AML Red Flags Australian Accountants Must Recognise

Australian accounting firms face distinct money laundering risks. Here are the red flags to recognise and document under the AML/CTF Act 2006.
Accounting firms providing designated services under the AML/CTF Act 2006 face distinct money laundering risks tied to the complex financial arrangements they manage on clients' behalf. Since 1 July 2026, accounting firms must apply a risk-based approach to every client relationship — and that starts with recognising the specific behavioural and transactional patterns that indicate elevated ML/TF risk.
Why are accounting firms a target for money laundering?
Accounting services provide access to legitimate business structures, tax arrangements, and financial reporting that can be used to conceal or layer illicit funds. FATF identifies accountants — alongside lawyers and real estate agents — as professional gatekeepers who criminals seek to exploit. AUSTRAC's Tranche 2 sector risk assessment reflects this: accounting services that touch client funds, asset structures, or company formation carry a materially higher inherent risk than advisory-only services.
What are the key AML red flags for accounting firms?
- Unexplained source of wealth — a client whose declared income or assets appear inconsistent with their business profile or lifestyle
- Requests for complex structures — establishing multiple companies, trusts, or offshore entities where no clear commercial purpose is evident
- Third-party instructions or payments — directions from a person unrelated to the client, or funds arriving from an unconnected third party
- Resistance to beneficial ownership disclosure — delays, incomplete documents, or outright refusal to identify ultimate controlling persons
- Rapid fund movements — amounts arriving and leaving a client trust account quickly with no apparent business rationale
- Structuring patterns — repeated transactions just below the AUD 10,000 threshold in a client's accounts
What should an accounting firm do when a red flag appears?
A red flag does not require immediate cessation of service — but it requires a documented, timely response: 1. Record the indicator — document what the red flag was, when it was identified, and by whom 2. Escalate to the AMLCO — the Compliance Officer assesses the indicator against the client's risk profile 3. Apply enhanced due diligence if warranted — gather additional source-of-funds information and verify beneficial ownership 4. Decide and record — proceed, pause, or exit the relationship, with documented reasoning 5. Lodge an SMR if suspicion of money laundering or terrorism financing arises — within 24 hours for ML/TF, within three business days for other serious offences AMLify for accountants provides a built-in red-flag log, AMLCO escalation workflow, and SMR tool linked to your client CDD file.
Key Takeaways
- Accounting firms are professional gatekeepers — FATF and AUSTRAC both recognise the sector as a documented vehicle for money laundering through legitimate financial structures
- The top red flags are unexplained source of wealth, complex structure requests without a commercial rationale, and resistance to beneficial ownership disclosure
- Every red flag requires a documented assessment — AUSTRAC examines whether indicators were identified, escalated, and resolved, not only whether an SMR was ultimately filed
- SMR timelines are strict — 24 hours for ML/TF suspicions, three business days for other serious offences; failure to report is a contravention of the AML/CTF Act 2006
- AMLify for accountants includes an integrated red-flag log and SMR workflow tied to each client's CDD record
Frequently Asked Questions
Q: Are accounting firms required to screen clients against PEP and sanctions lists?
Yes. Ongoing monitoring under the AML/CTF Act 2006 requires accounting firms to re-screen clients against consolidated PEP and sanctions lists at the frequency set in their Part B programme — typically monthly for high-risk clients and quarterly for standard-risk. A PEP or sanctions match is itself a red flag requiring immediate AMLCO review and, in most cases, enhanced due diligence before the service continues.
Q: Is a client's refusal to disclose beneficial ownership an automatic red flag?
Yes. Refusal or inability to identify the ultimate beneficial owners of a company or trust is a documented red flag under AUSTRAC guidance and prevents the firm from completing CDD. The firm must not proceed with the designated service until beneficial ownership is established. If the client continues to refuse, the AMLCO should assess whether the refusal warrants a Suspicious Matter Report.
Q: Does a red-flag assessment that finds no SMR still need to be documented?
Yes. Under the AML/CTF Act 2006, all red-flag assessments must be documented — the indicator, the enquiries made, and the AMLCO's conclusion — and retained for seven years. A well-documented 'no SMR' decision demonstrates to AUSTRAC that the firm exercised appropriate judgement. Absence of records is treated as a programme contravention, not a clean slate.
This is general information only and not a substitute for legal advice.