AUSTRAC Annual Compliance Reports: A Guide for Accountants

Accounting firms enrolled with AUSTRAC since 1 July 2026 must lodge an annual AML/CTF compliance report confirming their programme remains appropriate and effective -- the first report is due within the timeframe AUSTRAC specifies after the end of each reporting period, and missing it is treated as a standalone breach separate from having a weak programme.

What Is an AML/CTF Compliance Report?

The annual compliance report is a formal declaration lodged through AUSTRAC Online, confirming that your firm's AML/CTF programme was in place and operating throughout the reporting period. It is not a full audit submission -- it is an attestation, typically completed by the AML/CTF Compliance Officer (AMLCO) or a principal, that covers enrolment status, risk assessment currency, staff training completion, and whether any suspicious matters were reported.

When Does an Accounting Firm Lodge Its First Report?

AUSTRAC sets the reporting period and lodgement window, and notifies enrolled entities directly through AUSTRAC Online -- firms should not assume a fixed calendar date without checking their own portal notice. For most firms enrolled around the 1 July 2026 deadline, the first reporting period runs to the following 30 June, with lodgement due shortly after. Treat the AUSTRAC Online notification as authoritative and calendar it the moment it appears.

What Information Does the Report Actually Require?

1. Confirmation of enrolment details -- entity name, ABN, and designated services remain accurate.
2. Risk assessment status -- whether the ML/TF risk assessment has been reviewed or updated in the period.
3. Programme currency -- confirmation the AML/CTF programme (Part A and Part B) reflects how the firm actually operates.
4. Training completion -- whether relevant staff completed AML/CTF training in the period.
5. Reporting activity -- a summary of whether suspicious matter reports were lodged, without disclosing the substance of any individual report.

What Happens If a Firm Misses the Deadline or Lodges Inaccurately?

A missed or false compliance report is a discrete civil penalty exposure under the AML/CTF Act 2006, independent of whatever AUSTRAC later finds during a supervisory review. Firms sometimes assume that having a genuinely good programme is enough protection -- it isn't, if the report itself is late or the declarations in it don't match reality. The safest approach is to treat the lodgement date the same way a firm treats a tax deadline: fixed, calendared, and owned by a named person well before it's due.

How Can Accounting Firms Prepare Before the Report Is Due?

Preparation is mostly a matter of keeping evidence current rather than compiling it retrospectively. A firm that updates its risk assessment only when a report is due is already behind -- the assessment should be a living document reviewed whenever the client base or service mix changes materially. AMLify for accounting firms keeps risk assessments, training records, and SMR history in one place so the information needed for the annual report is already assembled rather than reconstructed under time pressure.

Key Takeaways

• The annual compliance report is a formal attestation lodged through AUSTRAC Online, not a full audit submission
• AUSTRAC notifies each firm of its specific reporting period and lodgement window -- confirm this directly rather than assuming a fixed date
• The report covers enrolment accuracy, risk assessment currency, training completion, and reporting activity
• A late or inaccurate report is a standalone breach under the AML/CTF Act 2006, regardless of the underlying programme's quality
• AMLify keeps the evidence an annual report requires up to date year-round

Frequently Asked Questions

Q: Is the annual AML/CTF compliance report the same as the independent review?

No. The compliance report is an annual attestation lodged with AUSTRAC confirming the programme is in place and operating. The independent review is a separate, periodic assessment (at least every two years) of the programme's design and effectiveness, usually conducted by someone not involved in its day-to-day operation.

Q: Who is responsible for lodging the report at an accounting firm?

Typically the AML/CTF Compliance Officer or a principal of the firm, since they are best placed to confirm the programme's operational status. The obligation ultimately sits with the reporting entity itself.

Q: What happens if our firm has had no suspicious matters to report?

That is recorded in the report as a genuine outcome, not a red flag. AUSTRAC does not expect every firm to have lodged an SMR -- it expects an accurate account of what did or didn't occur during the period.

Q: Can a firm request an extension if it needs more time to prepare?

Firms should contact AUSTRAC directly through AUSTRAC Online well before the due date if they anticipate difficulty meeting it -- proactively raising a timing issue is treated far more favourably than lodging late without explanation.

This is general information only and not a substitute for legal advice.

Related articles