Nex Automate https://nexautomate.com.au AI-powered automation for Australian accounting firms. Sat, 25 Jul 2026 07:18:43 +0000 en-US hourly 1 https://wordpress.org/?v=7.1.3 https://nexautomate.com.au/wp-content/uploads/2026/01/cropped-Site_Favicon-32x32.png Nex Automate https://nexautomate.com.au 32 32 Accounting Firms Face Millions in AML/CTF Penalties https://nexautomate.com.au/blogs/aml-ctf-penalties-enforcement-non-compliance-2026/ https://nexautomate.com.au/blogs/aml-ctf-penalties-enforcement-non-compliance-2026/#respond Thu, 23 Jul 2026 09:50:51 +0000 https://nexautomate.com.au/?p=3422

Written by the NeX Automate Compliance Team

Reviewed for accuracy against current AUSTRAC guidance and public enforcement records. NeX Automate builds AML/CTF and client-verification automation used by Australian accounting practices. This guide is general information, not legal advice — confirm your firm’s specific obligations with AUSTRAC or a qualified adviser.

Last updated: July 2026

AML/CTF compliance is sometimes treated as a box-ticking exercise. The enforcement record tells a very different story. Australian regulators have imposed some of the largest corporate penalties in the country’s history for AML/CTF failures.

With accounting firms inside the regime since 1 July 2026, understanding AML/CTF penalties and enforcement is no longer optional. Firms now need to know what non-compliance can cost, where enforcement risk usually comes from, and how VERA helps reduce that risk through consistent client verification automation.

The Penalties That Made Headlines

AML/CTF penalties in Australia are not theoretical. AUSTRAC has pursued landmark cases resulting in record-breaking penalties, including a $1.3 billion penalty against a major Australian bank in 2018 and a $700 million penalty against another in 2020. These remain among the largest civil penalties in Australian corporate history.

For accounting firms, the message is clear: AML/CTF penalties and enforcement can create serious financial, operational, and reputational consequences.

The Penalty Framework

Under the AML/CTF Act 2006, breaches can attract civil penalties calculated in penalty units. For body corporates, individual contraventions can run into the millions of dollars. Because breaches may be counted per transaction, per client, or per compliance failure, totals can escalate quickly.

AUSTRAC’s enforcement toolkit includes:

  • Civil penalty orders — court-imposed financial penalties for serious contraventions.
  • Infringement notices — financial penalties for less serious breaches.
  • Enforceable undertakings — binding commitments to fix compliance failures and improve systems.
  • Remedial directions — orders requiring a firm to correct specific compliance deficiencies.

AML/CTF penalties and enforcement should not be viewed as a distant risk. It’s a practical compliance issue that needs clear systems, documentation, and accountability.

The Penalties Accounting Firms Should Worry About Most

For accounting firms, the most likely enforcement scenarios are not billion-dollar bank cases. The greater risk comes from everyday compliance failures that are easy to commit at scale:

  • Failing to register with AUSTRAC
  • Failing to conduct adequate customer due diligence
  • Failing to lodge suspicious matter reports on time
  • Inadequate record keeping
  • Operating without a compliant AML/CTF program
  • Applying client risk scoring inconsistently
  • Missing identity verification steps during onboarding

This is where enforcement risk becomes closely connected to daily operations. If your firm relies on manual processes, staff memory, email threads, spreadsheets, or disconnected folders, it becomes much harder to prove that every client was verified, risk-rated, and documented properly. That is why AML/CTF compliance software and client verification automation are becoming important for accounting firms.

The Cost Beyond Penalties

“The financial penalty is often the smallest part of the cost. Reputational damage, lost clients, and remediation costs frequently exceed the fine itself.”

For a professional services firm built on trust, the reputational consequences of an AML/CTF breach can be severe. Clients may leave. Referral sources may withdraw. Professional indemnity premiums may rise. Staff may spend months fixing incomplete records, updating processes, and responding to regulator questions.

The cost of non-compliance extends far beyond the penalty AUSTRAC imposes. That’s why AML/CTF penalties and enforcement should be treated as a business risk, not just a legal risk — a weak compliance process can affect client confidence, internal workload, brand reputation, and long-term growth.

Why Manual Compliance Creates Enforcement Risk

Most AML/CTF failures don’t happen because firms deliberately ignore the rules. They happen because manual systems break under pressure:

  • A busy staff member skips a verification step.
  • A risk rating is applied differently by different team members.
  • A document is saved in the wrong folder.
  • A suspicious matter is noticed but not escalated in time.
  • A client’s record is incomplete when the firm needs to prove compliance.

This is where accounting automation can help reduce operational risk. For firms already adopting workpaper automation, ATO Automation, ATO document automation, or ASIC Review Automation, AML/CTF workflows are the next logical area to systemise. Modern accounting automation for firms helps create repeatable processes, reduce manual gaps, and keep compliance tasks easier to track.

How VERA Reduces Your Enforcement Risk

Meet VERA — Client Verification Automation

The most common AML/CTF failures stem from inconsistency — verification skipped under time pressure, risk scoring applied unevenly, incomplete records, staff not following the same process every time. VERA eliminates these gaps by automating client verification to a consistent standard.

VERA performs VOI checks, watchlist screening, and risk scoring across every client, and retains complete, audit-ready records automatically. So when AUSTRAC asks how a client was verified, what risk rating was applied, and what records were retained, VERA provides the evidence behind the process.

At $4 per client verification, VERA is a fraction of the cost of a single compliance breach.

Reduce Your AML/CTF Risk — Protect Your Firm with VERA

Sign up and get 50 free credits to see how VERA builds the consistent, audit-ready trail that protects your firm if AUSTRAC ever comes knocking.

Start Free – Get 50 Credits →

Why AI Automation Matters for AML/CTF Compliance

AML/CTF compliance is not a one-time registration task. It creates ongoing operational responsibility across onboarding, verification, risk scoring, suspicious matter detection, record keeping, and staff workflows. That is why AI automation for accounting firms is becoming essential — it reduces repetitive admin, improves accuracy, and keeps compliance workflows consistent across the firm.

For firms concerned about penalties and enforcement, automation can support:

  • Consistent client verification
  • More reliable risk scoring
  • Clearer record keeping
  • Reduced manual errors
  • Better audit readiness
  • Stronger internal accountability
  • Faster compliance workflows

NeX Automate supports accounting firms with practical automation across AML/CTF compliance, client verification, documentation, and broader accounting operations.

See Where Your Firm Is Exposed

Book an AML readiness assessment and we’ll review your verification, risk scoring, record keeping, and escalation process — and pinpoint the gaps that create enforcement risk.

Book AML Readiness Assessment →

Key Takeaways

  • AML/CTF penalties in Australia have reached $1.3 billion for a single entity.
  • Accounting firms may face penalties for registration failures, inadequate CDD, late reporting, weak record keeping, and non-compliant AML/CTF programs.
  • Reputational damage often exceeds the financial penalty itself.
  • Manual compliance processes increase the risk of inconsistent verification, missing records, and weak audit trails.
  • VERA reduces risk by supporting consistent, automated, audit-ready client verification.

Protect Your Firm Before a Breach Costs You

VERA brings AML/CTF compliance, client verification, and AI automation into one consistent, audit-ready workflow — so your firm can prove compliance, not just claim it.

Start Free – Get 50 Credits →

Sources & further reading

Related guides: What AML/CTF means for accounting firms, Customer Due Diligence explained, Verification of Identity (VOI), Suspicious Matter Reports, and the best AML/CTF compliance software.

]]>
https://nexautomate.com.au/blogs/aml-ctf-penalties-enforcement-non-compliance-2026/feed/ 0
Accountants Must Now Verify Client Identity for AML/CTF https://nexautomate.com.au/blogs/verification-of-identity-voi-aml-ctf/ https://nexautomate.com.au/blogs/verification-of-identity-voi-aml-ctf/#respond Wed, 15 Jul 2026 08:32:55 +0000 https://nexautomate.com.au/?p=3408

Written by the NeX Automate Compliance Team

Reviewed for accuracy against current AUSTRAC guidance. NeX Automate builds AML/CTF and client-verification automation used by Australian accounting practices. This guide is general information, not legal advice — confirm your firm’s specific obligations with AUSTRAC or a qualified adviser.

Last updated: July 2026

At the heart of every AML/CTF compliance program is a deceptively simple question: is this client really who they say they are?

Answering it correctly is the job of Verification of Identity in AML/CTF — often called VOI. The reforms took effect on 1 July 2026, and AML/CTF obligations are now live for Australian accounting firms. If your practice is already compliant, VOI is now a repeatable day-to-day workflow. And if you’re among the firms still catching up, verification of identity is the fastest, highest-impact place to start.

This guide explains the VOI standard, why it matters for accounting firms now that the regime is in force, and how NeX Automate’s VERA supports faster, more consistent client verification.

What Is VOI?

Verification of Identity in AML/CTF is the process of confirming a client’s identity using reliable and independent sources. It typically follows a “100-point” style framework, drawing on government-issued documents such as passports, driver licences, and Medicare cards, cross-checked against the individual presenting them.

Electronic vs Manual VOI

Manual VOI

The traditional approach involves a staff member physically, or via video, inspecting the client’s identity documents, recording the details, and retaining copies. Manual VOI can work, but it is often slow, inconsistent between staff members, and difficult to audit at scale.

Electronic VOI

Modern electronic verification checks identity documents against authoritative databases in real time. It helps confirm whether a document is genuine, current, and matched to the individual presenting it. For accounting firms, VOI becomes faster, more consistent, and easier to document when supported by electronic tools.

This is where client verification automation becomes valuable. It reduces manual handling, supports stronger audit trails, and helps firms apply the same standard across every client.

Why VOI Is Harder Than It Looks

Verification of Identity in AML/CTF may sound simple, but in practice it creates several operational challenges for accounting firms:

  • Document fraud is more sophisticated than ever. Fake and altered documents are becoming harder to identify with manual checks alone.
  • Consistency is difficult. Different staff members may apply different standards, especially without a clear workflow or centralised system.
  • Remote onboarding adds complexity. Many firms now work with clients online, so identity checks must be secure, reliable, and easy to complete without face-to-face meetings.
  • Audit requirements matter. Every verification must be documented properly and retained for future review.

