Lawyers

AML/CTF for law firms: designated services, privilege and client checks

Law firms are regulated for specific designated services, not for legal practice in general.

AUSTRAC's professional designated services guidance applies the same way to lawyers as to other professionals. A firm provides a designated service when it takes active steps that directly advance a specified transaction, or the creation or restructure of an entity, with a geographical link to Australia. Giving legal advice, or providing an ancillary service that merely influences a transaction, is not enough on its own.

In practice, the services most likely to be captured include assisting with real estate transfers, the sale or transfer of control of a company or trust, creating or restructuring entities, arranging finance for an entity, and receiving, holding or controlling client money or property to advance one of those transactions. Many litigation, employment and advisory matters will not involve a designated service, but each matter type needs to be assessed.

Legal professional privilege has its own rules and exceptions under the reforms. It is not a blanket exemption from AML/CTF obligations, and it does not remove the need for customer due diligence. Read AUSTRAC's guidance and your professional body's materials on how privilege interacts with reporting.

If your firm provides designated services, obligations have applied since 1 July 2026. Matter intake is the natural point to classify the matter and start checks.

Scope

What is and isn't usually in scope.

Services that can be designated services

  • Assisting a client with a real estate transfer
  • Assisting with the sale or transfer of control of a company, trust or other legal arrangement
  • Creating or restructuring an entity, or selling a shelf company
  • Arranging equity or debt finance for an entity
  • Receiving, holding, controlling or managing client money or property to advance a specified transaction, subject to exceptions
  • Acting in specified roles or as a nominee, or providing a registered office address

Not automatically captured

  • Legal advice that does not take active steps to advance a specified transaction
  • Ancillary services that merely influence a transaction

Privilege rules and exceptions are specific. InvestPass does not give legal advice and does not decide whether privilege applies. Not sure? Try the readiness checker.

Example workflow

A practical onboarding sequence.

  1. 1

    Classify at matter intake

    Record whether the matter includes a designated service, and why.

  2. 2

    Check the client and anyone acting for them

    Send an InvestPass link to the client. Confirm the authority of anyone instructing on the client's behalf.

  3. 3

    Identify beneficial owners

    For entity clients, identify anyone who ultimately owns 25% or more or otherwise controls the client.

  4. 4

    Understand the purpose

    Record the nature and purpose of the matter, and the source of funds where risk requires it.

  5. 5

    Escalate PEP and sanctions issues

    Do not proceed on a potential sanctions match without specialist review.

  6. 6

    Keep records with the matter

    CDD records are generally kept for 7 years after the relationship ends or the last occasional transaction.

This is an example only. Adapt it to your own AML/CTF policies.

Identity check vs program

A check is one step, not the whole job.

An InvestPass check helps with one part of customer due diligence: verifying identity and gathering ownership details. It does not by itself make you compliant. You still need your ML/TF risk assessment, AML/CTF policies, a compliance officer, PEP and sanctions handling, ongoing due diligence, reporting and record keeping. AUSTRAC states that a digital identity check alone is not full AML/CTF compliance.

When to check

Moments that usually need a check.

  • Engaging a new client for a covered service
  • Setting up a company or trust for a client
  • Receiving, holding or controlling client money or property to advance a transaction
  • A client is acting for someone else

Individual check

ID, face match and AML screening for the client.

Company check

ASIC details, directors and owners for company clients.

Trust check

Trustee, deed and controllers for trust clients.

Good to know

Tips for your team.

  • Use one link per client so the result sits neatly with the matter.
  • Your duty to the client and legal privilege rules still apply. InvestPass does not give legal advice.

General information only, not legal advice. Check your own obligations with AUSTRAC guidance or a qualified adviser.

Pricing

Pay per check. No monthly fee.

Entity Verification

Indicative, to be confirmed

$40per entity · GST included

Company, trust or SMSF verification.

  • ABN / ACN and business details
  • Directors, trustees and shareholders
  • Trust deed collection
  • Entity screening

Beneficial Owner Verification

Indicative, to be confirmed

$20per owner · GST included

Each beneficial owner of an entity: owns 25% or more, or otherwise controls it.

  • Identity verification
  • PEP and sanctions screening
  • Linked to the entity report
No monthly subscriptionPay only for the checks you usePrices include GST
Prepaid credit packs and Volume pricing for 100+ checks a month: contact us

Indicative, to be confirmed. Prices in AUD, GST included.

FAQ

Common questions

See all questions