--- title: "Customer Due Diligence for Australian SMEs | Verify Identity" description: "How Australian SMEs verify client identity under AML/CTF law, covering customer due diligence, beneficial ownership, PEPs and ongoing monitoring, updated for the Tranche 2 reforms from 1 July 2026." lang: en-AU json-ld: | [ { "@context": "https://schema.org", "@type": [ "LegalService", "LocalBusiness" ], "@id": "https://www.astrislaw.com/#organization", "name": "Astris Law", "legalName": "Astris Law Pty Ltd", "alternateName": [ "Astrons General Counsel", "Phronesis Litigation", "HeadStart Counsel" ], "url": "https://www.astrislaw.com", "logo": { "@type": "ImageObject", "url": "https://www.astrislaw.com/android-chrome-512x512.png", "width": 512, "height": 512 }, "image": "https://www.astrislaw.com/android-chrome-512x512.png", "description": "The Astris Law group gives directors and business owners the right legal capability for whatever their business needs, across corporate, disputes and regulatory. Not more lawyers than you need, the right one for the matter. Astris Law for one senior lawyer on high-stakes work, Astrons General Counsel for an embedded legal function, Phronesis Litigation for litigation intelligence, HeadStart Counsel for AML and CTF. One group, one standard, the right fit for each need.", "foundingDate": "2023", "founder": { "@type": "Person", "@id": "https://www.astrislaw.com/attorney/jamie-nuich#person", "name": "Jamie Nuich", "jobTitle": "Legal Practitioner Director", "url": "https://www.astrislaw.com/attorney/jamie-nuich" }, "telephone": "+61735195616", "email": "mail@astrislaw.com", "contactPoint": [ { "@type": "ContactPoint", "telephone": "+61735195616", "contactType": "customer service", "areaServed": "AU", "availableLanguage": "English", "hoursAvailable": "Mo-Fr 09:00-17:00" }, { "@type": "ContactPoint", "telephone": "+61735195616", "contactType": "reservations", "name": "New matter intake", "areaServed": "AU", "availableLanguage": "English" } ], "aggregateRating": { "@type": "AggregateRating", "ratingValue": "5.0", "reviewCount": 12, "bestRating": "5", "worstRating": "1" }, "review": [ { "@type": "Review", "author": { "@type": "Person", "name": "Katherine, Director" }, "reviewBody": "Jamie is someone any entrepreneur looking to change the game needs on their side.", "reviewRating": { "@type": "Rating", "ratingValue": "5", "bestRating": "5", "worstRating": "1" } }, { "@type": "Review", "author": { "@type": "Person", "name": "Tracy, COO" }, "reviewBody": "Jamie was approachable, took the time to really understand our business, communicated well ...", "reviewRating": { "@type": "Rating", "ratingValue": "5", "bestRating": "5", "worstRating": "1" } }, { "@type": "Review", "author": { "@type": "Person", "name": "Matthew, Director" }, "reviewBody": "... very educated in her field of law ...", "reviewRating": { "@type": "Rating", "ratingValue": "5", "bestRating": "5", "worstRating": "1" } }, { "@type": "Review", "author": { "@type": "Person", "name": "Jenny, Investor" }, "reviewBody": "For anyone needing a sharp, reliable lawyer, I can't recommend Jamie enough.", "reviewRating": { "@type": "Rating", "ratingValue": "5", "bestRating": "5", "worstRating": "1" } } ], "priceRange": "$$$", "address": { "@type": "PostalAddress", "streetAddress": "Level 2, 8 Clunies Ross Court", "addressLocality": "Eight Mile Plains", "addressRegion": "QLD", "postalCode": "4113", "addressCountry": "AU" }, "geo": { "@type": "GeoCoordinates", "latitude": -27.5783, "longitude": 153.0996 }, "hasMap": "https://maps.app.goo.gl/KcW4jYe7iW7jHYHp8", "areaServed": [ { "@type": "City", "name": "Brisbane" }, { "@type": "City", "name": "Gold Coast" }, { "@type": "State", "name": "Queensland" }, { "@type": "Country", "name": "Australia" } ], "openingHoursSpecification": { "@type": "OpeningHoursSpecification", "dayOfWeek": [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday" ], "opens": "08:30", "closes": "17:30" }, "knowsAbout": [ "Dispute Resolution & Litigation", "Insolvency & Restructuring", "Corporate & Commercial", "Employment & Workplace Relations", "Regulatory & Compliance", "Intellectual Property, Technology & Data", "Property", "Disciplinary Law", "Administrative Law & WHS", "Anti-Money Laundering (AML/CTF)", "Corporate Law", "Commercial Litigation", "Regulatory Compliance", "Financial Services Law", "Anti-Money Laundering", "FinTech Law", "Intellectual Property" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "Legal services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Dispute Resolution & Litigation", "description": "Strategic commercial litigation, debt recovery, injunctions and alternative dispute resolution for