That is why AML/CTF compliance software and AI automation for accounting firms are becoming important parts of modern compliance operations.

The 7-Year Record-Keeping Rule

Under AUSTRAC requirements, VOI records — like all customer due diligence records — must be kept for a minimum of seven years. That means every identity verification your firm performs creates a documentation obligation that continues long after the client engagement ends.

Manual systems can make this difficult. Files may be stored across email, folders, spreadsheets, or disconnected systems. With accounting automation, firms can reduce the burden of storing, organising, and retrieving client verification records.

For firms managing high client volumes, VOI is not just a compliance step. It becomes an ongoing workflow that must be repeatable, traceable, and audit-ready.

“A VOI process is only as good as its weakest link — and in most firms, that weak link is inconsistent manual handling and incomplete record keeping.”

How VERA Automates VOI

🤖 Meet VERA — Client Verification Automation

VERA, the Client Verification Automator from NeX Automate, helps automate the VOI process for accounting firms. It supports electronic identity verification, applies a consistent standard to every client, and helps retain complete, time-stamped records for the required retention period.

For your clients, this means a faster, smoother onboarding experience:

  • No unnecessary document chasing
  • No avoidable delays
  • No inconsistent manual handling

For your firm, it means more consistent, defensible, and audit-ready Verification of Identity across every client.

VERA is part of NeX Automate’s broader suite of automation solutions for accounting firms, including accounting automation for firms, ATO Automation, ATO document automation, ASIC Review Automation, and workpaper automation. Together, these tools help firms reduce repetitive admin, improve accuracy, and keep compliance workflows moving.

VERA runs at $25 per hour — you pay only for the verification work it performs.

🤖 Automate VOI at Scale with VERA

Sign up and get 50 free credits to see VERA run live identity checks — electronic VOI, consistent standards, and audit-ready records from the first client.

Start Free – Get 50 Credits →

Why Firms That Aren’t Ready Yet Should Act Now

With the 1 July 2026 deadline behind us, AML/CTF compliance is no longer a future project — it’s a current obligation with every new client you onboard. Firms that haven’t fully implemented their processes are now operating with real exposure, and building policies, training staff, creating workflows, and documenting client verification all at once under pressure is exactly the scramble the deadline was meant to avoid.

The good news: verification of identity is the fastest place to close the gap. By standardising VOI now, firms can build a smoother onboarding process and reduce ongoing compliance pressure. The right systems help your team verify clients, retain records, and manage obligations with far less manual work.

Already past the deadline and not fully set up? You’re not alone — but every unverified client onboarded from here carries risk. Prioritising a consistent, documented VOI workflow is the single most effective first step to getting compliant quickly.

AML/CTF compliance for accounting firms goes beyond registration. It creates an ongoing operational responsibility that continues with every new client. That’s why AI automation for accounting firms is becoming essential — it helps reduce repetitive admin, improve accuracy, and keep compliance workflows consistent.

Get Your AML Policies & Staff Training Sorted in 15 Minutes

Behind on the essentials? Complete this quick intake form and we’ll prepare a draft AML/CTF policy tailored to your firm — including your firm’s details, services, responsible persons, and client onboarding workflow.

Book My AML Readiness Assessment →

Key Takeaways

  • Verification of Identity in AML/CTF confirms a client’s identity using reliable and independent sources.
  • Electronic VOI is faster, more consistent, and more auditable than manual checks.
  • VOI records must be retained for a minimum of seven years.
  • With the reforms now in force, firms not yet compliant should treat VOI as the first priority.
  • VERA supports client verification automation and helps firms manage VOI more consistently.

See How NeX Automate Automates Client Verification

Watch VERA run electronic VOI, apply consistent standards, and produce audit-ready records — in a quick, no-pressure demo.

Book a Free Demo →

Sources & further reading

Related guides: What AML/CTF means for accounting firms, Customer Due Diligence explained, and the best AML/CTF compliance software for accounting firms.

]]>
https://nexautomate.com.au/blogs/verification-of-identity-voi-aml-ctf/feed/ 0
Accountants Must Report Suspicious Matters Within 24 Hours https://nexautomate.com.au/blogs/suspicious-matter-reports-smr-accounting-firms-2026/ https://nexautomate.com.au/blogs/suspicious-matter-reports-smr-accounting-firms-2026/#respond Sat, 11 Jul 2026 08:24:48 +0000 https://nexautomate.com.au/?p=3395

Written by the NeX Automate Compliance Team

Reviewed for accuracy against current AUSTRAC guidance. NeX Automate builds AML/CTF and client-verification automation used by Australian accounting practices. This guide is general information, not legal advice — confirm your firm’s specific obligations with AUSTRAC or a qualified adviser.

Last updated: July 2026

Of all the AML/CTF compliance obligations facing accounting firms, the Suspicious Matter Report — or SMR — is one of the most serious. It is the mechanism by which firms alert AUSTRAC to potential criminal activity, and it carries strict timing rules.

The reforms took effect on 1 July 2026, so this is now a live duty, not a future one. Every firm operating as a reporting entity is expected to detect, decide on, and lodge suspicious matters correctly — from the next client onward. This guide explains what triggers an SMR, when it must be lodged, and how strong client verification, powered by VERA, makes detection far easier.

What Is a Suspicious Matter Report?

A Suspicious Matter Report is lodged with AUSTRAC when a reporting entity forms a suspicion, on reasonable grounds, that a transaction or client may be linked to money laundering, terrorism financing, tax evasion, or other serious crime.

Importantly, you do not need proof. A reasonable suspicion is enough to trigger the obligation. That is why SMRs must be supported by strong client knowledge, proper documentation, and consistent internal workflows.

What Triggers an SMR?

An SMR may be triggered by several types of red flags during onboarding, client verification, or ongoing work. Common triggers include:

  • Identity concerns — a client provides false, inconsistent, expired, or suspicious identity documents.
  • Unusual structuring — transactions appear deliberately structured to avoid reporting thresholds or hide the real purpose of the activity.
  • Inexplicable complexity — company, trust, or ownership structures have no clear commercial rationale.
  • Source of funds concerns — the client’s wealth, funds, or transaction activity appears inconsistent with their known profile.
  • Reluctance or evasiveness — a client avoids questions, refuses to explain a transaction, or becomes unwilling to provide supporting documents.

This is where client verification automation and AML/CTF compliance software can help firms detect risk indicators earlier and more consistently.

The Strict Reporting Timeframes

Under the AML/CTF Act 2006, SMRs carry firm deadlines. A report must generally be lodged:

24 hours  — if the suspicion relates to terrorism financing.

3 business days  — if the suspicion relates to money laundering or other serious offences.

Missing these deadlines can become a breach in itself. There is also a “tipping off” rule: your firm must not alert the client that an SMR has been, or may be, lodged.

For this reason, SMRs require more than awareness. Your team needs a clear process, an escalation pathway, and a documented decision-making workflow.

“You cannot report what you cannot see. The quality of your suspicious-matter detection depends entirely on the quality of your client knowledge.”

Why Detection Starts With Verification

Here is the connection many firms miss: you can only identify suspicious matters if you genuinely know your clients in the first place. Robust customer due diligence and identity verification create the baseline understanding against which unusual behaviour becomes visible.

A client whose identity was never properly verified, whose risk was never scored, and whose profile was never documented is a client whose suspicious behaviour may never be detected. That is why SMRs are closely connected to client onboarding, VOI, risk scoring, record keeping, and ongoing monitoring.

With accounting automation, firms can reduce manual gaps and build a more consistent detection foundation.

The Problem With Manual Detection

Manual suspicious matter detection is difficult because warning signs are often buried across emails, spreadsheets, document folders, staff notes, and disconnected systems. One staff member may notice an issue while another misses it. One client may be screened properly, while another moves through onboarding without complete checks. This inconsistency creates compliance risk.

For firms already using workpaper automation, ATO Automation, ATO document automation, or ASIC Review Automation, AML/CTF workflows are the next important area to systemise. Modern accounting automation for firms brings structure, consistency, and accountability to compliance processes that were previously handled manually.

How VERA Strengthens Suspicious Matter Detection

🤖 Meet VERA — Client Verification Automation

VERA, the Client Verification Automation from NeX Automate, helps build the foundation that makes SMR detection possible. By performing thorough, consistent VOI checks, screening clients against PEP and sanctions watchlists, and maintaining a clear risk profile for each client, VERA gives your firm the baseline client knowledge needed to identify when something doesn’t add up.

VERA can flag identity inconsistencies, watchlist matches, and high-risk indicators automatically — exactly the red flags that may warrant a closer look and, where appropriate, escalation for an SMR decision.

VERA does not make the suspicion judgment for your firm. It helps ensure warning signs aren’t missed in a pile of manual paperwork — making SMRs easier to manage, document, and review.

Build a Detection Foundation You Can Rely On

Sign up and get 50 free credits to see how VERA verifies clients, screens watchlists, and surfaces the red flags that matter — before they slip through the cracks.

Start Free – Get 50 Credits →

Why AI Automation Matters for SMR Readiness

AML/CTF compliance is not a one-time registration task. It creates an ongoing operational responsibility that repeats with every new client and continues throughout the client relationship. That is why AI automation for accounting firms is becoming important — it reduces repetitive admin, improves accuracy, and keeps compliance workflows consistent across the firm.

For suspicious matter reporting, automation can support:

  • Clearer client verification
  • Stronger risk profiling
  • PEP and sanctions screening
  • More consistent red flag detection
  • Better internal escalation
  • Audit-ready documentation

NeX Automate supports accounting firms with practical automation across AML/CTF compliance, client verification, documentation, and operational workflows.

Not Sure Your Firm Could Spot an SMR Today?

Book an AML readiness assessment and we’ll walk through your current verification, screening, and escalation process — and show you where detection gaps could be putting your firm at risk.

Book AML Readiness Assessment →

Key Takeaways

  • An SMR must be lodged when there is reasonable suspicion of serious crime — no proof required.
  • Terrorism financing suspicions generally require reporting within 24 hours.
  • Money laundering or other serious crime suspicions generally require reporting within 3 business days.
  • The “tipping off” rule prohibits alerting the client that an SMR has been or may be lodged.
  • Detection starts with verification — you can’t report what you can’t see.
  • AML/CTF is an ongoing operational load that repeats with every new client, so automation keeps detection consistent.

