Analytics

A cashback promotion can run beautifully for eight weeks — sharp creative, strong entry numbers, a microsite that holds up under load — and still leave a trail of irritated customers. The reason is almost always the same. The money took too long to arrive, or it didn’t arrive at all. Fulfilment is the part of a promotion the customer actually feels, and it’s the part most likely to be treated as an afterthought.

Promotional fulfilment is the delivery side of a promotion: validating claims, selecting winners, paying out cashbacks and prizes, and keeping the compliance records that sit behind all of it. In Australia that usually means PayID or Osko transfers, EFT, eGift cards, vouchers and pre-paid cards for cash-style rewards, and physical dispatch or travel coordination for the bigger prize draws. Trevor Services runs this layer on a Salesforce-native platform for brands including Electrolux, Vinarchy, Jacob’s Creek and Boss Coffee — taking a campaign from the moment a customer enters to the moment the reward lands in their account.

What is promotional fulfilment?

Promotional fulfilment is everything that happens after a customer enters a promotion: claim validation, winner selection, prize or cashback payout, and the compliance documentation that proves it was all done properly. It is the operational half of a campaign — the half the customer judges you on. Entry collection gets the attention because it is visible. Fulfilment is where the promise either gets kept or quietly broken.

Where fulfilment quietly goes wrong

The most common failure isn’t dramatic. It’s a gap between winning and being paid. The Shelf Truth calls it the Insult Threshold: if claiming a reward costs more effort than the reward is worth, you have insulted the customer. Waiting works the same way. A $10 cashback that takes six weeks to land stops feeling like a reward and starts feeling like a chore you regret starting.

Most of the rest comes down to manual process. When claims live in one spreadsheet, payments run from another, and winner records sit in a third, reconciliation breaks down. Someone gets paid twice, someone gets missed, and nobody can answer a simple question like “how much of the prize budget have we actually paid out this week?” without an afternoon of cross-checking.

Then there is slippage — the share of customers who never get around to claiming. Slippage is real, and it is part of why cashbacks cost less than an equivalent discount: not everyone redeems. But it only works in your favour if you are tracking it honestly and handling unclaimed prizes the way the rules require, rather than letting it become a mess you discover at the end.

Fraud shows up at the payout point too. Recycled receipts, duplicate bank details, one person entering forty times under slightly different names. If the controls only exist at entry and not at payment, the money still walks out the door.

How does prize and cashback payout work in Australia?

For cash-style rewards, the fastest route is PayID or Osko, which can move money to a winner in close to real time. EFT is slower and needs bank details, which adds friction and a point of failure. Digital gift cards sit in between — issued by SMS or email, no logistics, redeemable quickly — which is why so much cashback now runs through them.

Physical prizes and travel are their own discipline. A major prize draw might promise a trip, a vehicle or a high-value appliance, and the winner experience there is mostly logistics: confirming eligibility, collecting the right details, coordinating delivery or booking, and documenting that the prize was actually received. It is slower by nature, but it should never be silent — the fastest way to sour a major win is to go quiet on the winner for three weeks while things happen behind the scenes.

The payout method is the easy part. The compliance layer around it is where promotions get caught out. Trade promotion rules are set state by state, and the thresholds matter. In New South Wales, an authority is required once total prize value exceeds $10,000, and Fair Trading has to be notified at least ten business days before each promotion run under it. The ACT exempts promotions up to $3,000, and South Australia licenses anything over $5,000 through Consumer and Business Services. Winner notification, prize records and unclaimed-prize handling all have to hold up if a regulator asks. We have written a fuller state-by-state permit guide if you want the detail.

This is where running fulfilment on one platform earns its place. When every claim, payment, winner record and permit reference lives in the same system, the compliance question stops being a scramble. Trevor Services built on Salesforce for exactly this reason — the campaign dashboard and the audit trail are the same thing.

What to look for in a fulfilment partner

A few things separate a partner who runs fulfilment properly from one who treats it as dispatch. The first is real-time reconciliation: you should be able to see, at any moment, how many claims have been validated, how much has been paid and what is outstanding — not a weekly export. The second is fraud control built into the flow rather than bolted on: OCR receipt validation, velocity and duplicate checks that catch the obvious abuse before it gets paid.

The third is payout breadth. A partner who can only do EFT will push you toward EFT even when an instant PayID payment would serve the customer better. The fourth is compliance handled rather than handed back to you — permits, winner documentation and unclaimed-prize rules are part of the job, not your homework after the fact. Trudy, Trevor’s promotional intelligence platform, draws on thousands of past campaigns to flag where a mechanic or prize structure is likely to create fulfilment headaches before launch, which is usually cheaper than discovering them mid-campaign.

In the campaigns we run — across appliances, liquor and FMCG — the pattern is consistent: the promotions that go smoothly are the ones where fulfilment was designed in from the start, not added once entries were already flowing. None of it is glamorous, and it rarely makes the case study. But it is the part of the promotion that decides whether a customer finishes the experience thinking the brand is good for its word, and that is worth getting right. If you are rethinking how your promotions get paid out, we are happy to talk it through.

The entry forms are closed, the draw is done, and somewhere a customer has just found out they’ve won. For most of the campaign, the brand has been in control of the experience. From this point on, the customer is. Whether they walk away telling people about it or quietly deciding never to enter another one of your promotions comes down to something that rarely gets planned with the same care as the creative: how, and how quickly, they actually get paid.

Prize fulfilment is the part of a promotion that happens after the interesting bit is over, which is exactly why it gets underinvested. A brief will run to pages on the mechanic and the prize pool and then treat “we’ll pay the winners” as a single line, as if it were a formality. It isn’t. It’s the one moment the whole thing is judged on, and it’s where a well-designed campaign either lands or leaks.

