--- title: "AML/CTF Compliance Checklist for Small Businesses | AUSTRAC" description: "A step-by-step AML/CTF compliance checklist for Australian small businesses, covering AUSTRAC enrolment, your program, customer due diligence and reporting, updated for the Tranche 2 reforms from 1 July 2026." lang: en-AU json-ld: | [ { "@context": "https://schema.org", "@type": [ "LegalService", "LocalBusiness" ], "@id": "https://www.astrislaw.com/#organization", "name": "Astris Law", "legalName": "Astris Law Pty Ltd", "alternateName": [ "Astrons General Counsel", "Phronesis Litigation", "HeadStart Counsel" ], "url": "https://www.astrislaw.com", "logo": { "@type": "ImageObject", "url": "https://www.astrislaw.com/android-chrome-512x512.png", "width": 512, "height": 512 }, "image": "https://www.astrislaw.com/android-chrome-512x512.png", "description": "The Astris Law group gives directors and business owners the right legal capability for whatever their business needs, across corporate, disputes and regulatory. Not more lawyers than you need, the right one for the matter. Astris Law for one senior lawyer on high-stakes work, Astrons General Counsel for an embedded legal function, Phronesis Litigation for litigation intelligence, HeadStart Counsel for AML and CTF. One group, one standard, the right fit for each need.", "foundingDate": "2023", "founder": { "@type": "Person", "@id": "https://www.astrislaw.com/attorney/jamie-nuich#person", "name": "Jamie Nuich", "jobTitle": "Legal Practitioner Director", "url": "https://www.astrislaw.com/attorney/jamie-nuich" }, "telephone": "+61735195616", "email": "mail@astrislaw.com", "contactPoint": [ { "@type": "ContactPoint", "telephone": "+61735195616", "contactType": "customer service", "areaServed": "AU", "availableLanguage": "English", "hoursAvailable": "Mo-Fr 09:00-17:00" }, { "@type": "ContactPoint", "telephone": "+61735195616", "contactType": "reservations", "name": "New matter intake", "areaServed": "AU", "availableLanguage": "English" } ], "aggregateRating": { "@type": "AggregateRating", "ratingValue": "5.0", "reviewCount": 12, "bestRating": "5", "worstRating": "1" }, "review": [ { "@type": "Review", "author": { "@type": "Person", "name": "Katherine, Director" }, "reviewBody": "Jamie is someone any entrepreneur looking to change the game needs on their side.", "reviewRating": { "@type": "Rating", "ratingValue": "5", "bestRating": "5", "worstRating": "1" } }, { "@type": "Review", "author": { "@type": "Person", "name": "Tracy, COO" }, "reviewBody": "Jamie was approachable, took the time to really understand our business, communicated well ...", "reviewRating": { "@type": "Rating", "ratingValue": "5", "bestRating": "5", "worstRating": "1" } }, { "@type": "Review", "author": { "@type": "Person", "name": "Matthew, Director" }, "reviewBody": "... very educated in her field of law ...", "reviewRating": { "@type": "Rating", "ratingValue": "5", "bestRating": "5", "worstRating": "1" } }, { "@type": "Review", "author": { "@type": "Person", "name": "Jenny, Investor" }, "reviewBody": "For anyone needing a sharp, reliable lawyer, I can't recommend Jamie enough.", "reviewRating": { "@type": "Rating", "ratingValue": "5", "bestRating": "5", "worstRating": "1" } } ], "priceRange": "$$$", "address": { "@type": "PostalAddress", "streetAddress": "Level 2, 8 Clunies Ross Court", "addressLocality": "Eight Mile Plains", "addressRegion": "QLD", "postalCode": "4113", "addressCountry": "AU" }, "geo": { "@type": "GeoCoordinates", "latitude": -27.5783, "longitude": 153.0996 }, "hasMap": "https://maps.app.goo.gl/KcW4jYe7iW7jHYHp8", "areaServed": [ { "@type": "City", "name": "Brisbane" }, { "@type": "City", "name": "Gold Coast" }, { "@type": "State", "name": "Queensland" }, { "@type": "Country", "name": "Australia" } ], "openingHoursSpecification": { "@type": "OpeningHoursSpecification", "dayOfWeek": [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday" ], "opens": "08:30", "closes": "17:30" }, "knowsAbout": [ "Dispute Resolution & Litigation", "Insolvency & Restructuring", "Corporate & Commercial", "Employment & Workplace Relations", "Regulatory & Compliance", "Intellectual Property, Technology & Data", "Property", "Disciplinary Law", "Administrative Law & WHS", "Anti-Money Laundering (AML/CTF)", "Corporate Law", "Commercial Litigation", "Regulatory Compliance", "Financial Services Law", "Anti-Money Laundering", "FinTech Law", "Intellectual Property" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "Legal services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Dispute Resolution & Litigation", "description": "Strategic commercial litigation, debt recovery, injunctions and alternative dispute resolution for directors and business owners across Australia.", "url": "https://www.astrislaw.com/practice/dispute-resolution-litigation", "provider": { "@id": "https://www.astrislaw.com/#organization" } } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Corporate & Commercial", "description": "Corporate and commercial advice for directors and business owners: company structuring, M&A, shareholder agreements, commercial contracts and director duties.", "url": "https://www.astrislaw.com/commercial-lawyers-brisbane", "provider": { "@id": "https://www.astrislaw.com/#organization" } } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Employment & Workplace", "description": "Practical advice on Fair Work compliance, unfair dismissal, restraints of trade and workplace disputes for directors and business owners.", "url": "https://www.astrislaw.com/practice/employment-workplace-relations", "provider": { "@id": "https://www.astrislaw.com/#organization" } } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Regulatory & Compliance", "description": "Defending and advising on ASIC, ACCC, AUSTRAC, NDIS Commission, AHPRA and WorkCover investigations, AML/CTF programs and Australian Consumer Law compliance for regulated businesses and professionals.", "url": "https://www.astrislaw.com/practice/regulatory-compliance-consumer-law", "provider": { "@id": "https://www.astrislaw.com/#organization" } } } ] }, "member": [ { "@type": "Person", "@id": "https://www.astrislaw.com/attorney/jamie-nuich#person", "name": "Jamie Nuich", "jobTitle": "Legal Practitioner Director", "url": "https://www.astrislaw.com/attorney/jamie-nuich", "image": "https://www.astrislaw.com/images/jamie-nuich-portrait.jpg", "hasCredential": [ { "@type": "EducationalOccupationalCredential", "credentialCategory": "degree", "name": "Bachelor of Laws (Honours)" }, { "@type": "EducationalOccupationalCredential", "credentialCategory": "degree", "name": "Bachelor of Business (Distinction)" }, { "@type": "EducationalOccupationalCredential", "credentialCategory": "professional", "name": "Solicitor of the Supreme Court of Queensland" }, { "@type": "EducationalOccupationalCredential", "credentialCategory": "professional", "name": "Solicitor of the High Court of Australia" }, { "@type": "EducationalOccupationalCredential", "credentialCategory": "certification", "name": "Nationally Accredited Mediator (NMAS)" } ], "memberOf": [ { "@type": "Organization", "name": "Queensland Law Society" }, { "@type": "Organization", "name": "Australian Disputes Centre" } ], "sameAs": [ "https://www.linkedin.com/in/jamienuich/", "https://www.qls.com.au/register-of-solicitors/jamie-leanne-nuich", "https://www.youandthelaw.com.au/organisation/98611/astris-law-pty-ltd" ] } ], "sameAs": [ "https://astrons.astrislaw.com", "https://phronesis.astrislaw.com", "https://headstartcounsel.astrislaw.com", "https://www.linkedin.com/company/astris-law", "https://www.youandthelaw.com.au/organisation/98611/astris-law-pty-ltd", "https://maps.app.goo.gl/KcW4jYe7iW7jHYHp8", "https://lawzana.com/lawyer/astris-law", "https://www.gpmg.uk/awarded-companies/astris-law", "https://www.qls.com.au/register-of-solicitors/jamie-leanne-nuich", "https://www.linkedin.com/in/jamienuich/" ], "slogan": "You don't need more lawyers. You need the right one.", "subOrganization": [ { "@type": "LegalService", "@id": "https://astrons.astrislaw.com/#organization", "name": "Astrons General Counsel", "url": "https://astrons.astrislaw.com", "description": "External general counsel for established Australian businesses: embedded, partner-level legal support combining law firm depth with in-house continuity.", "parentOrganization": { "@id": "https://www.astrislaw.com/#organization" } }, { "@type": "LegalService", "name": "HeadStart Counsel", "url": "https://headstartcounsel.astrislaw.com", "description": "AML/CTF Tranche 2 compliance counsel for Australian professional services businesses.", "parentOrganization": { "@id": "https://www.astrislaw.com/#organization" } }, { "@type": "Organization", "@id": "https://phronesis.astrislaw.com/#organization", "name": "Phronesis Litigation", "url": "https://phronesis.astrislaw.com", "description": "Astris Law's in-house litigation intelligence engine: legal research at machine speed, strategy earlier and disputes run with fewer surprises.", "parentOrganization": { "@id": "https://www.astrislaw.com/#organization" } } ], "brand": [ { "@type": "Brand", "name": "Astrons General Counsel", "url": "https://astrons.astrislaw.com" }, { "@type": "Brand", "name": "Phronesis Litigation", "url": "https://phronesis.astrislaw.com" }, { "@type": "Brand", "name": "HeadStart Counsel", "url": "https://headstartcounsel.astrislaw.com" } ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://www.astrislaw.com/#website", "name": "Astris Law", "url": "https://www.astrislaw.com", "publisher": { "@id": "https://www.astrislaw.com/#organization" }, "inLanguage": "en-AU", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://www.astrislaw.com/articles?