Strengthen Your AML/CTF Detection with NeX Automate

VERA supports stronger client verification, risk profiling, and red flag detection — bringing AML/CTF compliance, client verification, and AI automation into one consistent workflow.

Book a Free Demo →

Sources & further reading

Related guides: What AML/CTF means for accounting firms, Customer Due Diligence explained, Verification of Identity (VOI) explained, and the best AML/CTF compliance software.

]]>
https://nexautomate.com.au/blogs/suspicious-matter-reports-smr-accounting-firms-2026/feed/ 0
Top AML/CTF Compliance Software for Australian Accounting Firms https://nexautomate.com.au/blogs/top-aml-ctf-compliance-software-for-australian-accounting-firms/ https://nexautomate.com.au/blogs/top-aml-ctf-compliance-software-for-australian-accounting-firms/#respond Mon, 06 Jul 2026 06:33:55 +0000 https://nexautomate.com.au/?p=3387

Written by the NeX Automate Compliance Team

Reviewed for accuracy against current AUSTRAC guidance. NeX Automate builds AML/CTF and client-verification automation used by Australian accounting practices — and VERA is one of the options reviewed below. This guide is general information, not legal advice; confirm your firm’s specific obligations with AUSTRAC or a qualified adviser.

Last updated: July 2026

The 1 July 2026 deadline has passed, and AML/CTF obligations are now live for thousands of Australian accounting firms. Many practices got ready in time. Many did not — and are now searching for AML/CTF compliance software while already operating as reporting entities. The problem: most tools on the market were not built for accountants. They were built for banks, fintechs, or large financial institutions, and they show it.

This article cuts through the noise. It covers what to look for in AML/CTF compliance software for small and mid-sized accounting firms, reviews the main options available in Australia, and explains why the right choice depends heavily on how the software integrates with your existing practice workflow — not just whether it ticks the compliance boxes.

Disclosure: We are NeX Automate, the team behind VERA — one of the options reviewed below. We’ve been transparent about that throughout. Our goal is a genuinely useful comparison, not a sales pitch dressed up as a review.

What AML/CTF Compliance Software Must Do for Accounting Firms

Before evaluating any tool, you need to know what you’re measuring it against. These are the eight criteria that matter for an Australian accounting firm operating as a reporting entity under Tranche 2:

Criteria Why It Matters
Australian regulatory alignmentMust be built for AUSTRAC requirements — not adapted from US or EU frameworks.
VOI (Verification of Identity)Must support Face-ID biometric checks plus government document verification.
AML/CTF screeningMust screen against OFAC, UN, and Australian Government sanctions lists plus PEP databases.
Risk scoringMust automatically assign a risk rating based on the client profile and screening results.
Record keepingMust store all verification records for the required 7-year retention period.
Practice system integrationMust connect to your practice management system to avoid double data entry.
Deployment speedMust be deployable quickly — weeks, not months — especially for firms now catching up.
No lock-inSmall firms need flexibility — avoid multi-year contracts where possible.

The Problem With Most AML/CTF Software Options

Here are the main options available to Australian accounting firms, evaluated against the eight criteria above.

Option 1: VERA by NeX Automate

Built for Australian accounting firms

Best for: Small to large Australian accounting firms operating as Tranche 2 reporting entities — particularly practices wanting end-to-end onboarding automation, not just identity verification as a standalone step.

Key features

  • Full VOI: Face-ID biometric check plus government document verification (passport, driver licence)
  • AML/CTF screening against OFAC, UN, and Australian Government sanctions lists plus PEP databases
  • Automated risk scoring — low, medium, high — recorded with full audit trail
  • Engagement letter and ethical letter generation from verified client data
  • Direct integration with practice management systems — client record created automatically
  • Tax Agent Portal integration — verified clients added seamlessly
  • Direct debit and billing setup included in the onboarding workflow
  • 7-year record keeping with timestamps — audit-ready at any time
  • 2-week deployment. No lock-in contract. Low setup fees*

Limitations

  • Built specifically for accounting practices — not suitable for legal, real estate, or other Tranche 2 professions
  • Requires an implementation engagement to configure to your specific practice workflow

Pricing: Low setup fees. No lock-in contract. Contact NeX Automate for practice-specific pricing.

Verdict: The only AML/CTF compliance solution on this list built end-to-end for Australian accounting firms. If you want verification that connects directly to your practice management system, engagement letter generation, and Tax Agent Portal — without manual re-entry — VERA is the only purpose-built option reviewed here.

Option 2: FrankieOne

Strong Australian IDV, limited accounting integration

Best for: Financial services firms, fintechs, and lending businesses needing high-volume identity verification with orchestration across multiple data sources.

Key features

  • Strong Australian identity verification — integrates with multiple document and biometric providers
  • Sanctions and PEP screening across major databases
  • Risk-based orchestration — configure different verification flows for different risk levels
  • Australian-built — designed with AUSTRAC requirements in mind
  • API-first — integrates with custom tech stacks

Limitations

  • No native integration with accounting practice management systems (Xero Practice Manager, MYOB, Handisoft, etc.)
  • No engagement letter generation or document automation
  • No Tax Agent Portal integration
  • Primarily designed for financial services — accounting-specific workflow not supported out of the box
  • Requires development resources to implement and integrate for most accounting firms

Pricing: Custom pricing — contact FrankieOne directly. Typically volume-based.

Verdict: A strong choice for financial services firms. For accounting practices, the lack of practice system integration means significant manual work remains after identity verification is complete.

Option 3: International IDV Platforms (Onfido, Jumio, Thales)

Capable but overkill

Best for: Large enterprises, global financial institutions, and businesses with technical teams that can configure and integrate complex IDV APIs.

Key features

  • High-quality biometric Face-ID and document verification
  • Broad international coverage — useful for firms with overseas clients
  • Highly configurable for complex compliance requirements
  • PEP and sanctions screening available

Limitations

  • Not built for Australian AUSTRAC requirements specifically — require configuration to meet local obligations
  • No accounting practice integration whatsoever — purely IDV tooling
  • Enterprise pricing — typically not cost-effective for small or mid-sized accounting firms
  • Significant technical setup required — not deployable in 2 weeks for most practices
  • No engagement letters, practice system sync, or Australian-specific workflow support

Pricing: Enterprise pricing — typically $10,000+ setup plus per-verification fees. Not publicly listed.

Verdict: Capable technology, wrong fit for accounting practices. The configuration, integration, and cost burden makes these impractical for most small to mid-sized firms.

Option 4: Manual Process

Compliant in theory, unworkable at scale

Best for: Very small practices with fewer than 20 clients receiving designated services, or as a short-term stopgap while evaluating software options.

Key features

  • No software cost
  • Full control over the process
  • Can be implemented immediately without a setup period

Limitations

  • 30 to 45 minutes per client — unsustainable at any meaningful scale
  • Prone to human error — missed fields, inconsistent documentation, incomplete audit trails
  • Manual sanctions and PEP searching is time-consuming and unreliable
  • Record keeping requires disciplined manual filing — easily overlooked under time pressure
  • Staff training burden is higher — every person needs to understand the full process
  • Does not scale — the same process that works for 20 clients breaks under 200

Pricing: No software cost, but significant hidden time cost. At 30 minutes per client, 200 clients = 100 hours of staff time.

Verdict: Legally compliant if executed correctly, but practically unworkable for most practices. Appropriate only as a very short-term bridge while deploying a software solution.

Want to see how VERA compares to your current process — live?

Book a free 30-minute demonstration. We’ll walk through a complete client verification from start to finish — showing you exactly what your team would and would not need to do manually.

👉 Book Your Free VERA Demo →

Feature Comparison at a Glance

Use this table as a quick reference when evaluating your options. The key differentiators for accounting firms are practice integration, document automation, and Tax Agent Portal connectivity.

Feature VERA Global IDV FrankieOne Manual
Built for Australian AML/CTF (AUSTRAC)✓⚠✓✓
Face-ID biometric VOI✓✓✓⚠
Sanctions + PEP screening✓✓✓⚠
Automated risk scoring✓⚠✓✕
Engagement letter generation✓✕✕✕
Practice system integration✓✕⚠✕
7-year record keeping✓⚠✓⚠
Deploys in under 4 weeks✓✓✓✓
No lock-in contract✓⚠⚠✓
Built specifically for accountants✓✕✕✓

Key: ✓ Fully supported  ·  ⚠ Partial / requires configuration  ·  ✕ Not supported

Which AML/CTF Option Should Your Firm Choose?

A practical decision guide for Australian accounting firms now operating under Tranche 2.

Choose VERA if:

  • You’re an Australian accounting firm operating as a Tranche 2 reporting entity.
  • You want client verification to connect directly to your practice management system without manual re-entry.
  • You need engagement letters and onboarding documents generated automatically from verified client data.
  • You have more than 30 clients who require verification.
  • You want to deploy in 2 weeks and be done — not spend months on integration projects.

Consider FrankieOne if:

  • You have an in-house technical team that can build custom integrations.
  • You need a highly configurable IDV platform that connects to a bespoke tech stack.
  • Your verification volume is very high and you need sophisticated orchestration across multiple providers.

Stick with a manual process only if:

  • You have fewer than 20 clients receiving designated services.
  • You’re using it as a short-term bridge while a software solution is being deployed.
  • You have a dedicated compliance administrator who can manage the process consistently.

Not Compliant Yet? Get There Fast — With Software Built for Accounting Firms

VERA is the only AML/CTF compliance tool on this list built end-to-end for Australian accounting practices — handling verification, screening, risk scoring, document generation, and record keeping, all connected to your existing practice system. Deploys in 2 weeks. No lock-in. Start free with 50 credits.

Start Free – Get 50 Credits → 👉 Book Your Free VERA Demo →

P.S. One thing most software comparison articles don’t tell you: getting compliant isn’t instant. VERA takes about 2 weeks to deploy and configure to your practice workflow. The firms operating most comfortably today are the ones that gave their implementation time to be set up properly — so if you’re still catching up, the sooner you start, the sooner every new client is verified correctly.

