| 1 |
Designated-service determination and scope note |
Which designated services you provide, from when, and which services are outside. The decision is yours; we record it with AUSTRAC's guidance page for each |
s 6 Rules 3-2 |
| 2 |
ML/TF risk assessment |
Ratings for your actual services, clients, delivery channels, countries and cash exposure, and your risk appetite |
s 26C s 26D |
| 3 |
AML/CTF policies |
Personnel, client and maintenance sections completed with your roles and choices, including one-person mode where the owner is the governing body |
s 26F s 26G |
| 4 |
Process document and client due diligence procedures |
Forms only for the client types you have, your verification sources and screening method, and delayed checks or reliance where they apply |
s 28 s 30 s 32 |
| 5 |
Registers and forms, filled in |
Roles, the compliance officer's fit-and-proper record, personnel checks, training, escalations, a suspicious matter and threshold transaction register, and a record-keeping index |
s 26J s 41 s 43 s 116 |
| 6 |
Reporting and review calendar |
One page, dated from your approval dates and, for firms covered by the 29 July 2026 enrolment date, your enrolment identifier |
s 47 Rules 9-9 Transitional Rules s 17 |
| 7 |
Enrolment and compliance officer notice check |
On a call, you enrol or check your entry on AUSTRAC's roll and the compliance officer notice. You log in; we never hold your AUSTRAC Online login |
s 51B s 26M |
| 8 |
Training session and record |
Training for your people's roles, logged on your register with a refresher date |
s 26F(4)(e) Rules 5-9 |
| 9 |
Independent evaluation plan |
The date, the scope and the kind of evaluator you need |
s 26F(4)(f) Rules 5-10 |
| 10 |
Evidence pack |
Everything above, indexed, with a map of what AUSTRAC can ask for and which document shows it |
s 26N s 26Q s 116 |