ASIC's Record $830 Million Penalties: What Australian Consumers and Investors Should Do
Australia’s corporate regulator reported one of its strongest enforcement years on record on 20 July 2026. For the financial year ended 30 June, courts ordered $830 million in civil penalties, while $643.5 million is being returned to tens of thousands of Australians through remediation, refunds and related payments connected with ASIC’s work.
Those headline figures are large, but consumers should understand what they mean. A penalty is not automatically divided among customers. Remediation programs have eligibility rules. ASIC investigates systemic misconduct, while individual disputes are usually handled first by the provider and then by the Australian Financial Complaints Authority (AFCA).
This guide translates ASIC’s 2025–26 enforcement results into practical steps for bank customers, borrowers, super members and investors.
ASIC’s 2025–26 enforcement results at a glance
ASIC’s 20 July 2026 enforcement update reported activity across markets, banking, credit, superannuation and financial services.
| 2025–26 measure | ASIC-reported result |
|---|---|
| Court-ordered civil penalties | $830 million |
| Money to customers and investors | $643.5 million |
| Investigations launched | More than 250 |
| New civil proceedings filed | 32 |
| New criminal prosecutions commenced | 18 |
| Criminal convictions | 25 |
| Custodial sentences | 21 |
| Infringement notices | $12 million |
| Criminal fines | $137,315 |
The $830 million total comprised $350 million in the first half of the financial year and $480 million from January to June 2026. ASIC said the cases included major banks, super trustees, market participants and financial services firms.
Penalties and compensation are different
A civil penalty punishes and deters contraventions. It is ordered by a court and generally paid to the Commonwealth. Compensation or remediation is intended to put eligible customers back into the position they should have occupied, as far as the program and law permit.
Suppose a lender receives a $20 million penalty and separately refunds $8 million in excess interest. The $20 million is not an $20 million customer pool. A person may qualify for the refund only if their account was affected during the relevant period.
Major themes behind the record result
ASIC highlighted conduct involving high-risk investment products, scam response failures, unlawful credit and institutional compliance. Several matters show why consumers must combine regulatory protections with their own records and checks.
Contracts for difference and high-risk trading
Union Standard International Group was ordered to pay a record $300 million penalty for serious misconduct and failures affecting retail clients trading contracts for difference (CFDs).
CFDs are leveraged derivatives. An investor deposits a margin but gains exposure to a larger market position. A 5% movement against a $100,000 exposure is a $5,000 loss even if the investor contributed only a fraction of the exposure as cash.
| Illustrative CFD position | Amount |
|---|---|
| Market exposure | $100,000 |
| Initial margin at 10% | $10,000 |
| Adverse market move | 8% |
| Trading loss before fees | $8,000 |
| Loss as percentage of initial margin | 80% |
Leverage accelerates losses, financing charges can accumulate, and stop-loss orders may execute at worse prices in a fast market. An Australian Financial Services Licence is a regulatory requirement, not a statement that the product is suitable or safe.
Scam protection and unauthorised transactions
The Federal Court ordered HSBC Bank Australia to pay a $35 million penalty following admitted scam-protection failures. ASIC said HSBC had established a remediation program that had paid about $21.5 million, with more payments due by the end of July, and recovered a further $6.5 million for customers.
The case involved unauthorised transactions as defined in the ePayments Code and deficiencies in the bank’s response. It should not be simplified into “banks must refund every scam”. Some scams involve the customer authorising a transfer after deception, creating different legal and factual questions.
Speed remains critical. A consumer should contact the sending bank immediately, ask for a recall or trace, contact the receiving institution if known, report through ReportCyber and preserve messages, receipts, account details and phone numbers.
Unlawful credit practices
Walker Stores, trading as Snaffle, was ordered to pay a $33.5 million penalty for unlawful credit practices that ASIC said overcharged consumers almost $20 million in excess interest.
The lesson extends beyond one provider. “Interest-free”, rent-to-own and buy-now-pay-later-style offers can contain establishment fees, account fees, default costs or a purchase price materially above cash price. Compare the total amount payable in Australian dollars.
| Illustrative appliance offer | Cash purchase | Payment plan |
|---|---|---|
| Advertised item value | $2,400 | $2,400 |
| Establishment fee | $0 | $150 |
| Monthly fees over 24 months | $0 | $480 |
| Total before late fees | $2,400 | $3,030 |
| Premium over cash price | - | $630 or 26.25% |
A zero headline interest rate does not make the effective cost zero.
