What Makes a Gambling Sanction Work?

By iGaming Review · Published 8 November 2026

Editorial Review · Analysis · 8 November 2026

By iGaming Review

A large fine makes a headline. Evidence that a failed control now works is harder to produce. The Star case and a Swedish enforcement debate show why operators should budget for both fixing problems and proving that the fixes last.

Does an A$260 million penalty make a casino safer the next morning?

On 28 October, Australia’s Federal Court ordered that amount against The Star’s Sydney and Queensland casino companies. The day before, Sweden’s online gambling trade association had published a report challenging how its regulator uses enforcement powers.

The debate easily becomes an argument about whether fines are too high or too low. For an operator’s board, the more useful question is what changes after the decision: will the next warning reach the right person, and will the business act on it?

That question has a budget attached. Rewriting a policy, replacing a monitoring system and checking whether it works are different tasks. A remediation programme that funds the first two but ends before the third leaves the board with a claim it cannot yet substantiate.

Three purposes, three different tests

Britain’s Gambling Commission gives financial penalties three purposes: ¹

• Make the operator change. Does the failed process now work?
• Remove the reward for breaking the rules. Has the financial benefit been taken away?
• Warn the rest of the market. Do other operators change their behaviour?

The questions after each purpose are tests for judging results, not the Commission’s wording. They need different evidence. A calculation can support the recovery of an identified benefit. A control needs practical testing. Wider deterrence requires looking beyond the company that paid.

The Commission separates a component addressing consumer loss or operator gain from the punitive component. Its revised framework normally links the latter’s starting point to breach severity and gambling income during the relevant period. That makes the calculation easier to follow. It does not establish what happened afterwards. ^{1, 2}

Sweden: what does a high fine actually tell us?

The Swedish report was produced by Nordic Legal for Branschföreningen för Onlinespel, or BOS. It compares selected parts of Spelinspektionen’s supervision with other Swedish authorities. BOS represents operators and is arguing their case; readers should know who commissioned the study. ³

The study found that seven of nine published AML penalty decisions from 2022–2025 reached at least half the statutory maximum. It also describes a stronger emphasis on individual customer files and formal reporting failures in the areas examined. ⁴

But the authors stop short of concluding that the penalties are generally disproportionate or that the sampling method is unlawful. Different legal frameworks limit the comparison.

A percentage of the maximum describes how an authority uses its powers. It cannot make different offences and businesses comparable. A low ceiling can make a moderate fine look severe; a turnover-based ceiling can create the opposite impression.

Spelinspektionen says it targets the most serious risks. The dispute is about how it does that in practice. Its stated policy alone cannot settle the question. ⁵

There is a separate reason to examine the results. Sweden’s National Audit Office criticised insufficient follow-up in its 2024 audit. The regulator’s 2026–2028 plan now includes follow-up results among its indicators. The earlier criticism and the newer commitment both need dates attached: neither tells us, on its own, how well today’s controls work. ^{6, 7}

For operators, the comparison is a reason to understand which evidence a supervisor examines. It is not evidence that improvements are ignored, or a basis for treating future fines as unavoidable.

The Star: the changes mattered to the penalty

The Star illustrates a combination of federal AML enforcement and state casino oversight. It is a case study, not a template for every Australian sanction. AUSTRAC’s announcement describes failures in the AML programme and customer monitoring, alongside earlier state action. ⁸

The court found that tighter supervision and material business changes had reduced the risk of repetition. Earlier penalties and licence controls mattered too: without the state response, the federal penalty would have been higher. Improvements were therefore part of the decision, not something the court ignored. ⁹

The NSW response to the 2024 Bell inquiry shows the practical reach of those other tools. Alongside an A$15 million penalty, it included directions on committees and enhanced customer checks, and proposed conditions on board independence and key personnel. ¹⁰

Viewed through the three British purposes, the case offers three useful distinctions. These are analytical comparisons, not a claim that the court applied the British framework:

• Behaviour: the court assessed changes already made, rather than relying on the new fine to do all the work.
• Financial benefit: the judgment could not precisely calculate the gains from the breaches. The A$260 million should not be presented as a measured repayment of those gains.
• Deterrence: the remaining penalty still had to discourage The Star and other businesses from repeating the conduct.

