing client monitoring;
- authorisations;
- disclosure; and
- client-asset arrangements.
ASIC particularly criticised repeated or unlimited attempts at onboarding questionnaires and over-reliance on questionnaires and disclosure rather than monitoring actual client outcomes.
Frameworks must produce evidence of action
The Bendigo enforcement outcomes, AUSTRAC’s section 167 notices and ASIC’s complex-product surveillance demonstrate a common regulatory expectation: a policy or control framework is of limited value if identified problems remain unresolved.
Management information therefore needs to demonstrate:
risk identified → responsibility allocated → remediation completed → effectiveness tested → closure evidenced.
Detailed Insights by Regulator and Monitoring Source
ASIC
ASIC released its Corporate Plan 2026–27 on 26 August. Its priorities include protecting consumers and small businesses, supporting responsible innovation, reducing unnecessary regulatory burden and strengthening confidence in Australia’s financial system.
The practical supervisory message is reflected in ASIC’s stated ambition to become easier to deal with for firms doing the right thing while becoming harder to avoid for entities creating regulatory harm.
Complex product surveillance
ASIC’s August Market Integrity Update reported findings from surveillance of nine AFS licensees offering retail access to exchange-traded options, futures and fractional-share products.
ASIC found weaknesses across TMDs, onboarding, monitoring, authorisations, disclosure and client-asset arrangements. Five licensees implemented compliance improvements, two paused onboarding and one exited the Australian market following the review.
The surveillance reinforces several principles relevant beyond derivatives:
- TMDs need sufficiently narrow and meaningful target markets;
- onboarding questionnaires cannot be treated as a compliance formality;
- repeated attempts to pass a questionnaire can undermine the effectiveness of the control;
- disclosure alone does not establish product appropriateness; and
- firms should use actual outcome data when reviewing distribution arrangements.
Financial advice guidance
On 24 August, ASIC released INFO 297 — FAQs: Professional Year, providing guidance for provisional relevant providers, supervisors and responsible licensees.
Licensees employing new advisers should ensure professional-year governance covers supervision arrangements, record keeping, competency progression and the responsible licensee’s obligations.
Consultations and regulatory instruments
August ASIC regulatory activity included:
- CP 390, issued 4 August, proposing reform of restrictions around pre-lodgement advertising and publicity;
- CS 62, issued 11 August, concerning proposed extensions of eight financial-services, credit and markets legislative instruments due to expire in 2027;
- updated RG 49 Employee incentive schemes; and
- withdrawal of obsolete financial-reporting relief relating to uncontactable members.
Insurance transparency
ASIC’s REP 838, published on 11 August, examined how motor insurers explain premiums at quotation and renewal. While primarily relevant to insurance providers, it reinforces ASIC’s wider expectation that disclosure should enable meaningful consumer understanding rather than merely satisfy formal requirements.
AFSL enforcement
ASIC’s September financial advice update confirms that it announced a six-month suspension of Central Accord’s AFS licence on 10 August after the firm ceased carrying on a financial services business and had been expelled from AFCA membership for unpaid invoices. The suspension itself took effect on 30 July.
AFSL implication: Licensees should prioritise continuous monitoring of client outcomes, adviser conduct and product distribution rather than relying predominantly on disclosure, annual reviews or file-by-file testing.
APRA
APRA’s August agenda concentrated heavily on investment governance, operational resilience and accountability.
Higher-risk superannuation investments
Following the Government’s 19 August announcement, APRA confirmed that proposed reforms would require it to set capital requirements for trustees offering higher-risk investment options.
APRA also foreshadowed reforms across eight areas of investment management, including:
- trustee investment capability;
- onboarding;
- monitoring;
- offboarding;
- conflicts;
- diversification; and
- oversight and accountability.
APRA noted that the reforms are expected to have their greatest impact on platform trustees.
2026 performance test
On 28 August APRA assessed 547 super products representing approximately 61 per cent of APRA-regulated superannuation member benefits.
Twelve failed the performance test: one MySuper product and 11 platform trustee-directed products.
The result creates immediate relevance for advice businesses where existing clients hold failed or persistently underperforming options.
Corporate Plan
APRA published its 2026–27 Corporate Plan on 20 August, emphasising the need for regulated firms’ risk-management practices to keep pace with a rapidly evolving threat environment.