directors and business owners across Australia.", "url": "https://www.astrislaw.com/practice/dispute-resolution-litigation", "provider": { "@id": "https://www.astrislaw.com/#organization" } } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Corporate & Commercial", "description": "Corporate and commercial advice for directors and business owners: company structuring, M&A, shareholder agreements, commercial contracts and director duties.", "url": "https://www.astrislaw.com/commercial-lawyers-brisbane", "provider": { "@id": "https://www.astrislaw.com/#organization" } } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Employment & Workplace", "description": "Practical advice on Fair Work compliance, unfair dismissal, restraints of trade and workplace disputes for directors and business owners.", "url": "https://www.astrislaw.com/practice/employment-workplace-relations", "provider": { "@id": "https://www.astrislaw.com/#organization" } } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Regulatory & Compliance", "description": "Defending and advising on ASIC, ACCC, AUSTRAC, NDIS Commission, AHPRA and WorkCover investigations, AML/CTF programs and Australian Consumer Law compliance for regulated businesses and professionals.", "url": "https://www.astrislaw.com/practice/regulatory-compliance-consumer-law", "provider": { "@id": "https://www.astrislaw.com/#organization" } } } ] }, "member": [ { "@type": "Person", "@id": "https://www.astrislaw.com/attorney/jamie-nuich#person", "name": "Jamie Nuich", "jobTitle": "Legal Practitioner Director", "url": "https://www.astrislaw.com/attorney/jamie-nuich", "image": "https://www.astrislaw.com/images/jamie-nuich-portrait.jpg", "hasCredential": [ { "@type": "EducationalOccupationalCredential", "credentialCategory": "degree", "name": "Bachelor of Laws (Honours)" }, { "@type": "EducationalOccupationalCredential", "credentialCategory": "degree", "name": "Bachelor of Business (Distinction)" }, { "@type": "EducationalOccupationalCredential", "credentialCategory": "professional", "name": "Solicitor of the Supreme Court of Queensland" }, { "@type": "EducationalOccupationalCredential", "credentialCategory": "professional", "name": "Solicitor of the High Court of Australia" }, { "@type": "EducationalOccupationalCredential", "credentialCategory": "certification", "name": "Nationally Accredited Mediator (NMAS)" } ], "memberOf": [ { "@type": "Organization", "name": "Queensland Law Society" }, { "@type": "Organization", "name": "Australian Disputes Centre" } ], "sameAs": [ "https://www.linkedin.com/in/jamienuich/", "https://www.qls.com.au/register-of-solicitors/jamie-leanne-nuich", "https://www.youandthelaw.com.au/organisation/98611/astris-law-pty-ltd" ] } ], "sameAs": [ "https://astrons.astrislaw.com", "https://phronesis.astrislaw.com", "https://headstartcounsel.astrislaw.com", "https://www.linkedin.com/company/astris-law", "https://www.youandthelaw.com.au/organisation/98611/astris-law-pty-ltd", "https://maps.app.goo.gl/KcW4jYe7iW7jHYHp8", "https://lawzana.com/lawyer/astris-law", "https://www.gpmg.uk/awarded-companies/astris-law", "https://www.qls.com.au/register-of-solicitors/jamie-leanne-nuich", "https://www.linkedin.com/in/jamienuich/" ], "slogan": "You don't need more lawyers. You need the right one.", "subOrganization": [ { "@type": "LegalService", "@id": "https://astrons.astrislaw.com/#organization", "name": "Astrons General Counsel", "url": "https://astrons.astrislaw.com", "description": "External general counsel for established Australian businesses: embedded, partner-level legal support combining law firm depth with in-house continuity.", "parentOrganization": { "@id": "https://www.astrislaw.com/#organization" } }, { "@type": "LegalService", "name": "HeadStart Counsel", "url": "https://headstartcounsel.astrislaw.com", "description": "AML/CTF Tranche 2 compliance counsel for Australian professional services businesses.", "parentOrganization": { "@id": "https://www.astrislaw.com/#organization" } }, { "@type": "Organization", "@id": "https://phronesis.astrislaw.com/#organization", "name": "Phronesis Litigation", "url": "https://phronesis.astrislaw.com", "description": "Astris Law's in-house litigation intelligence engine: legal research at machine speed, strategy earlier and disputes run with fewer surprises.", "parentOrganization": { "@id": "https://www.astrislaw.com/#organization" } } ], "brand": [ { "@type": "Brand", "name": "Astrons General Counsel", "url": "https://astrons.astrislaw.com" }, { "@type": "Brand", "name": "Phronesis Litigation", "url": "https://phronesis.astrislaw.com" }, { "@type": "Brand", "name": "HeadStart Counsel", "url": "https://headstartcounsel.astrislaw.com" } ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://www.astrislaw.com/#website", "name": "Astris Law", "url": "https://www.astrislaw.com", "publisher": { "@id": "https://www.astrislaw.com/#organization" }, "inLanguage": "en-AU", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://www.astrislaw.com/articles?