Who Is a Reporting Entity Under Australian AML/CTF Law?
How ComplyIQ helps Australian businesses determine reporting entity status — and what to do next.
Disclaimer: This article is general information only and isn’t legal advice. Whether you’re a reporting entity depends on the designated services you provide and the geographical link. AUSTRAC also notes reforms affecting current entities and Tranche 2 commencing 1 July 2026.
Determining whether a business is a reporting entity under Australian AML/CTF law is one of the most important and most misunderstood compliance questions.
Many organisations assume AML/CTF is “for banks” only to later realise their services fall inside the regime. At ComplyIQ, reporting entity status is often the starting point because it defines whether obligations apply and what audit ready evidence looks like in practice.
You are generally a reporting entity if you provide one or more designated services under the AML/CTF Act and the service has a geographical link to Australia.
It is about what you do, not what you call your business.
What are designated services and why do they matter?
Designated services are specific activities listed in the AML/CTF Act because they are vulnerable to misuse for money laundering or terrorism financing.
Key principle
If you provide a designated service, you are a reporting entity and must meet AML/CTF obligations regardless of your industry label.
These services span multiple sectors including financial services, gambling, remittance, bullion, digital assets, real estate, and professional services.
Do not focus on what your business is called. Focus on whether any part of your operations matches a designated service.
Does this apply to pubs, clubs and gaming venues?
Often, yes. Businesses operating gaming machines are typically providing a designated service under the AML/CTF Act.
In these environments, risk is not just legal it is operational. Customer behaviour, cash activity, and payout patterns all contribute to the ML/TF risk profile.
Can my business be a reporting entity even if AML/CTF is not our core activity?
Yes. Reporting entity status is based on activities, not your primary business focus.
Common scenario
A designated service sits inside a broader customer experience for example in venues, membership organisations or businesses offering regulated services alongside other offerings.
What obligations apply once I am a reporting entity?
Once your business is classified as a reporting entity, AML/CTF obligations become an ongoing operational responsibility.
At a practical level, you need to demonstrate
- An AML/CTF program with governance and oversight
- Customer due diligence processes aligned to risk
- Ongoing monitoring and escalation pathways
- Reporting workflows where required
- Record keeping that is secure, retrievable and auditable
Do I need to enrol or register with AUSTRAC?
If you provide designated services, you generally must enrol with AUSTRAC within 28 days.
Additional requirements
Some services such as remittance providers and digital currency exchanges must also register and cannot operate until registration is confirmed.
How does AUSTRAC assess reporting entity status?
AUSTRAC assesses status based on the reality of what your business does not how it is described in marketing or internal documentation.
If your activities match a designated service, you will generally be treated as a reporting entity.
What are the risks of getting this wrong?
If reporting entity status is not identified early, the impact is usually operational and evidentiary rather than theoretical.
Common downstream impacts
- Missing or incomplete compliance frameworks
- Gaps in record keeping
- Reactive remediation under time pressure
How will Tranche 2 reforms affect this?
AML/CTF reforms will expand the scope of reporting entities, with new sectors coming under regulation from 1 July 2026.
Likely affected sectors include
- Real estate agents
- Accountants
- Lawyers
- Dealers in precious metals and stones
If you operate in or near these sectors, it is worth assessing your position now.
How can I confidently determine my status?
A defensible approach focuses on understanding your actual operations rather than assumptions.
Recommended approach
- Map your services and transaction flows
- Test them against the designated services list
- Document your rationale
- Review regularly as your services evolve
Treat it as a governance risk. Unclear status almost always leads to unclear controls.
Where ComplyIQ fits
ComplyIQ supports businesses once reporting entity status is confirmed by turning AML/CTF obligations into structured, operational workflows.
This includes program control, risk assessment, centralised records, escalation workflows and audit ready evidence capture.
Start with clarity. Build compliance with confidence.
ComplyIQ helps you move from uncertainty about reporting entity status to a structured, defensible AML/CTF operating model.