The Australian Communications and Media Authority (ACMA) sits at the centre of online gambling enforcement in Australia. Its powers under the Interactive Gambling Act 2001 (IGA) have expanded considerably since the 2017 amendments, and the authority has continued to use them actively. For operators, suppliers, and advisers working in the local market, understanding ACMA's enforcement toolkit is no longer optional background knowledge; it is a core compliance obligation.

What ACMA can actually do

ACMA's powers fall broadly into three categories: investigation, remediation, and referral. On the investigation side, the authority can compel the production of documents, interview witnesses, and request records from payment processors, software providers, and platform operators. This makes the regulatory perimeter considerably wider than the licensed operator alone.

On remediation, ACMA can issue formal warnings, remedial directions, and civil penalty notices. Remedial directions can require an operator to stop offering a prohibited service to Australians or to remove app listings from app stores. Civil penalties under the IGA are substantial: bodies corporate face penalties up to $782,500 per day for continuing contraventions, a figure that was updated with the passage of the Interactive Gambling Amendment (Unlicensed Offshore Wagering) Act. For operators testing the compliance boundary, these are not theoretical numbers.

Referral powers allow ACMA to escalate matters to the Australian Federal Police and the Director of Public Prosecutions for criminal action. ACMA can also refer telecommunications carriers and internet service providers to block domain names used by unlicensed offshore services, a power it has exercised repeatedly since the blocking regime came into force.

The website blocking regime

Perhaps the most visible aspect of ACMA's enforcement work is the website blocking program. Under the IGA, ACMA investigates complaints and reports about offshore services, and where a service is found to be providing prohibited interactive gambling to Australians without a local licence, the authority can direct carriage service providers to block access to it.

The list of blocked sites has grown each year since the regime was introduced. ACMA publishes updates to its blocking register, and the numbers reflect consistent enforcement activity. By mid-2026, hundreds of domains associated with unlicensed offshore operators have been added to the block list. The practical effect is meaningful: ISP-level blocks reduce casual access to these services, even if technically sophisticated users can circumvent them.

For licensed Australian operators, the blocking regime matters as a competitive equaliser. Every offshore site blocked is a service that can no longer freely solicit Australian customers without friction. However, the regime also signals to licensed players that ACMA monitors the market closely, which raises the bar for everyone's compliance posture.

Advertising and inducement enforcement

ACMA's remit extends to wagering advertising, though it operates alongside other bodies including the Australian Association of National Advertisers (AANA) and state-based authorities. The IGA prohibits interactive gambling services from advertising to Australians in ways that contravene the act, and ACMA can investigate and take action against operators whose promotional activity crosses the line.

In practice, this intersects heavily with inducement rules. Bonus bet offers, sign-up promotions, and deposit matches have attracted sustained regulatory attention. Operators should note that the advertising compliance landscape has tightened considerably since the wagering advertising restrictions that took effect in 2026, and ACMA's enforcement posture reflects that broader shift. The authority has indicated it will prioritise complaints that relate to advertising directed at children or people who have self-excluded through the national register.

Offshore operators and the enforcement gap

A persistent challenge for ACMA is that its direct enforcement powers are largely limited to entities with an Australian presence. Offshore operators with no local assets, no employees in Australia, and no Australian banking relationships are harder to pursue through civil penalty proceedings. ACMA's practical levers in those cases are website blocking, payment disruption through referrals to financial institutions, and international co-operation with equivalent authorities in other jurisdictions.

The authority has increasingly sought to work through international channels. It maintains relationships with regulators in jurisdictions that licence offshore services targeting Australian customers, and it uses those channels to flag non-compliant operators. For operators licenced in jurisdictions like Malta or Curacao that also serve Australians, the risk of home-jurisdiction regulatory consequences for IGA non-compliance is a growing reality. The Malta Gaming Authority's approach to Australian market compliance is one example of how offshore regulators have started responding to these referrals.

What compliant operators should do

Holding an Australian licence from a state or territory racing authority is the foundation, but it is not the whole answer. ACMA's enforcement priorities in 2026 suggest operators should also focus on the following areas.

• Advertising review processes: Every promotional campaign, including bonus offers and affiliate-driven content, should pass through a compliance review before publication. This includes affiliate partner activity, where the operator can bear liability for non-compliant promotions run on its behalf.
• Self-exclusion verification: Operators must integrate with BetStop, Australia's national self-exclusion register, and ensure that excluded customers cannot receive marketing material or access betting accounts.
• Payment monitoring: ACMA and AUSTRAC co-ordinate on suspicious payment flows. Operators should ensure their transaction monitoring is calibrated to flag patterns associated with unlicensed offshore activity, particularly where third-party payment processors are involved.
• Record-keeping: ACMA's investigation powers include document production requests. Operators without organised compliance records face compounding risk when an investigation begins.

The direction of travel

ACMA's enforcement posture in 2026 reflects a regulator that has matured its toolkit and is now using it with greater consistency. The authority publishes enforcement outcomes, which has a deterrent effect. It also consults publicly on proposed regulatory changes, giving operators a window to engage before new obligations are finalised.

For operators that take compliance seriously, engagement with ACMA's consultation processes is worth the time. The authority has shown it is willing to accept industry input on implementation detail, even when the broad policy direction is set by government. Operators who contribute constructively tend to be better positioned when final obligations are published, because they have already built the internal processes to meet them.

The core message from ACMA's recent enforcement activity is straightforward: the authority has the tools, the will, and an expanding international network to act against non-compliant operators. Treating the IGA as a compliance ceiling rather than a compliance floor is the surest way to avoid becoming a published enforcement outcome.