Counter-terrorism finance (CTF) is the set of controls that prevent, detect and cut off funds flowing to terrorists, which Australian reporting entities must apply under the AML/CTF Act.
Also known as: CTF, counter-terrorism financing, terrorism financing controls
Key points
- It sits in the same Anti-Money Laundering and Counter-Terrorism Financing Act 2006 as AML and is supervised by AUSTRAC.
- Unlike anti-money laundering, which targets the proceeds of crime, CTF targets where money is going: the funds may be lawfully earned or donated.
- Core duties are verifying identity and beneficial owners, sanctions screening against DFAT and UN lists, suspicious matter reporting and ongoing monitoring.
- A confirmed sanctions match means do not deal and report to DFAT's Australian Sanctions Office; a terrorism financing suspicion goes to AUSTRAC.
- Breaches carry civil and criminal penalties, and AUSTRAC's reviews keep finding gaps in screening, reporting and record-keeping.
How CTF differs from AML
Anti-money laundering follows dirty money: it asks where funds came from and tries to stop criminal proceeds being dressed up as legitimate. Counter-terrorism finance runs the other way. It asks where money is going, because funds destined for a terrorist organisation may be perfectly clean at the start, such as wages, business profits or charitable donations. That is why CTF controls lean on screening and on the purpose and destination of transactions rather than only on the source of funds.
In Australia both are handled under one Act, one regulator and one AML/CTF program, so a lender does not run two separate systems. The everyday onboarding checks a lender or broker performs are the front line for both.
The four core obligations
First, identify the customer against government-issued ID and, where the applicant is a company, trust or partnership, identify and verify the natural persons who ultimately own or control it. Second, screen every customer against the consolidated Australian sanctions list maintained by DFAT and the UN lists, ideally with an automated tool, at onboarding, again at approval and periodically after that. A confirmed match means do not deal with the customer or the asset and report it to DFAT's Australian Sanctions Office, contacting the AFP where required; a suspicious matter report to AUSTRAC is a separate step.
Third, if you know, suspect or have reasonable grounds to suspect that a customer, transaction or loan purpose is linked to terrorism, lodge a suspicious matter report with AUSTRAC without delay, setting out the facts and any steps taken. Fourth, keep monitoring during the life of the loan: changes in stated purpose, requests to pay unexpected third parties and links to high-risk countries all warrant escalation to the compliance officer.
Red flags in credit applications
Terrorism financing rarely announces itself, so the signals are patterns. Company structures that obscure the true owner, or reluctance to explain ownership. Customers who are politically exposed persons or connected to high-risk jurisdictions. A loan purpose that does not fit the declared occupation or business. Funds to be paid to, or received from, unrelated third parties.
Add to that structuring, where several small applications or deposits sit just under reporting thresholds; unusual urgency and pressure to skip normal checks; cash-intensive businesses where money is hard to trace; and transfers to charities or non-profits with little governance or transparency. None of these proves anything on its own. Together they justify a closer look and, if the suspicion holds, a report.
Practical compliance for lenders and brokers
Lenders that make loans are reporting entities under the Act; whether a broker is caught depends on the services it provides, though licensees are expected to have CTF procedures whatever their size. The workable setup is simple: a standard onboarding form that captures identity, beneficial ownership, business purpose and source of funds; a sanctions screening step before approval; and a nominated AML/CTF compliance officer with a short escalation and reporting process.
Keep records of every verification, screening date and report for the statutory period, which the Act sets at seven years. Train staff on the red flags using real enforcement examples, test the screening tool and review past reports at least annually, and keep the board informed of CTF risks and any AUSTRAC correspondence. Never tell a customer that a report has been lodged: tipping off is itself a breach.
Example
A company applies for finance on a fleet of vans. The director supplies ID, but the shareholder register shows a trust with no named beneficiaries and the director resists explaining who controls it. The loan purpose does not match the company's stated activity, and the deposit is to come from an overseas account in a high-risk jurisdiction. Sanctions screening returns no match, so there is no automatic bar, but the combination of unexplained ownership, mismatched purpose and offshore funds is enough for the lender to escalate to its compliance officer, lodge a suspicious matter report and decline the application without telling the applicant why.
Not to be confused with
- Anti-money laundering (AML)
- AML targets the proceeds of crime; CTF blocks funds going to terrorists whether or not the money was lawfully earned
- Sanctions checks
- sanctions screening is one CTF control, checking customers against DFAT and UN lists, not the whole framework
- Know your customer (KYC)
- KYC establishes who the customer is; CTF uses that identity to screen and monitor for terrorism financing risk
Frequently asked questions
What is the difference between CTF and AML?
Anti-money laundering stops the proceeds of crime being disguised as legitimate money, so it focuses on where funds came from. Counter-terrorism financing stops money reaching terrorists, so it focuses on where funds are going, even if they were earned lawfully. Both are regulated under the same Act and covered by the same AML/CTF program.
Do finance brokers have counter-terrorism financing obligations?
Lenders that provide loans are reporting entities under the AML/CTF Act and must apply CTF controls. Whether a broker is caught depends on whether it provides a designated service, but brokers routinely carry out identity and sanctions checks as part of a lender's onboarding, and licensees are expected to have CTF procedures in place regardless of size.
When should I lodge a suspicious matter report rather than just declining the application?
Decline when the customer fails basic identification or matches a sanctions list. Lodge a suspicious matter report when you know, suspect or have reasonable grounds to suspect terrorism financing, for example when an application looks legitimate but the purpose or counterparties do not add up. Often you do both: decline and report. If in doubt, report.
Can I tell a customer that I have filed a suspicious matter report?
No. Reports to AUSTRAC are confidential, and telling the customer, or anyone else outside the reporting chain, can interfere with law enforcement and is itself a breach of the AML/CTF Act. Record the decision internally, decline or proceed as your process requires, and leave any contact with the customer about the report to the authorities.
How long do I need to keep CTF records?
Identification records, screening results, transaction records and copies of reports must be kept for the statutory retention period, which the AML/CTF Act sets at seven years from when the record was made or the relationship ended. Store them securely and in a form that can be retrieved if AUSTRAC asks for them.
Related terms
Anti-money laundering (AML)
Anti-money laundering (AML) is the set of laws, controls and processes designed to stop criminals turning the proceeds of crime into apparently legitimate funds, enforced in Australia by AUSTRAC.
Read definitionAUSTRAC
AUSTRAC is Australia's financial intelligence unit and anti-money laundering regulator: it collects reports from regulated businesses, analyses them and supervises reporting entities under the AML/CTF Act.
Read definitionSanctions checks
Sanctions checks are screening steps that test whether a person, company or transaction is subject to government sanctions, such as asset freezes, before a lender deals with them.
Read definitionKnow your customer (KYC)
Know your customer (KYC) is the process a reporting entity uses to identify and verify a customer, understand their business and assess the money laundering and terrorism financing risk.
Read definitionBeneficial owner
A beneficial owner is the natural person who ultimately owns or controls a company, trust or other entity, even when legal title sits in another name.
Read definitionPolitically exposed person (PEP) checks
Politically exposed person (PEP) checks are screening steps that flag customers who hold prominent public positions, so a lender can apply extra due diligence under anti-money laundering laws.
Read definitionGo deeper
Sources
This article is general information only and is not financial advice.