Australian Transaction Reports and Analysis Centre (AUSTRAC)

Overview

Australia's financial intelligence unit and primary AML/CTF (Anti-Money Laundering and Counter-Terrorism Financing) regulator responsible for monitoring financial transactions and preventing money laundering, terrorism financing, and financial crime.

The Australian Transaction Reports and Analysis Centre (AUSTRAC) is an official regulator and financial intelligence agency operating under Australia's Home Affairs portfolio. AUSTRAC serves as Australia's primary financial intelligence unit (FIU) and the primary regulator for anti-money laundering and counter-terrorism financing compliance across regulated entities.

Key Functions:

• Collects and analyses financial transaction reports

• Registers and supervises regulated reporting entities

• Generates financial intelligence for law enforcement and national security

• Enforces AML/CTF compliance across 19,000+ regulated entities

• Registers Digital Currency Exchange (DCE) providers

• Issues guidance and regulatory expectations for compliance

AUSTRAC regulates a diverse range of financial services providers including banks, money remitters, casinos, real estate agents, non-bank lenders, and digital currency exchange operators.

International Standing:

• Member of the Egmont Group of Financial Intelligence Units

• Member of the Financial Action Task Force (FATF)

• Member of the Global Forum on Transparency and Exchange of Information for Tax Purposes

• Observer in the Camden Assets Recovery Interagency Network (CARIN)

Basic Identity

Classification

Inclusion Justification

What This Entity Oversees

Reporting Requirements

Cash Transaction Reports (CTR):

• Bank cash transactions of AUD 10,000 or more must be reported to AUSTRAC

• Reports submitted electronically via AML/CTF Online reporting portal

Suspicious Matter Reports (SMR):

• Reporting entities must report suspicious transactions and activities

• Mandatory reporting when transaction relates to suspected money laundering, terrorism financing, or proceeds of crime

• Reports must be submitted without unreasonable delay

International Funds Transfer Instructions (IFTI):

• All international transfers must include complete originator and beneficiary information

• Information must be transmitted with transfer throughout payment chain

Annual Compliance Certification:

• Reporting entities must submit annual attestations of AML/CTF Program compliance

• Certification by Senior Management and Board/Governing Body

Core Compliance Obligations

Customer Due Diligence (CDD/KYC):

• Verification of customer identity before providing services

• Ongoing customer information updates for enhanced due diligence situations

• Record retention of identification information

AML/CTF Program:

• Written AML/CTF compliance program

• Appointment of AML/CTF Compliance Officer

• Staff training and awareness

• Independent audit requirements

• Transaction monitoring and surveillance

Record Keeping:

• Maintain records of customer identification

• Transaction records (minimum 7 years retention)

• AML/CTF Program documentation

• Audit and training records

Beneficial Ownership:

• Identification of ultimate beneficial owners

• Enhanced due diligence for high-risk customers

AUSTRAC Compliance Framework:

AUSTRAC conducts ongoing supervision and examination of regulated entities through multiple mechanisms:

Risk-Based Supervision:

• Examination frequency and intensity determined by entity risk profile

• Large banks and high-risk sectors subject to more intensive oversight

• Smaller entities may be examined less frequently

On-Site Examinations:

• AUSTRAC examiners conduct in-depth compliance reviews

• Review of AML/CTF Program implementation

• Assessment of transaction monitoring systems

• Evaluation of staff training and awareness

• Testing of customer due diligence practices

Compliance Reporting and Monitoring:

• Ongoing analysis of submitted SARs, CTRs, and IFTI data

• Transaction pattern analysis and financial intelligence generation

• Cooperation with law enforcement agencies

Regulatory Guidance and Expectations:

• AUSTRAC issues guidance documents on compliance obligations

• Annual publication of "Regulatory Expectations and Priorities"

• Core Guidance suite covering major compliance topics

• Sector-specific guidance for identified risk areas

AML/CTF Reform Supervision (2026):

• New regulatory expectations for Tranche 1 & 2 implementation

• Requires verification from official sources Phased approach for expanding entity types (digital assets)

• Transitional compliance rules for implementation period

Regulatory Powers

AUSTRAC holds extensive enforcement authority under the AML/CTF Act:

Civil Penalties:

• Monetary penalties for contraventions

• Penalties can reach up to AUD 555 million for serious and systemic breaches (as of 2024)

• Scaled based on breach severity, systemic nature, and entity size

Criminal Sanctions:

• Criminal prosecution for serious AML/CTF violations

• Penalties include imprisonment and substantial fines

• Director liability provisions for corporate breaches

Corrective Action Notices:

