What is AUSTRAC?

AUSTRAC has two jobs that feed each other. As a financial intelligence unit it receives suspicious matter reports, cross-border transfer instructions and high-value transaction reports from regulated businesses, analyses that data and passes intelligence to the Australian Federal Police, ASIC, the ATO and counterpart agencies overseas. As a regulator it supervises the businesses that must lodge those reports.

The supervisory side includes publishing guidance for banks, remitters, casinos, digital currency exchanges and other sectors, running compliance assessments and audits, and enforcing the Act when a business falls short. Because the intelligence is shared, a single report from a small lender can end up supporting a police investigation or a tax recovery action.

A reporting entity is any business caught by the AML/CTF framework because of the designated services it provides. The usual categories are banks, credit unions and other deposit-takers; remitters and payment service providers; casinos and gaming operators; digital currency exchanges and wallet providers; dealers in high-value goods, including precious metals and stones; trustees and custodians; and certain loan providers, foreign exchange dealers and money changers. Real estate professionals, conveyancers, lawyers, accountants and trust and company service providers are caught when they provide specified services such as conveyancing or trust work.

You must enrol with AUSTRAC within the statutory window after you start providing a designated service, and remitters and digital currency exchanges must be registered before they begin. Operating without the registration you need is a breach in itself. The obligations are proportionate: a small remitter runs a scaled-down program compared with a major bank, but the core principles are the same. To confirm whether you are caught, check the statutory definitions in the Act and AUSTRAC's industry guidance.

Every reporting entity must maintain a documented AML/CTF program approved by senior management, assess its money laundering and terrorism financing risk across customers, services, channels and countries, identify and verify customers and their beneficial owners with enhanced due diligence for higher-risk relationships, monitor transactions, screen and train staff, keep auditable records for the statutory period and test the program independently.

Three reports matter most, all lodged through AUSTRAC Online. A suspicious matter report goes in as soon as practicable once you form a reasonable suspicion that a transaction or customer is linked to crime, money laundering or terrorism financing. An international funds transfer instruction captures sender and recipient details for cross-border transfers. Threshold transaction reports cover cash and other transactions above the set limits. AUSTRAC may also ask for compliance reports during audits.

AUSTRAC's tools run from compliance notices and remedial directions, through infringement notices and enforceable undertakings, to civil penalty proceedings and criminal referral for intentional or reckless conduct. In deciding how hard to go it weighs the scale and duration of the failure, whether controls were absent or merely ineffective, the harm to the financial system, and how quickly and openly the business fixed the problem.

Its published cases follow a pattern: a large institution with transaction monitoring nobody tuned, a remitter with poor customer identification, a crypto exchange lodging transfer reports late. If you receive a compliance notice, engage legal and compliance advice, preserve evidence, hand over what is requested and implement the agreed remediation. Transparency and speed reduce the severity of the outcome.