About NeX Automate

NeX Automate is an Australian accounting automation platform built by accountants, for accountants. VERA is our AML/CTF client verification automation tool — the only compliance solution on this list designed end-to-end for Australian accounting practices. VERA handles VOI, AML/CTF screening, risk scoring, engagement letters, practice system integration, and 7-year record keeping — all in approximately 3 minutes per client. Visit nexautomate.com.au

Sources & further reading

Related guides: What AML/CTF means for accounting firms, Customer Due Diligence explained, and Verification of Identity (VOI) explained.

]]>
https://nexautomate.com.au/blogs/top-aml-ctf-compliance-software-for-australian-accounting-firms/feed/ 0
(VOI) Verification of Identity in AML/CTF: What Accountants Need to Know? https://nexautomate.com.au/blogs/verification-of-identity-voi-aml-ctf-accountants/ https://nexautomate.com.au/blogs/verification-of-identity-voi-aml-ctf-accountants/#respond Mon, 06 Jul 2026 05:56:36 +0000 https://nexautomate.com.au/?p=3379

Written by the NeX Automate Compliance Team

Reviewed for accuracy against current AUSTRAC guidance. NeX Automate builds AML/CTF and client-verification automation used by Australian accounting practices. This guide is general information, not legal advice — confirm your firm’s specific obligations with AUSTRAC or a qualified adviser.

Last updated: July 2026

At the heart of every AML/CTF compliance program is a deceptively simple question: is this client really who they say they are?

Answering it correctly is the job of Verification of Identity in AML/CTF — often called VOI. The reforms took effect on 1 July 2026, and AML/CTF obligations are now live for Australian accounting firms. If your practice is already compliant, VOI is now a repeatable day-to-day workflow. And if you’re among the firms still catching up, verification of identity is the fastest, highest-impact place to start.

This guide explains the VOI standard, why it matters for accounting firms now that the regime is in force, and how NeX Automate’s VERA supports faster, more consistent client verification.

What Is VOI?

Verification of Identity in AML/CTF is the process of confirming a client’s identity using reliable and independent sources. It typically follows a “100-point” style framework, drawing on government-issued documents such as passports, driver licences, and Medicare cards, cross-checked against the individual presenting them.

Electronic vs Manual VOI

Manual VOI

The traditional approach involves a staff member physically, or via video, inspecting the client’s identity documents, recording the details, and retaining copies. Manual VOI can work, but it is often slow, inconsistent between staff members, and difficult to audit at scale.

Electronic VOI

Modern electronic verification checks identity documents against authoritative databases in real time. It helps confirm whether a document is genuine, current, and matched to the individual presenting it. For accounting firms, VOI becomes faster, more consistent, and easier to document when supported by electronic tools.

This is where client verification automation becomes valuable. It reduces manual handling, supports stronger audit trails, and helps firms apply the same standard across every client.

Why VOI Is Harder Than It Looks

Verification of Identity in AML/CTF may sound simple, but in practice it creates several operational challenges for accounting firms:

  • Document fraud is more sophisticated than ever. Fake and altered documents are becoming harder to identify with manual checks alone.
  • Consistency is difficult. Different staff members may apply different standards, especially without a clear workflow or centralised system.
  • Remote onboarding adds complexity. Many firms now work with clients online, so identity checks must be secure, reliable, and easy to complete without face-to-face meetings.
  • Audit requirements matter. Every verification must be documented properly and retained for future review.

That is why AML/CTF compliance software and AI automation for accounting firms are becoming important parts of modern compliance operations.

The 7-Year Record-Keeping Rule

Under AUSTRAC requirements, VOI records — like all customer due diligence records — must be kept for a minimum of seven years. That means every identity verification your firm performs creates a documentation obligation that continues long after the client engagement ends.

Manual systems can make this difficult. Files may be stored across email, folders, spreadsheets, or disconnected systems. With accounting automation, firms can reduce the burden of storing, organising, and retrieving client verification records.

For firms managing high client volumes, VOI is not just a compliance step. It becomes an ongoing workflow that must be repeatable, traceable, and audit-ready.

“A VOI process is only as good as its weakest link — and in most firms, that weak link is inconsistent manual handling and incomplete record keeping.”

How VERA Automates VOI

🤖 Meet VERA — Client Verification Automation

VERA, the Client Verification Automator from NeX Automate, helps automate the VOI process for accounting firms. It supports electronic identity verification, applies a consistent standard to every client, and helps retain complete, time-stamped records for the required retention period.

For your clients, this means a faster, smoother onboarding experience:

  • No unnecessary document chasing
  • No avoidable delays
  • No inconsistent manual handling

For your firm, it means more consistent, defensible, and audit-ready Verification of Identity across every client.

VERA is part of NeX Automate’s broader suite of automation solutions for accounting firms, including accounting automation for firms, ATO Automation, ATO document automation, ASIC Review Automation, and workpaper automation. Together, these tools help firms reduce repetitive admin, improve accuracy, and keep compliance workflows moving.

VERA runs at $25 per hour — you pay only for the verification work it performs.

🤖 Automate VOI at Scale with VERA

Sign up and get 50 free credits to see VERA run live identity checks — electronic VOI, consistent standards, and audit-ready records from the first client.

Start Free – Get 50 Credits →

Why Firms That Aren’t Ready Yet Should Act Now

With the 1 July 2026 deadline behind us, AML/CTF compliance is no longer a future project — it’s a current obligation with every new client you onboard. Firms that haven’t fully implemented their processes are now operating with real exposure, and building policies, training staff, creating workflows, and documenting client verification all at once under pressure is exactly the scramble the deadline was meant to avoid.

The good news: verification of identity is the fastest place to close the gap. By standardising VOI now, firms can build a smoother onboarding process and reduce ongoing compliance pressure. The right systems help your team verify clients, retain records, and manage obligations with far less manual work.

Already past the deadline and not fully set up? You’re not alone — but every unverified client onboarded from here carries risk. Prioritising a consistent, documented VOI workflow is the single most effective first step to getting compliant quickly.

AML/CTF compliance for accounting firms goes beyond registration. It creates an ongoing operational responsibility that continues with every new client. That’s why AI automation for accounting firms is becoming essential — it helps reduce repetitive admin, improve accuracy, and keep compliance workflows consistent.

Get Your AML Policies & Staff Training Sorted in 15 Minutes

Behind on the essentials? Complete this quick intake form and we’ll prepare a draft AML/CTF policy tailored to your firm — including your firm’s details, services, responsible persons, and client onboarding workflow.

Book My AML Readiness Assessment →

Key Takeaways

  • Verification of Identity in AML/CTF confirms a client’s identity using reliable and independent sources.
  • Electronic VOI is faster, more consistent, and more auditable than manual checks.
  • VOI records must be retained for a minimum of seven years.
  • With the reforms now in force, firms not yet compliant should treat VOI as the first priority.
  • VERA supports client verification automation and helps firms manage VOI more consistently.

See How NeX Automate Automates Client Verification

Watch VERA run electronic VOI, apply consistent standards, and produce audit-ready records — in a quick, no-pressure demo.

Book a Free Demo →

Sources & further reading

Related guides: What AML/CTF means for accounting firms, Customer Due Diligence explained, and the best AML/CTF compliance software for accounting firms.

]]> https://nexautomate.com.au/blogs/verification-of-identity-voi-aml-ctf-accountants/feed/ 0 Customer Due Diligence for Accounting Firm in 2026, Explained https://nexautomate.com.au/blogs/customer-due-diligence-cdd-accounting-firms-2026/ https://nexautomate.com.au/blogs/customer-due-diligence-cdd-accounting-firms-2026/#respond Thu, 02 Jul 2026 05:04:00 +0000 https://nexautomate.com.au/?p=3368

If there is one AML/CTF concept every accounting firm needs to master before 1 July 2026, it is Customer Due Diligence — known as CDD.

It is the foundation of the entire AML/CTF compliance regime, and it is the obligation that will consume the most staff time. This guide explains what customer due diligence for accounting firms involves, the different levels of due diligence, and how VERA transforms a manual chore into an automated workflow.

What Is Customer Due Diligence?

CDD is the process of identifying and verifying who your clients really are, understanding the nature and purpose of the business relationship, and assessing the money laundering and terrorism financing risk they present. Under AUSTRAC rules, CDD must generally be completed before you provide a designated service.

43%  of AML compliance failures globally relate to inadequate customer due diligence and identity verification, according to analysis of regulatory enforcement actions cited in industry research.

The Three Levels of Due Diligence

1. Simplified Due Diligence (SDD)

Applied to low-risk clients — for example, listed public companies or government entities. Fewer verification steps are required, but the client must genuinely meet the low-risk criteria.

2. Standard Customer Due Diligence

The default level for most clients. It involves collecting and verifying identity information — full name, date of birth, residential address — using reliable and independent documentation or electronic verification.

3. Enhanced Due Diligence (EDD)

Applied to higher-risk clients — including politically exposed persons (PEPs), clients in high-risk jurisdictions, or complex ownership structures. EDD requires additional information, senior approval, and closer ongoing scrutiny.

What CDD Actually Requires You to Collect

  • Identity verification: full name, date of birth, and residential address, verified against reliable documents.
  • Beneficial ownership: for companies and trusts, identifying the individuals who ultimately own or control the entity (generally 25% or more).
  • Nature and purpose: understanding why the client needs your services and whether it makes commercial sense.
  • PEP and sanctions screening: checking the client against politically exposed persons lists and sanctions watch lists.
  • Risk rating: assigning each client a money laundering / terrorism financing risk score.

Beneficial Ownership: The Tricky Part

One of the hardest parts of CDD is identifying beneficial owners — the real humans behind a company or trust. Criminals deliberately use layered structures to obscure ownership.

The Financial Action Task Force has repeatedly identified opaque beneficial ownership as one of the top global money laundering vulnerabilities. Accounting firms, who often set up these very structures for clients, are uniquely placed to identify them — and uniquely obligated to.

Why Manual CDD Does Not Scale

“A single standard CDD check can require document collection, manual verification, watch-list screening across multiple databases, and documentation — 15 to 30 minutes of skilled staff time, every time.”

For a growing firm, manual customer due diligence becomes a bottleneck. It delays client onboarding, frustrates clients who expect fast service, and ties up senior staff in repetitive admin.