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "SiteNavigationElement", "@id": "https://www.astrislaw.com/#navigation", "name": "Main Navigation", "hasPart": [ { "@type": "WebPage", "name": "About", "url": "https://www.astrislaw.com/about" }, { "@type": "WebPage", "name": "The Group", "url": "https://www.astrislaw.com/philosophy" }, { "@type": "WebPage", "name": "Practice Areas", "url": "https://www.astrislaw.com/practice-areas" }, { "@type": "WebPage", "name": "Articles", "url": "https://www.astrislaw.com/articles" }, { "@type": "WebPage", "name": "Contact", "url": "https://www.astrislaw.com/contact" } ] }, { "@context": "https://schema.org", "@graph": [ { "@type": "WebPage", "@id": "https://www.astrislaw.com/article/aml-ctf-compliance-checklist-small-business#webpage", "url": "https://www.astrislaw.com/article/aml-ctf-compliance-checklist-small-business", "name": "AML/CTF Compliance Checklist for Small Businesses: Meeting AUSTRAC Requirements", "isPartOf": { "@id": "https://www.astrislaw.com/#website" }, "mainEntity": { "@id": "https://www.astrislaw.com/article/aml-ctf-compliance-checklist-small-business#article" }, "inLanguage": "en-AU" }, { "@type": "Article", "@id": "https://www.astrislaw.com/article/aml-ctf-compliance-checklist-small-business#article", "headline": "AML/CTF Compliance Checklist for Small Businesses: Meeting AUSTRAC Requirements", "description": "A step-by-step checklist to help an Australian small business meet its obligations under the AML/CTF Act. It walks through enrolment, your program, customer due diligence and reporting and flags what the Tranche 2 reforms change from 1 July 2026.", "image": "https://www.astrislaw.com/images/articles/small-business-premises-daylight.jpg", "datePublished": "2026-04-21", "dateModified": "2026-04-21", "author": { "@type": "Person", "@id": "https://www.astrislaw.com/attorney/jamie-nuich#person", "name": "Jamie Nuich", "jobTitle": "Legal Practitioner Director", "url": "https://www.astrislaw.com/attorney/jamie-nuich", "sameAs": [ "https://www.linkedin.com/in/jamienuich/", "https://www.qls.com.au/register-of-solicitors/jamie-leanne-nuich", "https://www.youandthelaw.com.au/organisation/98611/astris-law-pty-ltd" ], "hasCredential": [ { "@type": "EducationalOccupationalCredential", "credentialCategory": "Professional License", "name": "Admission to Practice", "recognizedBy": { "@type": "Organization", "name": "Supreme Court of Queensland" } } ], "affiliation": { "@type": "LegalService", "@id": "https://www.astrislaw.com/#organization", "name": "Astris Law", "url": "https://www.astrislaw.com" } }, "publisher": { "@id": "https://www.astrislaw.com/#organization" }, "about": { "@type": "LegalService", "name": "Anti-Money Laundering", "serviceType": "Anti-Money Laundering" }, "mainEntityOfPage": { "@id": "https://www.astrislaw.com/article/aml-ctf-compliance-checklist-small-business#webpage" }, "isPartOf": { "@id": "https://www.astrislaw.com/#website" }, "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ ".article-summary", ".article-description" ] }, "inLanguage": "en-AU", "wordCount": 1067, "timeRequired": "PT6M", "articleSection": [ "Insights", "Anti-Money Laundering" ], "keywords": "Anti-Money Laundering, Insights, anti, money, laundering" }, { "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://www.astrislaw.com" }, { "@type": "ListItem", "position": 2, "name": "Articles", "item": "https://www.astrislaw.com/articles" }, { "@type": "ListItem", "position": 3, "name": "AML/CTF Compliance Checklist for Small Businesses: Meeting AUSTRAC Requirements", "item": "https://www.astrislaw.com/article/aml-ctf-compliance-checklist-small-business" } ] }, { "@type": "FAQPage", "@id": "https://www.astrislaw.com/article/aml-ctf-compliance-checklist-small-business#faq", "mainEntity": [ { "@type": "Question", "@id": "https://www.astrislaw.com/article/aml-ctf-compliance-checklist-small-business#faq-1", "name": "Does AML/CTF compliance apply to my small business?", "acceptedAnswer": { "@type": "Answer", "text": "It applies if you provide a designated service listed in the Act. The test is the activity, not the size of the business. Many small businesses are reporting entities without realising it." } }, { "@type": "Question", "@id": "https://www.astrislaw.com/article/aml-ctf-compliance-checklist-small-business#faq-2", "name": "What is the difference between enrolment and registration?", "acceptedAnswer": { "@type": "Answer", "text": "Enrolment places most reporting entities on AUSTRAC's roll and applies broadly. Registration is an additional requirement for specific higher-risk services such as remittance and digital currency exchange, and must be in place before those services are provided." } }, { "@type": "Question", "@id": "https://www.astrislaw.com/article/aml-ctf-compliance-checklist-small-business#faq-3", "name": "Do I need a compliance officer?