Kit · sample pages
Sample pages from the AML/CTF Program Kit
Last checked 25 September 2026 against the AML/CTF Act compilation C2026C00274, the AML/CTF Rules 2025 (F2025L01026) and the Transitional Rules 2026 (F2026L00393)
Eight documents from edition 2026.1, one from each family: the risk assessment, the policies, the compliance-officer record, a client due diligence form, the reporting register, the calendar and two sector documents. Each box shows the opening of a real Word file from the zip, with its fill-in fields shaded.
s 26B s 26C s 26F Built on AUSTRAC's starter kits, CC BY 4.0
AUSTRAC's starter kits are free
AUSTRAC publishes free AML/CTF program starter kits for accountants, real estate agents, conveyancers and the legal profession. Our kit is built on them, openly and with attribution. Compare before you buy.
See AUSTRAC's program starter kits (AUSTRAC website, opens in a new window)
01 How to read the samples
Copied from the files, not mocked up
Each box starts with the file name as it appears in the zip, and its caption names the edition folder and the obligation the document is written to meet. The text in the box comes after the document's cover page and version table. Some passages, sentences and table rows are left out to keep the boxes short, but no sentence is cut short or reworded.
The edition line under each title and the attribution line at the foot of each box are this site's standard lines. The edition line reads as the cover of each Word file does; in the Word files, the attribution is in the footer.
02 The samples
Eight documents, four editions
ML/TF risk assessment
Accountants edition
Edition 2026.1. Checked against the AML/CTF Act 2006 (compilation C2026C00274, No. 62, 1 July 2026) and the AML/CTF Rules 2025 (F2025L01026, compilation 1) on 25 September 2026.
What this document is
This is your business's ML/TF risk assessment. The Act requires every reporting entity to "undertake an assessment (an ML/TF risk assessment) that identifies and assesses the risks of money laundering, financing of terrorism and proliferation financing that the reporting entity may reasonably face in providing its designated services" (s 26C(1)). Your ML/TF risk assessment and your AML/CTF policies (document 03) together make up your AML/CTF program (s 26B).
Part 1. The law this document meets
| Provision | What it requires | Where this document meets it |
|---|---|---|
| s 26D(1) | Review the risk assessment if there is a significant change to any s 26C(3) matter, if AUSTRAC communicates information about the risks of your services, or in circumstances specified in the Rules, and "in any event—at least once every 3 years". | Part 11 |
| s 26E | You "must not commence to provide a designated service to a customer if the reporting entity does not comply with section 26C or 26D in relation to the designated service." This is a civil penalty provision (s 26E(2)). | Part 12 |
Part 2. Your business
| Detail | Entry |
|---|---|
| Governing body | [Insert governing body: name(s) or 'the individual'] |
| Senior manager who approves this risk assessment | [Insert senior manager name and position] |
© AUSTRAC for the Commonwealth of Australia 2026, CC BY 4.0; adapted by AMLCompliant; not endorsed by AUSTRAC
AML/CTF policies
Conveyancer edition
Edition 2026.1. Checked against the AML/CTF Act 2006 (compilation C2026C00274, No. 62, 1 July 2026) and the AML/CTF Rules 2025 (F2025L01026, compilation 1) on 25 September 2026.
What this document is
These are the AML/CTF policies of [Insert practice/agency name] (ABN [Insert ABN], trading as [Insert trading name]). The Act requires every reporting entity to "develop and maintain policies, procedures, systems and controls (AML/CTF policies)" (s 26F(1)). Your AML/CTF program is your ML/TF risk assessment (document 02) plus these policies (s 26B).
Once a senior manager approves these policies (s 26P(1)), everyone in the business follows them. The Act says "A reporting entity must comply with the AML/CTF policies of the reporting entity" (s 26G(1)), and that is a civil penalty provision (s 26G(3)).
This document says what we do and when. The Process document (document 04) and the forms say how.
© AUSTRAC for the Commonwealth of Australia 2026, CC BY 4.0; adapted by AMLCompliant; not endorsed by AUSTRAC
Compliance officer designation and fit-and-proper record
Legal practice edition
Edition 2026.1. Checked against the AML/CTF Act 2006 (compilation C2026C00274, No. 62, 1 July 2026) and the AML/CTF Rules 2025 (F2025L01026, compilation 1) on 25 September 2026.
