Based on the legislative frameworks governing the vocational education and training (VET) sector, breaches of regulatory standards carry severe punishments ranging from financial penalties to imprisonment, alongside operational restrictions such as the cancellation of registration. Below are the specific penalties and restrictions associated with each identified issue.
Too often, providers assume that non-compliance is a matter of receiving a letter from ASQA and being asked to rectify a problem. The reality is far more serious. Recent legislative amendments have expanded ASQA's enforcement powers, increased penalty amounts, and introduced new provisions targeting false and misleading conduct. This article examines the specific penalties, the conduct that triggers them, and the patterns we have observed across the sector. We are not naming individuals or organisations. Our purpose is to ensure that every RTO operator, compliance manager, and governing person understands exactly what is at stake.
Marketing Permanent Residency
When CRICOS providers market unregulated immigration outcomes, they breach the Standards for RTOs 2025, the ESOS Act 2000, and the Migration Act 1958. Under the ESOS Act, punishments include heavy fines, up to two years of imprisonment, and the suspension or cancellation of CRICOS registration, which severely restricts the provider's ability to enrol international students. Furthermore, providing unregistered immigration advice violates Section 280 of the Migration Act, carrying a strict liability penalty of 60 penalty units. At the current Commonwealth penalty unit value of $330 (effective from 7 November 2024), this amounts to $19,800. If a fee or reward is received for this advice, Section 281 imposes a severe punishment of up to 10 years imprisonment.
Under Clause 7(2)(d) of the Compliance Requirements within the Standards for RTOs 2025, an RTO must only represent that completion of a training product will lead to a licensed or regulated outcome where this has been confirmed by the relevant industry regulator. Immigration outcomes are regulated by the Department of Home Affairs, not by any RTO. Clause 8 reinforces this by prohibiting guarantees about outcomes not within the organisation's control.
What We Have Observed
We have observed registered training organisations publishing content with titles such as "Easiest Way to Get PR in Australia" and "Navigating Family Visas for Australia" on their official websites, complete with detailed breakdowns of specific visa subclasses, including Subclass 103, 820, and 801, application requirements, and step-by-step immigration guides. In some cases, migration agents have been collaborating directly with the RTO to provide immigration pathway information to students as a marketing tool to drive enrolments.
Consider what this communicates to a prospective international student. When a CRICOS provider publishes a detailed permanent residency guide on the same website where it advertises its courses, the implicit message is unmistakable: enrol with us, and we will help you get PR. For a vulnerable international student who may have limited English, a limited understanding of Australia's regulatory framework, and a family back home counting on them to build a future here, that message is extraordinarily powerful. And it is extraordinarily dangerous.
Misleading NDIS Course Marketing
Marketing free, unrecognised courses as legitimate qualifications constitutes false and misleading conduct under the Standards for RTOs and the National Vocational Education and Training Regulator (NVETR) Act 2011. Punishments for deceptive marketing include the Australian Skills Quality Authority (ASQA) issuing infringement notices or pursuing significant civil penalties through the Federal Court, which can reach up to $198,000. Restrictions include ASQA applying greater scrutiny to the provider, suspending their scope of training, or swiftly cancelling their RTO registration entirely to deter fraudulent activity.
What We Have Observed
We have observed RTOs publishing guides to "NDIS courses and training" that direct prospective students to free courses on platforms like Coursera and FutureLearn, mixed in with references to the RTO's own paid training products. The NDIS workforce has specific qualification requirements tied to nationally recognised training products under the Australian Qualifications Framework. A student who completes a free online module on disability awareness is not qualified to work as an NDIS support worker in Australia.
When an RTO blurs the line between its own accredited training and free online courses from international platforms that carry no recognition under the AQF, it risks misleading students about what they are getting and what it will qualify them to do. This is not a minor compliance oversight. It is conduct that has real consequences for students who may invest time, money, and hope in qualifications that do not meet industry requirements.
Fabricated Audit Records
Submitting fabricated financial documents or backdated records to ASQA breaches the Fit and Proper Person Requirements (Schedule 1, Clause 5) and the NVETR Act. Recent legislative updates have expanded the offence and civil penalty provisions, significantly increasing the punishments for egregious conduct and fraudulent activity submitted to the Commonwealth regulator. Consequently, ASQA is compelled to reassess the provider, leading to severe restrictions such as the cancellation of the RTO's registration and permanently barring the involved individuals from holding positions of authority within any VET organisation.
What We Have Observed
We are aware of instances, documented in actual audit reports, where bank statements provided to the regulator showed different transactions for overlapping time periods while bearing the same BSB and account number. When the regulator contacted the bank directly, the bank confirmed that two accounts cannot share the same BSB and account number. The conclusion was inescapable: the bank statements could not both be genuine. In the same audit, handwritten invoices and receipts appeared to have been backdated, staff gave inconsistent explanations about fee arrangements and payment timing, and student files showed almost all work was completed using internet articles and blogs rather than genuine training materials.
The regulator concluded that the RTO had not cooperated by providing accurate and truthful information and had supplied false records and inconsistent information. This was not a technical compliance gap. This was the fabrication of evidence submitted to a Commonwealth regulator.
