Australian Hotel & Resort
Investment Risk Assessment

The Fullerton Hotel Sydney was breached in April 2025 by the Akira ransomware group, which exfiltrated 148GB of data including non-disclosure agreements, contracts, identity documents, and financial records. The incident was reported to the Office of the Australian Information Commissioner. TFE Hotels — which operates Adina Apartment Hotels, Vibe Hotels, and Travelodge across Australia — suffered ransomware disruption traced to third-party vendor access, causing widespread operational impact across its portfolio. [Trustwave]

The attack surface is structural, not accidental. Hotel operations depend on property management systems, point-of-sale platforms, OTA booking integrations, and guest loyalty databases — all of which are interconnected and accessible to staff, contractors, and third-party technology providers. Security assessments of the travel sector have found that former employees frequently retain system access after departure, multi-factor authentication is inconsistently applied, and anomaly detection on third-party accounts is weak. [Trustwave] Attackers exploit this to manipulate bookings, steal loyalty point balances, commit chargeback fraud, and sell guest data on dark web marketplaces.

Australia's regulatory exposure is increasing. The Privacy Act review has tightened penalty settings, and the Security of Critical Infrastructure Act extends obligations to certain hospitality and tourism infrastructure. Small hotel operators are particularly exposed — security assessments consistently find basic control gaps at independent and mid-market properties that cannot afford enterprise security operations. For investors, the financial consequence is not only the cost of the breach itself but the reputational damage that suppresses forward bookings at the affected property.

The Fair Work Act amendment that took effect on 1 January 2025 made intentional underpayment of wages a criminal offence. For hotels, where casual and part-time rosters are the norm and the Hospitality Industry (General) Award sets complex penalty rates for Sundays, public holidays, late nights, and split shifts, the risk of misclassification or payroll error is structurally high. An operator who has been rounding down shift hours or applying the wrong penalty rate classification — practices that were common before 2025 — is now exposed to criminal prosecution rather than just a civil back-pay order. [WorkPro]

Three further changes compound the compliance burden through 2025. Casual conversion rules that took effect in February 2025 require operators to identify eligible casual employees and respond in writing within 21 days to conversion requests. The Right to Disconnect, applying to small businesses from August 2025, restricts operators from making after-hours contact with staff about roster changes unless the contact is reasonable — a direct operational challenge for 24-hour hotel environments where shift cover is managed at short notice. And the Superannuation Guarantee rate rose to 12% on 1 July 2025, adding directly to labour costs for every eligible employee. [WorkPro]

The financial consequence is asymmetric. Operators with accurate payroll systems and clear roster documentation carry manageable cost increases. Operators still running manual rostering or using payroll software not updated to reflect the 2025 award changes carry both back-pay liability and criminal exposure. For investors assessing an acquisition, payroll compliance should now be treated as a due diligence item at the same level of scrutiny as title and lease terms.

National occupancy reached 64.8% in 2025, up 3.7 percentage points year-on-year, and national RevPAR hit AUD $152, up 6.9%. [STR] But these figures aggregate markets with opposite dynamics. Perth hotels recorded 74.3% occupancy driven by LNG sector demand, with occupancy exceeding 75% in the second half of 2025. [STR] Sydney premium assets — including Crown Sydney at peak periods — achieved RevPAR above AUD $250. At the other end, Crown Resorts Sydney recorded 52% occupancy in Q3 2025 amid ongoing regulatory scrutiny, with RevPAR down 8.2% year-on-year to AUD $165. [STR]

Melbourne is the market carrying the most persistent structural weakness. Office vacancy has reduced corporate demand, and while major events including the Australian Open drove occupancy gains, the city's hotels averaged 61.2% occupancy in 2025 — the lowest of the five major capitals. Event Hotels, which operates Rydges and Pavilion properties in Melbourne, reported average occupancy of 54.8% in 2025 and launched a AUD $250 million portfolio sale process in Q4 2025. [CBRE] IHG Australia's Brisbane cluster reported RevPAR down 4.5% in the first half of 2025 to AUD $140, attributed to 15 new rooms per 100 existing keys entering the local supply. [JLL]

The bifurcation matters for investors because it means asset selection, not market exposure, determines performance. An investor holding a luxury Sydney or Perth asset in 2025 captured strong ADR growth and 8% RevPAR gains. An investor holding a Melbourne midscale property or a gaming-exposed asset has seen occupancy, RevPAR, and in Crown's case, debt covenants deteriorate simultaneously. The investment thesis for Australian hotels cannot be stated at a sector level — it has to be argued asset by asset.

The RBA raised its cash rate from 0.85% in June 2022 to a peak of 4.35% in December 2023, then held it until easing began in March 2025. [RBA] This rate path compressed hotel valuations by raising the cost of debt and tightening debt service coverage ratio requirements — the primary mechanism through which lenders constrain loan amounts. As the RBA eases, that pressure reduces for new refinancing transactions, but assets with loan maturities that hit the market in 2024 or early 2025 were refinanced at the peak of the rate cycle.

The clearest evidence of financial stress is in gaming-exposed assets. Crown Resorts Sydney breached an 8% gearing covenant on AUD $1.2 billion of debt in its FY2025 results, and its Melbourne asset entered receivership discussions. [JLL] These are extreme cases — Crown carries unique regulatory risk from its gaming licence history — but the pattern is instructive. Assets where RevPAR has declined rather than grown in line with the national average face a compounding problem: falling income reduces debt service coverage at exactly the moment lenders are scrutinising covenants most closely.