Cyber and operational resilience
Bendigo and Adelaide Bank’s admitted BEAR breach and the later licence conditions imposed by APRA show the consequences of unresolved non-financial risks.
Although most AFSLs are outside APRA’s prudential jurisdiction, these cases provide a useful benchmark for board accountability, risk remediation and assurance.
AFSL implication: Any control issue identified through audits, penetration tests, breach reviews or adviser monitoring should have an accountable owner, defined remediation date and documented effectiveness testing.
ATO
ATO developments were more operational than policy-heavy during August.
Payday Super transition
Employers that failed to meet the final quarterly superannuation contribution deadline of 28 July 2026 were required to lodge the relevant Super Guarantee Charge statement and make payment by 28 August 2026.
The transition was particularly important because payments made during July were subject to specific allocation rules as the system moved from quarterly SG payments to Payday Super.
SuperStream and SMSF infrastructure
The ATO released updated SMSF Alias Lookup information during August, including version 32 effective from 7 August.
ATO software-developer updates also included continued SuperStream and contribution-standard implementation activity.
Common Reporting Standard
On 17 August, the ATO confirmed its implementation approach for CRS Schema Version 3.0. A hard cutover will apply from 1 January 2027, after which files submitted using Version 2.0 will be rejected.
Dynamic PAYG Instalments
Consultation continued during August on Dynamic PAYG Instalments, which would use current business-performance information from software to improve instalment calculations.
Broader implementation is contemplated from July 2027, but the ability to elect monthly PAYG instalments was not yet law at the end of August.
AFSL implication: Advice businesses should ensure Payday Super has transitioned from implementation project to ongoing exception monitoring, particularly for rejected contributions and payroll/system failures.
AUSTRAC
AUSTRAC’s August activity demonstrated an increasingly assertive enforcement posture.
Non-enrolled businesses
On 28 August AUSTRAC commenced issuing section 167 information notices to businesses suspected of providing designated services without enrolment.
AUSTRAC’s message was explicit: enrolment is a legal obligation and the preparation phase has ended.
Cryptolink suspension
AUSTRAC suspended Cryptolink’s VASP registration for three months from 9 August, preventing it from operating 96 cryptocurrency ATMs.
The regulator cited continuing concerns about the company’s ability to manage high-risk transactions.
Operation Claw
AUSTRAC’s Fintel Alliance analysed information from 10 major Australian banks and identified suspected coordinated mortgage fraud potentially involving hundreds of millions of dollars in lending.
Indicators included inflated income, misrepresented employment and fabricated or unverifiable business activity.
This has broader significance for AFSL and credit groups using mortgage brokers, accountants, lawyers or property professionals as referral sources.
AFSL implication: Third-party due diligence should incorporate financial-crime indicators, not simply licensing status and contractual warranties.
AFCA
AFCA recorded 119,949 complaints during 2025–26, its highest number on record and its third successive year above 100,000 complaints.
On 10 August AFCA published updated or new Approaches dealing with:
- non-financial loss;
- general-insurance claims handling; and
- uninsured motor vehicles.
AFCA stated that the documents reflected established processes rather than changing how complaints are determined.
For financial advice firms, the updated non-financial-loss Approach is particularly useful because it expands practical examples involving vulnerable consumers, scams, financial hardship, privacy and family violence.
AFSL implication: IDR compensation frameworks and complaint-assessment guides should be checked against AFCA’s current published methodology rather than relying exclusively on historical internal precedent.
FAAA
FAAA’s August advocacy was dominated by the Government’s Shield and First Guardian response.
FAAA welcomed action on harmful lead generation and stronger protections where trustee failure causes loss but stressed that detailed implementation would determine whether reforms improve or unintentionally restrict access to financial advice.
FAAA specifically raised issues concerning:
- anti-hawking and genuine adviser/client contact;
- professional referrals;
- trustee compensation;
- MIS governance;
- CSLR sustainability;
- actual-loss compensation methodology;
- scaled advice;
- the proposed new class of adviser; and
- adviser education standards.
AFSL implication: Firms should model reform scenarios now but clearly distinguish Government proposals from current legal requirements.
FSC
The FSC released Standard No. 30 — Private Markets Best Practice Principles during August.
