ASIC Misconduct Report Highlights Surge in Scams and Governance Failures

Key Takeaways

• ASIC's latest misconduct data shows retail investor issues, governance failures, and scams—particularly sophisticated pump-and-dump schemes using fake celebrity endorsements—dominating public reports in H1 2026.
• With a record AUD $830 Million in civil penalties secured in 2025-26, the data underscores ASIC's growing reliance on public tip-offs to drive enforcement priorities, making robust internal reporting and scam-detection controls critical for regulated entities.

Deep Dive

This ASIC update signals that public reporting continues to be a primary intelligence source shaping enforcement priorities, with 9,807 reports of misconduct received in the first half of 2026. Over 80% of these reports relate to retail investor issues and governance matters, reaffirming that these remain top-tier risk areas for ASIC scrutiny. Compliance teams at financial institutions should interpret this as a clear signal that governance frameworks, board oversight, and retail client protections will remain focal points for regulatory attention and potential investigation triggers.

A particularly notable trend is the rise of sophisticated scam activity, especially pump-and-dump schemes leveraging fake celebrity endorsements, which accounted for nearly one in five reports. This reflects an evolving threat landscape where social media and fraudulent marketing tactics are increasingly used to manipulate markets and defraud investors. Financial institutions, particularly those offering trading platforms, broking services, or digital marketing channels, should reassess their scam detection, customer warning systems, and fraud monitoring controls to identify and disrupt such schemes early, given ASIC's stated prioritization of scam-related harm.

The report also highlights ASIC's active use of public reports to support surveillance and investigation activity (170 reports directly assisted matters, with 351 linked to broader patterns), and to take action on registered agent breaches, creditor-defeating dispositions, whistleblower victimization allegations, and director ID non-compliance. This demonstrates the breadth of ASIC's enforcement toolkit and reinforces that whistleblower protections and internal reporting channels are not merely procedural requirements but active drivers of regulatory outcomes.

No new rules or deadlines are introduced in this release; rather, it serves as a retrospective data disclosure and a call to action for continued public engagement. However, compliance professionals should treat this as a strong indicator of ASIC's current enforcement lens. Recommended actions include: reviewing governance and whistleblower frameworks for robustness, strengthening scam and market manipulation detection systems (especially around social media-driven schemes), ensuring timely compliance with director ID and company record-keeping obligations, and reinforcing internal escalation protocols to ensure potential misconduct is identified and reported promptly, both internally and to ASIC where required.

The risk implications are significant given the record AUD $830 Million in civil penalties ASIC secured in 2025-26. This signals heightened enforcement intensity and a willingness to pursue large penalties, making proactive risk management and remediation essential to avoid becoming a target of ASIC action stemming from whistleblower or public reports.

Source: Australian Securities and Investments Commission