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. You must appoint a fit and proper AML/CTF compliance officer with the authority and standing to oversee compliance. In a small business that is often a director, but the role has to be real, not nominal." } }, { "@type": "Question", "@id": "https://www.astrislaw.com/article/aml-ctf-compliance-checklist-small-business#faq-4", "name": "When do I have to lodge a suspicious matter report?", "acceptedAnswer": { "@type": "Answer", "text": "When you form a relevant suspicion connected to a designated service. The deadline is 3 business days, or 24 hours where the suspicion relates to terrorism financing." } }, { "@type": "Question", "@id": "https://www.astrislaw.com/article/aml-ctf-compliance-checklist-small-business#faq-5", "name": "Do the Tranche 2 reforms affect me?", "acceptedAnswer": { "@type": "Answer", "text": "If you work in legal, accounting, conveyancing, real estate, dealing in precious metals and stones or trust and company services, the expanded designated services may bring you in. The reforms commenced on 1 July 2026 and enrolment closes on 29 July 2026, so assess your position now. This is general information, not advice on your situation. If you would like help working through your AML/CTF obligations, get in touch or call (07) 3519 5616." } } ] }, { "@type": "HowTo", "@id": "https://www.astrislaw.com/article/aml-ctf-compliance-checklist-small-business#howto", "name": "AML/CTF Compliance Checklist for Small Businesses: Meeting AUSTRAC Requirements", "description": "A step-by-step checklist to help an Australian small business meet its obligations under the AML/CTF Act. It walks through enrolment, your program, customer due diligence and reporting and flags what the Tranche 2 reforms change from 1 July 2026.", "step": [ { "@type": "HowToStep", "position": 1, "name": "Work out whether you provide a designated service", "text": "Start with your activities, not your industry. The Act lists designated services, and providing one makes you a reporting entity. The list spans lending, remittance, foreign exchange, gambling, bullion dealing and digital currency exchange, among others. From 1 July 2026 the Tranche 2 reforms extend that list to many activities provided by lawyers, accountants, conveyancers, real estate professionals, dealers in precious metals and stones and trust and company service providers. If you sit in one of those sectors, the question is whether any service you provide now falls within the expanded definitions. For how these reforms intersect with professional conduct rules, see our note on Rule 8 and Rule 12 and the AML/CTF regime." }, { "@type": "HowToStep", "position": 2, "name": "Enrol and register with AUSTRAC", "text": "Provide a designated service and you generally must enrol with AUSTRAC. Enrolment places you on the Reporting Entities Roll. Certain services, such as remittance and digital currency exchange, also require registration before you may lawfully operate. The distinction matters. Enrolment is broad and applies to most reporting entities. Registration is an additional gateway for higher-risk services. If Tranche 2 brings you in, the timing is fixed: enrolment opened on 31 March 2026 and must be completed by 29 July 2026, with obligations commencing on 1 July 2026. Do not leave enrolment until after you have started providing the service." }, { "@type": "HowToStep", "position": 3, "name": "Appoint a compliance officer and build your AML/CTF program", "text": "Two things sit at the centre of the regime. First, you must appoint an AML/CTF compliance officer, a fit and proper person with the authority to run compliance. Second, you must have an AML/CTF program. The program is a single, risk-based framework that identifies, mitigates and manages the money laundering and terrorism financing risk your business reasonably faces. It covers how you assess risk, verify customers, monitor transactions, train staff and oversee the whole thing. It should reflect your business, not a template. A two-person bookkeeping practice and a busy remittance dealer face different risks and should document different controls. Do the work to understand your risk, then build controls that match it." }, { "@type": "HowToStep", "position": 4, "name": "Carry out customer due diligence", "text": "Before providing a designated service, verify the identity of your customer using reliable and independent information. For individuals that usually means confirming name and date of birth or residential address from appropriate sources. For companies, trusts and other entities, it extends to understanding the structure and identifying the beneficial owners who ultimately control the customer. Due diligence is not a single event. The regime requires ongoing customer due diligence, which means keeping customer information current and staying alert to activity that does not fit what you know about the customer. Our