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "SiteNavigationElement", "@id": "https://www.astrislaw.com/#navigation", "name": "Main Navigation", "hasPart": [ { "@type": "WebPage", "name": "About", "url": "https://www.astrislaw.com/about" }, { "@type": "WebPage", "name": "The Group", "url": "https://www.astrislaw.com/philosophy" }, { "@type": "WebPage", "name": "Practice Areas", "url": "https://www.astrislaw.com/practice-areas" }, { "@type": "WebPage", "name": "Articles", "url": "https://www.astrislaw.com/articles" }, { "@type": "WebPage", "name": "Contact", "url": "https://www.astrislaw.com/contact" } ] }, { "@context": "https://schema.org", "@graph": [ { "@type": "WebPage", "@id": "https://www.astrislaw.com/article/customer-due-diligence-requirements-australian-sme#webpage", "url": "https://www.astrislaw.com/article/customer-due-diligence-requirements-australian-sme", "name": "Customer Due Diligence: How Australian SMEs Should Verify Client Identity", "isPartOf": { "@id": "https://www.astrislaw.com/#website" }, "mainEntity": { "@id": "https://www.astrislaw.com/article/customer-due-diligence-requirements-australian-sme#article" }, "inLanguage": "en-AU" }, { "@type": "Article", "@id": "https://www.astrislaw.com/article/customer-due-diligence-requirements-australian-sme#article", "headline": "Customer Due Diligence: How Australian SMEs Should Verify Client Identity", "description": "Customer due diligence is where the AML/CTF regime meets your front desk. This guide sets out what an Australian SME must do to verify identity, understand who is really behind a customer and keep watching over time, under the AML/CTF Act. It also flags what changes for firms newly captured by the Tranche 2 reforms from 1 July 2026.", "image": "https://www.astrislaw.com/images/articles/id-verification.jpg", "datePublished": "2026-05-06", "dateModified": "2026-05-06", "author": { "@type": "Person", "@id": "https://www.astrislaw.com/attorney/jamie-nuich#person", "name": "Jamie Nuich", "jobTitle": "Legal Practitioner Director", "url": "https://www.astrislaw.com/attorney/jamie-nuich", "sameAs": [ "https://www.linkedin.com/in/jamienuich/", "https://www.qls.com.au/register-of-solicitors/jamie-leanne-nuich", "https://www.youandthelaw.com.au/organisation/98611/astris-law-pty-ltd" ], "hasCredential": [ { "@type": "EducationalOccupationalCredential", "credentialCategory": "Professional License", "name": "Admission to Practice", "recognizedBy": { "@type": "Organization", "name": "Supreme Court of Queensland" } } ], "affiliation": { "@type": "LegalService", "@id": "https://www.astrislaw.com/#organization", "name": "Astris Law", "url": "https://www.astrislaw.com" } }, "publisher": { "@id": "https://www.astrislaw.com/#organization" }, "about": { "@type": "LegalService", "name": "Anti-Money Laundering", "serviceType": "Anti-Money Laundering" }, "mainEntityOfPage": { "@id": "https://www.astrislaw.com/article/customer-due-diligence-requirements-australian-sme#webpage" }, "isPartOf": { "@id": "https://www.astrislaw.com/#website" }, "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ ".article-summary", ".article-description" ] }, "inLanguage": "en-AU", "wordCount": 946, "timeRequired": "PT5M", "articleSection": [ "Insights", "Anti-Money Laundering" ], "keywords": "Anti-Money Laundering, Insights, anti, money, laundering" }, { "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://www.astrislaw.com" }, { "@type": "ListItem", "position": 2, "name": "Articles", "item": "https://www.astrislaw.com/articles" }, { "@type": "ListItem", "position": 3, "name": "Customer Due Diligence: How Australian SMEs Should Verify Client Identity", "item": "https://www.astrislaw.com/article/customer-due-diligence-requirements-australian-sme" } ] }, { "@type": "FAQPage", "@id": "https://www.astrislaw.com/article/customer-due-diligence-requirements-australian-sme#faq", "mainEntity": [ { "@type": "Question", "@id": "https://www.astrislaw.com/article/customer-due-diligence-requirements-australian-sme#faq-1", "name": "When must I verify a customer's identity?", "acceptedAnswer": { "@type": "Answer", "text": "Generally before you provide the designated service. Verification at the start of the relationship is the default, with limited exceptions under the Rules." } }, { "@type": "Question", "@id": "https://www.astrislaw.com/article/customer-due-diligence-requirements-australian-sme#faq-2", "name": "What