Enrolled with AUSTRAC isn't the finish line: what an operationalised AML program looks like

Your AUSTRAC enrolment is confirmed. Your program document is written. Neither one runs your compliance program for you.

A lot of agencies treat enrolment and the program document as the finish line, two boxes to tick before 1 July 2026. They're not. They're the starting point. An AML/CTF program is only real once it's running, week after week, inside how your agency actually works, not sitting in a folder waiting for an AUSTRAC review.

The fast way to get from "written" to "running"

AML Simple is built to carry the operational load, not just the paperwork.

1. Sign up — around 2 minutes. Enter your ABN and we pull your registered business details from the ABR automatically.
2. AUSTRAC Readiness Check (/check) — around 5 minutes. Confirms exactly where your agency stands against the obligations that apply from 1 July 2026.
3. AML/CTF Program Generator (/program/generate) — around 15 minutes. Generates your program document, consistent with AUSTRAC's Program Starter Kit structure, and sets up the ongoing tracking your program needs to actually run.

Once you're through those three steps, AML Simple keeps the operational parts moving: CDD records logged as you complete them, training due dates tracked, review dates flagged before they're missed. That's the hard part done, not just documented.

Prefer to understand what's actually involved before you rely on a tool to run it? Here's the operational reality underneath the document.

Ongoing CDD is a process, not a one-off check

Initial CDD happens once, before you provide a designated service to a client. Ongoing CDD is different. It's the requirement to keep monitoring that client relationship throughout the business relationship, watching for new risk signals and updating their information if circumstances change.

For a real estate agency, that means: if a vendor who was a straightforward individual seller turns out to be acting for an undisclosed third party partway through a sale, that's a change your ongoing CDD process needs to catch and act on. A program document that describes ongoing CDD in the abstract doesn't do this. Someone in your agency needs an actual habit of checking, and a record showing they did.

Training isn't a launch-day event

Initial AML/CTF risk awareness training, before staff perform AML-relevant duties, is one obligation. Ongoing training is a separate, continuing one: staff need refresher training at least annually, and records of who was trained, when, and what was covered need to be kept for seven years.

Agencies that treat training as something they did once in June 2026 will have a gap the first time a new starter joins, or a year passes without a refresher being scheduled. An operationalised program has training on a recurring calendar, not a completed checklist item.

Change management: your program has to move when your agency does

If your agency starts offering a new designated service, opens a second office, or changes who your compliance officer is, your program and your AUSTRAC enrolment both need to reflect that. Enrolment detail changes need to reach AUSTRAC within 14 days.

This is where a static document falls behind fastest. A program written in May 2026 for a five-person agency doesn't automatically cover the agency that's grown to twelve people and added a second designated service eighteen months later. Change management means your program is a living document with an owner, not a PDF from launch week.

Independent review has a real deadline, even if it feels distant

Newly regulated businesses have their first independent evaluation of their AML/CTF program staggered between 30 June 2029 and 31 December 2030, based on the last two digits of your AUSTRAC Account Number. That's years away for most agencies reading this, which is exactly why it's easy to file under "later" and forget.

The agencies that sail through that review are the ones who've been running ongoing CDD, training, and change management properly the whole time, not the ones who scramble to reconstruct three years of records the month before. Independent review checks whether your program actually operated as documented, not whether the document reads well.

Your compliance officer is who keeps this moving

None of the above runs itself. Your compliance officer, notified to AUSTRAC by the later of 14 days after enrolment or 29 July 2026, is the person accountable for the program actually operating day to day. If that's you, the practical question isn't "is my program written correctly" — it's "do I have a system that reminds me when ongoing CDD, training, and reviews are due."

AML Simple exists to be that system: it tracks ongoing CDD records, flags training due dates, and keeps your program updated as your agency changes, so operationalising your program doesn't depend on one person remembering everything.

---

Related reading

• Your AML/CTF program: a complete guide
• Your AML compliance checklist for July 2026
• Customer due diligence for real estate agencies: a complete guide

---