How VERA Automates the Entire CDD Workflow

🤖 Meet VERA — Client Verification Automation

Built specifically to automate customer due diligence for accounting firms. VERA:

  • Performs automated VOI (Verification of Identity) checks against reliable data sources
  • Screens clients against PEP, sanctions, and adverse media watch lists
  • Applies consistent, rules-based risk scoring to every client
  • Flags higher-risk clients for enhanced due diligence and human review
  • Generates complete, audit-ready CDD records automatically

The result: client onboarding that used to take 30 minutes now happens in minutes, with greater consistency and a complete audit trail. VERA does not replace professional judgment — it removes the manual grind so your team can focus on the decisions that genuinely require human expertise.

Try VERA Free — No Card Needed

Sign up and get 50 free credits to run live CDD checks and see how VERA handles VOI, screening and risk scoring for your firm.

Start Free – Get 50 Credits →

Not Sure How to Get Your Team AML/CTF Ready?

Start with the essentials: your AML/CTF policy, client verification process, and staff training plan. Complete this quick intake form and we’ll prepare a draft AML/CTF policy tailored to your firm — including your firm’s details, services, responsible persons, and client onboarding workflow.

Get AML Policies & Staff Training in 15 Mins →

Key Takeaways

  • CDD is the core AML/CTF obligation and must be completed before providing services.
  • There are three levels: simplified, standard, and enhanced due diligence.
  • Beneficial ownership identification is the hardest and most scrutinised element.
  • VERA automates VOI, screening, risk scoring, and record-keeping end to end.

Discover How NeX Automate Simplifies AML/CTF Compliance

See how VERA turns a 30-minute manual CDD chore into an automated, audit-ready workflow — in a quick, no-pressure call.

Book a Free Discovery Call →

New to the reforms? Start with our plain-English guide to what AML/CTF means for Australian accounting firms, or compare the best AML/CTF compliance software for accounting firms to find the right fit for your practice.

]]>
https://nexautomate.com.au/blogs/customer-due-diligence-cdd-accounting-firms-2026/feed/ 0
What Is AML/CTF? And Why It Now Applies to Every Australian Accounting Firm? https://nexautomate.com.au/blogs/what-is-aml-ctf-australian-accounting-firms-2026/ https://nexautomate.com.au/blogs/what-is-aml-ctf-australian-accounting-firms-2026/#respond Mon, 22 Jun 2026 09:01:12 +0000 https://nexautomate.com.au/?p=3360

For nearly two decades, AML/CTF compliance has been something other industries worried about — banks, casinos, remittance providers and financial institutions.

From 1 July 2026, that changes.

Australian accounting firms are now squarely within the regulatory perimeter. If your firm provides tax, bookkeeping, company formation, trust services, or other designated services, AML/CTF compliance for accounting firms is about to become a core operational obligation.

This guide explains what AML/CTF means, why it now matters, and how NeX Automate helps practices prepare with practical accounting automation, Client Verification Automation, and wider AI automation for accounting firms.

Try VERA Free — No Card Needed

Sign up and get 50 free credits to run live Client Verification checks and see how VERA handles VOI, screening and risk scoring for your firm.

Start Free – Get 50 Credits →

What Does AML/CTF Actually Stand For?

AML/CTF stands for Anti-Money Laundering and Counter-Terrorism Financing. It is a regulatory framework designed to detect, deter, and disrupt the movement of illegal funds through the legitimate economy.

In Australia, AML/CTF is governed by the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 and administered by AUSTRAC — the Australian Transaction Reports and Analysis Centre.

At its core, AML/CTF compliance requires regulated businesses to:

  • Know who their clients are
  • Understand the nature of the services they provide
  • Assess client and transaction risk
  • Monitor for unusual activity
  • Report suspicious matters to AUSTRAC
  • Keep proper records for audit and regulatory review

For accounting practices, this means AML/CTF compliance is not just a policy document. It becomes part of client onboarding, verification, record-keeping, staff training, and ongoing monitoring.

According to estimates cited by AUSTRAC and the Australian Criminal Intelligence Commission, billions of dollars are laundered through Australia each year. This is why stronger controls, better documentation, and reliable AML/CTF compliance software are becoming important for professional service firms.

Why Money Laundering Matters — The Scale of the Problem

Money laundering is not a victimless paperwork problem.

According to the Financial Action Task Force, between 2% and 5% of global GDP is laundered annually, equivalent to roughly US$800 billion to US$2 trillion. In Australia, serious and organised crime costs the economy up to $60.1 billion per year, according to the Australian Criminal Intelligence Commission.

Professional service providers, including accountants, bookkeepers, lawyers, conveyancers and company service providers, can be used as gatekeepers in laundering schemes — sometimes knowingly, but often without realising the risk.

That is precisely why the Attorney-General’s Department has extended the AML/CTF regime to capture professions that may be exposed to this risk. Your team must be able to identify clients properly, understand risk, document decisions, and prove that the right checks were completed.

This is where accounting automation for firms can make a major difference. Manual spreadsheets, scattered emails, ID attachments, and inconsistent notes are risky. A structured AML/CTF compliance software process helps firms keep client verification and compliance evidence organised.

What Are the Tranche 2 Reforms?

The original 2006 legislation captured “Tranche 1” entities such as banks, financial institutions, casinos, and remittance dealers. The Tranche 2 reforms extend the regime to “designated non-financial businesses and professions” known as DNFBPs.

These include:

  • Accountants and bookkeepers providing designated services
  • Lawyers and conveyancers
  • Real estate agents
  • Trust and company service providers
  • Dealers in precious metals and stones

Australia was one of the last major economies in the FATF network to regulate these professions. Tranche 2 brings the country into line with international standards.

For accountants, the practical impact is clear: AML/CTF compliance will require stronger systems, clearer workflows, and better evidence management. Many practices are now looking at accounting automation, Client Verification Automation, and AI automation for accounting firms because manual compliance will become harder to manage at scale.

What Accounting Firms Must Do From 1 July 2026

From 1 July 2026, accounting firms that provide designated services will need to meet new AML/CTF obligations. These may include:

  • Enrolling and registering with AUSTRAC as a reporting entity
  • Developing a written AML/CTF Program covering risk assessment and internal controls
  • Conducting Customer Due Diligence on new clients
  • Verifying client identity and assessing risk
  • Monitoring client relationships on an ongoing basis
  • Reporting suspicious matters to AUSTRAC within strict timeframes
  • Keeping records for a minimum of 7 years
  • Training staff on their AML/CTF obligations

The biggest operational challenge will be consistency. One staff member may collect ID documents by email. Another may save notes in a spreadsheet. Another may forget to document a risk decision. Over time, these small gaps can create compliance exposure.

This is why AML/CTF compliance software and accounting automation for firms are becoming essential. They help standardise the process so every client goes through the same verification, screening, risk scoring, and record-keeping steps.

🤖 Meet VERA — Client Verification Automation

The single most time-consuming AML/CTF obligation is Customer Due Diligence — verifying identity, screening against watch lists, scoring risk, and documenting everything for audit. Done manually, this can take 15 to 30 minutes per client.

VERA automates this workflow end-to-end: automated VOI checks, AML/CTF watch-list screening, risk scoring, and audit-ready records — without unnecessary manual intervention.

Get AML Policies & Staff Training Sorted in 15 Minutes

Not sure how your team will get ready? Complete this quick intake form and we’ll prepare a draft AML/CTF policy for your firm — with your firm details, services, responsible people and onboarding process inserted.

Get My Draft AML Policy →

Why Accounting Automation for AML/CTF Matters

AML/CTF compliance is not only about having a policy. It is about proving that your firm followed the right process every time. That means firms need systems that can:

  • Collect client information securely
  • Verify identity documents
  • Screen clients against risk lists
  • Record risk scores
  • Store evidence for audit
  • Trigger reminders and follow-ups
  • Keep the compliance process consistent

Alongside VERA for Client Verification Automation, firms can also explore:

  • Workpaper Automation for structured workpaper preparation
  • ATO Automation for handling ATO-related document workflows
  • ASIC Review Automation for simplifying ASIC annual review processes

Together, these tools show how AI automation for accounting firms can support compliance, client service, and internal productivity.

AML & VOI Checks for Less Than a Coffee

VERA is designed to reduce the manual workload involved in client verification and AML/CTF preparation. It helps firms by:

  • Automating client identity checks
  • Supporting VOI workflows
  • Screening clients against AML/CTF risk lists
  • Applying structured risk scoring
  • Keeping audit-ready records
  • Reducing staff time spent chasing documents
  • Creating a more consistent onboarding experience

At just $25 per hour of bot runtime, VERA gives firms a cost-effective way to manage a major compliance workload — paying only when the automation is actually working.

P.S. One thing most compliance articles don’t tell you: the legislative deadline is not the only deadline. Implementing a verification process takes time. The firms that will be most comfortably compliant on 1 July are the ones that start their setup early and give themselves room to configure everything properly.

Key Takeaways

  • AML/CTF compliance becomes mandatory for Australian accounting firms from 1 July 2026.
  • It covers client verification, risk assessment, reporting, record-keeping, and ongoing monitoring.
  • The regime is administered by AUSTRAC under the AML/CTF Act 2006 and expanded by Tranche 2 reforms.
  • Firms must register, build a program, conduct CDD, monitor, report, and keep records for 7 years.
  • VERA from NeX Automate supports the most time-consuming obligation: client verification.
  • Accounting automation supports wider firm efficiency across AML/CTF, ATO, ASIC, and workpaper workflows.

🤖 Automate AML/CTF Compliance with VERA

Reduce manual verification work. Keep audit-ready records. Start your Client Verification Automation today — your first 50 credits are on us.

Start Free – Get 50 Credits →

Still comparing your options? See our breakdown of the best AML/CTF compliance software for accounting firms to find the right fit for your practice.

]]>
https://nexautomate.com.au/blogs/what-is-aml-ctf-australian-accounting-firms-2026/feed/ 0
Top AML/CTF Compliance Software for Australian Accounting Firms https://nexautomate.com.au/blogs/aml-ctf-compliance-software-accounting-firms/ https://nexautomate.com.au/blogs/aml-ctf-compliance-software-accounting-firms/#respond Mon, 18 May 2026 08:37:53 +0000 https://nexautomate.com.au/?p=3095 With July 1, 2026 approaching, thousands of Australian accounting firms are searching for AML/CTF compliance software suitable for their practice. The problem: most tools on the market were not built for accountants. They were built for banks, fintechs, or large financial institutions and they show it.