What is prize fulfilment?

Prize fulfilment is the process of getting the reward to the person who won it — verifying the winner is eligible, collecting the details needed to pay them, disbursing the prize through the right channel, and keeping the records that prove it was done properly. It covers cash payouts, gift cards, vouchers, and physical goods, and it sits alongside the compliance obligations that come with awarding prizes in Australia.

That definition sounds tidy on paper. In practice, fulfilment is where a promotion meets the messy reality of bank details that don’t match, winners who’ve changed email addresses, prizes that go unclaimed, and state rules that dictate what you’re allowed to do next. It’s operational work, and the campaigns that handle it well tend to be the ones that treated it as real work from the start.

How do promotion winners actually get paid?

There’s no single answer, and the channel you choose shapes how the win feels. A cash prize can be paid in a few different ways, and the gap between the fastest and slowest is enormous.

At one end, real-time payments have changed what “instant” means. Payments made through Osko on the New Payments Platform settle in around 15 to 30 seconds, any time of day, using nothing more than the winner’s PayID or account details. For an instant-win mechanic, that closes the loop while the customer is still holding their phone — they win, they enter a PayID, the money lands. The dopamine hit the promotion was designed to create doesn’t get diluted by a two-week wait.

At the other end sits the traditional cashback, still usually paid by EFT or BPAY in a batch after the redemption window closes. In campaigns we run, it’s common for a cashback to tell customers to allow up to eight weeks for payment after the claim period ends — not because the money isn’t ready, but because claims are validated, checked for fraud, and paid in cycles. That’s a legitimate model, but it’s a different promise, and the terms have to be honest about it. The fastest way to sour a good cashback is to imply speed you can’t deliver.

Between those two you’ve got eGift cards and digital vouchers, which are quick to issue and easy to track, and physical prizes, which bring their own logistics — dispatch, delivery, and the awkward reality that a major prize sometimes needs a signature and a courier, not an email. The point isn’t that one channel is better. It’s that the payout method is a design decision with a customer-experience consequence, and it should be chosen deliberately rather than defaulted into.

The compliance layer most briefs skip

Paying the winner is only half of fulfilment. The other half is proving you did it correctly, and Australian promotions carry obligations that don’t disappear just because the draw went smoothly.

The permit thresholds are the part people know about. In New South Wales, a trade promotion needs an authority once the total prize value exceeds $10,000. In the ACT, the threshold is a $3,000 total prize pool. In South Australia, a licence is needed once the prize pool reaches $5,001, and any draw where the total prize value is $30,000 or more has to be scrutinised by an independent party. If you’re running nationally, you’re running to the strictest of these, not the most convenient. We covered the full picture in our state-by-state guide to promotional permits.

The part that catches people out is what happens when a prize goes unclaimed. You can’t just keep it. NSW’s rules say the operator must make every reasonable effort to contact the winner, and where the promotion’s own terms don’t set a timeframe, the prize has to be held for at least three months before a new winner can be drawn. That’s why the redraw provisions in your terms and conditions aren’t boilerplate — they’re the thing that tells you, and the regulator, exactly what to do when someone wins and then vanishes. It’s worth writing them before the campaign runs, not scrambling for them after. Getting the terms and conditions right upstream is what makes fulfilment clean downstream.

None of this is exotic. It’s just the operational reality that a compliant promotion has a paper trail — who won, how they were verified, when they were paid, and what happened to anything unclaimed. On a Salesforce-native platform like the one Trevor Services runs, that trail is a by-product of the process rather than a spreadsheet someone has to reconstruct in a hurry when a client asks.

Where fulfilment quietly goes wrong

The failures are rarely dramatic. They’re small, and they compound. A winner-notification email lands in spam and the prize sits unclaimed. A bank detail is entered with a transposed digit and the payment bounces without anyone noticing for a fortnight. A physical prize is dispatched to an address that’s three months out of date. Individually, each is a minor operational hiccup. Collectively, they’re the difference between a winner who posts about their prize and one who tells a call centre they’ve been waiting a month.

This is where the same thinking that shapes the front of a promotion applies to the back of it. The Shelf Truth talks about the insult threshold — the point at which the effort of claiming a reward outweighs the reward itself. A slow, confusing, or error-prone payout is that same insult arriving after the customer has already won, which is arguably worse. They did their part. The friction they hit now is entirely yours.

Predictive tools help here too. Trudy, our promotional intelligence platform, draws on patterns across thousands of past campaigns, and one of the more useful things it surfaces is realistic expectations for claim rates and timing — so the fulfilment plan is built for the volume you’ll actually see, not the volume the optimistic version of the brief assumed.

How long should it take to pay a winner?

As fast as the mechanic promised and no slower. An instant win that takes a week isn’t an instant win. A cashback that quotes eight weeks and pays in six is keeping its word; one that quotes two weeks and pays in five has broken it. The number itself matters less than the honesty of it — customers will accept a wait they were told about and resent one they weren’t. Set the expectation in the terms, then beat it if you can.

The broader point is that fulfilment deserves to be designed, not assumed. The channel, the timing, the verification, the unclaimed-prize path, and the records all sit downstream of decisions that are easiest to make before the campaign launches. Leave them to the end and you’re improvising at the exact moment the customer is paying closest attention.

If you’re planning a promotion and the payout side still reads as a single line in the brief, that’s usually the sign it’s worth pressure-testing. We’re happy to talk it through — it’s the part of the job we spend most of our time on.