guide to common gaps in AUSTRAC starter kits shows where businesses most often fall short here." }, { "@type": "HowToStep", "position": 5, "name": "Report suspicious matters and threshold transactions", "text": "Two reporting obligations recur. A suspicious matter report, or SMR, is required when you form a relevant suspicion, for example that a transaction relates to money laundering or an offence. It is due within 3 business days, reduced to 24 hours where the suspicion relates to terrorism financing. A threshold transaction report, or TTR, is required for a transfer of physical currency of $10,000 or more and is due within 10 business days. Both are lodged with AUSTRAC online. Reporting is a legal obligation, and the protections around suspicious matter reporting are built so you can report without breaching confidentiality to the customer." }, { "@type": "HowToStep", "position": 6, "name": "Keep records and review the program", "text": "Retain records of customer identification, transactions and your program for the periods the Act requires. They support your decisions if AUSTRAC asks how you assessed a customer or a transaction. Review the program regularly and update it when your business, your customers or the law change. A program written once and never revisited is a common weakness. Treat review as part of the ordinary rhythm of the business. Assuming the regime applies only to banks. It applies to anyone providing a designated service. Copying a large institution's program instead of matching controls to actual risk. Verifying identity at onboarding but never monitoring afterwards. Treating enrolment, or the compliance officer appointment, as optional or something for later. Overlooking the Tranche 2 expansion now that it has commenced. It applies if you provide a designated service listed in the Act. The test is the activity, not the size of the business. Many small businesses are reporting entities without realising it. Enrolment places most reporting entities on AUSTRAC's roll and applies broadly. Registration is an additional requirement for specific higher-risk services such as remittance and digital currency exchange, and must be in place before those services are provided. Yes. You must appoint a fit and proper AML/CTF compliance officer with the authority and standing to oversee compliance. In a small business that is often a director, but the role has to be real, not nominal. When you form a relevant suspicion connected to a designated service. The deadline is 3 business days, or 24 hours where the suspicion relates to terrorism financing. If you work in legal, accounting, conveyancing, real estate, dealing in precious metals and stones or trust and company services, the expanded designated services may bring you in. The reforms commenced on 1 July 2026 and enrolment closes on 29 July 2026, so assess your position now. This is general information, not advice on your situation. If you would like help working through your AML/CTF obligations, get in touch or call (07) 3519 5616." } ] } ] } ] --- [Skip to main content](#main-content) The Astris Law Group Astris Astris Law [Astrons Astrons General Counsel ](https://astrons.astrislaw.com)[Phronesis Phronesis Litigation ](https://phronesis.astrislaw.com)[HeadStart HeadStart Counsel ](https://headstartcounsel.astrislaw.com) [![Astris Law S Icon](/assets/astris-logo-icon-kBkGra_r.png)![Astris Law](/assets/astris-logo-full-wbEHTWR5.png)](/) [About](/about)[The Group](/philosophy)[Practice Areas](/practice-areas)[Articles](/articles)[Contact](/contact)[Start here](/contact) [← Back to Articles](/articles)| [Anti-Money Laundering →](/practice/anti-money-laundering) Insights 21 April 2026 • 6 min read # AML/CTF Compliance Checklist for Small Businesses: Meeting AUSTRAC Requirements ## Summary A step-by-step checklist to help an Australian small business meet its obligations under the AML/CTF Act. It walks through enrolment, your program, customer due diligence and reporting and flags what the Tranche 2 reforms change from 1 July 2026. Last reviewed 21 April 2026 · Reviewed by [Jamie Nuich](/attorney/jamie-nuich), Legal Practitioner Director ## Key Takeaways - AML/CTF obligations attach to a business that provides a designated service, not to an industry label. - Enrolment with AUSTRAC, and registration where relevant, are foundational steps to complete before or as services commence. - You must appoint a fit and proper AML/CTF compliance officer and maintain a single risk-based AML/CTF program kept current. - Customer due diligence, ongoing monitoring and reporting of suspicious matters and threshold transactions are recurring obligations. - The Tranche 2 reforms commence on 1 July 2026 and bring many professional and real estate businesses into the regime, with enrolment closing on 29 July 2026. ![Interior of a small commercial premises, illustrating