Lawyers
AML/CTF for law firms: designated services, privilege and client checks
Law firms are regulated for specific designated services, not for legal practice in general.
AUSTRAC's professional designated services guidance applies the same way to lawyers as to other professionals. A firm provides a designated service when it takes active steps that directly advance a specified transaction, or the creation or restructure of an entity, with a geographical link to Australia. Giving legal advice, or providing an ancillary service that merely influences a transaction, is not enough on its own.
In practice, the services most likely to be captured include assisting with real estate transfers, the sale or transfer of control of a company or trust, creating or restructuring entities, arranging finance for an entity, and receiving, holding or controlling client money or property to advance one of those transactions. Many litigation, employment and advisory matters will not involve a designated service, but each matter type needs to be assessed.
Legal professional privilege has its own rules and exceptions under the reforms. It is not a blanket exemption from AML/CTF obligations, and it does not remove the need for customer due diligence. Read AUSTRAC's guidance and your professional body's materials on how privilege interacts with reporting.
If your firm provides designated services, obligations have applied since 1 July 2026. Matter intake is the natural point to classify the matter and start checks.
Scope
What is and isn't usually in scope.
Services that can be designated services
- Assisting a client with a real estate transfer
- Assisting with the sale or transfer of control of a company, trust or other legal arrangement
- Creating or restructuring an entity, or selling a shelf company
- Arranging equity or debt finance for an entity
- Receiving, holding, controlling or managing client money or property to advance a specified transaction, subject to exceptions
- Acting in specified roles or as a nominee, or providing a registered office address
Not automatically captured
- Legal advice that does not take active steps to advance a specified transaction
- Ancillary services that merely influence a transaction
Privilege rules and exceptions are specific. InvestPass does not give legal advice and does not decide whether privilege applies. Not sure? Try the readiness checker.
Example workflow
A practical onboarding sequence.
- 1
Classify at matter intake
Record whether the matter includes a designated service, and why.
- 2
Check the client and anyone acting for them
Send an InvestPass link to the client. Confirm the authority of anyone instructing on the client's behalf.
- 3
Identify beneficial owners
For entity clients, identify anyone who ultimately owns 25% or more or otherwise controls the client.
- 4
Understand the purpose
Record the nature and purpose of the matter, and the source of funds where risk requires it.
- 5
Escalate PEP and sanctions issues
Do not proceed on a potential sanctions match without specialist review.
- 6
Keep records with the matter
CDD records are generally kept for 7 years after the relationship ends or the last occasional transaction.
This is an example only. Adapt it to your own AML/CTF policies.
Identity check vs program
A check is one step, not the whole job.
An InvestPass check helps with one part of customer due diligence: verifying identity and gathering ownership details. It does not by itself make you compliant. You still need your ML/TF risk assessment, AML/CTF policies, a compliance officer, PEP and sanctions handling, ongoing due diligence, reporting and record keeping. AUSTRAC states that a digital identity check alone is not full AML/CTF compliance.
When to check
Moments that usually need a check.
- Engaging a new client for a covered service
- Setting up a company or trust for a client
- Receiving, holding or controlling client money or property to advance a transaction
- A client is acting for someone else
Individual check
ID, face match and AML screening for the client.
Company check
ASIC details, directors and owners for company clients.
Trust check
Trustee, deed and controllers for trust clients.
Good to know
Tips for your team.
- Use one link per client so the result sits neatly with the matter.
- Your duty to the client and legal privilege rules still apply. InvestPass does not give legal advice.
General information only, not legal advice. Check your own obligations with AUSTRAC guidance or a qualified adviser.
Pricing
Pay per check. No monthly fee.
Individual Verification
FeaturedIndicative, to be confirmed
$20per person · GST included
Identity and AML screening for one person.
- Identity verification
- ID document and liveness
- PEP, sanctions and watchlists
- Risk assessment
Entity Verification
Indicative, to be confirmed
$40per entity · GST included
Company, trust or SMSF verification.
- ABN / ACN and business details
- Directors, trustees and shareholders
- Trust deed collection
- Entity screening
Beneficial Owner Verification
Indicative, to be confirmed
$20per owner · GST included
Each beneficial owner of an entity: owns 25% or more, or otherwise controls it.
- Identity verification
- PEP and sanctions screening
- Linked to the entity report
Indicative, to be confirmed. Prices in AUD, GST included.
FAQ