The court ordered A$195 million against Star Sydney and A$65 million against Star Queensland, payable in instalments. The ordered total is not evidence that it has all been paid. ⁹

The lesson for a board is practical. A fine, a restriction and a functioning control do different jobs. To understand what has changed, follow the whole intervention. A court’s assessment of lower risk still needs to be distinguished from a guarantee about future conduct.

What happened when the regulator came back?

Britain publishes follow-up results after improvement notices and special measures. The latter require an urgent action plan and reassessment, while leaving formal investigation available. ¹¹

For the completed April 2024–March 2025 cohort, 88.9% of improvement-notice cases were recorded as compliant; 11.1% remained non-compliant and were escalated. Special-measures cases were recorded as 100% compliant. Neither table had cases awaiting reassessment.

These figures cover any failing, not AML alone. They come from risk-selected assessments and cannot describe the whole industry. They also do not isolate the effect of fines; the Commission says it is still developing measures for formal enforcement casework.

Even with those limits, reassessment answers a useful question: what happened to the cases the regulator revisited? It is stronger evidence than a promise to revise a policy, but still a snapshot. The testing period and scope matter.

Budget for the test, not just the fix

For a compliance director, the spending decision should start with the failure. If alerts were not escalated, buying a new monitoring platform is only part of the response. Someone must check that alerts reach the right staff, decisions are timely and exceptions are investigated.

An independent review can be part of that work. In its November 2025 NetBet announcement, the Gambling Commission paired a £650,000 settlement with an independent audit intended to test whether improvements were embedded and remained effective. That is an example of assurance accompanying a financial consequence, not a promise that commissioning an audit avoids one. ¹²

There is a direct connection to penalty assessment. The Commission lists prompt resolution and steps to prevent repetition as possible mitigating factors, while retaining an adjustment for deterrence. Evidence of improvement can matter without cancelling the consequences of earlier breaches. ¹

A practical budget should therefore cover implementation, independent challenge where appropriate, and follow-up after the project team leaves. This is our application of the cases, not a prescribed spending formula. The following records help a board decide whether the work is complete:

• The failure and its cause. Identify the affected process, period and customers, and explain how the weakness arose.
• The change in operation. Retain implementation dates, system versions and evidence that staff use the revised process.
• The test and its limits. Record who tested what, the sample and period examined, exceptions found and work still outstanding. Match the reviewer’s independence and expertise to the risk.
• The evidence over time. Set dates for repeat testing, track unresolved exceptions and revisit the control after staffing or system changes.

Consider a hypothetical missed escalation. Training attendance shows that staff received instruction. A fresh sample of alerts can show whether they acted correctly. Repeating the test after a software change can reveal whether the fix survived.

An audit title alone is weak assurance. The Star judgment records positive external reviews alongside testing limitations and continuing concerns about transaction monitoring. A board needs to read the qualifications, not just the conclusion. ⁹

Nor does a large compliance bill establish effectiveness. Tracking overdue alerts, failed escalations and repeated exceptions can help management direct spending to unresolved weaknesses. Those measures need context and testing; a falling alert count, for example, could reflect weaker detection rather than lower risk.

Keep the evidence after the headline fades

Regulators need a public version of the same chain: the failure, the response, the test and the follow-up. That record can explain the outcome without exposing customers’ financial information or sensitive detection rules.

Dates matter. A later penalty may concern an earlier period, rather than a fresh failure after remediation. Equally, a company saying its programme is complete is not the same as a regulator verifying the result.

The sources reviewed here do not establish which country’s system works best. They do show why neither the largest fine nor the most expensive remediation programme should win that argument by default.

Return to The Star’s A$260 million. The judgment explains why the amount mattered and why changes already made mattered too. The next test is whether the controls keep working. For an operator’s board, that is the question to fund, document and revisit long after the announcement.