AUSTRAC Compliance for Money Transfer Operators: Obligations, Evidence and the Compliance Calendar

Registration gets a remitter into the Australian market. Staying there depends on what happens every day afterwards: customers identified properly, transfers reported in full, suspicions escalated on time, records kept, staff trained. AUSTRAC does not judge a remitter by its programme document. It judges by whether the business does what the document says, and whether there is evidence that it did.

This guide is for compliance officers and operations leads at registered remittance businesses. It sets out the main obligations, the evidence each one needs, a working compliance calendar and how customer due diligence works in practice. It is general guidance, not legal advice: confirm your obligations against AUSTRAC's guidance or with an adviser. If you are still preparing to register, start with our guide to the money transfer licence in Australia. For the detail of rules, thresholds and alert review, see AUSTRAC transaction monitoring for remittance.

Between 2024 and 2026 Australia made the largest changes to its AML/CTF laws since the regime began. Most of the attention went to newly regulated professions, but existing reporting entities, including remitters, were affected too. In general terms:

• The programme became explicitly risk-based. You document your money laundering, terrorism financing and proliferation financing risks, then the policies that manage them. Senior management approves and oversees both.
• The compliance officer role was formalised, with expectations about seniority, suitability and notifying AUSTRAC who holds the role.
• Customer due diligence moved from prescriptive procedures to outcomes: you must be reasonably satisfied a customer is who they say they are, understand the relationship and its risk, and keep that understanding current.
• The travel rule was strengthened, so required information about the payer and payee travels with the transfer through the payment chain.
• Reporting forms are being updated, with transitional arrangements. New threshold and suspicious matter report forms apply from 1 July 2026, and entities enrolled on 30 March 2026 can move to them at any time up to 30 March 2029. International funds transfer instruction reports continue under the pre-reform rules until your transition date for the new international value transfer reports, which is on or after 31 March 2029.

Transitional periods apply to several of these. Check AUSTRAC's current guidance for which obligations and report formats apply to you today, and record in your programme which version you are working to.

Every obligation needs two things: a control that performs it and evidence that the control worked. The table below is a working map for a registered remitter. Use it to check that nothing in your programme lacks a system or a record behind it.

Two rows need extra care. Threshold transaction reports apply to physical currency: an online remitter that never touches cash may have none to lodge, but the programme should say so. And record keeping is generally seven years for most records, so a platform change or a partner exit must not cut off access.

Customer due diligence is where most remitter findings start. Think of it at three depths, each set by risk.

Initial due diligence. Before the service is provided, establish on reasonable grounds that the customer is who they claim to be. In practice that means collecting the customer's full name, date of birth and residential address, and verifying them against reliable and independent sources: a government ID document, electronic verification, or both. For a business customer, identify the entity, its directors and its beneficial owners, and understand what the business does. Establish the purpose of the relationship: who the customer sends to and why.

Ongoing due diligence. Keep what you know current, and compare what customers do with what you expected. A customer who said they support a parent with monthly transfers and starts sending to five new recipients has changed profile. Ongoing due diligence is the bridge between onboarding and monitoring: it decides when you ask again.

Enhanced due diligence. Apply more scrutiny when risk is higher: politically exposed persons, links to high-risk jurisdictions, unusually large or complex activity, or a suspicion that has been reported. Typical steps are source-of-funds or source-of-wealth evidence, senior approval to continue the relationship and closer monitoring. Apply it when the risk calls for it, not to every customer; see enhanced due diligence only when needed.

Obligations are met through routines. The calendar below is a starting point for a small registered remitter; adapt the frequency to your volume and risk.

Agree the report lodgement timings with your adviser and write them into the calendar. The deadlines are short: suspicious matter reports are generally due within three business days of forming the suspicion, or 24 hours where terrorism financing is involved, and international transfer and threshold reports within ten business days. A process that depends on one person finding time at month end will miss them.

For a remitter, international transfer reports are the largest reporting obligation by number. Missing reports are a common finding, and usually caused by data gathered by hand from several systems.