This article cuts through the noise. It covers what to look for in AML/CTF compliance software for small and mid-sized accounting firms, reviews the main options available in Australia, and explains why the right choice depends heavily on how the software integrates with your existing practice workflow, not just whether it ticks the compliance boxes.

Disclosure: We are Nex Automate, the team behind VERA — one of the options reviewed below. We have been transparent about that throughout. Our goal with this article is to give you a genuinely useful comparison, not a sales pitch dressed up as a review.

What AML/CTF Compliance Software Must Do for Accounting Firms

Before evaluating any tool, you need to know what you are actually evaluating it against. These are the eight criteria that matter for an Australian accounting firm becoming a reporting entity under Tranche 2:






AML/CTF Criteria Table


What to Look For in AML/CTF Compliance Software

Criteria Why It Matters
Australian regulatory alignment Must be built for AUSTRAC requirements — not adapted from US or EU frameworks.
VOI (Verification of Identity) Must support Face-ID biometric checks plus government document verification.
AML/CTF screening Must screen against OFAC, UN, and Australian Government sanctions lists plus PEP databases.
Risk scoring Must automatically assign a risk rating based on the client profile and screening results.
Record keeping Must store all verification records for the required 7-year retention period.
Practice system integration Must connect to your practice management system to avoid double data entry.
Deployment speed Must be deployable before 1 July 2026 — weeks, not months.
No lock-in Small firms need flexibility — avoid multi-year contracts where possible.


Problem With Most AML/CTF Software Options

Here are the main options available to Australian accounting firms, evaluated against the eight criteria above.

Option 1: VERA by Nex Automate — Built for Australian Accounting Firms






VERA — Nex Automate


VERA — Nex Automate

AML/CTF client verification automation built specifically for Australian accounting practices

Best for: Small to large Australian accounting firms becoming Tranche 2 reporting entities. Particularly suited to practices that want end-to-end onboarding automation — not just identity verification as a standalone step.

Key features:

  • ✓Full VOI: Face-ID biometric check plus government document verification (passport, driver licence)
  • ✓AML/CTF screening against OFAC, UN, and Australian Government sanctions lists plus PEP databases
  • ✓Automated risk scoring — low, medium, high — recorded with full audit trail
  • ✓Engagement letter and ethical letter generation from verified client data
  • ✓Direct integration with practice management systems — client record created automatically
  • ✓Tax Agent Portal integration — verified clients added seamlessly
  • ✓Direct debit and billing setup included in the onboarding workflow
  • ✓7-year record keeping with timestamps — audit-ready at any time
  • ✓2-week deployment. No lock-in contract. Low Set up Fees*

Limitations:

  • Built specifically for accounting practices — not suitable for legal, real estate, or other Tranche 2 professions
  • Requires an implementation engagement to configure to your specific practice workflow

Pricing: Low Setup Fees. No lock-in contract. Contact Nex Automate for practice-specific pricing.

Verdict: The only AML/CTF compliance solution on this list built end-to-end for Australian accounting firms. If you want verification that connects directly to your practice management system, engagement letter generation, and Tax Agent Portal — without manual re-entry — VERA is the only purpose-built option reviewed here.


Option 2: FrankieOne — Strong Australian IDV, Limited Accounting Integration






FrankieOne — Blog Section


FrankieOne

Australian identity verification and fraud prevention platform

Best for: Financial services firms, fintechs, and lending businesses that need high-volume identity verification with orchestration across multiple data sources.

Key features:

  • ✓Strong Australian identity verification — integrates with multiple document and biometric providers
  • ✓Sanctions and PEP screening across major databases
  • ✓Risk-based orchestration — configure different verification flows for different risk levels
  • ✓Australian-built — designed with AUSTRAC requirements in mind
  • ✓API-first — integrates with custom tech stacks

Limitations:

  • No native integration with accounting practice management systems (Xero Practice Manager, MYOB, Handisoft, etc.)
  • No engagement letter generation or document automation
  • No Tax Agent Portal integration
  • Primarily designed for financial services — accounting-specific workflow not supported out of the box
  • Requires development resources to implement and integrate for most accounting firms

Pricing: Custom pricing — contact FrankieOne directly. Typically volume-based.

Verdict: A strong choice for financial services firms. For accounting practices, the lack of practice system integration means significant manual work remains after identity verification is complete.


Option 3: International IDV Platforms (Onfido, Jumio, Thales) — Capable but Overkill






International IDV Platforms


International IDV Platforms

Global identity verification platforms adapted for Australian compliance

Best for: Large enterprises, global financial institutions, and businesses with technical teams that can configure and integrate complex IDV APIs.

Key features:

  • ✓High-quality biometric Face-ID and document verification
  • ✓Broad international coverage — useful for firms with overseas clients
  • ✓Highly configurable for complex compliance requirements
  • ✓PEP and sanctions screening available

Limitations:

  • Not built for Australian AUSTRAC requirements specifically — require configuration to meet local obligations
  • No accounting practice integration whatsoever — purely IDV tooling
  • Enterprise pricing — typically not cost-effective for small or mid-sized accounting firms
  • Significant technical setup required — not deployable in 2 weeks for most practices
  • No engagement letters, practice system sync, or Australian-specific workflow support

Pricing: Enterprise pricing — typically $10,000+ setup plus per-verification fees. Not publicly listed.

Verdict: Capable technology, wrong fit for accounting practices. The configuration, integration, and cost burden makes these impractical for most small to mid-sized firms facing a July 1 deadline.


Option 4: Manual Process — Compliant in Theory, Unworkable at Scale






Manual Verification Process


Manual Verification Process

Doing AML/CTF client verification without dedicated software

Best for: Very small practices with fewer than 20 clients receiving designated services, or as a short-term stopgap while evaluating software options.

Key features:

  • ✓No software cost
  • ✓Full control over the process
  • ✓Can be implemented immediately without a setup period

Limitations:

  • 30 to 45 minutes per client — unsustainable at any meaningful scale
  • Prone to human error — missed fields, inconsistent documentation, incomplete audit trails
  • Manual sanctions and PEP searching is time-consuming and unreliable
  • Record keeping requires disciplined manual filing — easily overlooked under time pressure
  • Staff training burden is higher — every person needs to understand the full process
  • Does not scale — the same process that works for 20 clients breaks under 200

Pricing: No software cost, but significant hidden time cost. At 30 minutes per client, 200 clients = 100 hours of staff time.

Verdict: Legally compliant if executed correctly, but practically unworkable for most practices. Appropriate only as a very short-term bridge while deploying a software solution.







VERA Demo CTA


Want to see how VERA compares to your current process live?

Book a free 30-minute demonstration. We will walk through a complete client verification from start to finish — showing you exactly what your team would and would not need to do manually.

👉 Book Your Free VERA Demo


Feature Comparison at a Glance

Use this table as a quick reference when evaluating your options. The key differentiators for accounting firms are highlighted in the rows relating to practice integration, document automation, and Tax Agent Portal connectivity.






AML/CTF Solution Comparison Table


AML/CTF Solution Comparison

A practical side-by-side view of VERA, global IDV platforms, FrankieOne, and manual verification for Australian accounting practices.

Feature VERA AU10TIX / FrankieOne Manual
Built for Australian AML/CTF (AUSTRAC) ✓ ⚠ ✓ ✓
Face-ID biometric VOI ✓ ✓ ✓ ⚠
Sanctions + PEP screening ✓ ✓ ✓ ⚠
Automated risk scoring ✓ ⚠ ✓ ✕
Engagement letter generation ✓ ✕ ✕ ✕
Practice system integration ✓ ✕ ⚠ ✕
7-year record keeping ✓ ⚠ ✓ ⚠
Deploys in under 4 weeks ✓ ✓ ✓ ✓
No lock-in contract ✓ ⚠ ⚠ ✓
Built specifically for accountants ✓ ✕ ✕ ✓
Key:
✓ Fully supported
⚠ Partial or requires configuration
✕ Not supported







AML/CTF Solution Decision Guide


Which AML/CTF Option Should Your Firm Choose?

A practical decision guide for Australian accounting firms preparing for Tranche 2 compliance.

Choose VERA if:

  • ✓You are an Australian accounting firm becoming a Tranche 2 reporting entity
  • ✓You want client verification to connect directly to your practice management system without manual re-entry
  • ✓You need engagement letters and onboarding documents generated automatically from verified client data
  • ✓You have more than 30 clients who will require verification before July 1
  • ✓You want to deploy in 2 weeks and be done — not spend months on integration projects

Consider FrankieOne if:

  • ⚙You have an in-house technical team that can build custom integrations
  • ⚙You need a highly configurable IDV platform that connects to a bespoke tech stack
  • ⚙Your verification volume is very high and you need sophisticated orchestration across multiple providers

Stick with manual process only if:

  • ⚠You have fewer than 20 clients receiving designated services
  • ⚠You are using it as a short-term bridge while a software solution is being deployed
  • ⚠You have a dedicated compliance administrator who can manage the process consistently







VERA Final CTA


Be Compliance-Ready Before July 1 — With Software Built for Accounting Firms

VERA is the only AML/CTF compliance tool on this list built end-to-end for Australian accounting practices. It handles verification, screening, risk scoring, document generation, and record keeping — all connected to your existing practice system. Deploys in 2 weeks. No lock-in.

👉 Book Your Free VERA Demo Now







VERA P.S. Compliance Note


P.S. One thing most software comparison articles do not tell you: the compliance deadline is not the only deadline. VERA takes 2 weeks to deploy. If you start your evaluation in June, you are taking a risk. The firms that will be most comfortably compliant on July 1 are the ones that book their demo in April or May and give the implementation team time to configure everything properly.







About Nex Automate


About Nex Automate

Nex Automate is an Australian accounting automation platform built by accountants, for accountants. VERA is our AML/CTF client verification automation tool — the only compliance solution on this list designed end-to-end for Australian accounting practices. VERA handles VOI, AML/CTF screening, risk scoring, engagement letters, practice system integration, and 7-year record keeping — all in approximately 3 minutes per client.

