Skip to content

The AML/CTF compliance officer

Every reporting entity has to name one. In a small agency that is usually the principal, which is allowed, but the responsibility is real.

Every reporting entity has to name an anti-money laundering and counter-terrorism financing (AML/CTF) compliance officer. In a large organisation that is a job. In a real estate agency it is usually the principal or an office manager adding it to what they already do, which is permitted and entirely normal.

The part worth getting right is that naming someone is the easy half. The role only works if the person named has two things: authority to act on what they find, and enough time to look.

What the role is responsible for

The program

Making sure the agency has an AML/CTF program, that it reflects the business as it actually operates, and that it gets reviewed when the business changes rather than sitting untouched for years.

Oversight of due diligence

Not doing every check personally, which would be unworkable, but being the person who decides the harder ones. A politically exposed person result, an entity structure nobody can untangle, a buyer whose funds arrive from somewhere unexplained: these need a judgement, and the program should say whose.

Reporting

Deciding whether a suspicion meets the threshold for a suspicious matter report, and submitting it. This is the sharpest end of the role, because it is the one where the decision has consequences in both directions.

Training and records

Making sure staff know what to look for, and that the evidence of what was done survives the seven year retention period.

Authority is the part that gets skipped

This is the practical argument for the principal holding the role in a small agency: they already have the authority. The risk in that arrangement is the opposite one, which is that the person with the most commercial pressure to close a deal is also the person deciding whether to slow it down. Neither arrangement is free of tension, and the program should be honest about which one you have chosen.

What it looks like in a real week

Mostly nothing. Verification happens as part of the normal process, records accumulate, and the compliance officer does not touch any of it. The role becomes active at exceptions, which in a typical agency means a handful of times a year.

That is worth saying plainly, because the fear that this is a new full time burden stops agencies from naming anyone at all. It is not a full time burden. It is a responsibility that has to be somewhere, and leaving it nowhere is the only genuinely bad option.

Setting it up

Name the person in your enrolment and in the program. Write down what they decide rather than leaving it to custom. Give them a way to see what is happening without chasing people, because a compliance officer who has to ask each agent what they collected will stop asking.

That last point is most of what makes the role workable or not. If verification results and their evidence land in one place automatically, oversight is a glance. If they live in individual inboxes and phones, it is an investigation every time.

Common questions

Does every real estate agency need an AML/CTF compliance officer?

Yes. Every reporting entity has to have one, and an agency providing a designated service is a reporting entity, so this applies regardless of agency size. The role is named in your enrolment with AUSTRAC and in your AML/CTF program. There is no exemption for small agencies or sole operators, though there is also no requirement to hire someone dedicated to it.

Can the principal be the compliance officer?

Yes, and in a small agency that is usually who it is. There is no requirement to hire someone dedicated. What matters is that the person named has the authority to act on what they find and the time to actually do the role.

Can we outsource the role?

You can get external help with the work, and many agencies do use consultants for the program and the risk assessment. The accountability, however, sits with your business either way. Treating an external adviser as somewhere the responsibility goes to live is a misunderstanding of the arrangement, and it will not help if AUSTRAC asks who made a particular decision. The named officer has to be someone within the agency who can act.

What does the compliance officer actually do day to day?

In a typical week, very little. The role matters at specific moments: when a due diligence result needs a judgement call, when someone raises a concern, when the program needs reviewing and when a report has to be submitted. It is an on-call responsibility rather than a daily task list.

Do they need a qualification?

No specific certification is mandated, and there is no licence to obtain before taking the role. What the person needs is enough understanding of the agency's obligations to apply them in practice and to recognise when something warrants escalation. For most people that means working through AUSTRAC's published guidance and the starter kit for their sector rather than sitting a formal course, though training is sensible where the agency can support it.

General information about the obligations, not legal advice about your agency.

Sources

  1. AUSTRAC, Real estate program starter kit: Getting started.
  2. AUSTRAC, New reporting regime now in force.
  3. AUSTRAC, Record keeping overview.