The Compliance Audit: Ten “red flags” for Reviewers

Uncovering misconduct

Despite the recent coverage, there’s no fraud epidemic in financial services; but it’s inarguable that the increased reporting undermines public confidence in the advice profession.

Accordingly, Licensees (and advisers) need to do more to detect, prevent and mitigate fraud. Personally, I am surprised by the view that Licensees’ Compliance Teams “can never detect fraud” or criminal activity. 

In reality, most adviser fraud is relatively unsophisticated and, even with the effort taken by fraudsters to conceal their contraventions, I believe that Licensees can improve their capacity to detect misconduct.

Even in the absence of specialist compliance systems, a Licensee can increase the likelihood of detecting adviser fraud by ensuring that: 

  • the Licensee’s Compliance arrangements consider those lead and lag indicators that correlate with fraud;
  • staff and advisers understand that fraud is not a “victimless” crime; and
  • 1st and 2nd line resources have the courage and capacity to identify, escalate or pursue these matters.

Identifying fraud

So what elements should be built into your compliance framework to allow your Compliance Reviewers to increase their likelihood of detecting fraud? In my view, an initial step might be to ensure that their review process requires them to identify, consider and, where appropriate, escalate concerns where

  1. a common address is frequently used on client application forms (look for patterns in the submission of applications too);
  2. the Adviser seems to “living beyond their means” based on the reported remuneration;
  3. files scheduled to be reviewed are offsite or unavailable;
  4. there is an unusually high turnover of the adviser’s support staff (or office relocations);
  5. the adviser’s has close relationships with vulnerable or disadvantaged clients;
  6. there is a sudden increase in “new business” with a similar lapse rate after 1 year;
  7. the adviser pays clients’ premiums (or claims to do so);
  8. the adviser holds Powers of Attorney, discretionary authorities (contrary to your policies) or offers a custodial service for clients;
  9. the adviser is identified as being bankrupt or banned (or previously bankrupted or banned); and
  10. the adviser routinely collects client payments from product manufacturers or “deposits” cheques on clients’ behalf.

Happiness: a common give-away

Perhaps cynically, you should also be alert if the adviser responds to an unscheduled (and horribly inconvenient) compliance review by being overly welcoming and solicitous.

In my experience, there is always a degree of tension in compliance reviews – few advisers really enjoy having their work critiqued – so when the adviser responds with charm and bonhomie when you turn up unannounced on their doorstep, take the time to wonder why.

Keep exploring

ASIC’s mortgage broker review: When compliance processes fail to protect consumers

October 14, 2026

ASIC’s mortgage broker review exposes weaknesses in loan recommendations, compliance monitoring and complaints handling. For credit licensees, the challenge is to show that compliance processes do more than satisfy procedural requirements: they identify conduct risks, support good consumer outcomes, and provide meaningful assurance to management.

AFCA’s reasonable care approach: insurance application risks for advisers and AFSL holders

October 12, 2026

AFCA's reasonable care approach highlights insurance application risks for financial advisers and AFSL holders. Learn how to strengthen application controls, preserve evidence and assess complaints involving inaccurate disclosures and declined insurance claims.

Subscribe

Every fortnight “Three Hit Tuesday” delivers thought leadership, considered analysis and insights that will help you improve your advice, more effectively manage your regulatory risks and make you better informed than your peers.

AS-Subscribe Form

"*" indicates required fields

This field is for validation purposes and should be left unchanged.

We respect your privacy. We know everyone says that, but we promise that we won’t sell your contact details to dodgy telemarketers, spam your email or otherwise exploit your trust.

Step 1 of 8 - Your Role

This field is for validation purposes and should be left unchanged.

Assess your ASIC exposure

Answer a few targeted questions to identify where your compliance may not stand up under ASIC review.

Takes less than 2 minutes. No preparation required.

What best describes your role?