counts as reliable and independent information?", "acceptedAnswer": { "@type": "Answer", "text": "A source that does not simply repeat the customer's own assertion. Government-issued identity documents and reputable electronic verification services are common. The source has to provide genuine, independent confirmation." } }, { "@type": "Question", "@id": "https://www.astrislaw.com/article/customer-due-diligence-requirements-australian-sme#faq-3", "name": "What is a beneficial owner?", "acceptedAnswer": { "@type": "Answer", "text": "The individual or individuals who ultimately own or control a customer. For a company, the natural persons behind the shareholdings. For a trust, those who control or benefit from it. Identifying them is core to due diligence on non-individual customers." } }, { "@type": "Question", "@id": "https://www.astrislaw.com/article/customer-due-diligence-requirements-australian-sme#faq-4", "name": "What is enhanced customer due diligence?", "acceptedAnswer": { "@type": "Answer", "text": "Extra measures for higher-risk customers or situations. It can include checking the source of funds, gathering more information, screening for politically exposed persons and monitoring the relationship more closely than a standard customer." } }, { "@type": "Question", "@id": "https://www.astrislaw.com/article/customer-due-diligence-requirements-australian-sme#faq-5", "name": "Do I really need to monitor customers after onboarding?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. Ongoing due diligence means keeping information current and watching for activity that does not fit. That monitoring is what lets a suspicious matter be identified and reported. This is general information, not advice on your situation. If you would like help designing customer due diligence procedures, get in touch or call (07) 3519 5616." } } ] }, { "@type": "HowTo", "@id": "https://www.astrislaw.com/article/customer-due-diligence-requirements-australian-sme#howto", "name": "Customer Due Diligence: How Australian SMEs Should Verify Client Identity", "description": "Customer due diligence is where the AML/CTF regime meets your front desk. This guide sets out what an Australian SME must do to verify identity, understand who is really behind a customer and keep watching over time, under the AML/CTF Act. It also flags what changes for firms newly captured by the Tranche 2 reforms from 1 July 2026.", "step": [ { "@type": "HowToStep", "position": 1, "name": "Identify and verify the customer", "text": "Collect identifying information, then verify it. For an individual that usually means full name and either date of birth or residential address, confirmed against reliable and independent sources. Government-issued documents and reputable electronic verification services are the common routes. Verification is more than collection. Holding a copy of a licence does not confirm the person is who they say they are. The standard is information that is reliable and independent of the customer's own word for it." }, { "@type": "HowToStep", "position": 2, "name": "Understand non-individual customers", "text": "Where the customer is a company, trust, partnership or other entity, the work expands. You need to understand the structure and identify the beneficial owners, meaning the individuals who ultimately own or control it. For a company that can mean tracing shareholdings. For a trust it means understanding the trustees, settlor and beneficiaries. This is where the regime earns its purpose. Layered structures are used to hide control, so finding the natural persons behind an entity is the point, not a formality." }, { "@type": "HowToStep", "position": 3, "name": "Apply a risk-based approach", "text": "Customers do not all carry the same risk, and the regime is built around that. The depth of due diligence should track the risk in front of you. Most customers are handled with standard measures. Higher-risk ones call for enhanced due diligence. Enhanced measures can include checking the source of funds, gathering more on the customer and applying closer scrutiny to the relationship. Politically exposed persons are a standard trigger here. So are opaque structures, unusual circumstances and links to higher-risk jurisdictions. Put the effort where the risk sits rather than treating every customer the same." }, { "@type": "HowToStep", "position": 4, "name": "Conduct ongoing customer due diligence", "text": "Onboarding is the start, not the finish. The Act requires ongoing due diligence with two limbs. Keep customer information current, so what you hold reflects the customer as they are now. And