AML Compliance Guide
Log in Create Free Account
Deadline: 29 July 2026 — enforcement now active

Compliance officer for Bookkeeperss — 2026 AUSTRAC Guide

If your bookkeeping practice will provide a designated service from 1 July 2026, you need a clearly appointed AML/CTF compliance officer from the start of your rollout, and you must be ready to enrol with AUSTRAC by 29 July 2026. For bookkeepers, this role matters because your work can involve client money flows, entity structures and transaction instructions that create money laundering risk; getting governance wrong can expose the practice to AUSTRAC action, civil penalties of up to $33.5 million per contravention, and criminal penalties for intentional breaches.

Your AML/CTF obligations

  1. 1. AUSTRAC enrolment
  2. 2. Compliance officer
  3. 3. ML/TF risk assessment
  4. 4. AML/CTF program
  5. 5. Customer due diligence
  6. 6. Sanctions screening
  7. 7. Suspicious matter reporting
  8. 8. Record keeping (7 years)
  9. 9. Staff training

A compliance officer is the person in your bookkeeping business who is responsible for day-to-day AML/CTF oversight. They do not replace you as owner or principal, but they are the person who drives the practical work: helping set up the ML/TF risk assessment, coordinating your AML/CTF program, making sure customer due diligence happens before a designated service is provided, overseeing sanctions screening, keeping reporting on track and making sure records and training are up to date. AUSTRAC guidance also says this person must be fit and proper, with the competence, judgement, honesty and integrity to do the role properly.

Deadline and urgency

Have your compliance officer identified and ready before you enrol with AUSTRAC. Newly regulated businesses providing designated services from 1 July 2026 must enrol by 29 July 2026, and waiting until later to decide who is responsible is risky. AUSTRAC has said it expects reasonable steps from day one and will focus enforcement on businesses that make no meaningful effort to comply.

What a bookkeeping practice should do now

  • Work out first whether you actually provide a designated service. Bookkeeping that is only routine data entry or payroll support may not trigger the regime, but services involving certain transactions, structures or client funds may.
  • Appoint one person as AML/CTF compliance officer in writing. In a small practice, this may be the owner, director or practice manager.
  • Check they are fit and proper: no serious integrity issues, no disqualifying insolvency concerns, and no conflict that would stop them doing the job properly.
  • Give them authority, time and access to client files, onboarding information and reporting systems so they can actually supervise compliance.
  • Record the appointment, responsibilities and reporting line to the principal or senior manager before your AUSTRAC enrolment is submitted.
  • Make them responsible for the first implementation steps: risk assessment, program drafting, onboarding checks, sanctions screening process, SMR escalation path and staff training plan.

For bookkeepers, the biggest mistake is assuming the compliance officer is only needed once the AML/CTF program is finalised by 31 December 2026. That is too late. Someone must own the setup work from the beginning. Another common mistake is choosing the most junior admin person because they are organised. In a bookkeeping firm, the role needs enough seniority to question unusual client instructions, stop work until CDD is complete, escalate suspicious matters and require staff to follow procedures. If your practice is very small, the owner can hold the role, but must still treat it as a real governance function, not a title on paper.

Practical tips for bookkeepers

  • Tie the role into your client onboarding process so no new trust, company, payroll clearing or transaction-related matter starts before CDD is complete.
  • Use a simple escalation rule: if a client wants unusual cash handling, complex ownership structures, remote-only engagement or urgent movement of funds, staff must stop and refer it to the compliance officer.
  • Build the role into your practice software and checklists so identity documents, ASIC extracts, beneficial owner details and sanctions results are captured in one place.
  • Set a diary reminder for at least annual compliance reporting from the compliance officer to the practice owner or governing body, as AUSTRAC guidance expects regular reporting at least once every 12 months.
  • Document staff questions and issues confidentially so the compliance officer can spot gaps early and update training when your program changes.

A lightweight AML platform, built exclusively for Tranche 2

Get AUSTRAC's mandates done as fast and effortless as possible.

  • Built around AUSTRAC's actual requirements
  • Single maintained compliance file
  • No compliance expertise required
  • 25 minute initial compliance setup
  • Obligations calendar & reminders
  • Instant data export
Setup: ~25 minutes Ongoing: minutes per client Price: $8 per KYC
See the product →

Frequently asked questions

Do I need a compliance officer if I am a sole trader bookkeeper?
Yes, if you provide a designated service and are therefore a reporting entity, someone must take responsibility for AML/CTF compliance. In a sole trader practice, that will usually be you. The key point is that the role must be genuinely performed, even if the business is very small.
Can my external accountant or consultant be our compliance officer?
They can help design your systems, but your business still needs a clearly appointed person with real authority over day-to-day AML/CTF compliance. For most small bookkeeping practices, AUSTRAC will expect someone inside the business to own escalation, reporting and staff oversight. Outsourcing advice is fine; outsourcing accountability is not.
What does it cost to appoint a compliance officer?
There is no AUSTRAC fee just to appoint a compliance officer, and AUSTRAC enrolment itself is free. Your cost is mainly staff time, training, program setup and possibly external advice. For a small bookkeeping practice, the cheapest option is often appointing the owner or senior manager and supporting them with targeted templates and training.
What if our practice only prepares BAS, payroll and routine bookkeeping records?
You only need this role if your practice provides a designated service. Tax return preparation alone is generally not a designated service for accountants, and not every bookkeeping task will be caught either. You should check your actual services carefully rather than assuming all bookkeeping work is automatically regulated.
When should the compliance officer start doing their job if the AML/CTF program is not due until 31 December 2026?
Before enrolment and before you start delivering designated services under the new regime. The compliance officer should be in place early enough to help identify whether your services are regulated, prepare for AUSTRAC enrolment by 29 July 2026, set up onboarding controls and begin the risk assessment. Leaving the role vacant until the end of 2026 creates an obvious compliance gap.

Related guides