This update directly affects AFSL licensees, credit licensees, compliance managers, and advisers responsible for AML programs, complaint handling, and superannuation advice.
February 2026 was dominated by three themes: ASIC’s intensified enforcement and supervisory activity, AML/CTF implementation readiness leading into the 31 March 2026 commencement of revised obligations for existing reporting entities, and superannuation transition activity ahead of 1 July 2026.
The most significant operational development was AUSTRAC’s continued implementation of the revised AML/CTF framework. February activity included consultation on amendments to the AML/CTF Rules, as outlined in AUSTRAC’s consultation update, updated FATF high-risk and monitored jurisdiction guidance requiring enhanced due diligence alignment through the FATF high-risk jurisdictions list, and the release of sector-specific AUSTRAC guidance supporting AML/CTF program design and implementation for financial planners via AUSTRAC’s financial planners quick guide.
For licensees, this materially raises governance expectations across AML programs, including suspicious matter reporting, customer due diligence, staff training, and demonstrable operational effectiveness supported by testing, metrics, and audit evidence.
At the same time, ASIC maintained an assertive enforcement posture. February included the $2.5 million penalty against FIIG Securities for cyber security failures, as detailed in ASIC’s media release, adviser banning action, multiple AFS licence cancellations referenced across ASIC’s February enforcement releases, licence conditions imposed on Cambridge Mercantile following compliance failures in its foreign exchange derivatives business as outlined by ASIC, and the launch of a review into advice licensees using lead-generation services, announced in ASIC’s review notice. ASIC also highlighted increased misconduct reporting volumes in its misconduct report update, particularly involving financial services and retail investor issues. The direction of travel is toward data-led supervision, where misconduct reporting, breach data, and surveillance outputs directly inform regulatory action.
In superannuation, Treasury, APRA and the ATO accelerated industry readiness for reforms linked to 1 July 2026. February saw the Treasury Laws Amendment (Payday Superannuation) Regulations 2026 registered on 23 February 2026, as recorded on legislation.gov.au, the Government released the Retirement Reporting Framework and Best Practice Principles for Superannuation Retirement Income Solutions via Treasury, and the ATO continued readiness messaging to employers, funds and service providers through its Payday Super guidance. These developments shift superannuation compliance from policy settings into operational implementation, requiring payroll integration, reporting capability, and system readiness.
AFCA’s February updates increased the operational significance of complaints governance. The publication of updates and lead decisions relating to Shield and First Guardian complaints, as outlined by AFCA, together with a new process effective 1 March 2026 for changing the financial firm named in a complaint, and updated Rules and Operational Guidelines effective 12 March 2026 available via AFCA’s Rules and Guidelines, make complaint handling, firm identification, and remediation pathways more material for AFSL compliance teams.
The market is treating AML/CTF reform as a whole-of-business operating model change rather than a narrow legal update; ASIC’s advice, cyber and licensing activity as signals of stronger data-led and outcome-focused supervision; and superannuation reform as an active implementation program rather than a distant legislative issue.
If your compliance framework cannot produce evidence of control effectiveness, reconcile reporting across systems, or demonstrate how issues are identified and resolved, you are already misaligned with regulatory expectations.
Top 5 Developments
These developments shift compliance from policy design to operational proof. Regulators are increasingly assessing what is happening in practice through data, reporting, and observable outcomes rather than what is documented.
AUSTRAC increased AML/CTF readiness pressure in February 2026 through consultation on updated AML/CTF Rules, as set out by AUSTRAC, sector guidance for financial planners via AUSTRAC guidance, and updated FATF high-risk jurisdiction materials published by FATF ahead of the 31 March 2026 commencement phase.
ASIC intensified supervisory and enforcement activity, including the $2.5 million FIIG Securities cyber security penalty detailed in ASIC’s enforcement action, adviser banning action, multiple AFS licence cancellations referenced in ASIC releases, and licence conditions imposed following compliance failures as outlined by ASIC.
ASIC launched a review of advice licensees using lead-generation services, as announced in ASIC’s review, increasing scrutiny of referral models, super-switching conduct, advice quality, and marketing oversight.
Payday Super and retirement reform readiness accelerated, with the Payday Superannuation Regulations 2026 registered on 23 February 2026, published on legislation.gov.au, and the Government releasing the Retirement Reporting Framework and Best Practice Principles for Superannuation Retirement Income Solutions via Treasury.
AFCA increased pressure on complaints governance through updates on Shield and First Guardian complaints published by AFCA, a new process for changing the named financial firm in a complaint, effective 1 March 2026, and updated Rules and Operational Guidelines available via AFCA, effective 12 March 2026.
What links these developments is not the regulatory change itself, but the expectation that licensees can evidence, through data, reporting and control testing, how their frameworks operate in practice, adapt to emerging risks, and detect and escalate issues in real time.
What does a defensible compliance framework look like for AFSL and credit licensees?
Review your compliance infrastructure. Use [complye] to track AML controls, complaint-handling metrics, and governance reporting with auditable evidence and ongoing monitoring.