SMRs are the central AML/CTF event in a gaming venue and the obligation AUSTRAC examines most closely. ComplyIQ runs the SMR pipeline end-to-end — from the suspicion-trigger through to a filing-ready AUSTRAC Online package — with the 24-hour and 3-business-day deadlines tracked, section 123 containment enforced, and the evidence chain attached by default.
Across independent reviews and AUSTRAC compliance assessments in the pub and club sector, SMR handling produces predictable findings. SMRs are not just a filing task. They are a regulated workflow with statutory deadlines, criminal containment rules, and an evidence chain that must survive an information request months or years later. Most venues approach SMRs as ad hoc paperwork, and AUSTRAC notices.
The 24-hour clock from formation of suspicion is missed. SMRs are filed days or weeks after the triggering event.
The narrative lacks the specific facts AUSTRAC expects: the who, what, when, where, why, and what made it suspicious.
Section 123 tipping-off is breached because SMR-related information is visible to floor staff who do not need to know.
SMRs are stuck in a compliance officer’s personal email queue rather than a managed workflow with tracked deadlines.
Supporting evidence, including the transaction records, the screening result, and the monitoring alert, is not attached to the SMR at filing time and cannot be reconstructed later.
The AML/CTF Act creates two deadlines for an SMR: the 24-hour clock from formation of suspicion in the financial-terrorism case, and the 3-business-day clock in the general case. ComplyIQ starts both clocks at the detection event, displays time remaining to the compliance officer, and escalates as expiry approaches. Late filings stop being accidental.
24-hour clock for terrorism-financing suspicion
3-business-day clock for general suspicion
Time-remaining visible on every open SMR
Auto-escalation to group compliance officer near expiry
When a monitoring alert, ECDD finding, screening match, or staff escalation creates grounds for suspicion, ComplyIQ generates an SMR draft pre-populated with the patron context and the triggering evidence already attached. The compliance officer does not start from a blank form; they review, expand the narrative, and decide.
Auto-drafted from monitoring alerts, ECDD findings, screening matches
Patron identification block pre-filled from CDD
Supporting transactions and timestamps pre-attached
Narrative scaffolding aligned with AUSTRAC Online’s field structure
Section 123 of the AML/CTF Act criminalises disclosing information about an SMR. ComplyIQ encloses every SMR-linked record behind a containment boundary. Floor staff and venue managers do not see SMR drafts, filings, or anything from which patron-targeted suspicion could be inferred. The containment is structural, not based on staff discretion or training compliance.
SMR records visible only to the compliance family (VCO, GCO, SA)
Patron view shows staff-safe risk level only. No SMR status.
Audit-trail entries linked to SMRs gated by the same boundary
Tipping-off-safe framing built into platform-generated communications
ComplyIQ produces the SMR in the field structure AUSTRAC Online expects, with each section labelled to match the portal. The compliance officer files the SMR through AUSTRAC Online, the regulator’s required submission channel, by copying or attaching the platform-generated package. No reformatting. No missed fields. No second-guessing what AUSTRAC wants in each section.
Field-by-field mapping to AUSTRAC Online’s SMR form
Filing-ready PDF and structured data export
AUSTRAC reference number captured back into the record after filing
Filing confirmation chained into the audit trail
Every SMR draft enters the compliance officer’s in-platform queue with status, deadlines, supporting evidence, and recommended action. Group compliance officers see consolidated queues across the group. Nothing depends on an email being read in time. Nothing is at risk of an out-of-office reply.
In-platform queue with status (draft, review, ready-to-file, filed)
Group compliance officer view across all venues in the group
Reassignment supported when the primary compliance officer is unavailable
Decision-record audit trail for every SMR action
An SMR without its supporting evidence is half a record. ComplyIQ binds the full evidence chain to the filed SMR, including the original monitoring alert, supporting transactions, screening results, ECDD findings, and compliance officer reasoning. The seven-year retention period applies to the full chain, not just the form. When AUSTRAC asks about an SMR filed two years ago, the answer is one click away.