Visit nexautomate.com.au


]]>
https://nexautomate.com.au/blogs/aml-ctf-compliance-software-accounting-firms/feed/ 0
Does My Accounting Firm Need to Register with AUSTRAC? https://nexautomate.com.au/blogs/does-my-accounting-firm-need-to-register-with-austrac/ https://nexautomate.com.au/blogs/does-my-accounting-firm-need-to-register-with-austrac/#respond Thu, 14 May 2026 06:31:29 +0000 https://nexautomate.com.au/?p=3080 This is the question every accountant in Australia is asking right now and it is more nuanced than a simple yes or no.

From July 1, 2026, certain accounting services trigger mandatory registration with AUSTRAC under Australia’s AML/CTF Tranche 2 reforms. But not every accounting firm is captured. Whether you need to register depends entirely on which services you actually provide not how large your firm is, how long you have been operating, or what your primary title is.This guide gives you a breakdown of the six categories of designated services that capture accountants, with real-world examples for each. By the end, you will know exactly whether your firm needs to register and what to do next.

The single most important rule:

If you provide even ONE designated service to even ONE client, your entire firm becomes a reporting entity regardless of size, structure, or how rarely you provide that service.

Start Here: The 6-Question Self-Assessment  

This is the question every accountant in Australia is asking right now and it is more nuanced than a simple yes or no.

If you answer YES to any of these questions… Yes / No
Do you manage client funds, accounts, or assets on their behalf? ☐ Yes   ☐ No
Do you help clients buy, sell, or transfer a business? ☐ Yes   ☐ No
Do you set up, operate, or manage a company, trust, or SMSF for clients? ☐ Yes   ☐ No
Do you provide a registered office address for any client? ☐ Yes   ☐ No
Do you act as a nominee director, secretary, or trustee for any client? ☐ Yes   ☐ No
Do you assist clients with buying or selling real property? ☐ Yes   ☐ No

If you answered YES to any question above: Your firm is likely a reporting entity. You must enrol with AUSTRAC, develop an AML/CTF program, and have client verification in place before July 1, 2026. Read on to understand exactly what this means for your practice.

Already know your firm is captured?

Skip straight to seeing how VERA handles client verification — the most operationally demanding part of AML/CTF compliance. Book a free 20-minute demo and we will show you exactly how it works in your practice.

👉 Book Your Free VERA Demo

6 designated service categories that capture accountants

AUSTRAC defines six categories of designated services that bring accounting firms under the AML/CTF regime. Below is explanation of each, with real-world examples of how they apply in practice.

1 Managing Client Money, Accounts, Securities, or Assets

WHAT This covers any situation where you hold, manage, or have authority over client funds or financial assets on their behalf beyond simply receiving payment for your professional fees.

EG Real-world examples:

  • Holding client funds in a trust account pending settlement of a transaction
  • Operating a bank account on behalf of a client entity
  • Managing investments or portfolio assets for a client
  • Acting as trustee of a client’s discretionary or unit trust and making payment decisions
  • Receiving and distributing rental income on behalf of a client

Who this captures: Any accountant who manages client money — including holding funds in trust, operating accounts, or managing assets — is captured. This is one of the most common triggers for accounting firms.

2 Buying, Selling, or Transferring a Business

WHAT This captures your involvement in business transactions — specifically where you assist with or facilitate the acquisition, sale, or transfer of ownership of a legal entity or its assets.

EG Real-world examples:

  • Advising on or structuring the sale of a client’s business
  • Preparing or reviewing business sale agreements
  • Acting as an intermediary in a business acquisition
  • Facilitating the transfer of shares in a company as part of a business sale
  • Assisting with the transfer of business assets — goodwill, equipment, IP — between entities

Who this captures: Accountants who advise on or facilitate business sales and acquisitions — a core service for many business advisory practices — are captured under this category.

3 Creating, Operating, or Managing Legal Entities

WHAT This is one of the broadest categories — and one that catches many accountants by surprise. If you help establish, administer, or manage any legal structure for a client, you are likely providing a designated service.

EG Real-world examples:

  • Setting up a company for a client through ASIC
  • Establishing a discretionary trust or unit trust for a client
  • Setting up a Self-Managed Superannuation Fund (SMSF) for a client
  • Acting as the registered agent for a corporate trustee
  • Managing the ongoing compliance of a company — annual returns, ASIC updates
  • Establishing a partnership structure for clients

Who this captures: This is the category that captures the widest range of accounting practices. If you do any company formations, trust setups, or SMSF establishments — even occasionally — you are a reporting entity.

4 Real Estate Transactions

WHAT Accountants who assist clients with property transactions — beyond simply providing tax advice on the transaction — may be captured under this category.

EG Real-world examples:

  • Assisting a client to structure a property acquisition through a trust or SMSF
  • Facilitating the transfer of real property between related entities
  • Managing conveyancing processes on behalf of a client entity you operate
  • Assisting with the purchase of commercial property as part of a business acquisition

Who this captures: This category is most relevant to accountants who are actively involved in structuring or facilitating property transactions — not those who simply provide tax advice after the fact. However, the line is not always clear, and legal advice is recommended if you are uncertain.

5 Providing a Registered Office Address

WHAT This is the most commonly overlooked trigger and it catches many accountants completely off guard. If your firm’s address appears as the registered office for any client entity with ASIC, you are providing a designated service.

EG Real-world examples:

  • Your firm’s address is listed as the registered office for a client company
  • You receive ASIC correspondence on behalf of a client entity
  • You provide a “care of” address for a client trust or SMSF
  • You have historically provided a registered office as a standard part of your company secretarial services

Who this captures: This is arguably the most widespread trigger for small and mid-sized accounting practices. If you currently provide this service to even one client and most practices do, you are a reporting entity from July 1, 2026.

6 Acting as a Nominee Director, Secretary, or Trustee

WHAT If you or any person in your firm acts as a nominated director, company secretary, or trustee on behalf of a client, this is a designated service. This applies even if the role is largely administrative.

EG Real-world examples:

  • A partner or staff member serving as a director of a client company
  • Serving as company secretary for a client entity
  • Acting as trustee or corporate trustee of a client’s trust
  • Providing a nominee director service to non-resident clients establishing Australian entities

Who this captures: Accountants who provide nominee or officeholder services, even where this is a minor part of their practice are captured. This is particularly relevant for firms serving international clients or providing company secretarial services.

Common Scenarios: Are You Captured?  

Here is how the rules apply to the most common accounting practice types in Australia:

✓ Tax return preparation only (no advisory, no entities) → NOT CAPTURED

If your practice focuses purely on preparing individual or business tax returns and providing tax advice — without managing client money, setting up entities, or providing registered office addresses — you are not providing any designated services and do not need to register.

⚠ Bookkeeping firm that manages client bank accounts or payroll accounts → YES CAPTURED

Managing client money — including operating accounts on a client’s behalf — is a designated service. Bookkeeping firms that have authority over client accounts are captured.

⚠ Accounting firm with some clients who also receive business sale advice → YES CAPTURED

Assisting with business acquisitions and sales is a designated service. Even if this is a minor part of your practice, it triggers reporting entity status for your entire firm.

⚠ Large national firm offering a full range of services → YES CAPTURED

National firms providing any combination of entity management, business advisory, trust administration, or registered office services are clearly captured. The compliance burden is significant, and automation is essential at scale.

⚠ Business advisory practice (including entity setups, SMSFs, trust administration) → YES CAPTURED

If you establish companies, trusts, or SMSFs for clients, or help manage those structures, you are providing designated services. This is one of the most common triggers for full-service accounting practices in Australia.

✓ Sole practitioner providing tax and bookkeeping only → NOT CAPTURED

If you prepare tax returns and financial statements and do not manage client money, set up entities, or provide a registered office address, you are not captured — regardless of how many clients you have.

⚠ Firm that provides registered office addresses for client companies → YES CAPTURED

Providing a registered office address is a designated service. If your firm’s address appears on ASIC records for any client entity, you are a reporting entity from July 1, 2026 — even if this is the only designated service you provide.

What If I Am Still Not Sure?  

AUSTRAC has published an online tool specifically to help accountants determine their obligations. The ‘Check If You Are Regulated’ questionnaire walks you through a series of questions about the services you provide and tells you whether you are likely captured.

You can access it at: Click Here to Redirect

Important caveat:

AUSTRAC’s online tool provides guidance not a formal determination. If your services fall into a grey area, or if you provide complex structures involving multiple types of designated services, you should seek legal advice from a compliance specialist familiar with the AML/CTF Act before July 1, 2026.

What Do You Do If Your Firm Is Captured?  

If one or more of the designated services above applies to your practice, here is your immediate action list:

Step 5 is where most practices get stuck. VERA makes it simple.

Client verification is the most operationally intensive part of AML/CTF compliance. VERA automates Face-ID checks, document verification, AML/CTF screening, risk scoring, engagement letter generation, and record keeping — reducing 45 minutes of manual work to approximately 3 minutes per client. Deploys in 2 weeks. No lock-in.

👉 Book Your Free VERA Demo

P.S. One of the most common mistakes practices make is assuming that because they primarily do tax returns, they are not captured. If you provide even a single registered office address for even one client, you are a reporting entity under Tranche 2. The time to check is now, not in June.

About Nex Automate

Nex Automate is an Australian accounting automation platform built by accountants, for accountants. VERA is our AML/CTF client verification automation tool — purpose-built for accounting firms navigating Tranche 2 compliance. VERA handles VOI checks, AML screening, PEP checks, risk scoring, engagement letters, and record keeping automatically.

Visit nexautomate.com.au
]]>
https://nexautomate.com.au/blogs/does-my-accounting-firm-need-to-register-with-austrac/feed/ 0
9 Things You Must Have in Place by July 2026 https://nexautomate.com.au/blogs/aml-ctf-compliance-checklist-accountants/ Thu, 14 May 2026 04:03:14 +0000 https://nexautomate.com.au/?p=3074 AML/CTF Compliance Checklist for Australian Accountants

From July 1, 2026, accounting firms that provide designated services become reporting entities under Australia’s AML/CTF regime. That means real obligations, enforceable by AUSTRAC, with serious penalties for non-compliance.