AML/CTF obligations for small businesses](/images/articles/small-business-premises-daylight.jpg) In This Article 1. [1. In Brief](#in-brief) 2. [2. Step 1: Work out whether you provide a designated service](#step-1-work-out-whether-you-provide-a-designated-service) 3. [3. Step 2: Enrol and register with AUSTRAC](#step-2-enrol-and-register-with-austrac) 4. [4. Step 3: Appoint a compliance officer and build your AML/CTF program](#step-3-appoint-a-compliance-officer-and-build-your-aml-ctf-program) 5. [5. Step 4: Carry out customer due diligence](#step-4-carry-out-customer-due-diligence) 6. [6. Step 5: Report suspicious matters and threshold transactions](#step-5-report-suspicious-matters-and-threshold-transactions) 7. [7. Step 6: Keep records and review the program](#step-6-keep-records-and-review-the-program) 8. [8. Common pitfalls for small businesses](#common-pitfalls-for-small-businesses) 9. [9. Frequently Asked Questions](#frequently-asked-questions) A step-by-step checklist to help an Australian small business meet its obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth). It walks through enrolment, your program, customer due diligence and reporting and flags what the Tranche 2 reforms change from 1 July 2026. ## In Brief AML/CTF obligations flow from providing a designated service. The core building blocks are enrolment and registration, a compliance officer, an AML/CTF program, customer due diligence, ongoing monitoring and reporting. The regime is risk-based, so a small business acts proportionately rather than copying a bank. Tranche 2 widens the net from 1 July 2026. ## Step 1: Work out whether you provide a designated service Start with your activities, not your industry. The Act lists designated services, and providing one makes you a reporting entity. The list spans lending, remittance, foreign exchange, gambling, bullion dealing and digital currency exchange, among others. From 1 July 2026 the Tranche 2 reforms extend that list to many activities provided by lawyers, accountants, conveyancers, real estate professionals, dealers in precious metals and stones and trust and company service providers. If you sit in one of those sectors, the question is whether any service you provide now falls within the expanded definitions. For how these reforms intersect with professional conduct rules, see our note on [Rule 8 and Rule 12](/article/ascr-rule-8-rule-12-aml-ctf-open-submission) and the AML/CTF regime. ## Step 2: Enrol and register with AUSTRAC Provide a designated service and you generally must enrol with AUSTRAC. Enrolment places you on the Reporting Entities Roll. Certain services, such as remittance and digital currency exchange, also require registration before you may lawfully operate. The distinction matters. Enrolment is broad and applies to most reporting entities. Registration is an additional gateway for higher-risk services. If Tranche 2 brings you in, the timing is fixed: enrolment opened on 31 March 2026 and must be completed by 29 July 2026, with obligations commencing on 1 July 2026. Do not leave enrolment until after you have started providing the service. ## Step 3: Appoint a compliance officer and build your AML/CTF program Two things sit at the centre of the regime. First, you must appoint an AML/CTF compliance officer, a fit and proper person with the authority to run compliance. Second, you must have an AML/CTF program. The program is a single, risk-based framework that identifies, mitigates and manages the money laundering and terrorism financing risk your business reasonably faces. It covers how you assess risk, verify customers, monitor transactions, train staff and oversee the whole thing. It should reflect your business, not a template. A two-person bookkeeping practice and a busy remittance dealer face different risks and should document different controls. Do the work to understand your risk, then build controls that match it. ## Step 4: Carry out customer due diligence Before providing a designated service, verify the identity of your customer using reliable and independent information. For individuals that usually means confirming name and date of birth or residential address from appropriate sources. For companies, trusts and other entities, it extends to understanding the structure and identifying the beneficial owners who ultimately control the customer. Due diligence is not a single event. The regime requires ongoing customer due diligence, which means keeping customer information current and staying alert to activity that does not fit what you know about the customer. Our guide to common gaps in AUSTRAC [starter kits](/article/austrac-starter-kit-gaps-report-card) shows where businesses most often fall short here. ## Step 5: Report suspicious matters and threshold transactions Two reporting obligations recur. A suspicious matter report, or SMR, is