monitor transactions and behaviour, so activity that does not fit gets noticed. This monitoring is what feeds suspicious matter reporting. Verify once at onboarding and never look again, and you will not see the thing that should have prompted a report. Our review of common gaps in starter kits notes that weak ongoing monitoring is one of the most frequent failures." }, { "@type": "HowToStep", "position": 5, "name": "Record what you did", "text": "Document the process. Record what you collected, how you verified it, what you concluded about beneficial ownership and risk and what ongoing monitoring you applied. The Act sets retention periods for these records. Good records do two jobs. They show compliance if AUSTRAC asks, and they give your own team a reference point when a customer's later activity needs to be measured against what you first understood. Our anti-money laundering practice page covers how we design onboarding. From 1 July 2026 the Tranche 2 reforms bring lawyers, accountants, conveyancers, real estate professionals, dealers in precious metals and stones and trust and company service providers into the regime. If that is you, customer due diligence is one of the first things to build, because much of it has to run from the day you start providing a designated service. The customer identification and verification steps in this guide, including beneficial ownership and PEP screening, sit at the centre of the program you will need in place. Build a simple intake form that captures the right information from the start. Decide in advance which sources you will treat as reliable and independent. For entity customers, ask for the ownership structure up front rather than chasing it later. Set a trigger for reviewing customer information, whether a periodic check or a change in the relationship. Keep verification records with the customer file, not scattered across systems. Generally before you provide the designated service. Verification at the start of the relationship is the default, with limited exceptions under the Rules. A source that does not simply repeat the customer's own assertion. Government-issued identity documents and reputable electronic verification services are common. The source has to provide genuine, independent confirmation. The individual or individuals who ultimately own or control a customer. For a company, the natural persons behind the shareholdings. For a trust, those who control or benefit from it. Identifying them is core to due diligence on non-individual customers. Extra measures for higher-risk customers or situations. It can include checking the source of funds, gathering more information, screening for politically exposed persons and monitoring the relationship more closely than a standard customer. Yes. Ongoing due diligence means keeping information current and watching for activity that does not fit. That monitoring is what lets a suspicious matter be identified and reported. This is general information, not advice on your situation. If you would like help designing customer due diligence procedures, get in touch or call (07) 3519 5616." } ] } ] } ] --- [Skip to main content](#main-content) The Astris Law Group Astris Astris Law [Astrons Astrons General Counsel ](https://astrons.astrislaw.com)[Phronesis Phronesis Litigation ](https://phronesis.astrislaw.com)[HeadStart HeadStart Counsel ](https://headstartcounsel.astrislaw.com) [![Astris Law S Icon](/assets/astris-logo-icon-kBkGra_r.png)![Astris Law](/assets/astris-logo-full-wbEHTWR5.png)](/) [About](/about)[The Group](/philosophy)[Practice Areas](/practice-areas)[Articles](/articles)[Contact](/contact)[Start here](/contact) [← Back to Articles](/articles)| [Anti-Money Laundering →](/practice/anti-money-laundering) Insights 6 May 2026 • 5 min read # Customer Due Diligence: How Australian SMEs Should Verify Client Identity ## Summary Customer due diligence is where the AML/CTF regime meets your front desk. This guide sets out what an Australian SME must do to verify identity, understand who is really behind a customer and keep watching over time, under the AML/CTF Act. It also flags what changes for firms newly captured by the Tranche 2 reforms from 1 July 2026. Last reviewed 6 May 2026 · Reviewed by [Jamie Nuich](/attorney/jamie-nuich), Legal Practitioner Director ## Key Takeaways - Verify customer identity from reliable and independent sources before you provide a designated service. - For non-individual customers, understand the structure and identify the beneficial owners who ultimately control it. - Higher-risk customers and circumstances call for enhanced due diligence, including screening for politically exposed