The terms and conditions are usually the last thing written and the first thing that causes a problem. Creative is signed off, the microsite is built, the media is booked, and then someone realises the T&Cs need to be live before entries open. So they get pulled together in an afternoon, copied from the last campaign, and dropped into a link at the bottom of the entry form. Most of the time that’s fine. When it isn’t, it’s expensive, and the fix always lands after the promotion has started.

Terms and conditions aren’t the glamorous part of a promotion, but they’re the part that decides what happens when something goes wrong: a disputed winner, a prize that can’t be delivered, a regulator asking a question, a customer who read the offer differently to how you meant it. Getting them right isn’t about legal cover for its own sake. It’s about making sure the promotion you designed is the promotion you’re actually allowed to run.

What must promotion terms and conditions include in Australia?

At a minimum, promotion terms and conditions in Australia must identify the promoter, state who is eligible to enter and who is excluded, set the start and end dates and times, explain exactly how to enter, describe the prizes and their total value, and set out how and when winners are drawn, notified, and published. For games of chance above the relevant state thresholds, they must also carry the trade promotion permit numbers. These aren’t optional extras — they’re the clauses a regulator or a disgruntled entrant will look for first.

The detail underneath each of those is where campaigns come unstuck. “Who is eligible” sounds simple until you have to decide whether employees of the client’s distributors count, whether entrants need to be residents or just physically in Australia, and what the minimum age is for a prize that includes alcohol or travel. “How to enter” has to match the mechanic precisely — if the microsite lets someone enter twice but the terms say one entry per person, the terms are wrong, not the site. The receipt validation rules and any purchase requirement need to be spelled out in the same language the entry form uses. Small mismatches between what the terms say and what the platform does are the most common source of avoidable disputes we see.

The permit clauses that trip up national campaigns

Australia doesn’t have one set of promotion rules. It has eight, and a national campaign has to satisfy all of them at once. Most states have moved away from individual permits, but the ones that still require them are the ones that catch people out.

In New South Wales, an authority to conduct a trade promotion lottery is required once the total prize value exceeds $10,000, and that authority is granted for a period of one, three, or five years rather than per campaign. In the Australian Capital Territory, a permit is needed once the prize pool goes over $3,000. In South Australia, the threshold is $5,000 — and an instant win element requires a permit regardless of prize value. Queensland, Victoria, Western Australia and Tasmania don’t run permit systems for trade promotions.

The practical consequence is that your terms and conditions have to be written for the strictest applicable jurisdiction, not the easiest. If your prize pool clears the ACT and SA thresholds, the permit numbers for those jurisdictions have to appear in the terms, and a copy of the terms usually has to accompany the permit application itself — which means the terms need to be finalised before you apply, not after. This is the sequencing that derails launch dates: brands treat the permit as a formality to sort out later, then discover the regulator wants the finished terms weeks before entries were meant to open. If you’re unsure which thresholds apply, our state-by-state permit guide walks through each one.

Do promotion terms and conditions need to show a permit number?

Yes — where a permit or authority is required, the permit number must be publicly displayed, and the accepted place for it is the terms and conditions and the promotional advertising. If your promotion crosses the NSW, ACT or SA thresholds, leaving the number off the terms isn’t a formatting oversight; it’s running a regulated promotion without meeting the condition of the permit. The terms also generally have to be available at the point of entry, so an entrant can read them before they commit, not buried three clicks away after they’ve handed over their details.

Where terms and conditions actually get tested

Permits get the attention because they’re a hard requirement with a form to fill in. But the clause most likely to cause you grief isn’t a permit — it’s the gap between what the promotion promised and what the entrant thought it promised. That’s Australian Consumer Law territory, and it applies to every promotion in the country regardless of prize value or state.

The test the ACCC applies is the overall impression, not the fine print. If the headline says “win a car” and the terms quietly reveal it’s a two-year lease with conditions, the terms don’t rescue the headline — the misleading impression has already been created. Fine print can clarify an offer, but it can’t contradict it. This is where good terms earn their keep: they’re not there to walk back the promise, they’re there to make the promise precise enough that nobody can reasonably read it two ways. A well-drafted set of terms describes the actual prize, the actual odds context, and the actual conditions in plain language, so the advertised offer and the delivered offer are the same thing.

The other place terms get tested is at the finish line, when a winner can’t be contacted or a prize can’t be delivered as described. Your terms need to say what happens to an unclaimed prize, how long you’ll try to reach a winner, whether there’s a redraw, and what happens if a prize becomes unavailable and has to be substituted. These clauses feel remote when you’re writing them and very immediate when a major prize is sitting unclaimed. Deciding the rule in advance — in writing — is a great deal easier than improvising it under pressure with a regulator’s thresholds in mind.

What happens if promotion terms and conditions are misleading?

If terms and conditions are misleading or contradict the advertised offer, the promotion can breach the Australian Consumer Law, and the ACCC can pursue penalties for conduct that is misleading, deceptive or unconscionable. Beyond the legal exposure, a promotion that has to be corrected or pulled mid-flight does real damage to the brand running it — the fix is always public, and it always lands after entrants have already formed an impression. The cost of getting the terms right is a few hours of care up front; the cost of getting them wrong is paid in front of an audience.

Getting the terms to match the promotion

The through-line in all of this is that terms and conditions are a description of the campaign you actually built, checked against the rules that actually apply. They’re not boilerplate, and last year’s terms with the dates changed will quietly carry last year’s mistakes into this year’s campaign. The most reliable way to keep them honest is to write them alongside the mechanic rather than after it — so the entry rules, the permit thresholds, the prize description, and the winner process all agree with each other before anything goes live.

At Trevor Services this is part of how we set a campaign up rather than a step at the end: because the promotion runs on our platform, the terms can be checked against what the entry form and fulfilment process actually do, not what everyone assumes they do. It’s the least visible part of a promotion and one of the few parts that can stop the whole thing. If you’re pulling a campaign together and want the terms pressure-tested before they go live, we’re happy to talk it through.

