Australia’s sports betting operator Tabcorp VIC Pty Ltd has been fined AU$350,000 (US$246,243) by the Victorian Gambling and Casino Control Commission (VGCCC) for failing to implement mandatory multi-factor authentication (MFA) controls designed to protect customer wagering accounts.
The regulator found Tabcorp breached four Wagering and Betting Technical Standards between January 30 and June 23, 2025, leaving its wagering and betting system vulnerable because MFA had not been fully implemented on online play.
MFA requires customers to provide more than one form of authentication before accessing their accounts. During the period of non-compliance, some customer accounts were accessed without authorization, with money withdrawn.
