Understanding the AML/CTF compliance officer role

When principals first encounter the phrase "you must appoint an AML/CTF compliance officer," the reaction is often alarm: Does this mean I need to hire someone? Do I need a compliance professional on staff?

For most small real estate agencies, the answer is no — you do not need to hire someone new. In a 3–10 person agency, the principal typically holds this role. But it does come with real obligations, and it is important to understand what those are before you take it on.

What the law requires

Your agency's AML/CTF program must include the appointment of an AML/CTF compliance officer. This is not optional — it is a legal requirement for every reporting entity.

The compliance officer must be:

Employed or engaged at management level in your business
Fit and proper for the role

AUSTRAC defines "fit and proper" as having the competence, skills, knowledge, diligence, expertise, and soundness of judgement to properly perform the role — as well as good character, honesty, and integrity. This is not a tick-box credential requirement. It is an assessment of whether the person genuinely has the capacity to fulfil the responsibilities involved.

Importantly: management level means someone with the authority to make decisions and allocate resources — not a junior administrator or front-desk staff member. The compliance officer needs to be able to act on what they find.

Can the principal hold this role?

Yes. In a small real estate agency, it is entirely common — and appropriate — for the principal or director to serve as AML/CTF compliance officer. There is no prohibition on this.

AUSTRAC's Program Starter Kit is designed specifically for agencies with 15 or fewer personnel, and it contemplates the principal fulfilling the compliance officer role.

What the principal does need is: an understanding of the agency's AML/CTF obligations, the authority and willingness to act when something goes wrong, and time to actually do the job — reviewing records, overseeing training, ensuring reports are filed.

The compliance officer does not need to be a compliance professional or hold a specific qualification. They need to understand what the agency must do and have the standing to make sure it gets done.

1
Appointment
Appoint a fit-and-proper person at senior management level as AML/CTF Compliance Officer. Document the appointment in your AML/CTF program.
2
Manage ongoing program
Implement and manage the AML/CTF program on an ongoing basis — overseeing CDD, managing reporting, keeping records, and training staff.
3
Notify AUSTRAC
Notify AUSTRAC of your compliance officer's details via AUSTRAC Online by 29 July 2026. Update within 14 days of any change.

What does the role actually involve?

The AML/CTF compliance officer is responsible for implementing and managing the agency's AML/CTF program on an ongoing basis. In practice, for a small real estate agency, that typically means:

Compliance officer responsibilities

Setting up and maintaining the program — Ensuring the AML/CTF program is documented, up to date, and approved by senior management. Keeping the program aligned with regulatory changes as AUSTRAC updates its guidance.

Overseeing customer due diligence — Making sure CDD is completed for every client before a designated service is provided. Reviewing CDD records for completeness and accuracy. Approving enhanced CDD cases that require senior management sign-off.

Managing reporting obligations — Ensuring Suspicious Matter Reports (SMRs) are filed within the required timeframe when grounds exist (24 hours for terrorism financing suspicion; 3 business days for other SMRs). Ensuring Threshold Transaction Reports (TTRs) are filed for physical cash transactions of A$10,000 or more. Never disclosing to a client that an SMR has been filed — this is a criminal offence.

Keeping records — Ensuring all AML/CTF records are kept for 7 years and making records retrievable and available to AUSTRAC on request.

Staff training — Ensuring all staff receive AML/CTF risk awareness training before performing AML-relevant duties. Maintaining training records.

Annual compliance report — Overseeing the preparation of the annual compliance report (covering each calendar year, due by 31 March of the following year — first report due 31 March 2027).

None of these tasks requires specialist compliance expertise. They require attention to detail, an understanding of what the agency's program says, and the discipline to follow through.

The AUSTRAC notification deadline: 29 July 2026

What AML Simple does — and does not — do

Let's be direct about this: AML Simple is not your compliance officer and does not replace the compliance officer role.

The law requires a real person with management authority who is personally responsible for implementing your program. No software fulfils that function.

What AML Simple does is make your compliance officer's job significantly easier. It guides you through building your program, maintains your CDD records in one place, prompts you when ongoing obligations are due, and keeps an audit trail you can retrieve when AUSTRAC asks.

Think of it as the tool your compliance officer uses — not a substitute for the role itself.

A practical example

Raewyn runs a five-person real estate agency in regional Queensland. When she hears about the compliance officer requirement, her first thought is that she needs to hire someone.

After reading the AUSTRAC guidance and working through the Program Starter Kit, she realises the role description fits what she already does: she makes the decisions, she has authority over the business, and she has the basic understanding of the new rules. She is at management level and passes the fit-and-proper test.

She documents her appointment as compliance officer in the agency's AML/CTF program, notifies AUSTRAC via AUSTRAC Online before 29 July 2026, and sets up AML Simple to manage the day-to-day CDD workflows and record keeping.

No new hire required. The role is real, the obligations are real — but for Raewyn's agency, the right person was already there.

The key takeaways

Key takeaways

The compliance officer role is a legal requirement — every reporting entity must appoint one
The person must be at management level and pass the fit-and-proper test
For small agencies, the principal or director typically holds this role
Notify AUSTRAC of your compliance officer by 29 July 2026
The role involves implementing and managing the AML/CTF program on an ongoing basis — not just signing paperwork once

For the most current AUSTRAC guidance on the compliance officer role, see AUSTRAC's compliance officer guidance.

28 days until obligations commence

1 July 2026

AML Simple gives your compliance officer the tools they need

Manage CDD workflows, track screening results, and maintain records — all in one place. Start free, no account required.

Get AUSTRAC ready

Understanding the AML/CTF compliance officer role

Understanding the AML/CTF compliance officer role

What the law requires

Can the principal hold this role?

What does the role actually involve?

Compliance officer responsibilities

The AUSTRAC notification deadline: 29 July 2026

What AML Simple does — and does not — do

A practical example

The key takeaways

Key takeaways

AML Simple gives your compliance officer the tools they need

Related reading