What ASIC does, and what it does not do
ASIC regulates companies, financial markets, financial services and consumer credit. It licenses and supervises participants, conducts surveillance, investigates suspected breaches and brings civil or criminal proceedings.
ASIC does not usually act as the personal lawyer for an individual complainant. A report can help identify a pattern without producing a direct response or compensation for the reporter.
ASIC, AFCA, ACCC and APRA
| Body | Main role relevant to consumers |
|---|---|
| ASIC | Corporate, markets, financial services and consumer credit regulation |
| AFCA | Free external dispute resolution for eligible individual financial complaints |
| APRA | Prudential safety of banks, insurers and most super funds |
| ACCC | Competition and economy-wide consumer law, with shared responsibilities |
Consumers often lose time by approaching only the wrong body. For a disputed bank transaction, begin with the bank’s internal dispute resolution team. If unresolved, AFCA may be the path to an enforceable individual outcome within its jurisdiction. Report suspected broader misconduct to ASIC as well.
How to pursue an Australian financial complaint
Step 1: Secure the account and evidence
For fraud or identity theft, change compromised passwords, contact the financial institution and consider placing safeguards on credit files. Save statements, contracts, screenshots, emails, text messages and call logs.
Create a chronology with dates, amounts and names. A concise table is often stronger than a long emotional narrative.
| Date | Event | Amount | Evidence |
|---|---|---|---|
| 4 August 2026 | Unrecognised transfer appears | $7,800 | Bank statement |
| 4 August 2026 | Fraud line called at 9:14 am | - | Phone log/reference |
| 5 August 2026 | Written complaint submitted | $7,800 sought | Email receipt |
Step 2: Make a formal internal complaint
Use the word “complaint”, state the outcome sought and request a reference number. Identify the disputed amount, explain the error and attach essential evidence. Avoid sending original identity documents unless a secure channel is confirmed.
Financial firms must meet internal dispute resolution obligations and response timeframes that vary by complaint type. Acknowledgement is not resolution. Keep the final response because AFCA may request it.
Step 3: Escalate to AFCA where eligible
AFCA handles complaints about member financial firms, including many banks, insurers, lenders, advisers and super funds. The service is free to consumers, but monetary limits, time limits and exclusions apply.
Lodging promptly protects options. Do not assume that ongoing phone calls pause a legal limitation period or AFCA deadline.
Step 4: Report systemic misconduct
Report suspected unlicensed activity, misleading financial promotions or repeated institutional failures to ASIC. Scam incidents may also need reports to police or ReportCyber. Investment fraud involving transfers overseas should be reported immediately because recovery becomes less likely over time.
What bank customers should check
Unauthorised versus authorised payments
An unauthorised payment occurs without the customer’s actual authority. An authorised push-payment scam can involve the customer instructing the bank to pay because a criminal impersonated a supplier, bank or investment firm.
The distinction affects analysis, but consumers should not decide the case against themselves. Describe exactly what occurred and ask the bank to address the ePayments Code, contract and its own controls.
What superannuation members should check
Super trustees have legal duties and complaint obligations, but members should review accounts rather than assume errors will always be detected automatically.
At least quarterly, check:
- employer contributions arrived in the correct amount and timing
- insurance premiums and cover remain appropriate
- investment option matches the selection made
- fees correspond with the product disclosure documents
- beneficiary nominations remain current and valid
- contact and identity details have not been changed unexpectedly.
Payday super commenced on 1 July 2026, increasing the importance of matching payslips with fund transactions. Timing differences may occur, but missing amounts should be raised promptly with the employer, fund and ATO where appropriate.
Quantifying a missing contribution
If $2,000 is missing and would otherwise have earned 6% annually for 20 years, its future value is about $6,414 before fees and tax. Delay can therefore cost more than the original contribution.
What Australian investors should check
Verify the provider independently
Search ASIC’s professional registers and the Financial Advisers Register. Confirm licence status, authorised services, business name and disciplinary information. Then contact the firm using independently sourced details rather than a link sent by the promoter.
Clone scams may copy a genuine licence number and website design. A valid number displayed on a fake website proves nothing unless the phone, domain and representatives match official records.
