Checklist · Competition & Consumer Law
Scams Prevention Framework compliance checklist for banks, telcos and digital platforms
Readiness checklist for entities in sectors designated under the Scams Prevention Framework (Pt IVF of the Competition and Consumer Act), mapped to the six principles, with the key dates as at 17 October 2026 and the items still waiting on sector codes and rules.
- Kind
- Checklist. Steps or checks to work through and tick off.
- Where it applies
- Australia
- AI use
- Yellow AI can help in set ways. A lawyer checks specific points before use.
- Law stated as at
- 17 October 2026
- Status
- Maintained. Checked on 17 October 2026 against the 3 authorities it cites, for Australia.
- Version
- 1
- Source
- Written for this library
When to use it
Use for clients that provide regulated services in a designated sector (as at 17 October 2026, banking, telecommunications and digital platforms) to plan compliance. Do not use for entities outside a designated sector, or as a substitute for the sector codes and rules once they are made.
How AI may be used
Close supervision. AI is central to scam detection in practice and can help map obligations to controls, but the framework's obligations, codes and rules are still being finalised, and the entity's reasonable-steps judgments and reports to regulators must be owned by people.
AI may
- Map existing policies, controls and systems to the obligations in Pt IVF and flag gaps.
- Draft control descriptions, procedures and metrics for review.
- Help analyse scam reports and transaction data to identify patterns for human investigation.
AI must not
- Must not decide what counts as reasonable steps for the entity.
- Must not be the only basis for blocking customers or disrupting activity without human review and an escalation path.
- Must not send actionable scam intelligence reports to regulators without human approval.
The lawyer checks
- The client's services are within a designated sector and the current designation instrument has been checked.
- The checklist has been updated against the final sector codes and rules when made.
- AFCA membership is in place where required.
- Automated detection and disruption decisions comply with privacy law and allow for customer complaints.
Method: how the Green, Yellow and Red levels are decided. This is guidance for planning, not legal advice.
Official form
Open the official form. Always use the current version from the issuer.
Read the full text
The full text is for signed-in accounts. It is free. When you sign in you can:
- read the whole precedent, with its drafting notes beside it;
- copy it, or download it as a Word file or Markdown;
- add it to your firm’s knowledge base, so colleagues can find it;
- let the AI tools you connect read it from that knowledge base.
The summary, the law it rests on and the AI-use guidance above stay public. Privacy.
More in Competition & Consumer Law
- ACCC acquisition notification under the mandatory merger regime: preparation guide
- Consumer guarantee demand letter (repair, replace, refund or compensation)
- Unfair contract terms review checklist for standard form consumer and small business contracts
- ACCC section 155 notice: response plan, document hold notice and AI-assisted review protocol
- AI-washing and AI-generated advertising claims: substantiation checklist
- Competition law compliance policy for algorithmic and AI pricing tools
All precedents for Competition & Consumer Law · Tasks and AI use in this area