What is AML/CTF? A Plain English Guide for Australian Businesses

If you run a business in Australia, you have probably heard the terms "AML" and "CTF" thrown around more frequently in recent months. With the passage of the AML/CTF Amendment Act and the looming July 2026 deadline, understanding these obligations is no longer optional for many professionals. This guide breaks it all down in plain English.

What Does AML/CTF Stand For?

AML stands for Anti-Money Laundering. CTF stands for Counter-Terrorism Financing. Together, AML/CTF refers to the laws, regulations, and procedures designed to prevent criminals from disguising illegally obtained money as legitimate income, and to stop funds from being channelled to terrorist organisations.

In Australia, the primary legislation is the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (the AML/CTF Act), and the regulator responsible for enforcement is AUSTRAC (Australian Transaction Reports and Analysis Centre).

How Does Money Laundering Work?

Money laundering typically follows three stages:

1. Placement — Introducing dirty money into the legitimate financial system. This might involve depositing cash into bank accounts, purchasing high-value assets, or using businesses with high cash turnover.

2. Layering — Moving the money through a series of complex transactions to obscure its origin. This can involve transferring funds between accounts, using shell companies, or purchasing and selling property.

3. Integration — The laundered money re-enters the economy as apparently legitimate funds. The criminal can now use the money freely without raising suspicion.

Who Needs to Comply?

Historically, AML/CTF obligations in Australia applied mainly to financial institutions, banks, casinos, and remittance providers. However, the Tranche 2 reforms are extending these obligations to a much broader set of businesses, including:

• Real estate agents involved in buying and selling property
• Accountants providing certain financial services
• Lawyers and conveyancers handling property transactions, trust accounts, or company formations
• Other designated non-financial businesses and professions (DNFBPs)

If your business falls into one of these categories, you will need to have a compliant AML/CTF program in place before 1 July 2026.

What Are the Key Obligations?

Once covered by the AML/CTF Act, your business must:

• Enrol with AUSTRAC as a reporting entity
• Develop an AML/CTF compliance program (Part A and Part B)
• Identify and verify your customers (Know Your Customer, or KYC)
• Conduct risk assessments to understand your exposure to ML/TF risks
• Monitor transactions for suspicious activity
• Report suspicious matters (SMRs) and threshold transactions to AUSTRAC
• Keep records for at least seven years
• Train your staff on AML/CTF obligations

What Happens if You Don't Comply?

AUSTRAC has significant enforcement powers. Penalties for non-compliance can include:

• Civil penalties of up to $18.78 million per contravention for corporations
• Criminal penalties including imprisonment
• Enforceable undertakings and remedial directions
• Reputational damage through public enforcement actions

AUSTRAC has previously taken major enforcement actions against CBA ($700 million), Westpac ($1.3 billion), and Crown Resorts, demonstrating that it takes compliance seriously.

How Can You Get Started?

The good news is that getting compliant does not have to be overwhelming. Here is a practical starting point:

1. Determine whether your business is a reporting entity under the expanded Tranche 2 rules
2. Enrol with AUSTRAC before the deadline
3. Build your AML/CTF compliance program covering risk assessment, CDD procedures, reporting, and training
4. Train your team so everyone understands their obligations
5. Document everything — good record keeping is essential

ComplyReady is built specifically to help Australian businesses navigate these requirements. Our platform walks you through building a compliant program step by step, with AI-powered guidance tailored to your industry.

Don't wait until the deadline. Get started with ComplyReady today and be compliant well before July 2026.