This record shows that [Insert practice/agency name] (ABN [Insert ABN], trading as [Insert trading name]) designated an eligible AML/CTF compliance officer, on time, and told AUSTRAC. It covers the eligibility tests in s 26J, the fit and proper matters in Rules 5-14, the 28-day and 14-day deadlines in ss 26K and 26M, and the ongoing checks after designation.
Part 1. What the law requires
| Requirement | What the Act or Rules say | Where you record it |
|---|---|---|
| Management level | The person must be "employed or otherwise engaged by the reporting entity at management level" (s 26J(2)(a)). | Step A4 or B2 |
| Resident of Australia | If the business provides its designated services at or through a permanent establishment in Australia, the person must be "a resident of Australia" (s 26J(3)(a)). | Step A4 or B2 |
Part 3. The deadlines
| Step | How to work it out | Date |
|---|---|---|
| 2. Latest date to designate the compliance officer | 28 days after the date in row 1 (s 26K(1)). Count the day after row 1 as day 1. | [Insert date] |
| 3. Date the compliance officer was designated | From Part 7 | [Insert date designated] |
© AUSTRAC for the Commonwealth of Australia 2026, CC BY 4.0; adapted by AMLCompliant; not endorsed by AUSTRAC
Onboarding form and initial CDD form: individual or sole trader
Real estate agency edition
Edition 2026.1. Checked against the AML/CTF Act 2006 (compilation C2026C00274, No. 62, 1 July 2026) and the AML/CTF Rules 2025 (F2025L01026, compilation 1) on 25 September 2026.
About this document
This document has two forms:
- Form 1: Onboarding form. The customer fills this in and signs it. It collects the information you need about them.
- Form 2: Initial customer due diligence (CDD) form. Your staff fill this in. It is internal and is not shown to the customer.
Guidance: For a sale you broker, both the seller (or transferor) and the buyer (or transferee) are your customers (s 6, Table 5, item 1). Complete a separate Form 1 and Form 2 for each individual on each side.
Form details
| Field | Entry |
|---|---|
| Practice/agency name | [Insert practice/agency name] |
| AML/CTF compliance officer | [Insert AML/CTF compliance officer name and position] |
| Next review date | [Insert review date] |
© AUSTRAC for the Commonwealth of Australia 2026, CC BY 4.0; adapted by AMLCompliant; not endorsed by AUSTRAC
Suspicious matter and threshold transaction reporting procedure and register
Accountants edition
Edition 2026.1. Checked against the AML/CTF Act 2006 (compilation C2026C00274, No. 62, 1 July 2026) and the AML/CTF Rules 2025 (F2025L01026, compilation 1) on 25 September 2026.
This procedure sets out how [Insert practice/agency name] (ABN [Insert ABN], trading as [Insert trading name]) gives AUSTRAC two kinds of report, and keeps a register of them:
- Suspicious matter reports (SMRs) under s 41 of the AML/CTF Act; and
- Threshold transaction reports (TTRs) under s 43, for transactions involving $10,000 or more in physical currency.
The register records every report and every decision not to report, and a quarterly nil confirmation, so it shows the process working even in a period when nothing is reported.
Part 1. The law in one table
| Topic | What the Act or Rules say | Section |
|---|---|---|
| SMR time limit: terrorism financing | "24 hours after the time when the reporting entity forms the relevant suspicion" | s 41(2)(b) |
| SMR time limit: any other ground | "3 business days after the day on which the reporting entity forms the relevant suspicion" | s 41(2)(a) |
| TTR time limit | "within 10 business days after the day on which the transaction takes place" | s 43(2) |
© AUSTRAC for the Commonwealth of Australia 2026, CC BY 4.0; adapted by AMLCompliant; not endorsed by AUSTRAC
Compliance calendar
Conveyancer edition
Edition 2026.1. Checked against the AML/CTF Act 2006 (compilation C2026C00274, No. 62, 1 July 2026) and the AML/CTF Rules 2025 (F2025L01026, compilation 1) on 25 September 2026.