required when you form a relevant suspicion, for example that a transaction relates to money laundering or an offence. It is due within 3 business days, reduced to 24 hours where the suspicion relates to terrorism financing. A threshold transaction report, or TTR, is required for a transfer of physical currency of $10,000 or more and is due within 10 business days. Both are lodged with AUSTRAC online. Reporting is a legal obligation, and the protections around suspicious matter reporting are built so you can report without breaching confidentiality to the customer. ## Step 6: Keep records and review the program Retain records of customer identification, transactions and your program for the periods the Act requires. They support your decisions if AUSTRAC asks how you assessed a customer or a transaction. Review the program regularly and update it when your business, your customers or the law change. A program written once and never revisited is a common weakness. Treat review as part of the ordinary rhythm of the business. ## Common pitfalls for small businesses - Assuming the regime applies only to banks. It applies to anyone providing a designated service. - Copying a large institution's program instead of matching controls to actual risk. - Verifying identity at onboarding but never monitoring afterwards. - Treating enrolment, or the compliance officer appointment, as optional or something for later. - Overlooking the Tranche 2 expansion now that it has commenced. ## Frequently Asked Questions ### Does AML/CTF compliance apply to my small business? It applies if you provide a designated service listed in the Act. The test is the activity, not the size of the business. Many small businesses are reporting entities without realising it. ### What is the difference between enrolment and registration? Enrolment places most reporting entities on AUSTRAC's roll and applies broadly. Registration is an additional requirement for specific higher-risk services such as remittance and digital currency exchange, and must be in place before those services are provided. ### Do I need a compliance officer? Yes. You must appoint a fit and proper AML/CTF compliance officer with the authority and standing to oversee compliance. In a small business that is often a director, but the role has to be real, not nominal. ### When do I have to lodge a suspicious matter report? When you form a relevant suspicion connected to a designated service. The deadline is 3 business days, or 24 hours where the suspicion relates to terrorism financing. ### Do the Tranche 2 reforms affect me? If you work in legal, accounting, conveyancing, real estate, dealing in precious metals and stones or trust and company services, the expanded designated services may bring you in. The reforms commenced on 1 July 2026 and enrolment closes on 29 July 2026, so assess your position now. This is general information, not advice on your situation. If you would like help working through your AML/CTF obligations, [get in touch](/contact) or call (07) 3519 5616. ## Sources and References - Legislation Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) - Legislation Anti-Money Laundering and Counter-Terrorism Financing Amendment Act 2024 (Cth) - Regulator AUSTRAC guidance for reporting entities ![Jamie Nuich, Legal Practitioner Director at Astris Law](/images/jamie-nuich-portrait.jpg) ### [Jamie Nuich](/attorney/jamie-nuich) Legal Practitioner Director - Admitted as a Solicitor of the Supreme Court of Queensland - Admitted as a Solicitor of the High Court of Australia - 15+ years advising directors on commercial law, litigation, regulatory investigations and workplace matters Jamie is the founder and Legal Practitioner Director of Astris Law. She has acted first-hand for directors in urgent injunction applications, shareholder disputes, ASIC prosecutions and regulator-led investigations across Federal and State jurisdictions. She is a solicitor advocate who runs her own applications and trials where appropriate, so clients keep continuity from first advice through to hearing. Commercial Litigation Corporate & Commercial Regulatory & Compliance Employment & Workplace Anti-Money Laundering (AML/CTF) Disciplinary & Professional Conduct [LinkedIn](https://www.linkedin.com/in/jamienuich/)[QLS Register of Solicitors](https://www.qls.com.au/register-of-solicitors/jamie-leanne-nuich)[You and the Law directory](https://www.youandthelaw.com.au/organisation/98611/astris-law-pty-ltd)[Astris Law profile](/attorney/jamie-nuich) Share [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.astrislaw.com%2Farticle%2Faml-ctf-compliance-checklist-small-business "Share on LinkedIn")[](https://twitter.com/intent/tweet?url=https%3A%2F%2Fwww.astrislaw.com%2Farticle%2Faml-ctf-compliance-checklist-small-business&text=AML%2FCTF%20Compliance%20Checklist%20for%20Small%20Businesses%3A%20Meeting%20AUSTRAC%20Requirements "Share on X")[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.astrislaw.com%2Farticle%2Faml-ctf-compliance-checklist-small-business "Share on Facebook")[](mailto:?subject=AML%2FCTF%20Compliance%20Checklist%20for%20Small%20Businesses%3A%20Meeting%20AUSTRAC%20Requirements&body=A%20step-by-step%20checklist%20to%20help%20an%20Australian%20small%20business%20meet%20its%20obligations%20under%20the%20AML%2FCTF%20Act.