persons. - Ongoing due diligence means keeping information current and watching for activity that does not fit the customer. - Recording how you verified is as important as the verification itself. ![Verifying a customer's identity documents, illustrating customer due diligence for Australian SMEs](/images/articles/id-verification.jpg) In This Article 1. [1. In Brief](#in-brief) 2. [2. Step 1: Identify and verify the customer](#step-1-identify-and-verify-the-customer) 3. [3. Step 2: Understand non-individual customers](#step-2-understand-non-individual-customers) 4. [4. Step 3: Apply a risk-based approach](#step-3-apply-a-risk-based-approach) 5. [5. Step 4: Conduct ongoing customer due diligence](#step-4-conduct-ongoing-customer-due-diligence) 6. [6. Step 5: Record what you did](#step-5-record-what-you-did) 7. [7. What Tranche 2 means for newly captured firms](#what-tranche-2-means-for-newly-captured-firms) 8. [8. Practical tips for SMEs](#practical-tips-for-smes) 9. [9. Frequently Asked Questions](#frequently-asked-questions) Customer due diligence is where the AML/CTF regime meets your front desk. This guide sets out what an Australian SME must do to verify identity, understand who is really behind a customer and keep watching over time, under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth). It also flags what changes for firms newly captured by the Tranche 2 reforms from 1 July 2026. ## In Brief Due diligence is generally completed before a designated service is provided. Identity is verified from reliable and independent sources. For entities, you identify the beneficial owners behind them. The work does not stop at onboarding. It is ongoing. ## Step 1: Identify and verify the customer Collect identifying information, then verify it. For an individual that usually means full name and either date of birth or residential address, confirmed against reliable and independent sources. Government-issued documents and reputable electronic verification services are the common routes. Verification is more than collection. Holding a copy of a licence does not confirm the person is who they say they are. The standard is information that is reliable and independent of the customer's own word for it. ## Step 2: Understand non-individual customers Where the customer is a company, trust, partnership or other entity, the work expands. You need to understand the structure and identify the beneficial owners, meaning the individuals who ultimately own or control it. For a company that can mean tracing shareholdings. For a trust it means understanding the trustees, settlor and beneficiaries. This is where the regime earns its purpose. Layered structures are used to hide control, so finding the natural persons behind an entity is the point, not a formality. ## Step 3: Apply a risk-based approach Customers do not all carry the same risk, and the regime is built around that. The depth of due diligence should track the risk in front of you. Most customers are handled with standard measures. Higher-risk ones call for enhanced due diligence. Enhanced measures can include checking the source of funds, gathering more on the customer and applying closer scrutiny to the relationship. Politically exposed persons are a standard trigger here. So are opaque structures, unusual circumstances and links to higher-risk jurisdictions. Put the effort where the risk sits rather than treating every customer the same. ## Step 4: Conduct ongoing customer due diligence Onboarding is the start, not the finish. The Act requires ongoing due diligence with two limbs. Keep customer information current, so what you hold reflects the customer as they are now. And monitor transactions and behaviour, so activity that does not fit gets noticed. This monitoring is what feeds suspicious matter reporting. Verify once at onboarding and never look again, and you will not see the thing that should have prompted a report. Our review of common gaps in [starter kits](/article/austrac-starter-kit-gaps-report-card) notes that weak ongoing monitoring is one of the most frequent failures. ## Step 5: Record what you did Document the process. Record what you collected, how you verified it, what you concluded about beneficial ownership and risk and what ongoing monitoring you applied. The Act sets retention periods for these records. Good records do two jobs. They show compliance if AUSTRAC asks, and they give your own team a reference point when a customer's later activity needs to be measured against what you first understood. Our [anti-money laundering practice](/practice/anti-money-laundering) page covers how we design onboarding. ## What Tranche 2 means for newly