Back to Knowledge Base
Beginner Guide8 min read

Myths, Vendors & What AUSTRAC Won't Do to You

AUSTRAC won't fine you for honest mistakes. Your SMR can't be used in court. And that vendor claiming "AUSTRAC endorsement"? They're lying. Here's the myth-busting session every practitioner needs.

SA
Brisbane, Australia·February 2026·8 min read

The AML/CTF regime is new for Tranche 2 professionals, and with anything new comes fear, misinformation, and people trying to sell you things. AUSTRAC's CEO Brendan Thomas has addressed the most common myths directly — across multiple public events. Here's what he actually said.

Myth #1: "I'll get fined $19,000 for making a mistake"

The myth

There's a $19,000 penalty circulating in the industry. Practitioners are terrified they'll be fined for not filling in the right form or missing a report.

The reality

AUSTRAC's CEO has said this repeatedly: "We don't penalise businesses who are trying their best to comply with laws. We never have and we won't in this instance." You can verify this yourself — AUSTRAC's website lists every enforcement action they've taken. You won't find a single small business punished for honest mistakes. Penalties are reserved for entities that willfully ignore their obligations or deliberately turn a blind eye to crime.

Myth #2: "I need to kick suspicious clients out of my business"

The myth

If you suspect a client of money laundering, you need to stop the transaction immediately and refuse to act.

The reality

You do not need to stop transactions to comply with AML obligations. Banks report hundreds of thousands of suspicious transactions every year, and most of those transactions continue. If it's in your interest to complete the transaction, complete it — just report the suspicion to AUSTRAC. Stopping the transaction might actually tip off the client, which is a separate offence.

The exception for lawyers: the Law Council's position is that once you've filed an SMR, you can no longer act in the client's best interests, so you should cease acting — but this is an ethical obligation, not an AML one.

Myth #3: "If I file an SMR, the client will find out and I'll be at risk"

The myth

Particularly in regional areas where "everyone knows everyone," practitioners worry that filing a suspicious matter report will lead to retaliation.

The reality

Your SMR is protected by law from being made public. It cannot be used in court as evidence. The person you reported will never see the report. Police must build their own entirely separate case. AUSTRAC's CEO confirmed: there has never been a threat to anyone who submitted an SMR in Australia since the regime began in 2006 — and colleagues globally report the same. You will not be called as a witness. Your name will never appear in any charges or proceedings.

Myth #4: "I need to collect extremely detailed personal information from every client"

The myth

Every client needs to provide bank statements, proof of source of funds, and extensive documentation before you can act.

The reality

Information requirements flow with risk. Most clients are low-risk, regular people doing regular transactions. For them, you need a source of identification (driver's licence, passport) and a quick sanctions check. Source-of-wealth and source-of-funds checks are only needed when you develop a suspicion. If you're already doing verification of identity (VOI), you're roughly 80% there already.

The vendor warning

AUSTRAC's CEO issued a direct warning about AML vendors:

There are a lot of people selling AML solutions — both in Australia and globally. There's nothing wrong with purchasing external services, but AUSTRAC wants you to be wary of three things:

1
"AUSTRAC-endorsed" or "AUSTRAC-compliant" claims
AUSTRAC does not endorse any third-party business provider. If someone tells you they're AUSTRAC-endorsed, they're not telling the truth.
2
"Sign up with us and the regulator will leave you alone"
No product can make you automatically compliant. You can outsource AML functions, but you cannot outsource legal responsibility. You are still legally responsible for what the service provider does on your behalf.
3
Not checking references
Do what you'd do when hiring a plumber — ask who they've provided the service to before, speak to that person about quality. AUSTRAC's call centre can help you understand whether a vendor's promises match your actual obligations.

The starter kits: a world first

AUSTRAC's starter kits are unlike anything produced in any other country. Neil Jeans from Grant Thornton, who has over 40 years of AML experience, described them as "some of the most practical, sensible, logical, and easy-to-follow programs I've ever seen."

Other countries that implemented similar regimes — including the UK and New Zealand — told AUSTRAC that small businesses wished they'd been given a program to start with. Australia learned from that feedback. The kits were developed in partnership with small businesses and went through multiple rounds of consultation and user testing.

Neil Jeans put it in perspective: the alternative to using the starter kits is reading 350 pages of legislation, 180 pages of rules, and 340 pages of guidance — and working out what applies to you. The starter kits have done that work for you. For most small businesses, they're the least-cost, least-effort path to compliance.

What AUSTRAC actually expects from you

Make honest efforts to comply with the law
Enrol with AUSTRAC between March and July 2026
Have an AML program in place (the starter kit gives you this)
Know who your clients are — proportionate to their risk level
Report suspicions — even if you're not sure, report it
Get better over time — this is iterative, not pass/fail

AUSTRAC's call centre is available on extended hours (until 7pm) specifically because they understand small business owners often deal with compliance after hours. Call them with questions — that's what they're there for.

Disclaimer: This article is published by GetPost Labs Pty Ltd, a technology company building compliance software. All content is for educational purposes only and does not constitute legal, financial, or compliance advice. While we make every effort to ensure accuracy, this article may contain errors or omissions. Always refer to the authoritative text on legislation.gov.au and seek professional advice for your specific circumstances. If you spot an error or have a suggestion, please reach out to sumit@getpostlabs.io.