Supporting transactions, alerts, and screening hits bound to the SMR
Compliance officer narrative and decision-basis captured inline
Hash-chained into the audit trail for tamper-evidence
Reconstructable via the audit-trail drill-through years later
A typical SMR lifecycle, from the moment grounds for suspicion are formed through to a filed report at AUSTRAC. The floor never sees the workflow; the compliance officer never starts from blank.
Monitoring alert, ECDD finding, screening match, or staff escalation creates grounds for suspicion.
SMR draft auto-generated with patron context, supporting evidence pre-attached, deadlines started.
Compliance officer assesses, expands the narrative with venue-specific detail, decides to file or dismiss.
Filing-ready package matching AUSTRAC Online’s schema; reference captured back into the record.
Tipping off about an SMR is a criminal offence under section 123 of the AML/CTF Act, carrying penalties of up to two years’ imprisonment for the individual involved. ComplyIQ does not rely on staff training alone to prevent it — the containment is built into the platform’s data model.
Floor staff and venue managers do not see SMR drafts, filings, or anything that would let them infer an SMR exists for a specific patron. The platform’s patron view for staff shows risk level and required action, never SMR state.
Only the compliance family, including the venue compliance officer, group compliance officer, and super admin, can see the SMR workflow. Venue managers operate the floor. SMR work happens behind a separate boundary.
When the platform needs to communicate with a patron in connection with ECDD or a payout decision tied to an SMR, the language is policy-based and uniform within the risk tier. Nothing allows the patron to infer that suspicion is being acted on.
Audit trail entries linked to an SMR sit behind the same containment boundary as the SMR itself. The compliance officer sees the full reasoning chain on drill-through. Floor staff see only the staff-safe view of their own actions.
SMRs are the convergence point of every other compliance module. Transaction monitoring produces the most SMR triggers, sanctions and PEP screening produces the next most, CDD provides the patron identity, and the audit trail preserves the full chain for the seven-year AUSTRAC retention. The SMR module sits at the intersection.
The primary SMR source. Confirmed patterns become SMR drafts with evidence attached.
A sanctions match or a high-risk PEP-flagged pattern is a frequent SMR path.
The patron identity block on every SMR is sourced from CDD records.
Every SMR action chained for seven-year retention with s.123 containment intact.
AUSTRAC defines it as a state where a reasonable person, given the same information, would suspect that a transaction or pattern is related to money laundering, terrorism financing, or another serious offence. It is a lower threshold than proof. The venue does not need to know; it needs to suspect. The compliance officer’s judgement is what matters, and ComplyIQ captures the basis for that judgement on every SMR.
The 24-hour clock applies where the suspicion involves terrorism financing. An SMR must be filed within 24 hours of suspicion forming. The 3-business-day clock applies in the general case. ComplyIQ starts both clocks at the detection event and displays time remaining so the compliance officer cannot miss the window.
AUSTRAC requires SMRs to be submitted through AUSTRAC Online, the regulator’s portal. ComplyIQ produces the filing-ready package matching AUSTRAC Online’s field structure, and the compliance officer submits it via the portal. After submission, the AUSTRAC reference number is captured back into ComplyIQ and chained into the audit trail.
The threshold is suspicion, not certainty. If you are weighing whether to file, the answer in AUSTRAC’s framing is usually yes. Failing to file when the threshold is met is the breach. Filing when in doubt is the safer path, and the regulator accepts it. ComplyIQ does not penalise the compliance officer for filing on a draft that is later dismissed.
Section 123 of the AML/CTF Act criminalises disclosing information about an SMR, an investigation, or anything from which the existence of an SMR could be inferred, including to the patron themselves. Avoidance is structural. SMR-linked records and communications are gated to the compliance family only, and patron-facing language stays uniform within risk tiers. ComplyIQ enforces the gating; staff training enforces the discretion.
AUSTRAC acknowledges the filing through AUSTRAC Online and may follow up with information requests. The SMR record remains active in ComplyIQ for the seven-year retention window with the full evidence chain attached, so any follow-up enquiry can be answered from the original record rather than reconstructed.
Book a demo to see auto-drafted SMRs from monitoring alerts, AUSTRAC Online-ready exports, tracked 24-hour and 3-business-day deadlines, and section 123 containment operating together, with the full evidence chain preserved for the seven-year retention period.