captured firms From 1 July 2026 the Tranche 2 reforms bring lawyers, accountants, conveyancers, real estate professionals, dealers in precious metals and stones and trust and company service providers into the regime. If that is you, customer due diligence is one of the first things to build, because much of it has to run from the day you start providing a designated service. The customer identification and verification steps in this guide, including beneficial ownership and PEP screening, sit at the centre of the program you will need in place. ## Practical tips for SMEs - Build a simple intake form that captures the right information from the start. - Decide in advance which sources you will treat as reliable and independent. - For entity customers, ask for the ownership structure up front rather than chasing it later. - Set a trigger for reviewing customer information, whether a periodic check or a change in the relationship. - Keep verification records with the customer file, not scattered across systems. ## Frequently Asked Questions ### When must I verify a customer's identity? Generally before you provide the designated service. Verification at the start of the relationship is the default, with limited exceptions under the Rules. ### What counts as reliable and independent information? A source that does not simply repeat the customer's own assertion. Government-issued identity documents and reputable electronic verification services are common. The source has to provide genuine, independent confirmation. ### What is a beneficial owner? The individual or individuals who ultimately own or control a customer. For a company, the natural persons behind the shareholdings. For a trust, those who control or benefit from it. Identifying them is core to due diligence on non-individual customers. ### What is enhanced customer due diligence? Extra measures for higher-risk customers or situations. It can include checking the source of funds, gathering more information, screening for politically exposed persons and monitoring the relationship more closely than a standard customer. ### Do I really need to monitor customers after onboarding? Yes. Ongoing due diligence means keeping information current and watching for activity that does not fit. That monitoring is what lets a suspicious matter be identified and reported. This is general information, not advice on your situation. If you would like help designing customer due diligence procedures, [get in touch](/contact) or call (07) 3519 5616. ## Sources and References - Legislation Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) - Legislation Anti-Money Laundering and Counter-Terrorism Financing Amendment Act 2024 (Cth) - Regulator AUSTRAC customer identification guidance ![Jamie Nuich, Legal Practitioner Director at Astris Law](/images/jamie-nuich-portrait.jpg) ### [Jamie Nuich](/attorney/jamie-nuich) Legal Practitioner Director - Admitted as a Solicitor of the Supreme Court of Queensland - Admitted as a Solicitor of the High Court of Australia - 15+ years advising directors on commercial law, litigation, regulatory investigations and workplace matters Jamie is the founder and Legal Practitioner Director of Astris Law. She has acted first-hand for directors in urgent injunction applications, shareholder disputes, ASIC prosecutions and regulator-led investigations across Federal and State jurisdictions. She is a solicitor advocate who runs her own applications and trials where appropriate, so clients keep continuity from first advice through to hearing. Commercial Litigation Corporate & Commercial Regulatory & Compliance Employment & Workplace Anti-Money Laundering (AML/CTF) Disciplinary & Professional Conduct [LinkedIn](https://www.linkedin.com/in/jamienuich/)[QLS Register of Solicitors](https://www.qls.com.au/register-of-solicitors/jamie-leanne-nuich)[You and the Law directory](https://www.youandthelaw.com.au/organisation/98611/astris-law-pty-ltd)[Astris Law profile](/attorney/jamie-nuich) Share [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.astrislaw.com%2Farticle%2Fcustomer-due-diligence-requirements-australian-sme "Share on LinkedIn")[](https://twitter.com/intent/tweet?url=https%3A%2F%2Fwww.astrislaw.com%2Farticle%2Fcustomer-due-diligence-requirements-australian-sme&text=Customer%20Due%20Diligence%3A%20How%20Australian%20SMEs%20Should%20Verify%20Client%20Identity "Share on X")[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.astrislaw.com%2Farticle%2Fcustomer-due-diligence-requirements-australian-sme "Share on Facebook")[](mailto:?subject=Customer%20Due%20Diligence%3A%20How%20Australian%20SMEs%20Should%20Verify%20Client%20Identity&body=Customer%20due%20diligence%20is%20where%20the%20AML%2FCTF%20regime%20meets%20your%20front%20desk.