Every cashback campaign carries a quiet risk: that some of the money you set aside to reward real buyers ends up paying people who never bought anything. It rarely announces itself. The dashboard looks healthy, entries are climbing, and then the redemption rate creeps past what the budget assumed. By the time anyone asks why, the payouts have already gone out.

Promotional fraud is the part of campaign delivery that most plans skip until it bites. It is also one of the few areas where good execution shows up directly on the bottom line. At Trevor Services we build and run promotions for Australian brands, and the controls that keep fraud out are the same ones that keep a campaign’s results honest. Here is how we think about it.

What does promotional fraud actually look like?

Promotional fraud is any attempt to claim a reward without meeting the genuine conditions of a promotion. It splits into two rough camps, and they need different defences.

Most of what you will see is opportunistic. A shopper submits the same receipt twice under two email addresses. Someone photographs a friend’s receipt. A claimant edits the date or product name on an image to squeeze past the eligibility window. This is low-effort, high-volume, and usually solvable with good validation rules.

The other camp is organised, and it has become more capable. In a recent piece for Retail TouchPoints, Opia’s head of fraud described how groups now cycle through multiple identities, exploit loopholes in qualification rules, and time high-volume claim runs to short promotional windows where monitoring is weakest. The newer wrinkle is generative AI: bots that auto-fill claim forms with rotating identities, synthetic names and addresses that look real, and AI-generated receipts that pass a visual check but fail at the metadata or font-rendering layer. None of this requires much technical skill any more, which is exactly why it is spreading.

The uncomfortable part, as that article notes, is that most promotional vendors process claims but do not actively defend against fraud. Claims handling and fraud defence are different jobs, and assuming the first covers the second is how budgets quietly leak.

The controls that actually matter

Fraud defence is not one feature. It is a series of checks layered across the life of an entry, and each layer catches something the others miss.

It starts at entry. Unique single-use codes stop a code being shared and reused. Where a purchase has to be proven, receipt validation does the work: optical character recognition reads the retailer, date, products and spend off the image, then checks them against the promotion’s rules before anything is approved. On the campaigns Trevor runs, this is configured per promotion — which SKUs qualify, which dates count, whether a receipt is required at all, whether a code is needed. Getting those rules right at setup removes a large share of opportunistic claims before they ever reach a human.

The next layer is about pattern, not paperwork. A receipt can look perfect and still be the fiftieth one submitted from the same device. This is where velocity and behavioural signals matter — entry limits per person, daily caps, device and IP checks, and duplicate detection that hashes each receipt image and compares it against everything already processed. Snipp, another platform in this space, describes the same architecture: image-integrity analysis for signs of manipulation, cross-campaign duplicate hashing, and device and address clustering to surface organised submission patterns that individual images would never reveal. A claim that looks legitimate on its own often looks very different next to the hundred others sharing its fingerprint.

The last layer is the one people forget: the winner. Before a major prize or a large cashback is paid, it is worth verifying the claimant properly — confirming the purchase, the identity, and that the entry behaved like a real one. The cost of a failed check here is not just the prize. It is the compliance exposure if a fraudulent winner is announced publicly, and the cost of clawing back a payout that has already cleared.

How do you stop fraud without punishing real customers?

This is the question that actually decides whether a fraud strategy works, because the lazy answer — add more checks — quietly kills the promotion. Every extra step you ask of an entrant costs you genuine entries. In The Shelf Truth we call this friction as a cost, and it compounds: each additional form field or verification hurdle shaves entries off the top, and the people you lose are disproportionately the honest, casual participants you actually wanted.

The way through is to treat fraud risk as a score rather than a gate. Most submissions are low-risk and should sail through to approval with no extra friction at all. Only the entries that trip a threshold — unusual velocity, a duplicated image hash, a device already linked to dozens of claims — get routed to closer review. Done well, the vast majority of your real customers never notice a thing, and your review effort concentrates where the risk genuinely sits. This is also where predictive tools earn their place: Trudy, Trevor’s promotional intelligence platform, draws on patterns across thousands of past campaigns to help anticipate where a given mechanic is likely to attract abuse, so the controls can be set before launch rather than bolted on after the first bad week.

Why fraud belongs in the Promo P&L

There is a measurement reason to take this seriously that goes beyond the payouts themselves. Fraud does not just cost money — it distorts what you think happened. Inflated entry numbers make a campaign look more successful than it was. If those numbers feed your next budget, your next plan, or your case to the category manager for shelf space, you are building on figures that include claims that were never real. The integrity of the result is part of the result.

That is the honest case for getting fraud controls right: not fear, but accuracy. A promotion you can trust the numbers on is one you can actually learn from. Across the cashback, instant win and prize draw campaigns Trevor Services delivers, the brands that treat fraud defence as part of the setup — not a clean-up job — are the ones whose post-campaign reports hold up to scrutiny.

If you are planning a promotion and want to pressure-test where it might be exposed before it goes live, we are happy to talk it through.

Most purchase-to-enter promotions report two numbers that look the same but aren’t: entries received, and entries that actually count. The gap between them is where receipt validation lives. A receipt upload box looks like the simplest part of a campaign — snap a photo, tap submit, done. The hard part is everything that happens after the photo lands: deciding what a valid proof of purchase looks like, catching the ones that aren’t, and doing it fast enough that genuine entrants don’t give up waiting.

