AML Compliance Guide
Log in Create Free Account

Suspicious matter reporting for Bookkeeperss — 2026 AUSTRAC Guide

If your bookkeeping practice provides a designated service from 1 July 2026, you must file a suspicious matter report with AUSTRAC when you form a suspicion on reasonable grounds that a client, or a transaction involving that client, may be linked to crime, terrorism financing, identity fraud or another reportable concern. This matters for bookkeepers because you often see payroll data, cash handling patterns, source documents, invoices and payment instructions before anyone else. Missing the deadline, failing to report, or tipping off the client can lead to serious consequences, including civil penalties of up to $33.5 million per contravention and criminal penalties for intentional breaches.

Your AML/CTF obligations

  1. 1. AUSTRAC enrolment
  2. 2. Compliance officer
  3. 3. ML/TF risk assessment
  4. 4. AML/CTF program
  5. 5. Customer due diligence
  6. 6. Sanctions screening
  7. 7. Suspicious matter reporting
  8. 8. Record keeping (7 years)
  9. 9. Staff training

For a bookkeeping practice, suspicious matter reporting is not about proving a crime. The test is lower than that: you report when you have reasonable grounds to suspect something is wrong. AUSTRAC guidance also makes clear this can include suspecting that a person is committing a crime, is not who they claim to be, or could be the victim of a crime. In practice, that can arise when you see false supplier invoices, unexplained cash takings, payroll entries for workers who do not exist, repeated requests to backdate records, company details that do not match ASIC records, or instructions to move funds through unrelated accounts without a clear business reason.

SMR deadlines

File an SMR with AUSTRAC within 3 business days of forming the suspicion. If the suspicion relates to terrorism financing, the deadline is 24 hours. Do not tell the client you have filed, or are considering filing, an SMR — tipping off is a separate criminal offence.

What a bookkeeper should do when something looks suspicious

  • Pause and assess the facts you can see in the records: who is involved, what transaction or conduct concerns you, when it happened, and why it does not fit the client’s normal business activity.
  • Check whether more review is needed before you decide. AUSTRAC guidance says that if you are unsure, you should conduct further monitoring and examination. That may include enhanced due diligence, such as asking for supporting documents or verifying company details more closely.
  • Escalate the matter internally to the person responsible for AML/CTF in your practice and record the date the suspicion was formed, because that starts the reporting clock.
  • Submit the SMR to AUSTRAC within the required timeframe and keep the report, supporting material and internal notes for 7 years after the client relationship ends.

A common mistake for bookkeepers is assuming suspicious matter reporting only applies if cash is involved. It does not. Electronic payments, payroll transfers, journal adjustments, reimbursements and overseas payment instructions can all raise SMR issues. Another mistake is thinking tax return preparation or ordinary data entry automatically makes you a reporting entity. It does not. The AML/CTF rules only apply if your practice provides a designated service. Once you do, though, the reporting obligation attaches to suspicious matters you detect in that regulated work.

Practical red flags in bookkeeping files

  • A client insists on recording large 'loan' entries with no agreement, no lender details and no repayment terms.
  • Multiple payments are made to suppliers with nearly identical names, matching bank details or no clear commercial purpose.
  • The client’s records show round-dollar withdrawals, missing invoices or repeated corrections that reduce GST, wages or revenue without explanation.
  • A director asks you to process payments for a company or trust that is not the client you were engaged to act for.
  • Corporate clients share addresses, controllers or contact details with other entities in a way that suggests nominee structures or concealment.

A lightweight AML platform, built exclusively for Tranche 2

Get AUSTRAC's mandates done as fast and effortless as possible.

  • Built around AUSTRAC's actual requirements
  • Single maintained compliance file
  • No compliance expertise required
  • 25 minute initial compliance setup
  • Obligations calendar & reminders
  • Instant data export
Setup: ~25 minutes Ongoing: minutes per client Price: $8 per KYC
See the product →

Frequently asked questions

Do I need proof before I lodge a suspicious matter report?
No. The test is reasonable grounds to suspect, not proof and not certainty. If the pattern in the books, instructions from the client, or supporting documents give you a real basis for suspicion, you should assess it promptly and report within the deadline.
What if I only prepare BAS data or maintain Xero files — can I still have an SMR obligation?
Yes, if your practice is a reporting entity because it provides a designated service. The suspicious activity may show up in the accounting records you maintain, even if you are not handling physical cash yourself. If you are not providing a designated service, the AML/CTF reporting regime does not apply to that work.
Can I ask the client for more documents before reporting?
Yes, where appropriate. AUSTRAC guidance says that if you are unsure whether there are reasonable grounds for suspicion, you should conduct further monitoring and examination, which may include enhanced due diligence. Do not use that process to delay once the suspicion has already formed, and do not reveal that an SMR may be lodged.
Does filing an SMR cost anything or expose me to being sued by the client?
There is no AUSTRAC fee for lodging an SMR. Good-faith reports are legally protected, which is designed to let you report genuine suspicions without fear of civil liability simply because you made the report.
What if the suspicious activity involves my client being scammed rather than being the offender?
You may still need to report. AUSTRAC guidance says an SMR can be required where you suspect on reasonable grounds that a person could be the victim of a crime. For bookkeepers, that can include invoice redirection fraud, payroll diversion, business email compromise or fake supplier bank account changes.

Related guides