Understand custody and withdrawal
Ask who legally holds client money and assets, where cash is banked, whether investments are registered in your name or through custody, and what withdrawal restrictions apply.
Test withdrawals before increasing a speculative investment. Fraudulent platforms sometimes permit a small early withdrawal to build trust, so one successful transaction is not conclusive.
Treat guaranteed returns as a warning
A promise of 2% every month compounds to approximately 26.8% a year. Consistent high returns with no downside are not normal features of legitimate market investments.
Ask what risk produces the return. If the explanation relies on secret algorithms, pressure, celebrity images or time-limited access, do not transfer funds until independently verified.
How to identify a remediation notice
Institutions may contact eligible customers directly, but criminals imitate remediation programs. Verify a notice through the provider’s official website or number. Do not pay an “administration”, “tax” or “release” fee to receive compensation.
A genuine program should explain:
- the product and affected period
- why remediation is occurring
- how eligibility was determined
- calculation assumptions
- payment method
- complaint and review rights
- tax implications where relevant.
Compare the calculation with statements. If a refund includes interest, ask what rate and dates were used. A $5,000 overcharge held for three years has a different economic effect from one corrected within a week.
Why enforcement matters even if you receive no refund
Penalties can change industry behaviour by making non-compliance expensive, clarifying legal duties and warning competitors. Remediation identifies weaknesses in product governance, complaints, technology and oversight.
However, enforcement is retrospective. A court order in 2026 may concern conduct that began years earlier. Consumers still need preventive controls, diversification and prompt complaints.
A 10-point financial safety checklist
- Search ASIC registers before using an adviser, lender or investment firm.
- Verify domains, phone numbers and bank details independently.
- Read total repayment and fee figures in Australian dollars.
- Use unique passwords and multifactor authentication.
- Enable transaction alerts and review limits.
- Reconcile bank, loan and super statements regularly.
- Put complaints in writing and request a reference.
- Escalate eligible unresolved disputes to AFCA promptly.
- Report scams immediately; do not pay recovery agents upfront.
- Obtain independent advice before leveraged or complex investments.
Turning enforcement lessons into action
ASIC’s record year shows that Australian regulators can secure substantial penalties and customer remediation. It also shows the scale and variety of harm: leveraged trading, scam response, credit costs and institutional failures can each cause significant loss.
The practical response is to verify providers, understand total costs, retain evidence and use the right complaint channel early. For major investment, super or credit decisions, independent professional review can identify risks before money moves. Find a verified Australian financial professional through WealthWorks to review your strategy and help you ask the right questions.
This article provides general information, not legal or financial advice. Seek advice tailored to your circumstances.
Frequently Asked Questions
How much did ASIC secure in Australian civil penalties in 2025–26?
ASIC reported $830 million in court-ordered civil penalties for the year to 30 June 2026. This comprised $350 million in the first half and $480 million from January to June 2026. Court penalties generally go to the Commonwealth and should not be confused with compensation paid directly to affected consumers.
How much money is being returned to Australians following ASIC action in 2025–26?
ASIC reported $643.5 million to be delivered to tens of thousands of customers and investors through remediation, refunds and related payments. Eligibility depends on the facts of each program, so an Australian consumer does not automatically receive part of the total simply because they used the institution involved.
How can an Australian consumer complain about a bank, insurer or super fund in 2026?
First complain through the provider's internal dispute resolution process and keep the complaint reference. If it is not resolved within the applicable timeframe or the response is unsatisfactory, most consumers can take an eligible complaint to the Australian Financial Complaints Authority for free. ASIC receives misconduct reports but does not usually resolve individual compensation disputes.
Are Australian banks required to refund scam losses in 2026?
There is no automatic refund for every scam loss. Liability depends on whether a transaction was unauthorised, the ePayments Code, contract terms, security conduct and the institution's legal obligations. ASIC's HSBC case concerned admitted failures involving unauthorised transactions and delayed customer responses, not a universal reimbursement rule for all authorised push-payment scams.
How can Australian investors check whether a financial adviser is licensed in 2026?
Search ASIC's Financial Advisers Register and professional registers before acting. Confirm the adviser's current status, authorisations and employer, and independently verify contact details. A register entry does not guarantee investment performance, but dealing with an unlicensed person can remove important Australian consumer protections.