Of the roughly 170 live Australian promotions we track at Trevor Services, the large majority ask the shopper to prove a purchase before they can enter — prize draws and gift-with-purchase offers tied to a receipt, a unique code, or a loyalty card scan. That makes validation the quiet engine under most of the work. Get it right and nobody notices. Get it wrong and you either pay out on fraud or punish your best customers with rejected claims. Neither is a good look.

What is receipt validation in a promotion?

Receipt validation is the process of confirming that an entry is backed by a real, qualifying purchase before the entrant is allowed into the draw or paid a reward. In practice it answers three questions: did this purchase actually happen, does it meet the entry conditions, and has this proof already been used? The first is about authenticity, the second about eligibility, and the third about duplication. A campaign can be airtight on one and leaky on the others.

It matters because the entry barrier is also the fraud barrier. The same friction that makes a shopper pause — upload a photo, type a code — is the thing standing between your prize pool and someone running a script. The Shelf Truth talks about friction as a cost, every form field shaving entries off the top, and that’s true. But on a purchase-to-enter promotion, a little friction is also load-bearing. The trick is putting the effort where it stops fraud rather than where it annoys honest people.

Where do purchase-to-enter promotions actually leak?

The failure modes are fairly consistent. The most common is the duplicate: one valid receipt submitted again and again, sometimes across multiple accounts, sometimes with small edits to dodge an exact-match check. Then there’s the doctored receipt, where a total or a date or a product line has been altered to qualify a purchase that didn’t happen the way it’s claimed. Above both of those now sits a newer problem — wholly fabricated receipts, including ones generated by AI from a text prompt, which never modify a real document because there was never a real document to begin with.

The detail worth sitting with is that these aren’t mostly lone opportunists. As Snipp lays out in its guide to anti-fraud checks for receipt programs, a lot of receipt fraud is coordinated — one operator or a small ring submitting at abnormal rates, recycling images, cycling through addresses and devices. That changes how you defend against it. You’re not just inspecting one image at a time; you’re looking for patterns across the whole entrant pool. A receipt that looks fine in isolation can be obviously wrong once you notice it’s the fourteenth submission from the same device in an hour.

The checks that actually do the work

No single test catches everything, which is why validation works in layers. At the image level, systems fingerprint each receipt — hashing the picture and combining transaction details like store, total, date and a receipt or transaction ID into a unique signature — so the same purchase can’t be reused even if it’s lightly altered or re-photographed. Metadata helps too: a receipt photo missing the device and location data you’d expect, or carrying signs of editing, earns a second look. On top of that sits behavioural analysis, watching submission velocity and device or IP anomalies to flag accounts that simply don’t behave like real shoppers.

Then there’s eligibility, which is a different question from authenticity. A receipt can be completely genuine and still not qualify — wrong product, wrong store, outside the campaign dates, under the minimum spend. This is where product and SKU recognition matters, checking that what’s on the receipt is actually what the promotion required. It’s also where most of the honest-entrant friction comes from, because a real customer who bought the right thing can still get knocked back if the rules and the validation logic don’t match exactly.

Worth being honest about: automation does the heavy lifting, but it doesn’t do all of it. The genuinely ambiguous cases — a faded receipt, an unusual but legitimate purchase pattern — still need a human looking at them, and the campaigns that run cleanest are the ones that decide in advance which decisions a person makes and which the system makes on its own. On the platform side, this is the part Trevor Services spends real time on: OCR-based receipt checks, duplicate and velocity controls, and per-campaign entry rules, with manual review reserved for the edge cases rather than the bulk.

Why most of this is a design decision, not a detection problem

The biggest lever on promotion fraud isn’t the cleverness of your detection — it’s the rules you set before anyone enters. Entry caps per person, daily submission limits, a clear minimum spend, a defined product list, a sensible window for how old a receipt can be: these are configured at setup, and they quietly remove whole categories of abuse before detection ever has to fire. A promotion with no entry limit and a vague product requirement is doing detection on hard mode for no reason. This is the kind of pre-launch pressure-testing Trudy is built to help with, drawing on patterns from thousands of past campaigns to flag where a mechanic is likely to leak.

The rules also have to line up with your legal obligations, and in Australia those vary by state. The ACCC’s guidance on advertising and promotions is clear that terms and conditions have to be set out plainly and made known before people enter — which means your validation logic and your published T&Cs need to say the same thing. Permits add another layer: NSW now runs a time-based trade promotion authority rather than per-promotion permits, required once total prize value passes $10,000, while the ACT and South Australia still require permits for promotions above their own thresholds. The compliance and the fraud controls aren’t separate jobs — the permit conditions, the T&Cs and the validation rules all have to describe one consistent promotion.

If your validation is stricter than your terms, you reject valid entries and field the complaints. If it’s looser, you pay out on entries that should never have qualified. Lining the two up is unglamorous work, and it’s most of what keeps a campaign out of trouble.

A reasonable place to start

If you’re planning a purchase-to-enter promotion, the most useful thing you can do early is write down what a valid entry looks like in plain language — which products, which dates, how much, how many times a person can enter — and then check that every one of those conditions can actually be validated from what the entrant submits. If a rule can’t be checked, it isn’t a rule, it’s a hope. The campaigns that run cleanly are the ones where the terms, the permit conditions and the validation logic were all written to say the same thing before launch, not reconciled afterwards.

If you’re working through how to keep a receipt or code-based promotion clean without making it a chore for genuine entrants, we’re happy to talk it through.

When a promotion falls over on compliance, it rarely happens at the permits stage. The authority numbers, the filing deadlines, the state notifications — most experienced teams have those handled. What catches brands is everything that comes after: mechanics that create unintended entry barriers, T&Cs that leave interpretation gaps, fulfilment processes that don’t match what was promised in the advertising.

