AML/CTF compliance for small businesses in Australia — AUSTRAC 2026 obligations

If you provide a designated service under the AML/CTF Act 2006 (Cth), you are a reporting entity regardless of business size. Designated services are defined in Table 1 and Table 2 of s 6 of the Act — they include accounting services (company formation, managing client money, trust establishment), conveyancing, real estate transactions, and specified legal services. There is no small-business exemption. The program itself can be proportionate to your actual risk, but it must exist.

Designated services are the specific activities that bring a business within the AML/CTF regime. Under the AML/CTF Amendment Act 2024, the list expanded significantly to include accountants forming companies or trusts on behalf of clients, managing client money, conveyancing, real estate transactions above certain thresholds, and specified legal services. If you are unsure whether your services are captured, the safest approach is AUSTRAC's own guidance or a 15-minute review of your service list against Table 1 and Table 2 of the Act.

Yes. AUSTRAC guidance permits a business owner, sole practitioner, or managing director to hold the compliance officer role. What matters is that the appointment is documented, the role description specifies responsibilities clearly, and the person actually administers the program. A nominal appointment does not satisfy the Act.

Traditional AML/CTF consulting engagements cost $5,000–$15,000 or more for initial program development, plus ongoing fees for annual reviews. AutoAML starts at $99/month with the subscription free until 1 July 2026, generating all 13 required documents from your onboarding answers. Identity verifications are $4 each, billed separately at trial end. The platform also maintains your documents, sends review reminders, and tracks training — replacing what would otherwise be an ongoing consultant retainer.

Operating as a reporting entity without a compliant program is a contravention of the AML/CTF Act. Civil penalties under Part 15A can reach $22.2 million per contravention for body corporates and $4.44 million for individuals. AUSTRAC has signalled active supervision of Tranche 2 industries from commencement — not a grace period. Westpac was penalised $1.3 billion in 2020 for program failures, and Crown Resorts paid $450 million in 2022.

Yes. AUSTRAC requires all reporting entities to maintain a training program under Part 2 of the AML/CTF Act, and this applies even to sole practitioners. As the compliance officer, you must be trained yourself and document that training. AutoAML generates sole-practitioner training materials and logs your completion, producing the evidence an auditor expects.