AFCA Onboards 114 New Members Ahead of Scams Prevention Framework Rollout

Key Takeaways

• AFCA has added 114 new members—including major telcos and digital platforms—under Australia's Scams Prevention Framework (SPF), ahead of its external dispute resolution scheme for scam complaints commencing 31 March 2027.
• Compliance teams at designated telcos, digital platforms, and banks must ensure AFCA membership is secured and prepare for new multi-party dispute obligations.

Deep Dive

This update signals a significant operational milestone in Australia's regulatory response to scams, formalizing the external dispute resolution (EDR) infrastructure required under the Scams Prevention Framework. AFCA's expanded membership base—now including 95 telecommunications providers and 15 digital platforms such as Apple, Google, Meta, Microsoft, TikTok, and X—reflects the SPF's broadened scope beyond traditional financial services to capture the full ecosystem through which scams typically occur. For compliance teams at banks and financial institutions, this is a reminder that scam risk management is increasingly a shared, cross-sector responsibility, and that complaints may now involve multiple designated organizations spanning banking, telco, and tech sectors simultaneously.

Key requirements introduced include mandatory AFCA membership for all organizations designated under the SPF, with a compliance deadline of 1 September 2026 that has already passed. Organizations not yet registered are being urged to join immediately, indicating potential enforcement or reputational risk for laggards. AFCA has also opened a consultation on new Rules governing multi-party disputes, which will directly shape how scam complaints are investigated, apportioned, and resolved across the designated sectors.

The critical timeline to track is 31 March 2027, when AFCA will begin formally accepting scam complaints from consumers against SPF-designated members. This provides an approximate seven-month runway for institutions to finalize onboarding, refine internal processes for handling multi-party scam disputes, and respond to AFCA's Rules consultation. Financial institutions, many of which already hold AFCA membership, should focus on operational readiness rather than registration, including internal protocols for coordinating with telcos and digital platforms on shared liability scenarios.

Recommended actions include: (1) confirming AFCA membership status for all in-scope entities within an organization's corporate structure; (2) actively participating in the Rules consultation to influence multi-party dispute procedures; (3) reviewing scam-related complaint-handling workflows to anticipate cross-sector coordination requirements; and (4) monitoring for further AFCA guidance as the March 2027 go-live date approaches. The risk implications are notable—failure to prepare could result in reputational damage, regulatory scrutiny, and inefficient handling of complex, multi-party scam complaints once the scheme becomes operational.

Source: Australian Financial Complaints Authority