Trade promotion compliance in Australia is commonly understood as a state-and-territory exercise. That’s accurate as far as it goes. But the compliance failures that create real exposure — consumer complaints, regulatory scrutiny, prize disputes — tend to live in the operational detail, not in the permit paperwork.

And that detail is about to attract more scrutiny.

The Regulatory Baseline in Australia

NSW, ACT, and SA each require a formal permit or authority before you can run a promotional lottery above certain prize thresholds. In NSW — where most national promotions are anchored — the Community Gaming Act 2018 requires an authority for any trade promotion lottery with a total prize pool exceeding $10,000. The Community Gaming Regulation 2020 replaced the old per-promotion permit system with a duration-based authority (1, 3, or 5 years), which is more workable for brands running several campaigns a year.

Critically, NSW Fair Trading still needs to be notified at least 10 working days before each individual promotion commences — even if the authority is already in place. The authority number must appear in all advertising materials. Entries must be genuinely free: you can’t require a purchase as the only path into a chance-based draw.

SA and ACT have their own requirements. WA sits outside the Community Gaming framework entirely and has its own framework under the Gaming and Wagering Commission Act 1987. Trevor Services covers the full state-by-state breakdown here.

Getting this right is foundational. But it’s not the whole picture.

Where Compliance Actually Breaks Down

The failures Trevor Services sees most often in promotional execution don’t stem from missed permit filings. They show up in the gap between what the T&Cs say and what the promotion actually does.

T&Cs that don’t match the mechanics

The terms say one entry per person; the platform allows multiple submissions from the same email. The prize described in the terms differs from what appears in advertising. These gaps are consumer protection issues under Australian Consumer Law, regardless of how the permits are structured. If a participant is misled about how their entry is being processed or what they can win, that’s a misleading conduct problem — and it sits entirely outside the permit framework.

Winner selection and notification gaps

NSW’s Community Gaming Regulation 2020 is specific: the terms must describe the draw process, the date and time, how winners will be notified, and what happens if a prize goes unclaimed. An unclaimed prize requires a documented redraw. In our experience, this tends not to be specified clearly in the T&Cs, and a documented process isn’t in place when it’s needed. The gap surfaces months after the promotion closes, when a participant queries an outcome and there’s no paper trail to point to.

Receipt validation with no error path

For cashback and receipt-based promotions, OCR validation occasionally fails — the image is too blurry, the format is unfamiliar, the receipt is from a newer store template the system hasn’t seen. If the T&Cs and the platform don’t specify what happens in that scenario, there’s no clear path for the participant to follow. The claim was made in good faith; the validation failed; the answer to “now what?” needs to be in the terms, not buried in a FAQ.

Entry friction that functions as a barrier

There’s a principle in The Shelf Truth called Friction as a Cost: every form field, every extra step, every barrier in the entry process costs approximately 10% of potential entries. That’s a campaign design problem. But it’s also a compliance signal. A claim process that’s genuinely difficult to complete isn’t just bad for participation rates — it can make the promotional offer feel harder to claim than it should be.

This doesn’t mean entry forms need to be frictionless. But the friction should serve a legitimate purpose, and that purpose should be something you can explain clearly.

The Unfair Trading Practices Bill 2026 — A New Dimension

The Competition and Consumer Amendment (Unfair Trading Practices) Bill 2026 was introduced in April 2026. If passed, it would add a general prohibition on conduct that “unreasonably manipulates a consumer” or “unreasonably distorts the environment in which a consumer makes a decision” — with proposed effect from July 2027.

ADMA, Australia’s peak body for data-driven marketing, has submitted to Treasury that the prohibition is currently too broad and its scope is unclear. Their specific concern: everyday marketing practices — countdown timers, low stock notifications, urgency framing — could be inadvertently captured, even where they don’t mislead. ADMA has recommended the general prohibition either be removed or significantly narrowed before passing.

The bill hasn’t passed. The direction it’s travelling, though, is worth paying attention to for anyone designing promotional mechanics.

The proposed law is aimed at conduct that distorts consumer decision-making. For promotional marketers, the relevant question is: do any of our standard mechanics — time-limited prize tiers, narrow claim windows, layered entry requirements — create an environment that could be characterised as unfairly distorting consumer choices? Not necessarily misleading, but distorting.

That’s a higher bar than the current framework sets. It’s not a reason to redesign every promotion, but it is worth being deliberate about how mechanics are structured and communicated.

What Operational Compliance Actually Looks Like

Compliance in practice is a set of disciplines maintained across the life of every campaign, not a checklist run once before launch.

Treat T&Cs as an operational document. They need to reflect how the promotion will actually run — not be a generic template with the dates and prize values dropped in. Draw process, notification method, unclaimed prize procedure, redraw conditions: all of this should match what the platform and fulfilment process will do. Where a promotion involves multiple entry channels (online, in-store, social), the T&Cs need to address each of them explicitly.

Document the draw. NSW requires records of the draw process, winner selection, prize distribution, and any redraws. Those records are the defence if a participant disputes the outcome. What that means in practice is a timestamped, reproducible draw process — not a chain of emails.

Build a clear error path for validation failures. Whether it’s receipt OCR, unique code verification, or QR scan processing, every validation mechanism has edge cases. The T&Cs and the consumer-facing communications need to specify what happens when validation fails and who the participant contacts to resolve it.

Apply the Kill Sheet before launch. Before any promotion goes live, it’s worth running a 15-minute diagnostic: Does the entry mechanic match what’s in the T&Cs? Is the prize description consistent across all creative assets? Is the winner selection process documented? Has the platform been tested for the failure cases? They’re easy to skip when timelines are tight.