For stabilised assets with strong cash flows, the debt environment is competitive. Global hotel debt markets show diverse lender pools — banks, insurance companies, private credit, and debt funds — maintaining liquidity through 2025. [Hotels Mag] Transitional assets — those undergoing renovation, rebranding, or repositioning — face a harder market. Private lenders underwriting transitional hotel debt in 2025 are requiring yields of 11.5–12%, running conservative RevPAR projections, and extending the assumed stabilisation period. The 45–60 day underwriting window means market conditions can shift between mandate and close, adding execution risk to refinancing timelines. [Hotels Mag]

Horwath HTL forecasts total Australian visitor growth at 3.6% CAGR from 2024 to 2029, with domestic overnight expenditure growing at 3.8% CAGR. [Horwath HTL] But Q1 2025 showed a 2.6% dip in arrivals before recovering through the rest of the year, demonstrating how quickly the trajectory can soften. ABS overseas arrivals data for January 2026 showed stability but noted vulnerability to Australian dollar strength — when the AUD rises against Asian currencies, the relative cost of visiting Australia rises and inbound leisure travel weakens. [ABS]

Chinese and broader Asian inbound tourism remains the key demand driver for premium urban hotels in Sydney and Melbourne. The pipeline has recovered since the COVID-era closure but has not returned to 2019 volumes in all segments. Any deterioration in Australia-China trade relations — which have been cautiously stabilising since 2023 — or a renewed diplomatic friction would be felt quickly in booking pace data from OTAs and Travel Research Australia's forward surveys. SiteMinder data from January 2026 shows Australian hotels achieving an 18% conversion rate from OTA research to direct booking, but also shows that 26% of global travellers research on OTAs first — making OTA commission costs a structural drag that does not disappear even when direct booking rates are high. [SiteMinder]

IBISWorld records 12% CAGR in Australian hotel and resort revenue from 2020 to 2025, largely driven by ADR inflation as supply remained constrained — room inventory grew less than 2% over five years. [IBISWorld] That supply constraint is protective, but it means any demand softening flows directly to occupancy rather than being cushioned by capacity reductions. Investors should treat TRA quarterly booking pace data and ABS monthly overseas arrivals figures as the two earliest-warning indicators in the system.

Three forces that feature prominently in global hotel risk discussions — climate physical risk to coastal and regional assets, AI-driven disruption to OTA distribution, and geopolitical shifts affecting inbound Asian tourism — are present in Australian hotel markets but cannot be sized precisely from current public sources. This is a genuine data gap, not a gap in risk. The absence of a named ATC report on Queensland cyclone exposure or a Tourism Australia study on Chinese visitor sensitivity to exchange rates does not mean those risks are small. It means they have not been publicly quantified for this market.

The most proximate of the three is geopolitical and currency-driven inbound tourism risk. Chinese visitors were the highest-spending inbound segment before COVID, and their return has been gradual and uneven. Any Australian policy decision that strains the bilateral relationship — as occurred with trade tariffs in 2020 — would be felt in urban hotel booking pace within one quarter. The signal to watch is the monthly ABS overseas arrivals data disaggregated by country of origin, and TRA's quarterly International Visitor Survey. A sustained month-on-month decline in Chinese arrivals of more than 5% against the prior year would be the threshold that shifts this from theoretical to materialising.

Short-term rental regulation in NSW and Victoria could provide a structural demand tailwind for hotels if Airbnb-style entire-home listings are capped. State reviews were underway through 2025, with proposed 2026 legislation possible. But this remains theoretical — no bill has passed as of April 2026, and the political economy of short-term rental regulation in Australia has historically moved slowly. Climate physical risk to coastal Queensland, New South Wales, and Western Australian resorts is real and growing, but no named insurer, bank, or government body has published a specific assessment of Australian resort asset exposure in recent public sources.

CBRE's 2026 Asia Pacific Investor Intentions Survey recorded net buying intentions for hotels at 17%, up from 13% in 2025. [CBRE] That positive sentiment is grounded in the supply constraint and RevPAR growth that 2025 delivered. But investor sentiment is a lagging indicator — it reflects what has happened, not what is coming. The signals that matter are the ones that move before asset values do: booking pace, international arrivals, cap rate movement in weak submarkets, and distressed transaction volume.

Houlihan Lokey's January 2026 Asia-Pacific Real Estate Update flags that Melbourne hotel cap rates are edging higher while Sydney and Brisbane are compressing. [Houlihan Lokey] A move of more than 50 basis points quarter-on-quarter in any major submarket would be the clearest indication that valuation stress is spreading beyond the gaming-exposed assets already in distress. The RBA Financial Stability Review, due April 2026, is the next scheduled publication that would flag any systemic concern about commercial real estate leverage — including hotel debt — in the official record.

For labour compliance risk, the signal is enforcement. The Fair Work Ombudsman's prosecution activity in the hospitality sector following the January 2025 wage theft criminalisation will reveal how aggressively the new laws are being applied. The first named hotel prosecution would immediately trigger compliance audits across the sector and materially increase the cost and complexity of any hotel acquisition due diligence. Investors should monitor Fair Work Ombudsman enforcement releases as a routine risk management step.