The standard addresses:
- governance;
- valuation;
- liquidity;
- leverage;
- conflicts;
- credit risk;
- disclosure; and
- transparency.
It applies to relevant FSC fund-management and superannuation members involved in private markets and is supported by Guidance Note 57.
The standard commenced on 19 August and provides a transition period before becoming effective on 1 July 2027.
Even where an AFSL is not directly subject to the standard, its principles are a useful benchmark when undertaking due diligence on private-credit, private-equity and other unlisted investment products.
AFSL implication: Approved product committees should consider explicitly benchmarking private-market due diligence against Standard 30.
legislation.gov.au
Federal Register monitoring during August identified a new compilation of the Superannuation Industry (Supervision) Act 1993 effective 10 August 2026, incorporating amendments made by the Treasury Laws Amendment (Tax Reform No. 1) Act 2026.
August also saw individual SMSF-related disqualification instruments registered under the SIS Act.
For compliance teams, the more significant August AFSL developments nevertheless remained concentrated in Government policy announcements, regulator guidance, consultations and enforcement rather than a broad commencement of new Corporations Act obligations.
AFSL implication: Regulatory-change registers should clearly distinguish enacted law from proposals, consultations, regulator guidance and industry standards.
Cross-Agency Themes
1. Shield and First Guardian are reshaping the regulatory perimeter
The Government’s response makes clear that regulators increasingly view consumer harm as arising from interconnected chains rather than a single point of failure.
Lead generators, advisers, trustees, product issuers, MIS operators and compensation arrangements are all part of the same regulatory picture.
AFSL supervision should therefore extend into referral sources and other third parties capable of materially influencing a client’s decision.
2. Higher-risk products require stronger evidence
APRA’s proposed capital framework, its investment-governance reforms, ASIC’s complex-product surveillance and FSC Standard 30 all point toward stronger standards for higher-risk investments.
Licensees should expect to demonstrate not just that research was completed, but that assumptions about liquidity, valuation, concentration, investor objectives and exit risk remain reasonable over time.
3. Operational resilience is becoming a board accountability issue
The APRA/ASIC frontier-AI initiative and Bendigo enforcement actions illustrate the move from technical cyber security toward broader governance accountability.
A board should be able to explain:
- material cyber and AI risks;
- significant unresolved vulnerabilities;
- remediation ownership;
- time to closure;
- testing methodology; and
- third-party dependencies.
4. Regulators expect controls to operate, not merely exist
AUSTRAC’s post-commencement enforcement, ASIC’s distribution surveillance and APRA’s treatment of persistent risk-management weaknesses all demonstrate the same regulatory principle.
Documentation remains important, but evidence of actual outcomes is increasingly decisive.
5. Complaints are regulatory intelligence
AFCA’s record 119,949 complaints reinforce the importance of systematically using complaint data.
Complaints should be analysed by:
- adviser;
- product;
- lead source;
- advice type;
- age or vulnerability cohort;
- service provider;
- allegation;
- remediation outcome; and
- recurrence.
Escalation thresholds should trigger thematic reviews rather than waiting for individual complaints to become regulatory incidents.
Strategic Recommendations for AFSL Compliance Teams
Immediate priority — Shield/First Guardian reform impact assessment
Create a formal impact assessment covering the Government’s 19 August package.
Map each announced proposal against:
- lead-generation arrangements;
- client referrals;
- superannuation switching;
- SMSF advice;
- advice-fee deductions;
- platform relationships;
- approved products;
- MIS exposures; and
- CSLR budgeting.
Clearly label each requirement as current law, announced proposal, consultation or anticipated future reform.
Immediate priority — Lead-generation governance
Prepare a complete register of lead generators and introducers.
Review:
- contractual arrangements;
- acquisition methods;
- consumer consent;
- privacy and data provenance;
- scripts and representations;
- anti-hawking controls;
- remuneration;
- referral conversion rates;
- complaint rates; and
- downstream advice outcomes.
High-risk lead sources should be subject to ongoing monitoring rather than one-off onboarding due diligence.
Immediate priority — Higher-risk product review
Reassess approved products involving:
- private credit;
- unlisted property;
- development finance;
- private equity;
- structured investments;
- derivatives;
- concentrated investments; and
- materially illiquid assets.