False Regulatory Credentials
Individuals fabricating ties to the national regulator violate the Fit and Proper Person Requirements (Schedule 1, Clauses 6 and 7) by demonstrating a deliberate pattern of unethical behaviour. Punishments for such sector-wide deception include heavy civil fines under the NVETR Act's expanded provisions against false and misleading conduct. As a regulatory restriction, ASQA must reassess and revoke the registration of any RTO employing these individuals in executive roles, effectively terminating their legal capacity to operate within the sector or provide accredited compliance consulting.
Clause 7(1)(d) of the Compliance Requirements further prohibits marketing materials from referring to or implying a connection with another person, which, under the Explanatory Statement, includes government institutions, unless consent has been obtained. Claiming that officers of the national regulator write and validate commercial products implies a connection with ASQA without consent, a direct and ongoing breach.
What We Have Observed
We have documented two interconnected forms of false credentialling sustained across the VET sector for years. First, individuals marketing themselves as "former auditors" of the national regulator on their company's LinkedIn page. These claims underpin the marketing of both a resource business and a compliance consultancy, and form the basis of webinars on ASQA compliance attended by RTOs seeking guidance on meeting the Standards.
Second, organisations have used templated marketing emails asserting that their resources are written and validated by "current and ex" officers of the regulator. This does not merely claim that regulatory officers review the resources. It claims they write and validate the products, implying that the people who conduct regulatory audits of RTOs are simultaneously creating commercial products for sale to those same RTOs. If that were true, it would represent an extraordinary conflict of interest. If it is not true, then it is a calculated fraud on every RTO that has ever purchased products based on that representation.
Intellectual Property Theft and Brand Confusion
Beyond the regulatory breaches outlined above, we have documented extensive instances of proprietary content belonging to established providers appearing in other organisations' products with different branding applied. In some cases, the copying has been so brazen that version numbers, formatting quirks, and even typographical errors from original materials have been reproduced in what are marketed as independently developed resources. This is not a case of two organisations independently arriving at similar solutions. This is wholesale copying of years of original work.
We have also observed organisations that deliberately create brand confusion through similar product names, similar website designs, and marketing language designed to mislead RTO buyers. Staff members of these organisations have been documented telling prospective customers that their products are "the same as" those of an established provider, only cheaper. This conduct potentially breaches the Copyright Act 1968, including moral rights provisions, the Australian Consumer Law under sections 18 and 29 of the Competition and Consumer Act 2010, and may constitute trademark infringement.
This matters to RTOs because when you purchase resources from a provider who has copied their content from another organisation, you are not getting the benefit of independent professional development. You are getting a copy of someone else's work, stripped of its provenance, sold under false pretences, and potentially outdated because the copying organisation does not have the expertise to maintain and update the materials as regulations change. ASQA has begun checking licensing during audits. If your resources cannot be traced to a legitimate licence, you have a compliance problem.
The Fit and Proper Person Test: The Cumulative Picture
When the conduct described in this article is viewed cumulatively, fabricated bank statements, six years of false credentialling, templated marketing falsely claiming regulatory endorsement, immigration marketing by a CRICOS provider, misleading NDIS marketing, systematic IP infringement, and a consistent pattern of deflecting responsibility, every provision of Schedule 1 of the Fit and Proper Person Requirements is engaged.
Clause 1 requires the Regulator to have regard to all relevant matters for maintaining registration. Clause 5 addresses false information provided to a VET Regulator. Clause 6(2) addresses conduct reasonably suggesting a deliberate pattern of unethical behaviour. Clause 7 asks whether the public would have confidence in the person's suitability to be involved in an organisation issuing nationally recognised qualifications.
The Fit and Proper Person Requirements are not a one-off assessment at the point of initial registration. Clause 1 makes clear that they apply continuously for the purposes of maintaining registration. The consequence of failing this test is not a warning letter. It is the cancellation of RTO and CRICOS registration and the barring of individuals from positions of authority across the sector.
Systemic Risk: The Consultancy Multiplier
When this happens, and someone simultaneously operates as an RTO executive, a CRICOS provider CEO, a resource company owner, and a compliance consultant to other RTOs, the risk multiplies across the entire sector. Every RTO that has engaged such a consultant for registration, audit preparation, or compliance documentation may be operating on the basis of work product from someone with a documented history of fabricating records and making false claims about regulatory credentials.
Speed of delivery raises further concerns. When a process typically requiring six weeks of detailed engagement is delivered in two weeks, questions arise about whether the documentation genuinely reflects the RTO's operations. If it does not, the RTO may discover during its next audit that its compliance documentation does not withstand scrutiny, not because the RTO itself acted improperly, but because the consultant it trusted did not.
What the Sector Must Demand
The penalties outlined in this article are not theoretical. They are provisions of active Commonwealth legislation being enforced by regulators with expanded powers. If any of the conduct described resonates with practices you have observed, the time to act is now.
Verify every claim a provider makes about regulatory associations. Confirm the provenance and licensing of your training resources. Review your marketing for any content that could be construed as guaranteeing immigration or employment outcomes. If you have engaged a consultant whose credentials or methods concern you, seek independent compliance advice before your next audit.
The sector must demand accountability from individuals, not just organisations. It must demand verification of claimed credentials. And it must demand protection for international students, who are among the most vulnerable participants in the VET system. When a CRICOS provider markets permanent residency pathways, it is exploiting that vulnerability. The sector and its regulators must draw a clear line.
If you have concerns about any of the matters discussed in this article, contact CAQA at caqa.com or call 1800 266 160.
