Counter-terrorism finance (CTF) means preventing, detecting and disrupting funds that flow to terrorists and terrorist organisations. If you hold an Australian Credit Licence (ACL) or work as an Authorised Credit Representative (ACR), you have a statutory obligation under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 to screen clients against sanctions lists, verify their identity, report suspicious activity, and check beneficial ownership.
CTF is distinct from anti-money laundering (AML). While AML tracks stolen or criminal proceeds, CTF focuses on blocking funds to terrorist entities—regardless of whether those funds are lawful earnings or donations. For you as a broker or lender, this means your everyday client onboarding is part of the front-line defence against terrorist financing.
Your CTF obligations are enforced by AUSTRAC, affect your ACL conditions, and breach carries civil and criminal penalties.
1. Customer identification and beneficial ownership verification
At onboarding, verify the client's identity against government-issued ID. If the applicant is a company, trust or partnership, identify and verify the beneficial owner(s) — the natural persons who ultimately own or control the entity. This is a mandatory part of your KYC (Know Your Customer) process and feeds directly into sanctions screening.
2. Sanctions screening
Screen all clients against the consolidated Australian sanctions lists (maintained by DFAT) and UN sanctions lists. Use automated tools where possible. If a match is found, do not proceed and report to AUSTRAC. Screen again at transaction approval and periodically thereafter.
3. Suspicious matter reporting
If you suspect, know or have reasonable grounds to suspect that a client, transaction, or loan purpose is linked to terrorism or terrorist financing, file a Suspicious Matter Report (SMR) with AUSTRAC without delay. Include facts: client details, transaction amounts, dates, why it looks suspicious, and any steps you took (e.g., account freeze).
4. Ongoing monitoring
Monitor client activity and behaviour during the loan term. Watch for red flags: unexplained changes in loan purpose, requests to send funds to unexpected third parties, or involvement in high-risk jurisdictions. Flag and escalate to your AML/CTF team.
Common patterns in terrorist financing that may appear in credit applications or loan management:
If you observe patterns like these, escalate to your AML/CTF officer and consider filing an SMR.
AUSTRAC supervises all reporting entities under the AML/CTF regime, including credit licensees and credit representatives. They:
Your CTF compliance is a condition of holding an ACL. AUSTRAC publishes thematic reviews (e.g., on property lending, small business finance, crypto-related credit) and expects you to remediate any deficiencies they find. Expect periodic reporting, risk-based inspections, and requests for remediation plans.
Penalties for CTF breaches can reach millions of dollars. Recent enforcement actions against financial institutions show that systemic failures — failure to screen, poor SMR practices, weak governance — attract the heaviest penalties and reputational damage.
To meet your CTF obligations as a credit licensee or ACR:
Onboarding: Use a standardised KYC form that collects client identity, beneficial ownership, business purpose, and source of funds. Verify identity against current government ID. Screen against sanctions lists before approval.
Documentation: Keep records of all verification steps, CDD documents, sanctions screening dates, and any SMRs filed. Retain for 7 years.
Escalation: Designate a Money Laundering Reporting Officer (MLRO) or AML/CTF contact. Create a simple SMR process: document suspicious activity, escalate to your MLRO, and file with AUSTRAC within a reasonable timeframe (typically within days of forming the suspicion).
Training: Brief your staff on red flags, your SMR process, and their obligations. Use real-world examples from AUSTRAC enforcement actions.
Testing: Periodically review your CTF controls (annually at minimum) to ensure they are working. Test your sanctions screening tool and review past SMRs to check accuracy.
Governance: Keep your board or senior management informed of CTF risks and any AUSTRAC communications. Document your approach in a CTF policy or as part of your broader AML/CTF framework.
AML tracks and prevents the use of financial services to launder criminal proceeds. CTF blocks funds flowing to terrorists, regardless of whether the source is legal or criminal. Both apply to you as an ACL holder.
Decline an application if the client fails basic KYC (can't verify identity) or matches a sanctions list. File an SMR if you suspect CTF involvement — for example, if the application looks legitimate but the intended use or counterparties suggest terrorist financing. File both if relevant: decline and report.
The threshold is "you know, suspect or have reasonable grounds to suspect" that CTF is involved. Err on the side of reporting. AUSTRAC expects over-reporting rather than under-reporting. Your MLRO can help assess.
7 years from the date the record is created, or for the life of the loan and then 7 years post-closure.
No — you have an obligation of confidentiality when filing with AUSTRAC. Disclosure can interfere with law enforcement and may itself breach the AML/CTF Act.
Respond promptly and in full. AUSTRAC has broad powers to request information. Failure to respond or false information is a serious breach.
Yes. If you hold an ACL or work as an ACR, you are a reporting entity under the AML/CTF Act. Size does not exempt you.
CTF compliance is not optional—it's a statutory obligation under the AML/CTF Act and a condition of your ACL. Your role is straightforward:
These steps are part of professional credit practice and protect you, your business and the financial system. AUSTRAC is actively supervising credit licensees on CTF compliance. Recent thematic reviews have found gaps in sanctions screening, weak SMR practices and poor record-keeping. Invest in basic systems (a sanctions screening tool, an SMR template, staff training) and you'll manage your obligations efficiently and defensively.