%20It%20walks%20through%20enrolment%2C%20your%20program%2C%20customer%20due%20diligence%20and%20reporting%20and%20flags%20what%20the%20Tranche%202%20reforms%20change%20from%201%20July%202026.%0A%0Ahttps%3A%2F%2Fwww.astrislaw.com%2Farticle%2Faml-ctf-compliance-checklist-small-business "Share on Email") This article is for general information purposes only and does not constitute legal advice and should not be relied on as such. While we take reasonable care to ensure the accuracy of the information provided, we make no representations or warranties as to its completeness, currency or reliability. We accept no liability for any loss or damage arising directly or indirectly from the use of, or reliance on, this website's content. You should always seek professional advice tailored to your specific circumstances before acting on any information in this article. Liability limited by a scheme approved under Professional Standards Legislation. [ Related Practice Area Anti-Money Laundering ](/practice/anti-money-laundering) ## Build an AML/CTF program that fits your business Astris Law helps Australian small and mid-market businesses interpret their AUSTRAC obligations and put proportionate compliance in place. To talk through where you stand, book a call back on (07) 3519 5616. [(07) 3519 5616](tel:+61735195616)[Send an enquiry](/contact) ## Related Articles [Insights ### Who Must Register with AUSTRAC? A Decision Guide for Australian Business Owners Read more](/article/who-must-register-with-austrac-australia) [Insights ### Customer Due Diligence: How Australian SMEs Should Verify Client Identity Read more](/article/customer-due-diligence-requirements-australian-sme) [Insights ### AML/CTF Risk Assessment: Building a Proportionate Program for Mid-Market Firms Read more ](/article/aml-ctf-risk-assessment-proportionate-program) [![Astris Law S Icon](/assets/astris-logo-icon-kBkGra_r.png)![Astris Law](/assets/astris-logo-full-wbEHTWR5.png)](/) You don't need more lawyers. You need the right one. ### Firm - [About](/about) - [The Astris Law Group](/philosophy) - [People](/team) - [Jamie Nuich](/attorney/jamie-nuich) - [Articles](/articles) - [Resources](/resources) - [Pricing & Fees](/pricing) - [Contact](/contact) ### Services - [Dispute Resolution & Litigation](/practice/dispute-resolution-litigation) - [Corporate & Commercial](/commercial-lawyers-brisbane) - [Insolvency & Restructuring](/practice/insolvency-restructuring) - [Employment & Workplace](/practice/employment-workplace-relations) - [Regulatory & Compliance](/practice/regulatory-compliance-consumer-law) - [Intellectual Property & Tech](/practice/intellectual-property-technology-data) - [Property](/practice/property) - [Disciplinary Law](/practice/disciplinary-law) - [Administrative Law & WHS](/practice/administrative-law-whs) - [Digital Assets](/digital-assets-australia) - [Regulated Market Entry](/regulated-market-entry) - [Regulatory Investigations](/regulatory-investigations-lawyers) ### Get in Touch - [The Legal Strategy Call](/consultation) - [Refer a Client](/referrals) - [(07) 3519 5616](tel:+61735195616) - [mail@astrislaw.com](mailto:mail@astrislaw.com) - [ Astris Law Level 2, 8 Clunies Ross Court Eight Mile Plains QLD 4113 Australia ](https://maps.app.goo.gl/KcW4jYe7iW7jHYHp8) ![Astris Law - Accredited Member of Queensland Law Society](/assets/qls-member-logo-DexInE_X.png)[![Lawzana Top Law Firm](https://lawzana.com/assets/badges/verified-law-firm.svg?v=2)](https://lawzana.com/lawyer/astris-law)[![Lawyer International Legal 100 2026 Winner](/assets/lawyer-international-legal-100-2026-CflMKG1C.png)](https://www.gpmg.uk/awarded-companies/astris-law) [The Astris Law Group](/philosophy) Astris Law The Right Lawyer [Astrons General Counsel](https://astrons.astrislaw.com) The Right Legal Partner [Phronesis Litigation](https://phronesis.astrislaw.com) The Right Intelligence [HeadStart Counsel](https://headstartcounsel.astrislaw.com) The Right AML Advice © Astris Law Pty Ltd ACN 662 641 269. Astrons General Counsel, Phronesis Litigation and HeadStart Counsel are the registered trading names of Astris Law Pty Ltd. Liability limited by a scheme approved under Professional Standards Legislation. [About](/about)[Contact](/contact)[Privacy Policy](/privacy)[Collection Notice](/collection-notice)[Terms of Service](/terms)Cookie Preferences [](tel:+61735195616) Cookies on by default · [Privacy](/privacy) SettingsOK