Payment Platform Directed to Appoint External Auditor for AML/CTF Compliance

AUSTRAC News & Media

Filed April 2nd, 2026

Detected April 2nd, 2026

Summary

AUSTRAC has directed MHITS Limited, a payment platform, to appoint an external auditor within 180 days to assess its AML/CTF compliance. The action follows a supervisory campaign that identified deficiencies in transaction monitoring and suspicious matter reporting (SMRs), with particular concern about funds linked to child sexual exploitation flowing through payment platforms. The audit will be conducted at MHITS Limited's expense.

View original document View source feed page

What changed

AUSTRAC has directed MHITS Limited to appoint an external auditor to assess its AML/CTF program compliance. The enforcement action follows a broader payment platforms campaign where AUSTRAC found deficiencies in transaction monitoring programs and failure to report suspicious matters or exit high-risk customers. Reports of suspected child sexual exploitation have increased by 264% across the sector. The auditor must report findings to AUSTRAC within 180 days of appointment.

MHITS Limited must take immediate action to appoint a qualified external auditor whose scope will be determined by AUSTRAC. The company should review its transaction monitoring program to address the full range of risks in cross-border payments. AUSTRAC has placed the entire payment sector on notice to fix serious compliance failures, particularly regarding funds potentially linked to child sexual exploitation. Non-compliance with the audit direction may result in further regulatory action.

What to do next

Appoint a qualified external auditor within the timeframe specified by AUSTRAC
Review and enhance transaction monitoring systems to address cross-border payment risks
Report all suspicious matters promptly and exit high-risk customers displaying warning signs

Source document (simplified)

2 April 2026

AUSTRAC has directed payment platform, MHITS Limited, to appoint an external auditor to assess whether it is meeting its anti-money laundering and counter-terrorism financing (AML/CTF) obligations.

The appointment follows further supervisory work in relation to last year’s payment platforms campaign, where AUSTRAC directed WorldRemit and Airwallex to appoint an auditor and issued letters of concern to four other payment platforms, asking them to address serious deficiencies identified during the campaign.

AUSTRAC also sent a letter putting the entire sector on notice to fix serious compliance failures, particularly when it comes to managing the risks of customers using payment businesses to send funds offshore to purchase child sexual exploitation material.

AUSTRAC Chief Executive Officer, Brendan Thomas, said AUSTRAC expects businesses to be actively managing their AML/CTF obligations.

“Our supervisory campaign found payments that are high risk for child sexual exploitation were flowing through online payment platforms, but many businesses were failing to identify and manage the risks, report SMRs or exit high‑risk customers despite the clear warning signs,” Mr Thomas said.

“Strong risk management and compliance systems and timely reporting of suspicious matters are essential to disrupting criminal activities and that is what we expect to see in this sector."

“As a payment platform that facilitates the transfer of funds to multiple jurisdictions, AUSTRAC is concerned that MHITS Limited transaction monitoring program is not attuned to the full range of risks it faces.”

The auditor must report their findings to AUSTRAC within 180 days of appointment. The scope of the audit is determined by AUSTRAC and will be conducted at MHITS Limited expense.

The outcomes of the audit will assist MHITS Limited to comply with anti-money laundering and counter-terrorism financing obligations and inform AUSTRAC whether any further regulatory action is required.

“I have a simple message for businesses operating in the cross-border payments space: you are on the frontline when it comes to moving funds linked to these horrific crimes, and your actions matter.”

“Don’t wait for us to knock on your door to get your house in order. You must be able to identify and manage these risks – and that may also mean stopping transactions or the customers trying to make them.

“While some business have work do, we’re seeing a marked increase in SMRs across the payment platforms sector.

“In fact, reports of suspected child sexual exploitation have increased by 264%.

“That means people involved in this appalling criminal activity are far more likely to be detected. The likelihood of investigation has increased exponentially.”

View a copy of the notice issued to MHITS Limited.