AML Compliance Guide
Deadline: 29 July 2026 — enforcement now active

Compliance officer for Financial adviserss — 2026 AUSTRAC Guide

If your financial advice business will provide a designated service from 1 July 2026, you need a clearly identified person responsible for AML/CTF compliance from the start. For financial advisers, that means someone in the practice must own the day-to-day AML work, including customer due diligence and reporting, and the business must be ready to enrol with AUSTRAC by 29 July 2026. If you ignore this, AUSTRAC can treat it as a serious failure to make a meaningful effort to comply, with civil penalties up to $33.5 million per contravention and criminal penalties for intentional breaches.

For a financial advice practice, the compliance officer is the person who makes sure AML/CTF obligations are actually carried out in the business. This role is not just a title for your file. In practice, it means one person must coordinate AUSTRAC enrolment, help prepare the ML/TF risk assessment, oversee customer due diligence before a designated service is provided, make sure sanctions screening happens, keep records for 7 years, and escalate suspicious matters quickly. In a sole practice, this will usually be the principal. In a larger advice firm, it may be an operations manager, practice manager or senior adviser with enough authority to get staff to follow the process.

Deadline that matters now

Have your AML/CTF compliance officer identified before you start providing designated services on 1 July 2026. Your business must enrol with AUSTRAC by 29 July 2026 if you are newly regulated, and the person handling compliance should be ready before that date so enrolment, customer checks and internal procedures are not delayed.

What a financial advice business should do now

  • Decide who will be responsible for AML/CTF compliance across the practice, including client onboarding, sanctions screening and reporting to AUSTRAC.
  • Make sure that person has real authority to require advisers, paraplanners and admin staff to collect missing ID, stop onboarding, or escalate unusual activity.
  • Map where your designated services sit in your advice process, especially where you arrange for a client to receive another designated service.
  • Set up a documented process for verifying individual clients, companies and trusts before the designated service is provided.
  • Prepare for AUSTRAC enrolment through AUSTRAC Online and keep the responsible person ready to maintain enrolment details if they change.
  • Start staff training early so client-facing staff know what to do when a client is reluctant to provide ID or asks to use complex ownership structures.

A common mistake in advice practices is assuming the licensee, dealer group or head office will automatically cover everything. They may provide templates or central support, but your own business is still responsible if it is the reporting entity providing the designated service. Another mistake is appointing someone junior who can update forms but cannot stop a file from progressing. AUSTRAC guidance on governance stresses that the compliance role must have credibility, authority and support from senior management. For advisers, that matters most when dealing with high-risk clients, politically exposed persons, offshore structures, and trusts where control is not obvious from the first documents provided.

Practical tips for advice practices

  • Build AML checks into your fact-find and onboarding pack so advisers are not chasing ID after advice work has already started.
  • Use your existing client review cycle to repeat sanctions screening and pick up changes in control, trustees or beneficial owners.
  • Have a clear internal rule for who decides whether a matter is suspicious and who lodges the SMR within the 3 business day deadline, or 24 hours for suspected terrorism financing.
  • If you advise family groups, SMSFs, companies and trusts, give the compliance lead a checklist for beneficial ownership and effective control, not just shareholding.
  • Keep a simple breach and issue register so the compliance officer can show senior management what is going wrong and what has been fixed.

A lightweight AML platform, built exclusively for Tranche 2

Get AUSTRAC's mandates done as fast and effortless as possible.

  • Built around AUSTRAC's actual requirements
  • Single maintained compliance file
  • No compliance expertise required
  • 25 minute initial compliance setup
  • Obligations calendar & reminders
  • Instant data export
Setup: ~25 minutes Ongoing: minutes per client Price: $8 per KYC
See the product →

Frequently asked questions

Does every financial adviser need a separate AML/CTF compliance officer?
No. A small advice practice only needs one clearly identified person to take responsibility for AML/CTF compliance across the business. In a sole trader practice, that will usually be the owner. In a multi-authorised representative model, each reporting entity needs to be clear about who holds the role for that entity.
Can our AFSL holder or licensee act as the compliance officer for us?
Only if the structure actually makes sense for your business and that person has responsibility and authority over your AML/CTF processes. Many licensees will provide guidance, templates or oversight, but that does not automatically remove your own obligations. You need to know whether your practice or another entity is the reporting entity for the designated service.
Do we have to notify AUSTRAC of the compliance officer by 29 July 2026?
You must enrol with AUSTRAC by 29 July 2026 if you are newly regulated, and enrolment includes details about key personnel and contact information. Even where the law does not use the phrase "notify AUSTRAC of your compliance officer" as a standalone step, you should have the responsible person decided before enrolment so your setup is accurate and workable from day one.
What if we only arrange financial products and do not handle client money ourselves?
You still need to check whether what you do is a designated service. AUSTRAC material for financial planners makes clear that some businesses that only provide item 54 designated services have a narrower set of AML/CTF program obligations, but they are still reporting entities and still need to understand their obligations. Do not assume you are outside the regime just because you do not receive client funds into your trust account.
Will appointing a compliance officer cost a lot for a small advice practice?
Not necessarily. For many small firms, the practical approach is to appoint the principal or practice manager and support them with AUSTRAC guidance, starter kits and documented procedures. The bigger cost usually comes from poor setup, repeated rework on client files, and missed deadlines rather than the appointment itself.