The Star Entertainment money laundering fine, in plain figures

The Federal Court of Australia ordered The Star Entertainment Group to pay A$260 million (around US$183 million) for breaching Australia’s anti-money laundering and counter-terrorism financing laws. Justice Cameron Moore handed down the decision on Wednesday 28 October, closing civil penalty proceedings that AUSTRAC, the country’s financial intelligence agency, had filed back in November 2022.

Moore’s reasoning was blunter than the number. “A significant part of Star’s business was dependent upon turning a blind eye to customers who presented a high money laundering or terrorism-financing risk,” he found. He also named the reason this keeps happening: “Casinos stand to benefit handsomely if the inflow of money, including cash, from domestic and overseas sources, can occur with limited friction and limited scrutiny.”

AUSTRAC had asked the court for A$400 million. Star argued for A$100 million. The A$260 million outcome sits between the two, and well below the A$1.3 billion in gross gaming revenue the company conceded it had generated from high-risk customers between November 2016 and November 2022.

What Star actually got wrong

The court found Star let high-risk customers gamble without properly establishing where their money came from, and put profit ahead of compliance at scale. AUSTRAC chief executive Brendan Thomas put it directly: “The Court found The Star did not simply fail to complete the right checks.”

That last line is the part worth sitting with, because it corrects the way most people read a penalty like this. The popular reading is that a compliance department got sloppy, missed some paperwork, and the fine is the invoice for bad admin. The finding was heavier. Star’s own concession, that more than A$1.3 billion of gross gaming revenue over six years came from customers its systems had flagged as high risk, describes a commercial dependency, not a clerical gap. Programs can exist on paper and still fail if the people who benefit from the money decide the escalation never leaves the room.

The cost of believing the softer version is that compliance teams keep buying tools and writing policies while the actual failure point, the incentive to not look, goes untouched. Star had already been through state inquiries in New South Wales and Queensland in 2021 and a A$200 million fine in 2022 over the same conduct. The documented problems were known for years before this judgment.

Who AUSTRAC is, and where its power comes from

AUSTRAC is Australia’s AML/CTF regulator and financial intelligence unit, and it supervises casinos as “reporting entities” under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006. Its powers run from enforceable undertakings and remedial directions through to civil penalty proceedings in the Federal Court, which is the route it took here.

Two features of that model matter for anyone benchmarking gaming regulator fines against it. First, AUSTRAC does not set the number; it applies to a court, which then forms its own view, as the gap between the A$400 million sought and the A$260 million ordered shows. Second, these are civil proceedings on contraventions of statutory obligations, not criminal convictions for laundering money. The finding is that the operator failed to meet its duties and profited from that failure. AUSTRAC’s media release on the judgment sets out its position in full.

Is this the largest casino AML penalty on record?

No, and the “record” framing attached to it should be treated carefully. In 2023 the same Federal Court ordered Crown Resorts to pay A$450 million over AML/CTF failures at its Melbourne and Perth casinos, which leaves Star’s A$260 million as the second-largest penalty of its type in Australia. It is, however, comfortably larger than the A$200 million Star paid in 2022 following the state inquiries, and it is the largest penalty AUSTRAC has secured against this particular operator.

There is a more useful comparison than the league table anyway. Measured against the A$1.3 billion Star accepted it earned from high-risk patrons, A$260 million is roughly a fifth of the revenue the conduct produced. Whether a penalty set at that ratio changes behaviour, or simply gets priced in, is the open question in casino financial crime enforcement right now.

What casino AML compliance actually requires

Licensed casinos in AML-regulated jurisdictions must identify their customers, understand the risk each one presents, monitor what they do with their money on an ongoing basis, and report prescribed and suspicious activity to the regulator inside fixed deadlines. The specifics vary by country; the four pillars do not.

Customer due diligence and KYC

Know-your-customer checks establish who the patron is before they are allowed to transact: verified identity documents, and for corporate or trust structures, beneficial ownership down to the real controlling person. Enhanced due diligence applies to politically exposed persons, patrons from high-risk jurisdictions, and anyone the operator’s own risk model scores as elevated. Source-of-funds and source-of-wealth verification is not a document-collection exercise. It requires the operator to form and record a view that the money is plausibly legitimate, and to stop dealing when it cannot.

