Briefing · Rules & costs
The week in digital: card surcharges end, Google's AI Max switch and a new ATO scam
Our weekly briefing for Australian small businesses: what changed this week, why it matters and the dates to put in the diary before the end of the year.
Welcome to the first Digital Advisors weekly briefing: the digital changes that affected Australian small businesses this week, what they mean, and what’s coming up.
1. Card surcharges end on Thursday
From 1 October, eftpos, Mastercard and Visa rules stop businesses adding a surcharge to debit, credit and prepaid card payments, online and in store. American Express and UnionPay follow on the same day and PayPal on 5 October. Interchange fee caps on domestic cards fall on the same day.
So what: check every payment channel with your provider this week, and take down surcharge notices. Read the full story and checklist.
2. Google moves Search campaigns to AI Max
Google is automatically upgrading Search campaigns that use campaign-level broad match or standalone automatically created assets to AI Max through September. Dynamic Search Ads follow from February 2027. Separately, Search campaigns lose the campaign-level language setting from late September.
So what: if you run Google Ads, check your search terms report and landing pages this week. What to check.
3. ATO warns of malware in fake tax emails
A new scam email claims there is “a new payment update in your ATO profile” and leads to a download that can give scammers remote access to your device. The ATO received 3,265 impersonation scam reports in August, up 36% on July.
So what: tell anyone who handles tax email in your business not to click, and to call the ATO on 1800 008 540 if unsure. How to spot it.
4. Privacy reform consultation closes
Consultation on the draft tranche 2 privacy bill closed on 18 September. It keeps the small business exemption, but widens what counts as “trading” personal information, which could bring more small businesses under the Act. Separately, new automated decision-making rules for covered businesses start on 10 December. What applies to small business.
5. Still sending “Unverified” texts?
Branded texts from sender IDs that aren’t on the ACMA register have shown as “Unverified” since 1 July. ACMA isn’t charging for registration for now, and there’s no cut-off date. How to register.
Dates to watch
| Date | What happens |
|---|---|
| 1 October | Card surcharges end on eftpos, Mastercard and Visa. New interchange caps start. American Express and UnionPay remove surcharging. |
| 5 October | PayPal removes surcharging. |
| 7 October | Google Ads API version 22 stops working. This only matters if you use third-party tools built on it. |
| 28 October | On our reading of the ATO’s first-year guidance, the 28-day mark for fixing unpaid super on July to September pay. Payday Super explained. |
| 30 October | Card networks and the largest payment providers publish their first quarterly fee data. |
| 10 December | Automated decision-making disclosure rules start for businesses covered by the Privacy Act. |
| February 2027 | Google begins upgrading Dynamic Search Ads campaigns to AI Max. |
Something we should cover? Send us a story tip.
Sources 13 sources
- RBA: FAQs – removal of card payment surcharges from 1 October 2026
- Google Ads Developer Blog: Migrate campaign-level broad match and automatically created assets to AI Max
- Google Ads Developer Blog: Language targeting changes
- Google Ads Developer Blog: Google Ads API v22 sunset reminder
- ATO: Scam alerts
- ATO: Scam data
- Attorney-General's Department: Privacy reform consultation (tranche 2)
- ACMA: SMS Sender ID Register
- ACMA: Registering sender IDs
- ACMA: SMS Sender ID Register goes live (June 2026)
- ATO: Getting it right – compliance in the first year of Payday Super
- RBA Conclusions Paper: Impact and implementation
- Federal Register of Legislation: Privacy and Other Legislation Amendment Act 2024