Where the Operational Discipline Often Lives

For most brands and agencies, the compliance work sits across at least three teams: marketing (owns the campaign brief), legal (owns the terms), and the platform or fulfilment partner (runs the mechanics). When those three are not aligned, gaps appear.

At Trevor Services, the operational compliance piece is built into how campaigns are run on the platform. Draw documentation, winner selection, unclaimed prize redraws, fraud controls (velocity limits, receipt validation, unique code issuance) — these are logged in real time within the Salesforce-native system. The T&Cs generation process is aligned with how each mechanic actually works. That’s not just a campaign management convenience; it’s what makes the compliance record defensible when it needs to be.

The ACCC’s enforcement and compliance priorities for 2026-27 emphasise proactive compliance at all levels of business operations — not just legal sign-off at the start of a campaign.

A Practical Starting Point

If you’re reviewing your promotion compliance framework ahead of the second half of the year, the most useful place to start isn’t the permit filings — those are usually fine. It’s the gap between your standard T&Cs template and how your promotion actually runs. Walk the entry and claim process end-to-end. Check that the draw documentation matches what the terms describe. Make sure every error scenario has an answer.

The UTP Bill, if it passes in its current or amended form, will raise the bar on what “fair” means in a promotional context. The brands that are best positioned for that are the ones whose compliance is already operational, not just procedural.

If you’re thinking through how trade promotion compliance works in practice across your campaigns, we’re happy to talk through it.

NSW gives you ten business days before launch — and the clock only starts when Fair Trading has your complete terms and conditions, not when you email them.

That one detail quietly rewrites how you should plan the whole compliance leg. The application itself is a form and a fee; the thing that holds it up is almost always the terms and conditions sitting behind it. So the useful move is the opposite of what the campaign plan usually shows: finalise the T&Cs weeks before you touch a single application, and the permits fall into place around them.

Which states in Australia require a promotional permit?

Three jurisdictions require a permit or licence for a trade promotion lottery: New South Wales, the Australian Capital Territory and South Australia. The rest — Victoria, Queensland, Western Australia, Tasmania and the Northern Territory — let you run on prescribed conditions without an individual permit. The permit rules apply to games of chance, not games of skill.

That three-states split is the easy part to get right, and it’s the part everyone remembers. The Victorian regulator sets out the conditions for running a trade promotion lottery there without a permit, and Western Australia runs its lotteries under blanket permit conditions rather than individual applications. Running without a permit still means running inside a framework; the conditions just live in legislation instead of on an approval letter.

Why the terms and conditions are the real bottleneck

Every permit state assesses the terms you lodge, not an abstract promotion. NSW counts its notification window from the day Fair Trading holds a complete set of terms — complete meaning the prize schedule, the entry mechanic, eligibility, the draw method and the dates are all present and consistent with each other. If a clause is missing or the mechanic is described loosely, the terms come back, and the window you’d budgeted restarts from zero.

The reason terms take longer than people expect is that the mechanic you write into them decides the compliance path, and that choice isn’t always obvious until the terms are drafted. A cashback with a draw bolted on top — “claim your cashback and go in the draw to win a trip” — reintroduces an element of chance, and it’s that chance component, not the cashback, that the permit rules are written to catch. In our campaign file of 57 promotions, cashbacks and sweepstakes both appear and several builds combine mechanics, so which rules apply isn’t a question you can answer until the terms settle what the entrant is actually doing.

Receipt-to-enter makes the same point more plainly. Across 44 completed promotions in our campaign file, 39 of 44 required a receipt to enter — and a receipt requirement brings its own entry rules, eligibility wording and dispute clauses that all have to be drafted and checked before anything gets lodged. That is the work that has to be finished before permit work can start, and it’s the work that quietly eats the lead time nobody allocated to it. Our note on what promotion terms and conditions should include walks through the clauses that tend to cause the resets.

The state details that catch people out

NSW grants an Authority to Conduct a Trade Promotion Lottery that can cover a block of promotions over a multi-year period, so the licence itself isn’t the recurring cost — the per-promotion notification is, and that’s where the ten-business-day window bites, two full weeks of calendar time before launch. The thresholds are where a national promotion gets caught: NSW notification applies above a $10,000 total prize pool, South Australia requires a licence above $5,000, and the ACT sits lowest at $3,000. A $4,000 prize pool clears NSW and SA but still needs ACT approval — check your pool against the lowest number, not the one you remember. South Australia adds a wrinkle for printed scratch-and-win or break-open mechanics, which need a separate instant-prize licence regardless of prize value, and SA won’t let you advertise until the licence number is granted and shown on the creative.

Two layers sit on top of the lottery rules and both are easy to miss. Liquor promotions carry state liquor advertising conditions that apply regardless of permit status — so a wine draw has to clear responsible-promotion wording on top of the trade promotion rules, and that wording lives in the T&Cs too. And winner notification and unclaimed-prize handling are permit conditions in their own right, not housekeeping. They matter because claim completion genuinely varies by tier: on our platform, major prizes (≥$5,000) were claimed by 56 per cent of winners and small prizes (<$250) by 65 per cent, while mid prizes ($250–$4,999) sat lower at 35 per cent — the awkward middle, worth real money but not life-changing, where the claim step is easiest to put off and forget. The permit conditions on redraws and notification deadlines are what you lean on when a winner goes quiet.

The counter-view: aren’t permits the milestone that matters?

The fair version of the opposing case: figure out which three states need a permit, build in the lead time for NSW, ACT and SA, and you’ve handled the legal side. The timelines are fixed and external, so they’re worth protecting. But protecting them while the terms stay a draft is the trap — the application hits its window with incomplete terms, the clock resets to zero, and the date you guarded all along slips anyway. You can’t start the permit clock until the terms are done; the reset costs you the full window a second time, not a tidy day or two. A quick way to force the question early is pressure-testing the compliance path before the creative is locked. Once that path is mapped, the upstream strategy calls — prize architecture, mechanic selection, retailer fit — are what Bamboo Marketing covers.

