Free tool

AML/CTF readiness checker.

A quick self assessment for businesses that may provide designated services. It is a checklist, not a legal scope decision or a compliance score.

Obligations have already started. AUSTRAC states that newly regulated sectors providing designated services have been regulated from 1 July 2026, and changes for existing reporting entities started on 31 March 2026 unless deferred under transitional rules. If you are newly regulated, work through any gaps now.

Everything you enter stays in this browser. Nothing is sent to InvestPass.

1. Your business

Regulation depends on the designated services you provide, not your profession alone.

Business type

Do you provide any of these services for customers? Creating or restructuring companies, trusts or other entities for a customer Receiving, holding or controlling a customer's money or property Assisting with buying, selling or transferring real estate Acting as, or arranging for someone to act as, a nominee director, shareholder or trustee Providing a registered office or business address for an entity Assisting with buying or selling a business None of these

Select any services that apply. This is an indication only, not a legal scope decision.

2. Readiness questions

Enrolment · critical

1. If you provide designated services, has your business enrolled with AUSTRAC?

AML/CTF compliance officer · critical

2. Have you appointed an AML/CTF compliance officer with the authority and resources to do the role?

ML/TF risk assessment · critical

3. Have you documented a money laundering and terrorism financing risk assessment for your business?

AML/CTF policies (program) · critical

4. Do you have written AML/CTF policies, approved by senior management, that address the risks you identified?

Customer due diligence · critical

5. Do you have a process for initial customer due diligence, including beneficial owners, PEPs, sanctions and customer risk?

Staff training

6. Have relevant staff completed AML/CTF training, and do you keep a training log?

Reporting to AUSTRAC · critical

7. Do staff know how to escalate suspicions, and do you know how to lodge SMRs, TTRs and other required reports?

Record keeping

8. Do you keep CDD and transaction records for the required periods?

Ongoing review

9. Do you have a plan for ongoing customer due diligence and regular review of your risk assessment and policies?

Your results

Answered 0 of 9. Date: 14/11/2026

Checklist completion: 0%

This shows how many checklist items you marked done. It is not a compliance score, rating or certification.

6 critical areas still need attention, whatever the percentage shows.

Critical gaps

Enrolment
AML/CTF compliance officer
ML/TF risk assessment
AML/CTF policies (program)
Customer due diligence
Reporting to AUSTRAC

Action list

Enrolment. Confirm whether you provide designated services and, if so, enrol with AUSTRAC through AUSTRAC Online. Enrolment is different from registration, which usually only applies to remittance and virtual asset services.
AML/CTF compliance officer. Appoint an AML/CTF compliance officer and record the appointment, their responsibilities and reporting line.
ML/TF risk assessment. Complete and document a business ML/TF risk assessment. Our free risk assessment tool can help you start.
AML/CTF policies (program). Draft AML/CTF policies that respond to your risk assessment. Start from the AUSTRAC program starter kit for your sector and have them reviewed.
Customer due diligence. Set up an initial CDD process: identity, beneficial owners, persons acting on behalf, nature and purpose, PEP and targeted financial sanctions checks, and customer risk rating.
Staff training. Train relevant staff and keep a training log. Our free training modules and training log template can help.
Reporting to AUSTRAC. Document an escalation path and how to lodge SMRs, TTRs and other reports. Read our SMR and TTR guide.
Record keeping. Set up record keeping. For example, CDD records are generally kept for 7 years after the business relationship ends or after the last occasional transaction. Check the rule for each record type.
Ongoing review. Schedule ongoing CDD and periodic reviews of your risk assessment and AML/CTF policies, plus independent evaluation where required.

Verify a client with InvestPass