The NDIS in Numbers: What $50 Billion in Annual Payments Tells Us About Australia's Disability Services Market

The National Disability Insurance Scheme is the largest social services program in Australian history. Our analysis of 120,000+ NDIS payment records reveals a market of extraordinary scale and complexity — with direct implications for anyone contracting, investing in, or verifying NDIS service providers.

The numbers

These figures represent cumulative NDIS expenditure captured in our dataset, which spans multiple reporting periods by state and support class. NSW leads with A$76B in payments across 6.3 million participant records. Victoria follows with A$61.5B across 5.8M records. Queensland at A$53.3B, Western Australia A$22B, and South Australia A$20.6B complete the top five.

The "ALL" category — national aggregate data — shows A$298.5B in payments across 23.1 million participant records, indicating that many participants appear in both their state-level and national aggregations.

Core vs Capacity Building vs Capital: what the split tells us

The NDIS categorises supports into three classes, each serving a different purpose:

Core Supports (A$428B, 77% of total) covers daily activities, assistance with social and community participation, assistance with self-care, and transport. This is the largest and most frequently traded category — the market that most service providers participate in. It is also the most competitive, with thousands of registered providers competing for participants across geographic markets.

Capacity Building Supports (A$101B, 18% of total) includes support coordination, improved living arrangements, increased social and community participation, finding and keeping a job, and improved learning. This category tends to involve more specialised providers with specific clinical or therapeutic qualifications. The NDIS has historically flagged capacity building as an area of significant plan underspend — participants are allocated funding but do not always use it, which creates both an opportunity and a compliance risk for providers who seek to fill that allocation artificially.

Capital Supports (A$15.5B, 3% of total) covers assistive technology, home modifications, and vehicle modifications. This category involves a smaller number of specialist providers but with higher average transaction values. It is also the category most frequently associated with fraudulent invoicing — high-value items (custom wheelchairs, vehicle conversions) with limited market comparators are easier to overprice.

What this means for provider verification

The scale of NDIS expenditure has attracted both legitimate providers scaling to meet genuine need, and opportunistic entrants seeking to capture government funding with minimal service delivery. The NDIS Quality and Safeguards Commission has taken enforcement action against dozens of providers — cancelling registrations, banning individuals, and referring matters for criminal investigation.

For any procurement team, finance function, or government agency engaging NDIS providers, verification is not optional. The relevant checks include:

• NDIS provider registration — only registered providers can deliver NDIS-funded supports to agency-managed participants. Unregistered providers can serve plan-managed or self-managed participants but with fewer protections. Registration status is verifiable via the NDIS Commission's provider register.
• NDIS compliance actions — the Commission maintains a public register of compliance actions, prohibition orders, and banning notices against individuals. We load this register into Gumshoe and check it as part of every NDIS-sector verification.
• ASIC company status — NDIS provider companies with recent deregistrations, directors linked to deregistered companies, or Phoenix patterns are elevated risk. The NDIS sector has been specifically called out by ASIC as an area of concern for Phoenix activity.
• ABN age — a provider ABN registered in the last 24 months serving NDIS participants warrants additional scrutiny, not because new providers are necessarily fraudulent, but because established providers have an audit trail the NDIS Commission has already assessed.
• ACCC adverse records — consumer protection actions against NDIS providers have been brought by both the ACCC and the NDIS Commission; checking both registers matters.

State-by-state concentration risk

The geographic distribution of NDIS payments is uneven in ways that affect verification strategy. NSW and Victoria together account for approximately half of all NDIS payments. Large urban markets (Sydney, Melbourne, Brisbane) have more providers and more competition. Regional and remote markets are more concentrated — fewer providers serving more participants, with less competitive pricing discipline and less regulatory attention.

Provider fraud in regional markets tends to be harder to detect precisely because there are fewer reference points for what a reasonable price or reasonable service volume looks like. A single large provider in a regional market can bill at rates that would be immediately visible as outliers in a metropolitan market, but which go undetected for years in their geographic segment.

NDIS participant projections: the growth story

The NDIS is not a static market. Independent actuarial projections show participant counts growing from approximately 646,000 nationally to well over one million by 2030, with NSW projected to reach 304,000+ participants by 2035. The implication for suppliers and investors is that the market will continue to grow faster than most comparable healthcare or social services segments.

For service providers already in the market, growth creates competitive opportunity but also intensifies the compliance environment. The NDIS Commission has been explicit that provider growth does not reduce oversight expectations — if anything, rapid growth in provider activity triggers additional audit and compliance scrutiny.

How Gumshoe uses NDIS data in verification

Gumshoe loads NDIS compliance action data, provider registration data, and participant projection data across all service districts. When you run a verification on an NDIS provider:

• We check their ABN against the NDIS compliance actions register
• We check their entity name and directors against the ASIC banned register and Phoenix pattern database
• We surface the NDIS provider registration status where available
• We flag the NDIS sector context in the industry check

The data we hold allows us to contextualise what we find — a new provider in a high-payment-density state with recent compliance actions against its directors is a materially different risk profile from an established provider with a clean record in the same geography.

Uncommon Insights

One lesser-known aspect of NDIS compliance is the intersection of the National Disability Insurance Scheme Act 2013 (Cth) and the Australian Securities and Investments Commission (ASIC) regulatory framework. Specifically, ASIC Regulatory Guide 247 (RG 247) applies to NDIS providers that offer financial products, such as participant-owned bank accounts or insurance products. This means that NDIS providers must comply with ASIC's financial services licensing requirements, in addition to their obligations under the NDIS Act and the NDIS (Provider Registration and Practice Standards) Rules 2018 (Cth).

Another important consideration for NDIS providers is the Australian Taxation Office's (ATO) approach to GST and income tax compliance. The ATO has issued guidance on the application of GST to NDIS services, including the requirement for providers to register for GST if their annual turnover exceeds the $75,000 threshold (Australian Taxation Office, GST and the National Disability Insurance Scheme, 2022). Furthermore, the ATO has also identified NDIS providers as a high-risk sector for income tax non-compliance, particularly in relation to the misclassification of workers as contractors rather than employees (Australian Taxation Office, Tax and the National Disability Insurance Scheme, 2022).

A review of ASIC's enforcement actions reveals a pattern of targeting NDIS providers for breaches of the Corporations Act 2001 (Cth), particularly in relation to section 180 (director's duties) and section 588G (insolvent trading). For example, in 2020, ASIC commenced proceedings against a director of an NDIS provider for allegedly breaching his duties as a director and allowing the company to trade while insolvent (Australian Securities and Investments Commission, Media Release 20-150MR, 2020). This highlights the importance of NDIS providers ensuring that their governance and risk management practices are robust and compliant with the Corporations Act.

Finally, the NDIS Quality and Safeguards Commission's (NDIS Commission) approach to provider registration and audit is an important consideration for NDIS providers. The NDIS Commission has the power to audit providers under section 73A of the NDIS Act, and may take enforcement action against providers that fail to meet the NDIS Practice Standards (NDIS Quality and Safeguards Commission, Audit and Assurance Framework, 2022). Providers must ensure that they have adequate systems and processes in place to demonstrate compliance with the NDIS Practice Standards, including the requirement to maintain accurate and complete records (NDIS Quality and Safeguards Commission, Record Keeping Requirements, 2022).