The permit is the part everyone plans for; the terms and conditions behind it are the part that actually decides whether you launch on time.

If you’re mapping out permits and terms for a promotion, we’d be happy to talk it through.

One whitegoods client captures a receipt, a spend band and a customer ID at entry — most CDP projects never plug into that moment. That gap is the whole story. A customer data platform won’t fix your promotions data, because the problem isn’t where the data sits once you have it — it’s whether each entry mechanic was configured to capture an identified, consented customer record in the first place. Fix the capture at the form before you buy the platform.

The market narrative pulls the other way, and it’s worth stating fairly. The cookieless, privacy-first environment, the argument runs, makes a unified first-party profile essential, so the brands that invest first pull ahead while the rest fly blind. Industry voices in the trade press describe exactly this pressure — B&T has written about the “panic buying” of martech it produces. The instinct to move isn’t wrong. The sequencing is — and it’s wrong for a structural reason, not a lazy one: CDP procurement usually sits with IT or a martech lead, while the promotion form is configured by the agency or the trade team, so the two decisions almost never land in the same room until the data’s already been let slip.

What is a customer data platform, and why does it matter for promotions?

A customer data platform resolves records into one profile — but its identity logic assumes structured field input. For promotions, that’s the catch most CDP briefs miss: an unstructured receipt image is invisible to it by design, not by accident. The platform can only unify the fields the entry form actually captured as values.

The capture happens at the form, or it doesn’t happen

Here’s where the six-figure mistake lives. A CDP greenlit before anyone audits what the promotions actually capture will faithfully unify entries that caught an email but no customer ID, no consent flag, no product, no channel. The downstream effect is specific and ugly: a segment you can’t build because half the records have no spend band, a suppression list you can’t trust because the purchase channel wasn’t captured, and an activation plan that stalls because there’s nothing matchable to act on. You paid for the tool; you can’t run the use case.

The richest capture moment is already running under a lot of promotions. In our campaign file, across 44 completed promotions, 39 of 44 — 89 per cent — required a receipt to enter. At that one step you have identity, spend, product, channel and timing all present. It’s the single best first-party data moment a brand gets, and it’s the one CDP projects routinely skip past on their way to the vendor demo.

The live market runs on this exact moment. Coles’ Shop Scan & Win is built on scan-to-enter; Chemist Warehouse has run a receipt-gated $5 cashback. Every one of those entries is a consented record being created or let slip — decided by how the form is built, not by what unifies it afterwards.

Configuration decides what’s usable, not the platform

The choices that determine record quality are made at setup, long before activation. On our platform, 18 of 44 completed promotions — 41 per cent — capped daily entries, and 2 of 44 — 5 per cent — used OCR receipt checking. OCR is the one that quietly decides data quality: without it, the spend and product on a receipt arrive as an image in a folder that no profile can read, so the one field that justified a purchase gate never becomes a structured, matchable value. Low OCR penetration isn’t a cost at entry; it’s a cost you discover a year later when the CDP can’t segment on spend because spend was never captured as a number. A daily cap works the same way — it shapes the behavioural signal you get back. Get those wrong and the CDP inherits the mess.

Whether a record is even completable varies by prize tier, which tells you capture and claim design matter more than the platform. In our campaign file, claim completion runs 56 per cent for major prizes (≥$5,000), 35 per cent for mid-value ($250–$4,999) and 65 per cent for small (<$250). The mid-tier is where records go quiet — the step that collects the record is where it’s won or lost. A CDP can’t retrieve a profile the claim flow never finished. This is the same gap that produces unclaimed prizes: the data and the prize both fall out at the step you didn’t design. The fix is the same pass that lifts completion — a friction audit on the entry form also fixes what the record contains.

Consent is captured at entry too, and the rules are tightening

Privacy reform raises the stakes for how consent and data are captured, not just how they’re stored. The Productivity Commission’s 2025 interim report on harnessing data and digital technology frames the task as capturing the consumer benefit of data while managing the downside — and that line gets drawn at collection. A consent flag set at the entry form, tied to a customer ID, is worth more than any amount of reconciliation later. A CDP that unifies records with ambiguous consent provenance hasn’t solved your exposure; it’s centralised it — every one of those records now sits in one table, under one query, with the same unanswerable question about whether the person actually agreed, which is exactly the shape a regulator would ask you to produce. The terms and the consent language on the form are doing the compliance work, not the platform downstream.

The honest case for buying now — and where it breaks

The strongest version of the buy-first argument is that infrastructure takes time, so starting the CDP build in parallel with fixing capture is simply faster. Fair enough, and if your inputs are already clean, it holds. But it tends to break in one specific place: when the brand treats the platform purchase as the decision and the capture as a later integration detail. That’s the sequence that produces a unified view of records nobody can act on. Running promotions is how brands generate consented first-party records at scale — the entry is the capture event — so the work that makes a CDP worth owning is the work you’d do anyway to run a promotion properly. The why behind it — the shopper psychology — Bamboo Marketing covers that; the capture is execution, and execution is where the record is made or lost.

So the sequence matters more than the spend. Buy the platform first and you’ve bought a memory for data you never collected cleanly. Fix the form first and even a modest CDP has a structured spend field and a matchable customer ID to unify.

A customer data platform remembers what you collected; it cannot collect what the entry form let slip, and that step is decided long before any vendor is chosen.

If you’re rethinking how your promotions feed a customer data platform, we’d be happy to talk it through.