Australia's financial crimes watchdog found 'potentially hundreds of millions of dollars' (at least roughly US$130 million) in suspect home loans, mostly in Sydney, backed by AI forged documents.
AI didn't invent mortgage document fraud. It finished breaking a verification stack that was already brittle, and Australia's largest banks ended up holding the loans that got through.
On 19 August 2026, the Australian Transaction Reports and Analysis Centre, Australia's financial-crimes watchdog, unveiled the results of "Operation Claw", a joint probe run with the Fintel Alliance, a public-private financial-crime unit. The agency pulled transaction data from 10 major banks and identified "potentially hundreds of millions of dollars" in suspected fraudulent home loans (at least roughly US$130 million at current exchange rates), concentrated in Sydney.
The mechanism, according to the ABC, was coordinated and industrial. Brokers and accountants allegedly helped borrowers assemble fake income and employment records that passed standard bank verification. The Sydney Morning Herald called producing these forgeries "frighteningly easy," and noted that the documents now look indistinguishable from the real thing at the resolution lenders actually check.
The scale has to be read carefully. AUSTRAC's "potentially hundreds of millions" measures suspected fraudulent loans identified inside the 10-bank dataset. The Australian Financial Review reported a different, larger number: roughly A$4 billion (approximately US$2.6 billion at current exchange rates) in suspicious home loans referred by AUSTRAC to police and other agencies, involving hundreds of brokers and accountants. That figure includes loans AUSTRAC found suspicious enough to escalate, not adjudicated fraud. The two numbers describe different stages of the same pipeline, and the gap between them is the part the lending system is supposed to police.
Australian mortgage underwriting has long treated the payslip as a trusted artifact. The applicant uploads a PDF; a human or basic automated check looks for obvious tells. There has never been a mandatory, real-time link between lenders, the Australian Taxation Office, payroll providers, or employer systems that could confirm whether a pay figure actually landed in a bank account. Generative AI didn't create that hole. It widened it past the point where the old checks could compensate. A forged document now reads like a real one because the real one was never formally verifiable in the first place.
AUSTRAC's August 2026 update did not find evidence of widespread money laundering, and the agency is not pursuing large anti-money-laundering fines against the banks at this stage. The Mortgage Professional Australia coverage of the AFR story frames the referrals as investigative steps, not adjudications. That distinction matters for borrowers as well as banks: the fraud losses so far sit on individual loan files, not on the broader mortgage book, and any systemic response will run through credit policy and verification standards before it runs through enforcement.
ASIC issued media release 26-092MR the same week, calling for an "urgent cyber uplift" across the financial sector and citing AI's role in accelerating fraud, scam, and hacking risk. The corporate regulator has already shown it is willing to act on home-loan compliance failures: in 2025 it penalised RAMS A$20 million (approximately US$13 million at current exchange rates) for widespread home-loan compliance failures. Operation Claw sits one floor below those enforcement actions, in the verification stack where the next failure will be assembled.
AUSTRAC and the Fintel Alliance can keep finding fraudulent loans inside bank data, and ASIC can keep fining the lenders who miss them. The structural lever is the data layer, not the model layer. A verified-income API connecting lenders, payroll providers, and the tax office would return a pay figure as a fact rather than a PDF. New Zealand's equivalent on the anti-money-laundering side is already in place. Australia's banks have not yet been required to use one.
Watch item: AUSTRAC's next public update on Operation Claw, and whether the government attaches a verified-income mandate to the 2026 financial-sector cyber reforms now moving through Treasury.