Three practices prevent most problems:

1. Write down your reportability rule. Decide, with your adviser, which transfers are in scope and when. A common position is that a transfer becomes reportable once the money is received and the instruction is accepted. It then stays in scope even if the payout later fails or is reversed, while cancelled transfers and those still awaiting payment are left out.
2. Report from the record of the transfers themselves. If the report is built from the same data that moved the money, it cannot describe a different transfer.
3. Reconcile every run. Compare the transfers in the report with the transfers in scope for the period. Any gap is investigated before lodgement, not after.

Training must match the job. A customer service agent needs to recognise red flags and know not to tip off a customer; a payments lead needs to understand sanctions and payout risk; directors need to understand the risk assessment they approve. Assign by department, set refresh dates, and require sign-off by someone other than the trainee. Our guide to recurring compliance training covers the mechanics.

Oversight means management sees the programme working. A monthly report should show alerts raised and closed, open items by age, suspicious matter decisions, report completeness, EDD cases and overdue training. A compliance dashboard turns that from a monthly scramble into a view anyone authorised can open.

The details are illustrative, not drawn from any real operator.

A registered independent remitter with three outbound AUD corridors closes its compliance month.

Reports. The compliance officer opens the saved international transfer report shape and selects the period. The preview shows two transfers whose payouts failed after the customer paid, which stay in under the programme's rule, and leaves out one cancelled transfer and four still awaiting payment. The completeness check confirms every in-scope transfer is included, and the "Regulatory report ready" alert records the same. The file is exported in CSV and lodged.

Due diligence. Eleven customers crossed the AUD 5,000 90-day tier during the month. Nine provided source-of-funds documents and were approved; two have not, and their next transfers will wait until they do.

Sanctions. The Australian list changed twice in the month. Each load re-screened the people whose names it could affect; one new possible match was reviewed and cleared with a reason.

Suspicious matters. One report was lodged within the deadline after a review found transfers inconsistent with the customer's stated purpose. Customer service was told only to route that customer's queries to compliance.

Training. A new support agent's training is complete but awaiting sign-off; the compliance officer signs it off. One finance team member is long overdue, and the department head has already been told.

RemitSo is a white label remittance platform with an admin panel built for the obligations above. See the admin features.

• AUSTRAC IFTI-E (v1.0) reports from the platform's own transaction record, in Excel or CSV, with an on-screen preview and saved report shapes: you choose the period, and the report describes the transfers that actually moved.
• A completeness check against in-scope transfers on every run, and the "Regulatory report ready" alert: you know before lodging whether anything was left out.
• A built-in reportability rule: money received and instruction accepted; transfers stay in if the payout later fails, and cancelled or awaiting-payment transfers are left out.
• Customer KYC with ID, selfie and live face check inside the first transfer, and document reviews approved or rejected with reasons: initial due diligence with evidence attached.
• AML rules per currency, including AUD, with document tiers and a history of changes: ongoing due diligence that follows your programme, and a record of who changed what.
• Sanctions screening against 8 lists loaded nightly, including Australian DFAT, with re-screening when lists change and rulings kept per person.
• Suspicious activity reports generated, managed and submitted from the console: in Australia these are your suspicious matter reports, kept with the case they came from.
• Staff training by department with sign-off (an optional add-on), and a compliance dashboard: training proof and management oversight in one place.

Your team still owns the programme and the risk assessment, decides each alert and suspicion, lodges reports with AUSTRAC and answers to the regulator. Read the release notes or book a demo.

• AUSTRAC: Preparing for the changes as a current reporting entity
• AUSTRAC: AML/CTF transitional rules 2026
• AUSTRAC: Changes to transaction reporting from 1 July 2026
• AUSTRAC: International funds transfer reports
• AUSTRAC: Threshold transaction reports
• AUSTRAC: Suspicious matter reports
• AUSTRAC: Tipping off
• AUSTRAC: Overview of initial customer due diligence
• AUSTRAC: Overview of ongoing customer due diligence
• AUSTRAC: Enhanced customer due diligence
• AUSTRAC: Travel rule overview
• AUSTRAC: AML/CTF compliance officer
• AUSTRAC: Conduct an independent evaluation
• AUSTRAC: Record keeping checklist
• AUSTRAC: Renew your registration

Checked October 2026. Regulations change; confirm current requirements with the regulator or your adviser.