Mortgage broker compliance in Australia comes down to four pillars: the right licence arrangement; the best interests duty and responsible lending obligations applied to every file; your AML, privacy and record-keeping obligations; and a documented trail proving you met all of them. Get those pillars right and most regulatory risk in a brokerage disappears.
This guide sets out each requirement in practical terms, the two operating routes available to you and the checks that keep a brokerage audit-ready.
Effortlessly navigate compliance with comprehensive trail tracking.
Track My Trail makes it easy for brokers to analyse their lender distribution, identify their most profitable clients, and keep track of lost & gained trail.
Get Track My Trail for free today – no credit card required.
Who can legally give credit assistance
Australian credit regulation sits with the ASIC regime, and anyone providing credit assistance on a consumer home loan must either hold an Australian Credit Licence or act as a credit representative of an ACL holder. Responsible lending obligations apply under either arrangement.
Two operating routes
Holding your own licence gives you autonomy over processes, panel access and business model. The trade-off is that you carry the full compliance load yourself, and the application process demands firm details, controller information, a business plan and evidence that you can manage compliance risks through proper controls.
Operating as a credit representative under a licensee, commonly arranged through a mortgage aggregator, shifts much of that burden to the licensee, which provides training and file review alongside ongoing monitoring. The costs are less independence and sometimes narrower lender panels. Weigh the two routes against your scale and appetite for regulatory administration rather than assuming one suits everyone; many growing firms start under a licensee and move to their own licence later. Note that joining an aggregator is not itself a licence, and comparing mortgage aggregator groups means comparing the licensee behind each one.
The duties that shape every client file
Since January 2021, brokers have owed a best interests duty when providing credit assistance on residential-property-secured credit, guided by ASIC RG 273. That duty sits alongside, and separate from, the responsible lending assessment under RG 209, which tests whether a loan is unsuitable. In practice this means documenting why the recommended product serves the client’s interests, not merely why it passes a suitability screen, and recording the alternatives considered.
Have you checked your trail book for missing trail?
Track My Trail makes it easy for brokers to keep track of lost & gained trail, discover clients who have paid off big chunks of their loans, and identify your most profitable clients.
Get Track My Trail for free today - no credit card required.
Advice must be clear, fair and not misleading, with file notes covering client interactions, the rationale for each recommendation and how the loan matches the client’s requirements and circumstances. Thin files are the most common evidence failure regulators find.
Anti-money laundering obligations
AML/CTF duties attach to businesses that provide a designated service under the Act, so check whether your specific activities trigger them rather than assuming every broker is automatically a reporting entity. Where they do apply, that means customer identification, transaction monitoring, staff training, suspicious-matter reporting and detailed record retention.
Privacy and data handling
The Privacy Act 1988 and the Australian Privacy Principles govern how client personal information is collected, used and stored. Clients must know how their data will be used, and brokerages need data security measures such as access controls and encryption so that client records stay protected against unauthorised access.
Monitoring, reporting and keeping current
Build a review cycle rather than waiting for trouble: sample client files periodically against your documentation standards, confirm licences and registrations remain current, and keep advertising compliant with ASIC’s guidance on promoting financial products, which was reissued in June 2026. Licence holders must notify ASIC of notifiable changes such as ownership or control changes; credit representatives instead keep their licensee informed, because the licensee carries reporting responsibility for your appointments.
Ongoing qualification and continuing professional development requirements also apply, so diarise training and renewal dates at the start of each year rather than discovering lapsed requirements at audit time.
What non-compliance costs
Breaches attract civil penalties, banning orders, licence suspensions and, for serious AML failures, criminal exposure. Beyond formal sanctions, a compliance failure damages referral relationships and client trust in ways that take years to repair. The asymmetry argues for spending modestly on prevention: an annual external compliance review costs far less than responding to a single regulator inquiry.
A working compliance routine
- Confirm every broker’s licence or credit-representative status is current and correctly recorded.
- Sample five settled files this month and check each documents needs analysis, alternatives considered and the best-interests reasoning.
- Verify your AML/CTF position against the designated-service test and refresh staff training where required.
- Review privacy consents, data access controls and your advertising material against current ASIC guidance.
- Diary CPD hours, licence renewals and any ASIC notification deadlines for the year ahead.
Run that list quarterly and compliance stops being an event that happens to you and becomes part of how the business runs. If you do only one thing after reading this, pick the file-sampling step: reviewing real mortgage broker files against the best interests duty finds the gaps that policies alone never show.
