AML/CTF Guide for Legal Professionals in Australia
Australian legal practices are reporting entities when, in the course of business and with the required geographical link to Australia, they provide a designated professional service. Their profession alone does not decide the answer. This guide explains scope, sector risks, practical controls, examples and official sources in plain English.
How this guide was researched and reviewedOn this page
Short answer
Australian legal practices are reporting entities when, in the course of business and with the required geographical link to Australia, they provide a designated professional service. Their profession alone does not decide the answer.
Scope is based on each designated service, the business test and the geographical link. Check current exemptions and modifications before relying on a result.
At a glance
Start With These Four Checks
Map the service
Write down exactly what is done for the customer and match it to section 6.
Know the customer
Identify the customer, beneficial owners, people acting for them and the purpose of the work.
Follow the sector risk
Build controls around how money, property, structures, products and instructions move in this sector.
Keep the evidence
Scope, CDD, risk, monitoring, reports, training and review should be easy to prove.
Plain English
Key Words Explained
These words are used in the law and official guidance. This is what they mean on this page.
- Designated service
- A service listed in section 6 of the Australian AML/CTF Act.
- Reporting entity
- A person or business that must meet AML obligations for the covered service or activity.
- Beneficial owner
- The individual who ultimately owns or controls the customer or on whose behalf the work is done.
- Enhanced CDD
- Extra customer and source checks used when the law or higher risk requires them.
- SMR
- A suspicious matter report submitted to AUSTRAC when reasonable grounds for suspicion exist.
Part 1
When AML/CTF May Apply
For the relevant table 6 items, assistance with transactions and legal structures must directly advance the transaction or creation or restructure; general advice or ancillary work alone is not enough. Legal professional privilege remains important, but it does not remove every AML/CTF duty.
- Assisting with the sale, purchase or transfer of real estate, a body corporate or a legal arrangement.
- Receiving, holding, controlling or managing property for a relevant transaction.
- Helping arrange equity or debt finance for a company or legal arrangement.
- Assisting with the creation or restructuring of a body corporate or legal arrangement.
- Selling or transferring a shelf company.
- Acting, or arranging for another person to act, as a director or secretary, under a power of attorney, as a partner, as trustee of an express trust or in an equivalent role for a nominator.
- Acting, or arranging for another person to act, as a nominee shareholder for a nominator.
- Providing a registered office or principal business address.
Court representation, general legal advice and other work are not automatically designated services. For the relevant sale, purchase and transfer items, assistance carried out after an existing court or tribunal order to give effect to it is excluded; work to obtain the order is not. A matter may contain both covered and uncovered work, and privilege should be assessed information by information.
Part 2
Main Risks in This Sector
These are starting points, not a ready-made risk rating. The business still needs to assess its own customers, services, countries, channels, transactions and technology.
- A legal transaction or trust account can give criminal funds an appearance of legitimacy.
- Companies, trusts and nominees can hide ownership, control or the real purpose of a deal.
- Property and business transactions can move high value across borders or through third parties.
- Urgency, confidentiality claims or complex instructions can discourage normal questions.
- Privilege can be misunderstood and applied too broadly to CDD or reporting information.
Part 3
A Practical Control Plan
- Step 1
Confirm scope
Map matter types to the exact designated professional services.
- Step 2
Build the customer process
Add a scope and CDD gate before covered work or client-property activity begins.
- Step 3
Set the risk controls
Set a clear process for privilege, suspicious matters and restricted access.
- Step 4
Train and connect people
Train legal and support staff using property, company, trust and client-money examples.
- Step 5
Test and improve
Review sample matters for scope, beneficial ownership, source information and escalation quality.
Part 4
Worked Examples
These examples show how the scope and risk questions can be joined. They do not replace the law or the facts of a real matter.
| Situation | Why it matters | Practical response |
|---|---|---|
| A firm helps an overseas client buy an Australian company through a trust. | Layered ownership, cross-border funding and a complex purpose can hide the real controller. | Confirm scope, resolve the ownership chain, understand the transaction and apply risk-based enhanced checks. |
| A solicitor gives advice on an employment dispute. | The practice may treat all legal work as regulated and create needless friction. | Record why the work is outside the designated-service list and reassess if the matter changes. |
| A client asks why extra questions are being asked after an internal escalation. | A careless explanation could reveal SMR information or prejudice an investigation. | Use an approved neutral explanation and apply the tipping-off and privilege process. |
Part 5
Evidence That Should Be Easy to Find
- The designated-service and geographical-link analysis.
- The current sector risk assessment and the official sources used.
- A matter-type scope map and reasons for covered and excluded work.
- A privilege and suspicious-matter decision process with restricted records.
- Client-account controls linked to CDD, source checks and matter risk.
- File reviews covering transaction, structure and nominee matters.
- Customer, beneficial ownership, risk, monitoring and reporting records.
- Training, internal review, independent assurance and remediation records.
Part 6
Common Mistakes
- Treating every legal matter as a designated service.
- Starting urgent transaction work before required CDD is complete.
- Using privilege as a blanket reason not to collect or report information.
- Identifying the instructing lawyer or director but not the beneficial owner.
- Keeping SMR information in the ordinary client file where access is too broad.
Helpful answers
Common Questions
Short answers to the questions businesses ask most often.
Does every business in this sector have AML/CTF duties?
No. The exact service and the other legal tests decide the answer. A business may provide both designated and non-designated services.
What should the business do first?
Map matter types to the exact designated professional services.
Can the sector risk assessment replace our own?
No. Official national and sector assessments are important sources, but the reporting entity must assess the risks it reasonably expects to face in its own business.
Can a generic AML/CTF template be used?
A template can help with structure, but it must be matched to the business’s scope, risks, people, systems and evidence. A document that is not implemented is not enough.
Does legal professional privilege prevent an SMR?
Legal professional privilege is preserved. If potentially privileged information is relevant to reporting, obtain legal advice and check AUSTRAC’s current LPP guidance and approved-form requirements.
Is litigation work automatically covered?
No. The service provided should be matched to the designated-service list. A litigation matter may still include separate covered transaction or client-property work.
Reference
Official Sources
This guide cites the following sources.
- Primary lawFederal Register of LegislationAnti-Money Laundering and Counter-Terrorism Financing Act 2006
The current Australian AML/CTF Act, including program, CDD, reporting, governance and record-keeping duties.
- Regulator guidanceAUSTRACLegal professionals
Current AUSTRAC guidance and resources for law firms, solicitors and other legal practices.
- Regulator guidanceAUSTRACWho and what we regulate
The activities-based test for deciding whether a business is a reporting entity.
- Regulator guidanceAUSTRACDevelop your AML/CTF program
The five-part process for governance, risk assessment, policies, review and independent evaluation.
- Regulator guidanceAUSTRACCustomer due diligence
Current guidance on initial, ongoing, simplified and enhanced customer due diligence.
- Regulator guidanceAUSTRACProfessional designated services
The designated-service boundaries for professional services regulated from 1 July 2026.
- Regulator guidanceAUSTRACLegal professional privilege reform
Current AUSTRAC information about privilege and AML/CTF reporting requirements.