This calendar holds every date and deadline in the AML/CTF program of [Insert practice/agency name] (ABN [Insert ABN], trading as [Insert trading name]). Fill in the facts table once, work out each date, then copy every date into the calendar you already use (Outlook, Google Calendar or your practice-management system) with a reminder at least a month ahead.
Fixed dates for every business in this sector
| What | When | Law |
|---|---|---|
| First AML/CTF compliance report covers | 1 July 2026 to 30 June 2027 | s 47; Rules 9-9(a) |
| Lodge the first compliance report in AUSTRAC Online | Between 1 July 2027 and 30 September 2027 | s 47(2); Rules 9-9(c) |
Every year (our policy)
| What | When | Record it in |
|---|---|---|
| Compliance officer's written report to the governing body (unless one-person mode) | In [Insert month] each year, and never more than 12 months after the last report | Document 21 |
| Prepare and lodge the compliance report | Start on 1 July each year; lodge by 30 September | Document 04, section 20.6 |
© AUSTRAC for the Commonwealth of Australia 2026, CC BY 4.0; adapted by AMLCompliant; not endorsed by AUSTRAC
Seller-side and buyer-side onboarding note
Real estate agency edition
Edition 2026.1. Checked against the AML/CTF Act 2006 (compilation C2026C00274, No. 62, 1 July 2026) and the AML/CTF Rules 2025 (F2025L01026, compilation 1) on 25 September 2026.
The rule on one page
For brokering the sale, purchase or transfer of real estate (Table 5 item 1 in s 6(5A) of the AML/CTF Act), the Act names the customer as both "(a) the seller or transferor; and (b) the buyer or transferee".
That means [Insert agency name] carries out customer due diligence on both sides of every sale we broker: the client who signed our agency agreement (our direct customer) and the person on the other side of the sale (the counterparty).
Kind of customer: which form number
| The person is | Use |
|---|---|
| An individual or sole trader | Document 09 |
| A company, partnership or unincorporated association | Document 10 |
| A trust (identify the trustee, and the trust's beneficial owners) | Document 11 |
| A government body | Document 12 |
© AUSTRAC for the Commonwealth of Australia 2026, CC BY 4.0; adapted by AMLCompliant; not endorsed by AUSTRAC
Legal professional privilege handling procedure and LPP form register
Legal practice edition
Edition 2026.1. Checked against the AML/CTF Act 2006 (compilation C2026C00274, No. 62, 1 July 2026) and the AML/CTF Rules 2025 (F2025L01026, compilation 1) on 25 September 2026.
What this procedure is for
The AML/CTF Act has specific rules for information that may be protected by legal professional privilege (LPP). This procedure sets out, for [Insert practice name]:
- who decides whether information is privileged;
- which reporting clock applies to a suspicious matter report (SMR) when some or all of the information is privileged;
- when an LPP form must be given to AUSTRAC, and by when;
- the register of every LPP form we give.
2. Roles
| Role | Who | What they do |
|---|---|---|
| Privilege assessor | [Insert privilege assessor] | A legal practitioner who decides, for each matter, whether each item of information or document is privileged, whose privilege it is, and the basis. Records the decision in the register (section 6). |
| AML/CTF compliance officer | [Insert AML/CTF compliance officer name and position] | Applies the correct clock, decides whether to report or refuse, prepares and lodges the report and any LPP form, and keeps the register. |
4. Threshold transaction reports
A threshold transaction report (s 43) is due within 10 business days after the day of a transaction involving $10,000 or more in physical currency. If we reasonably believe information required in the report is privileged, the report must be accompanied by an LPP form for that information (s 43(3)(aa)).
© AUSTRAC for the Commonwealth of Australia 2026, CC BY 4.0; adapted by AMLCompliant; not endorsed by AUSTRAC
Seen enough? Buy the kit or go back to the kit page.