%20This%20guide%20sets%20out%20what%20an%20Australian%20SME%20must%20do%20to%20verify%20identity%2C%20understand%20who%20is%20really%20behind%20a%20customer%20and%20keep%20watching%20over%20time%2C%20under%20the%20AML%2FCTF%20Act.%20It%20also%20flags%20what%20changes%20for%20firms%20newly%20captured%20by%20the%20Tranche%202%20reforms%20from%201%20July%202026.%0A%0Ahttps%3A%2F%2Fwww.astrislaw.com%2Farticle%2Fcustomer-due-diligence-requirements-australian-sme "Share on Email") This article is for general information purposes only and does not constitute legal advice and should not be relied on as such. While we take reasonable care to ensure the accuracy of the information provided, we make no representations or warranties as to its completeness, currency or reliability. We accept no liability for any loss or damage arising directly or indirectly from the use of, or reliance on, this website's content. You should always seek professional advice tailored to your specific circumstances before acting on any information in this article. Liability limited by a scheme approved under Professional Standards Legislation. [ Related Practice Area Anti-Money Laundering ](/practice/anti-money-laundering) ## Get your client onboarding right the first time Astris Law helps Australian SMEs design customer due diligence procedures that satisfy AML/CTF requirements without overburdening the front desk. To talk it through, book a call back on (07) 3519 5616. [(07) 3519 5616](tel:+61735195616)[Send an enquiry](/contact) ## Related Articles [Insights ### AML/CTF Compliance Checklist for Small Businesses: Meeting AUSTRAC Requirements Read more](/article/aml-ctf-compliance-checklist-small-business) [Insights ### Who Must Register with AUSTRAC? A Decision Guide for Australian Business Owners Read more](/article/who-must-register-with-austrac-australia) [Insights ### AML/CTF Risk Assessment: Building a Proportionate Program for Mid-Market Firms Read more ](/article/aml-ctf-risk-assessment-proportionate-program) [![Astris Law S Icon](/assets/astris-logo-icon-kBkGra_r.png)![Astris Law](/assets/astris-logo-full-wbEHTWR5.png)](/) You don't need more lawyers. You need the right one. ### Firm - [About](/about) - [The Astris Law Group](/philosophy) - [People](/team) - [Jamie Nuich](/attorney/jamie-nuich) - [Articles](/articles) - [Resources](/resources) - [Pricing & Fees](/pricing) - [Contact](/contact) ### Services - [Dispute Resolution & Litigation](/practice/dispute-resolution-litigation) - [Corporate & Commercial](/commercial-lawyers-brisbane) - [Insolvency & Restructuring](/practice/insolvency-restructuring) - [Employment & Workplace](/practice/employment-workplace-relations) - [Regulatory & Compliance](/practice/regulatory-compliance-consumer-law) - [Intellectual Property & Tech](/practice/intellectual-property-technology-data) - [Property](/practice/property) - [Disciplinary Law](/practice/disciplinary-law) - [Administrative Law & WHS](/practice/administrative-law-whs) - [Digital Assets](/digital-assets-australia) - [Regulated Market Entry](/regulated-market-entry) - [Regulatory Investigations](/regulatory-investigations-lawyers) ### Get in Touch - [The Legal Strategy Call](/consultation) - [Refer a Client](/referrals) - [(07) 3519 5616](tel:+61735195616) - [mail@astrislaw.com](mailto:mail@astrislaw.com) - [ Astris Law Level 2, 8 Clunies Ross Court Eight Mile Plains QLD 4113 Australia ](https://maps.app.goo.gl/KcW4jYe7iW7jHYHp8) ![Astris Law - Accredited Member of Queensland Law Society](/assets/qls-member-logo-DexInE_X.png)[![Lawzana Top Law Firm](https://lawzana.com/assets/badges/verified-law-firm.svg?v=2)](https://lawzana.com/lawyer/astris-law)[![Lawyer International Legal 100 2026 Winner](/assets/lawyer-international-legal-100-2026-CflMKG1C.png)](https://www.gpmg.uk/awarded-companies/astris-law) [The Astris Law Group](/philosophy) Astris Law The Right Lawyer [Astrons General Counsel](https://astrons.astrislaw.com) The Right Legal Partner [Phronesis Litigation](https://phronesis.astrislaw.com) The Right Intelligence [HeadStart Counsel](https://headstartcounsel.astrislaw.com) The Right AML Advice © Astris Law Pty Ltd ACN 662 641 269. Astrons General Counsel, Phronesis Litigation and HeadStart Counsel are the registered trading names of Astris Law Pty Ltd. Liability limited by a scheme approved under Professional Standards Legislation. [About](/about)[Contact](/contact)[Privacy Policy](/privacy)[Collection Notice](/collection-notice)[Terms of Service](/terms)Cookie Preferences [](tel:+61735195616) Cookies on by default · [Privacy](/privacy) SettingsOK