This is not a checklist you can start the week before the deadline. Some of these obligations particularly developing your AML/CTF program and training your staff take weeks to implement properly. Below is a complete, breakdown of all 9 obligations your firm must meet, what each one requires in practice, and exactly what you need to do. Each item also notes where VERA — Nex Automate’s client verification automation tool directly handles the compliance work for you.

⚠ Penalties for Non-Compliance

Individuals: Up to $6.6 million per contravention

Businesses: Up to $33 million per contravention

AUSTRAC can also cancel your registration, publicly name your firm, and refer matters to the Australian Federal Police. Non-compliance is not a minor administrative issue — it is a serious criminal and civil liability.

At a Glance: Your 9 AML/CTF Obligations

Use this table as a quick reference. The detailed breakdown for each item follows below.

# Obligation When / Frequency
1 Enrol with AUSTRAC By July 29, 2026
2 Develop an AML/CTF Program Before July 1, 2026
3 Appoint a Compliance Officer Before July 1, 2026
4 Customer Due Diligence (CDD) Every new client — before service
5 Enhanced Due Diligence (EDD) High-risk clients — ongoing
6 Ongoing Monitoring Continuous — all clients
7 Reporting to AUSTRAC As required — no delay
8 Record Keeping 7 years minimum
9 Staff Training Before July 1, 2026 — then annually

Don’t have time to build all of this from scratch?

VERA automates the client verification, AML screening, risk scoring, and document generation steps — the most time-consuming parts of your compliance program. Book a free 30-minute demo to see it in action.

👉 Book Your Free VERA Demo

Full Checklist: 9 Obligations Explained

1

Enrol with AUSTRAC

WHY
Before you can legally provide designated services from July 1, 2026, you must be enrolled with AUSTRAC as a reporting entity. Enrolment is your formal registration as an entity subject to the AML/CTF Act.
DO

✓ Create an AUSTRAC Online account at austrac.gov.au if you do not already have one.

✓ Complete the enrolment form with your business details, ABN, and the designated services you provide.

✓ Enrol by July 29, 2026 at the latest, within 28 days of July 1 — note that enrolment opened March 31, 2026.

✓ Keep your enrolment details up to date — you must notify AUSTRAC within 14 days of any material changes.

2

Develop an AML/CTF Program

WHY
Every reporting entity must have a documented, risk-based AML/CTF program. This is the foundation of your compliance framework — it sets out how your firm identifies, manages, and mitigates money laundering and terrorism financing risks.
DO

✓ Conduct a money laundering and terrorism financing risk assessment for your practice — covering your client base, services, delivery channels, and geographies.

✓ Document your AML/CTF policies, procedures, and internal controls in a written program.

✓ Ensure the program covers: customer due diligence, ongoing monitoring, reporting, record keeping, and staff training.

✓ Appoint a senior person to own and oversee the program.

✓ Review and update the program at least every 3 years — and whenever your business model or risk profile changes significantly.

✓ For smaller practices, 15 or fewer staff, professional services only, AUSTRAC’s Accounting Program Starter Kit provides a template to build from.

3

Appoint an AML/CTF Compliance Officer

WHY
You must designate a specific person — or people — responsible for overseeing your firm’s AML/CTF compliance. This person is accountable to your board or senior management for the integrity of your compliance program.
DO

✓ Nominate a compliance officer from within your firm — this can be a principal, partner, or senior manager.

✓ Ensure they have sufficient authority, resources, and access to information to perform their role.

✓ The compliance officer must understand the requirements of the AML/CTF Act and your firm’s specific obligations.

✓ Document the appointment formally as part of your AML/CTF program.

✓ In smaller practices, the principal or sole practitioner will typically serve as their own compliance officer.

4

Customer Due Diligence (CDD)

WHY
CDD is the process of verifying who your clients actually are before you provide any designated service. This is the most operationally intensive obligation for most accounting firms — and the one where manual processes will cost the most time.
DO

✓ Verify the identity of every client before providing any designated service — not after.

✓ For individuals: collect full name, date of birth, and residential address. Verify using a government-issued photo ID, such as a passport or driver licence, plus a Face-ID biometric check.

✓ For companies and trusts: identify and verify the beneficial owners, being individuals who ultimately own or control 25% or more of the entity.

✓ Conduct AML/CTF screening against sanctions lists, including OFAC, UN, Australian sanctions, and Politically Exposed Persons, PEP, databases.

✓ Assign a risk rating to each client — low, medium, or high — based on their profile.

✓ Existing clients who receive new designated services may need to be re-verified.

⚡ VERA handles this: VERA automates the entire CDD process — Face-ID verification, document checks, sanctions screening, PEP screening, and risk scoring — reducing 30–45 minutes of manual work to approximately 3 minutes per client.

5

Enhanced Due Diligence (EDD)

WHY
Enhanced Due Diligence applies additional scrutiny to clients or transactions that pose a higher risk of money laundering or terrorism financing. EDD is mandatory — not optional — when certain triggers are present.
DO

✓ Apply EDD to any client identified as a Politically Exposed Person, PEP — a current or former senior government official, or their close associate or family member.

✓ Apply EDD to clients from high-risk countries identified by FATF or AUSTRAC guidance.

✓ Apply EDD when a client’s source of funds or wealth cannot be easily explained or verified.

✓ Apply EDD when a transaction appears unusual, complex, or inconsistent with the client’s known profile.

✓ Document your EDD process and the decisions made for each high-risk client in your records.

✓ Consider whether to continue or terminate the relationship if EDD cannot be completed satisfactorily.

⚡ VERA handles this: VERA’s risk scoring module automatically flags clients for EDD based on PEP status, sanctions hits, and risk profile — ensuring no high-risk client slips through your process.

6

Ongoing Monitoring

WHY
AML/CTF compliance is not a one-time client onboarding exercise. You must continuously monitor your client relationships and the services you provide for signs of suspicious activity or changes in risk profile.
DO

✓ Review client relationships periodically — the frequency should match their risk rating, with higher-risk clients reviewed more frequently.

✓ Monitor transactions and instructions for patterns inconsistent with what you know about the client.

✓ Re-verify clients when their circumstances change materially — such as new beneficial owners, change of jurisdiction, or a significant shift in transaction volume.

✓ Keep client information up to date — outdated information means you cannot effectively monitor the relationship.

✓ Document your monitoring activities and the outcomes of each review.

7

Reporting to AUSTRAC

WHY
As a reporting entity, you have mandatory reporting obligations to AUSTRAC. Failure to report is itself a serious breach — AUSTRAC actively monitors reporting patterns and investigates gaps.
DO

✓ Submit a Suspicious Matter Report, SMR, as soon as practicable — and within 24 hours if terrorism financing is suspected — when you form a suspicion about a client or transaction.

✓ Submit a Threshold Transaction Report, TTR, within 10 business days for any physical cash transaction of $10,000 or more.

✓ Submit an International Funds Transfer Instruction, IFTI, report within 10 business days for relevant international transfers.

✓ Never tip off a client that you have submitted or are considering submitting a report — tipping off is itself a criminal offence.

✓ Keep records of all reports submitted and the basis for submitting them.

8

Record Keeping

WHY
Every step of your AML/CTF compliance process must be documented and retained. Records are your evidence of compliance — in an AUSTRAC audit, if it is not documented, it did not happen.
DO

✓ Retain all identity verification documents and records, including copies of IDs, Face-ID results, and screening reports, for a minimum of 7 years from the date of the transaction or end of the client relationship.

✓ Retain records of your AML/CTF risk assessments, due diligence decisions, and monitoring reviews.

✓ Retain records of all AUSTRAC reports submitted.

✓ Ensure records are stored securely and can be retrieved promptly if requested by AUSTRAC.

✓ Records must be in English or readily convertible to English.

⚡ VERA handles this: VERA automatically stores all client verification records, screening results, and audit trails — with timestamps and document copies — in a format ready for AUSTRAC review.

9

Staff Training

WHY
Every person in your firm who interacts with clients or handles financial matters must understand your AML/CTF obligations and how to identify and respond to suspicious activity. Training is not optional — and it needs to be documented.
DO

✓ Deliver AML/CTF training to all relevant staff before July 1, 2026.

✓ Training must cover: what money laundering and terrorism financing look like, your firm’s obligations under the AML/CTF Act, your internal procedures and policies, and how to escalate concerns.

✓ Repeat training at least annually — and when your program or AUSTRAC guidance changes significantly.

✓ Keep records of all training delivered, including dates, attendees, and the content covered.

✓ New staff must complete training before they begin working with clients on designated services.

How Long Does All of This Actually Take?

This is the question every practice principal is asking. The honest answer depends on your firm’s size and complexity but here is a realistic timeline for a mid-sized practice starting from scratch:

Task Manual effort With VERA
Develop AML/CTF Program 2–4 weeks 2–4 weeks (VERA does not replace this)
AUSTRAC Enrolment 1–2 hours 1–2 hours
Appoint Compliance Officer 1 day 1 day
Client verification (per client) 30–45 minutes ~3 minutes
100 clients verified 50–75 hours ~5 hours
Staff training 1–2 days 1–2 days
Records setup and storage Ongoing manual Automated — VERA stores all records

Be Compliance-Ready Before July 1 — Without the Admin Burden

VERA automates client verification, AML/CTF screening, risk scoring, document generation, and record keeping. What takes 45 minutes manually takes 3 minutes with VERA. Deploys in 2 weeks. No lock-in contract. Book your free demonstration today.

👉 Book Your Free VERA Demo

P.S. This checklist covers the obligations — but building your AML/CTF Program document is a separate exercise that takes weeks, not hours. If you have not started yet, start today. AUSTRAC’s Accounting Program Starter Kit, available at austrac.gov.au, is a good foundation for smaller practices. Larger firms should engage a compliance specialist.

About Nex Automate

Nex Automate is an Australian accounting automation platform built by accountants, for accountants. VERA is our AML/CTF client verification automation tool — designed specifically for accounting firms preparing for Tranche 2 compliance. VERA handles VOI checks, sanctions screening, PEP checks, risk scoring, engagement letter generation, and record keeping automatically.

Visit nexautomate.com.au
]]>