Victoria Regulator Fines Tabcorp A$350k Over Security Failures

Tabcorp has been fined A$350,000 in Victoria after the state regulator found the company failed to put in place mandatory multi‑factor authentication (MFA) controls on customer wagering accounts.

Read more NCPG Clarify Stance on Prediction Markets After Board Resignations

The Victorian Gambling and Casino Control Commission (VGCCC) said Tabcorp did not comply with four technical standards between January and June 2025, leaving its betting system exposed. During that period, some accounts were accessed without permission and money was withdrawn. 

VGCCC Chair Chris O’Neill explained that Tabcorp had not met the standards expected of a licence holder. 

“We expect strong systems to prevent breaches and protect customers. If breaches occur it is our expectation that licensees identify and resolve them quickly and address their underlying cause,” he said. 

Tabcorp later confirmed that MFA was fully rolled out in June 2025, with customers required to upgrade to a new version of the TAB app. 

Regulator’s warning and past penalties

O’Neill stressed that the fine was meant to underline the importance of compliance. “Customer‑protection requirements are necessary to safeguard Victorian customers and maintain confidence in regulated wagering products and services. This penalty reinforces to all gambling providers that they must fully implement and maintain those protections,” he said. 

Read more AFL

The VGCCC has previously taken strong action against Tabcorp, including a A$4.6 million fine in 2024, and has directed the operator to strengthen its compliance systems and harm‑minimisation programs. 

The penalty in Victoria adds to what has already been a turbulent year for Tabcorp. In July, the Australian Communications and Media Authority (ACMA) fined the company A$2.7 million for breaching telemarketing rules after sending thousands of marketing messages that did not meet spam law requirements. 

Weeks later, in August, Tabcorp and Sportsbet were forced to deny claims that they had arranged drugs and sex workers for VIP clients.

This also comes to as Tabcorp moves to acquire BetMakers Technology Group in a deal worth about A$283 million, marking one of its biggest steps yet in modernising its wagering technology.

Read more NRL