• Directive to cease non-compliant conduct

• Requirement to take specific remedial actions

• Timeline for compliance

Enforceable Undertakings:

• Voluntary compliance commitments accepted from entities

• Alternative to enforcement action in some circumstances

Registration Suspension/Cancellation:

• Withdrawal of AUSTRAC registration for serious breaches

• Prohibition from providing designated services

Regulatory Supervision:

• Enhanced examination authority

• Reporting frequency escalation

• Appointment of external auditors

• Mandatory compliance attestations

Financial Crime Investigations:

• AUSTRAC generates financial intelligence for law enforcement

• Provides intelligence to Australian Federal Police, ASIO, and international agencies

• No direct investigation authority but supports law enforcement activities

Regulatory Role and Function

Legal Foundation

Statutory Framework:

AUSTRAC derives its regulatory authority from the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (AML/CTF Act) — the primary legislation establishing AUSTRAC's mandates, powers, and obligations.

Key Legislation:

• Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (AML/CTF Act)

• AML/CTF Rules (subsidiary legislative instrument made under the AML/CTF Act)

• AML/CTF Transitional Rules 2026 (for reform implementation phases)

Binding Authority:

AUSTRAC operates as a "Layer 1" control regulator with binding legal authority over all regulated entities. Compliance with AML/CTF Act obligations is mandatory. AUSTRAC may impose civil penalties, criminal sanctions, and enforcement actions for breaches.

Regulatory Scope:

Any entity providing "designated services" under the AML/CTF Act must enrol with AUSTRAC and comply with prescribed obligations. The regulatory perimeter expands periodically; as of 31 March 2026, virtually all digital asset service providers (DASPs/VASPs) became subject to AUSTRAC registration requirements.

Licensing and Authorization Relevance

Mandatory Enrolment:

All entities providing designated services must register with AUSTRAC. Registration is a mandatory AML/CTF compliance requirement (not a license in traditional sense) and is binding once approved.

Types of Regulated Entities:

• ADIs (Authorised Deposit-taking Institutions)

• Money remitters and services providers

• Casino operators

• Real estate agents and conveyancers

• Non-bank lenders

• Precious metals dealers

• Digital Currency Exchange (DCE) providers

• Digital Asset Service Providers (DASPs/VASPs)

• Financial brokers

Registration Process:

• Electronic submission via AUSTRAC Online

• Submission of AML/CTF Program documentation

• Identity verification and beneficial ownership declarations

• Regulatory assessment (typically 3-12 weeks; can be expedited)

• No government fee for registration

Renewal:

• Registrations must be renewed every 3 years

• Renewal submission via AUSTRAC Online portal

Compliance Status:

• AUSTRAC maintains public register of registered entities

• Non-compliance with registration may result in civil and criminal penalties

Overview:

As of 31 March 2026, digital currency exchange (DCE) providers and all digital asset service providers (DASPs/VASPs) became regulated entities under AUSTRAC with mandatory registration requirements.

DCE Definition:

A Digital Currency Exchange (DCE) provider is an entity that facilitates exchange of digital currency (cryptocurrency) for fiat currency or vice versa, including:

• Online cryptocurrency exchanges

• Over-the-counter (OTC) crypto traders

• Cryptocurrency ATMs

• Crypto-to-fiat settlement services

• Digital asset transfer services (as of Tranche 2, 2026)

Mandatory Registration Requirement:

It is illegal in Australia to provide DCE services without AUSTRAC registration. Operating unlicensed is a criminal offense.

Registration Timeline:

• Typical timeframe: 3-12 weeks from submission

• Dependent on completeness of AML/CTF Program documentation

• Customer due diligence procedures

• Transaction monitoring system specifications

• Staff training materials

Registration Renewal:

• 3-year renewal cycle

• Annual compliance attestations required during registration term

• Updated financial and beneficial ownership certifications

No Government Fee:

• AUSTRAC does not charge registration or renewal fees

• Operational costs borne by government budget

Key Compliance Requirements for DCE Providers:

1. AML/CTF Program (Enhanced):

• Crypto-specific risk assessment

• Transaction monitoring for unusual patterns

• Customer screening against sanctions lists

• Beneficial ownership identification

1. Customer Due Diligence (KYC):

• Identity verification before service provision

• Proof of source of funds for large transactions

• Beneficial ownership verification

• Enhanced due diligence for high-risk jurisdictions

1. Transaction Reporting:

• SMRs for suspicious crypto transactions

• CTRs for cash transactions AUD 10,000+

• IFTI reporting for international transfers

• Requires verification from official sources Real-time transaction monitoring for compliance