Review research against emerging expectations concerning valuation, leverage, liquidity, conflicts and exit risk.
High priority — Superannuation performance-test exposure
Identify clients holding products that failed APRA’s 2026 performance test.
Determine whether the result should trigger:
- adviser notification;
- client review;
- revised research;
- replacement-product analysis;
- additional file documentation; or
- communications to affected clients.
Avoid automatic switching purely because a product failed the test; advice should remain based on the client’s individual circumstances.
High priority — AI and cyber governance
Maintain a register of material AI systems and use cases.
For each material use case document:
- purpose;
- data inputs;
- provider;
- privacy implications;
- information-security controls;
- human oversight;
- accuracy and hallucination risk;
- record keeping;
- incident escalation; and
- business-continuity implications.
Separately review open penetration-test, cyber-audit and control-remediation findings and escalate materially overdue actions.
High priority — AML/CTF perimeter review
Following AUSTRAC’s enforcement escalation, retest whether the licensee or related entities provide any newly regulated designated services.
Pay particular attention to arrangements involving:
- accountants;
- lawyers;
- property businesses;
- mortgage intermediaries;
- SMSF services;
- virtual assets; and
- corporate structuring.
Confirm enrolment and AML/CTF program obligations where applicable.
High priority — Complaints and AFCA analytics
Update IDR procedures to reflect AFCA’s current published Approaches.
Introduce regular management reporting that connects complaint data with adviser monitoring and product governance.
Where one adviser, product or lead source generates disproportionate complaints, trigger a thematic review.
High priority — Professional Year governance
Review the firm’s Professional Year framework against ASIC INFO 297.
Confirm that provisional advisers have:
- appropriate supervisors;
- documented training plans;
- competency evidence;
- supervised experience;
- correct client disclosures; and
- clearly allocated responsible-licensee oversight.
Ongoing — Regulatory change register
The register should track at least:
| Development | Status at 31 August 2026 | Recommended action |
|---|---|---|
| Shield/First Guardian reform package | Government proposal | Impact assessment and monitoring |
| APRA higher-risk investment capital framework | Proposed | Monitor consultation |
| APRA investment governance reform | Consultation forthcoming | Review platform/product governance |
| FSC Standard 30 | Transition period | Benchmark private-market governance |
| ASIC INFO 297 | Current guidance | Review Professional Year arrangements |
| ASIC CS 62 | Consultation | Assess affected instruments |
| ASIC CP 390 | Consultation | Relevant for capital-raising businesses |
| CRS Schema 3.0 | Future mandatory change | Prepare for 1 January 2027 |
| AUSTRAC expanded AML/CTF regime | In force | Verify perimeter and enrolment |
| Payday Super | In force | Monitor operational exceptions |
Compliance Committee Suggested Actions for September 2026
The Compliance Committee should seek confirmation that:
- the Shield/First Guardian reform package has been entered into the regulatory-change register with accountable owners;
- all lead-generation arrangements have been identified and risk-rated;
- approved product lists have been screened for higher-risk and illiquid investment exposure;
- advisers with clients in failed 2026 super performance-test products have been identified;
- AML/CTF enrolment and scope assessments have been completed for all relevant group entities;
- material AI use cases and unresolved cyber vulnerabilities are visible to senior management;
- August AFCA complaint information has been incorporated into adviser and product surveillance; and
- the Professional Year framework has been checked against INFO 297.
Overall Compliance Outlook
Risk level: Elevated.
August 2026 marked a significant shift toward whole-of-ecosystem accountability.
The Shield and First Guardian response demonstrated that Government and regulators are increasingly unwilling to treat advice, superannuation, product manufacturing, lead generation and compensation as separate regulatory problems. The direction of travel is toward stronger controls at every stage of the consumer journey.
For AFSL compliance teams, the highest-value work over the coming quarter is therefore likely to involve:
better third-party oversight, stronger product due diligence, data-driven adviser supervision, demonstrable remediation and clearer board visibility of emerging risks.
The most important future development remains the legislative implementation of the Government’s 19 August Shield and First Guardian reform package.
Compliance teams should monitor the legislation carefully and avoid treating announced proposals as operative requirements until their legal status is confirmed.