03 Every document, every obligation
What each document is written to meet
The numbers and names below are the file names in the zip. Documents 00 to 25 and 99 are in every edition folder; each edition then has its own sector documents from 26 onwards. CDD means customer due diligence.
| No. | File name in the zip | What it evidences | Law |
|---|---|---|---|
| 00 | Start here | The order of work, and documenting the program before the first designated service | s 26N Rules 5-15 |
| 01 | Designated service determination and scope note | Which of your services are designated services, and how each is described at enrolment | s 6 Rules 3-2 |
| 02 | ML TF risk assessment | Identifying and assessing your risks; reviews at least every 3 years; no service without it | s 26C s 26D s 26E |
| 03 | AML CTF policies | Developing, maintaining and following your policies | s 26B s 26F s 26G |
| 04 | Process document and CDD procedures | How initial, ongoing, simplified and enhanced CDD are done day to day | s 28 s 30 s 31 s 32 |
| 05 | AML CTF roles and responsibilities register | Governing body oversight, and the information it receives | s 26H Rules 5-6 |
| 06 | Compliance officer designation and fit-and-proper record | An eligible compliance officer, designated within 28 days and notified within 14 days | s 26J s 26K s 26M Rules 5-14 |
| 07 | Personnel due diligence record | Checking people before and during their engagement | s 26F(4)(d) Rules 5-8 |
| 08 | AML CTF training plan and register | Initial and ongoing training | s 26F(4)(e) Rules 5-9 |
| 09 | Onboarding form and initial CDD form individual or sole trader | Initial CDD for an individual or sole trader | s 28 Rules 6-1 |
| 10 | Onboarding and initial CDD form body corporate, partnership or unincorporated association | Initial CDD, including beneficial owners | s 28 Rules 6-2 Rules 6-8 |
| 11 | Onboarding form and initial CDD form trust | Initial CDD for a trust | s 28 Rules 6-3 |
| 12 | Onboarding form and initial CDD form government body | Initial CDD for a government body | s 28 Rules 6-4 |
| 13 | Enhanced CDD form | The enhanced CDD triggers, and source of wealth and funds | s 32 Rules 6-20 Rules 6-21 |
| 14 | Ongoing CDD periodic review and trigger-event review forms | Monitoring customers and reviewing their information | s 30 Rules 6-35 |
| 15 | Pre-commencement customer register and transition plan | Customers you already had on 1 July 2026 | s 36 |
| 16 | Unusual activity report, escalation form, review form and escalations register | Timely assessment of possible suspicious matters, and tipping-off safeguards | s 41 Rules 5-12 Rules 5-13 |
| 17 | Suspicious matter and threshold transaction reporting procedure and register | Suspicious matter and threshold transaction reports, and their contents | s 41 s 43 Rules 9-1 Rules 9-5 |
| 18 | Compliance calendar | The annual compliance report, the first independent evaluation and the review dates | s 47 Rules 9-9 Transitional Rules s 17 |
| 19 | Record-keeping index | What you keep, and for how long | s 107 s 108 s 111 s 116 |
| 20 | Periodic effectiveness checks pack | Reviewing and updating your policies | s 26F(3) Rules 5-4 |
| 21 | Maintain-the-program record and annual report to the governing body | Governing body oversight, and the compliance officer's report at least every 12 months | s 26H Rules 5-7 |
| 22 | Independent evaluation plan and response form | An independent evaluation at least once every 3 years, and your response | s 26F(4)(f) Rules 5-10 |
| 23 | AUSTRAC enrolment, changes and notices procedure | Enrolment, keeping enrolment details up to date, and responding to notices | s 51B s 51F s 167 |
| 24 | Senior manager approval and program documentation record | Senior-manager approval, and documenting updates within 14 days | s 26N s 26P Rules 5-15 |
| 25 | Privacy collection notice for customer due diligence | Telling customers why their identity information is collected | OAIC guidance for reporting entities |
| 99 | Sources and citations | Every instrument and AUSTRAC page the edition relies on |
| Edition folder | No. | File name in the zip | What it evidences | Law |
|---|---|---|---|---|
| 1 Accountants edition | 26 | Designated-service worksheet entity and SMSF formation, registered office and officer services | Which formation, registered office and officer services are designated services | s 6 |
| 1 Accountants edition | 27 | Tipping-off procedure with the s 123(4) crime-prevention exception | Tipping off, and the exception for qualified accountants | s 123(4) Rules 5-13 |