Transaction monitoring and reporting thresholds

Monitoring has two layers. Threshold reporting is mechanical: in Australia, cash transactions of A$10,000 or more trigger a threshold transaction report, and international funds transfer instructions are separately reportable. Suspicious matter reports are judgement-based and time-bound, due within three business days of forming a suspicion, or within 24 hours where the suspicion relates to terrorism financing. Automated systems should also catch structuring, chip-walking, rapid buy-in and cash-out with minimal play, and patterns that do not match the customer profile on file.

High-roller and junket patron risk

This is where the standard playbook most often breaks. The highest-value patrons are the ones whose business a venue least wants to question, frequently arrive through intermediaries such as junket operators, and often move funds through opaque channels. A junket relationship does not transfer the due diligence obligation to the junket. The casino still has to know the ultimate patron, the source of their funds, and who else is behind the arrangement. Moore’s finding on financial incentive describes exactly this pressure point.

Why terrorism financing sits alongside money laundering

Terrorism financing is treated as a separate obligation because the money flows in the opposite direction and in much smaller amounts. Money laundering takes criminal proceeds and makes them look clean; terrorism financing can take legitimate funds and move them toward an illegitimate purpose. Value thresholds designed to catch laundering will not reliably catch it.

Cash-intensive gaming venues are flagged for both because they offer what the court described as limited friction: anonymous or lightly identified cash entry, instant conversion into chips or credits, cross-border patron flows, and a settled commercial habit of not asking awkward questions of good customers. In Star’s case the judgment went further than abstract exposure, referring to organised crime operations suspected of funding terrorist networks. That is why counter-terrorism financing obligations sit in the same statute as AML, and why the reporting clock for a terrorism financing suspicion is 24 hours rather than three days.

Why operators outside Australia should read this as a warning

Because the pattern it represents, not the jurisdiction, is what has changed. Over the past several years regulators in multiple licensed markets have moved from remediation notices and modest fines toward court-tested penalties in the hundreds of millions, licence conditions with independent monitors attached, and scrutiny of whether boards and senior managers knew. Casino licensing enforcement now routinely runs in parallel with AML action: Star faced state inquiries in New South Wales and Queensland that put its licences in question, and the practical consequence of an AML breach can be suspension, conditional licensing under a court-appointed or regulator-appointed manager, or forced divestment, not only a cash penalty.

Star is the demonstration. The company was restructured and is now controlled by Bally’s Corporation, and chairman Soo Kim told shareholders at the annual general meeting on 27 October that it has embraced the anti-money laundering, know-your-customer and safer gambling standards set by the New South Wales and Queensland regulators, which he described as the highest in the industry. Kim also said all three casinos are now EBITDA-positive and “cash is now building.” Note what that sequence cost: a A$200 million state fine, a A$260 million court penalty, years of inquiry, and loss of independent control of the company.

Controls that would have caught this

None of these are novel. All of them were available to Star throughout the period the court examined.

  • Independent AML audits commissioned by the board, not by the business unit being reviewed, with findings reported to directors unfiltered.
  • Automated transaction monitoring tuned to patron behaviour and reviewed for false negatives, not only for alert volume.
  • Documented source-of-funds verification for every high-value patron, with authority to refuse play when it cannot be established.
  • Escalation paths that cannot be overridden by commercial or VIP-hosting staff, with every override logged and reviewed.
  • Reporting discipline measured against the statutory clock, with timeliness tracked as a reported metric.
  • Direct due diligence on junket and intermediary-introduced patrons, including beneficial ownership, never delegated to the intermediary.

What this judgment has not settled is whether penalties set at a fraction of the revenue they punish actually change the incentive Moore identified. Star’s current owners say the business is now fully compliant. That is a corporate assertion, not a regulatory finding, and the next phase of enforcement, in Australia and elsewhere, will likely turn on whether regulators start pursuing the individuals who made the commercial calls rather than only the companies that banked them.