1. Record Keeping:

• Customer identification records (7 years)

• Transaction records and ledgers (7 years)

• AML/CTF Program documentation

1. Staff Training:

• Mandatory AML/CTF training

• Cryptocurrency-specific compliance modules

• Annual refresher training

2026 Expansion (Tranche 2):

From 31 March 2026, AUSTRAC's regulatory perimeter expands to include:

• Crypto-to-crypto exchange platforms

• Digital asset transfer services (custody, bridge services)

• Stablecoin providers (if offering exchange services)

• Digital asset lending platforms (if providing exchange functionality)

Requires verification from official sources Extended timeline for existing operators to register under new requirements; government has announced phased implementation approach.

Payments and Money Movement Relevance

The Australian Transaction Reports and Analysis Centre (AUSTRAC) has the following relevance to payments and money movement in Australia:

Payment Systems Governed or Overseen

The Australian Transaction Reports and Analysis Centre (AUSTRAC) has the following relationship to payment infrastructure in Australia:

This entity's role in payment systems is primarily regulatory and supervisory rather than operational. It does not directly operate national payment infrastructure but contributes to the regulatory framework governing payment activities in Australia.

Relationship to Other Regulators

Financial Intelligence Sharing:

AUSTRAC operates as Australia's FIU and coordinates internationally on financial intelligence, sanctions compliance, and counter-terrorism financing:

International Engagements:

• Egmont Group of Financial Intelligence Units: AUSTRAC is a full member, sharing financial intelligence with 170+ FIUs globally

• Financial Action Task Force (FATF): Member of FATF, a 39-member inter-governmental organization setting AML/CTF standards

• Global Forum on Transparency and Exchange of Information for Tax Purposes: Member

• Camden Assets Recovery Interagency Network (CARIN): Observer status

Mutual Legal Assistance:

• AUSTRAC provides financial intelligence to international law enforcement agencies

• Receives requests from foreign FIUs for financial intelligence

• Operates under bilateral and multilateral information-sharing agreements

Sanctions Administration:

• Requires verification from official sources AUSTRAC supports compliance with UN Security Council sanctions

• Works with DFAT (Department of Foreign Affairs and Trade) on sanctions list management

• Enforcement of Australian targeted financial sanctions regimes

Cross-Border Reporting:

• International Funds Transfer Instructions (IFTI) information retained and available for international inquiries

• Cooperation with INTERPOL and other international law enforcement bodies

Geography and Jurisdiction Notes

Important Departments and Divisions

Key Public Resources

Official Contact Information

AUSTRAC Contact Centre:

• Phone: +61 1300 021 037 (within Australia), +61 2 9911 3555 (international)

• Email: [email protected]

• Website: https://www.austrac.gov.au/

Physical Address:

Level 23, 323 Castlereagh Street

Haymarket NSW 2000

Australia

Postal Address:

PO Box K534

Haymarket NSW 1240

Australia

Leadership

Chief Executive Officer:

Brendan Thomas

• Commenced 5-year appointment: 29 January 2024

• Background: Former Deputy Secretary, NSW Department of Communities and Justice; CEO, Legal Aid NSW

• Education: Bachelor of Arts (Macquarie University), Fellow ANZSOG

Deputy CEO, Regulation:

Katie Miller

Requires verification from official sources Current deputy overseeing regulatory examination and compliance functions

Online Services

AUSTRAC Online Portal:

• Electronic registration and enrolment system

• Reporting portal for CTR, SMR, IFTI submissions

• Document submission and tracking

• Account management for reporting entities

User Guides: Available for registration, reporting, and system navigation

Support: Helpdesk available via Contact Centre

Official Guidance and Resources

Core Guidance Documents:

• https://www.austrac.gov.au/business/core-guidance

• AML/CTF Act Guidance

• Rules and Legislation guidance

• Sector-specific guidance

Regulatory Expectations:

• Annual publication: "AUSTRAC Regulatory Expectations and Priorities"

• Current: https://www.austrac.gov.au/amlctf-reform/austrac-regulatory-expectations-and-priorities-2025-26

AML/CTF Reform Resources:

• https://www.austrac.gov.au/amlctf-reform

• Tranche 1 & 2 implementation guidance

• Transition rules and timelines

Legislation:

• https://www.austrac.gov.au/about-us/legislation/amlctf-act

• AML/CTF Rules: https://www.austrac.gov.au/business/legislation/amlctf-rules

Notes on Naming and Language