| 2 Real estate agency edition | 26 | Delayed initial CDD and settlement-verification procedure | Delayed CDD and verification before settlement | s 29 Rules 6-32 Rules 5-20 |
| 2 Real estate agency edition | 27 | Request to verify information form and conveyancer agent arrangement | Another reporting entity collecting and verifying information | Rules 6-33 |
| 2 Real estate agency edition | 28 | Seller-side and buyer-side onboarding note | Both sides of a sale are customers | s 6 |
| 3 Conveyancer edition | 26 | Delayed initial CDD and settlement-verification procedure (conveyancing) | Delayed CDD for the buyer | s 29 Rules 6-32 |
| 3 Conveyancer edition | 27 | Request to verify information form and real-estate-agent arrangement | Another reporting entity collecting and verifying information | Rules 6-33 |
| 3 Conveyancer edition | 28 | Trust-money (Table 6 item 3) determination note | Whether handling trust money is a designated service | s 6 |
| 3 Conveyancer edition | 29 | Other-professional-services onboarding and initial CDD forms and second risk assessment | A second risk assessment where your other services differ | s 26C |
| 4 Legal practice edition | 26 | Legal professional privilege handling procedure and LPP form register | The privilege clocks and LPP forms | s 41(2)(aa) s 41(2A) s 43(3)(aa) |
| 4 Legal practice edition | 27 | Tipping-off procedure, the s 123(4) exception and retainer termination | Tipping off, and the exception for legal practitioners | s 123(4) |
| 4 Legal practice edition | 28 | Conveyancing-services onboarding and initial CDD forms and the conveyancing risk assessment | Conveyancing done under a practising certificate | Rules 6-32 Rules 6-33 |
| 4 Legal practice edition | 29 | Scope note barristers, mixed practices and the practising-certificate routing | Which edition and services apply to your practice | s 6 |
The full description of each document is on the kit page. The sources behind these references are on our sources page.
04 Straight answers
Questions about the samples
- Are these the real documents?
Yes. Every line of document text inside a box (the title, the paragraphs and the table rows) is copied from the Word file. The edition line under the title and the attribution line at the foot are this site's standard lines. Each box names its Word file at the top, from the edition 2026.1 zip that buyers download. Long passages, some sentences and some table rows are left out; no sentence is cut short or reworded. The build that publishes this site compares each line with the Word file in the zip and stops if a line is not there. The download itself has no watermark and no sample marking.
- Why do some pages show AUSTRAC wording?
Because the documents adapt AUSTRAC's program starter kits under the CC BY 4.0 licence. The footer of each Word file reads: Adapted from AUSTRAC program starter kit material (© AUSTRAC for the Commonwealth of Australia 2026, CC BY 4.0). Not endorsed by AUSTRAC. Not legal advice. The boxes on this page end with this site's standard attribution line instead. AUSTRAC has not reviewed our documents.
- Do the sample pages show the legal edition's LPP procedure?
Yes. The last sample is the opening of document 26 of the legal practice edition: its purpose, the roles and the threshold transaction section. Section 3 of the same document, not shown here, is a table of which clock applies to a suspicious matter report: 3 business days in the ordinary case, and 5 business days where some, but not all, of the information may be privileged and the privilege belongs to someone other than the practice (s 41(2)(aa) of the Act). Section 5 lists the notices that need an LPP form.
Sources for this page
- LawAnti-Money Laundering and Counter-Terrorism Financing Act 2006, compilation C2026C00274 (No. 62, 1 July 2026). legislation.gov.au
- LawAnti-Money Laundering and Counter-Terrorism Financing Rules 2025, F2025L01026 (compilation 1). legislation.gov.au
- LawAML/CTF Transitional Rules 2026, F2026L00393 (compilation 1). legislation.gov.au
- GuidanceAUSTRAC, program starter kits. austrac.gov.au (opens in a new window)
- GuidanceAUSTRAC, copyright, attribution and third-party guidelines (CC BY 4.0 licence and no-endorsement conditions). austrac.gov.au (opens in a new window)
Ready to buy
AML/CTF Program Kit
All four sector editions — accountants, real estate agencies, conveyancers and legal practices — as editable Word documents. No subscription.
Prefer it done for you? The set-up service starts at A$990 and includes the kit.
A$497 one-off, includes GST of A$45.18
Buy the kit — A$497After payment you go straight to your download page.
Independent. Not affiliated with, or endorsed by, AUSTRAC or the Australian Government.