Resources

Resources for regulated businesses

Guides, regulations, comparisons and product help, kept up to date.

Showing all 119 guides
Lead · AML/CTF obligations

AUSTRAC’s infringement notices to unenrolled businesses: what to do

From commencement to the enrolment notices

Tranche 2 businesses that have not enrolled

  1. 1 July 2026

    Tranche 2 starts

    Accountants, lawyers, real estate, conveyancers, trust and company service providers, and dealers in precious stones and metals.

  2. Within 28 days

    Apply to enrol

    No later than 28 days after you first provide a designated service.

  3. August 2026

    Requests for information

    AUSTRAC wrote to businesses that appeared to provide designated services but had not enrolled.

  4. 30 September 2026

    Notices for not enrolling

    A$21,840 for a company and A$4,368 for an individual, which AUSTRAC says can accrue daily.

  5. FY26/27

    Effort, not perfection

    Enrolled, a program, a compliance officer, trained staff, and ready to report a suspicious matter.

Sources: AUSTRAC, AUSTRAC begins issuing infringement notices to non-enrolled businesses (30 September 2026); AUSTRAC, Enrol with us overview; AUSTRAC, Update to regulator statement of expectations (21 May 2026) Reviewed

Tranche 2 began on 1 July 2026, enrolment is due within 28 days of your first designated service, and on 30 September 2026 AUSTRAC issued infringement notices to businesses that had not enrolled.

AUSTRAC began issuing infringement notices to businesses that failed to enrol on 30 September 2026. What they cost, and what to do this week.

Updated 1,182 words1 visual
Read the guide

World-Check One: screening, login and API explained

World-Check One is LSEG’s platform for screening customers against World-Check data on sanctions, PEPs, enforcement and adverse media. You open a…

How a World-Check One screening case runs
  1. Create the case
  2. Screen against World-Check
  3. Review possible matches
+2 more steps
World-Check One at a glance
Sign inrisk.lseg.com
Data updatesDaily
Online packagesUp to 3 users
APIREST and JSON over HTTPS
+1 more facts
Timeline1 of 2
Updated 925 words2 visuals

Customer due diligence requirements: a CDD checklist

Customer due diligence requirements in Australia: before you provide a designated service, establish who the customer is, who owns or controls…

When customer due diligence happens
  1. Complete initial CDD
  2. You start the designated service
  3. Finish delayed initial CDD
+2 more steps
Simplified, initial and enhanced CDD compared
DepthWhen it appliesWhat you do
Simplified CDDThe customer’s risk is low, enhanced CDD is not required, and your policies deal with itCollect all the required information; verify and monitor less intensively
Initial CDDEvery customer, before you start a designated serviceEstablish each required matter on reasonable grounds, and record how
3 rows, 3 columns
Timeline1 of 2
Updated 1,818 words2 visuals

Adverse media screening: what it is, how it works

Adverse media screening searches news, court records and regulator notices for reports linking a client to financial crime or serious misconduct.…

Sanctions, PEP and adverse media screening compared
CheckWhat it looks forWhat AUSTRAC requires
SanctionsWhether a person or entity is designated for targeted financial sanctions, such as on DFAT’s Consolidated ListEstablish it before you provide a designated service, for the customer, beneficial owners and anyone acting for them
PEPWhether a person holds or held a prominent public position, or is a family member or close associate of someone who doesEstablish it before the service. A foreign PEP always needs enhanced CDD and senior manager approval
3 rows, 3 columns
Where adverse media screening sits
Intake
Verify
Screen
Assess
Monitor
Re-screening keeps the client current
Comparison table1 of 2
Updated 1,135 words2 visuals

More in Resources

Beyond the guides
Regulations
  • AML/CTF Act, Tranche 2AU
  • Verification of IdentityAU
  • Privacy Act and the APPsAU
  • Money Laundering Regs 2017UK
+2 more

What each regulation requires, who it binds and what satisfies it.

Compare
  • AMLHubPractice AML
  • easyAMLPractice AML
  • First AMLPractice AML
  • IgnitionPractice platform
+1 more

How StackGo compares, including when to choose something else.

API docs
/api/v1/verification
  • POST/create
  • POST/sms
  • POST/namescan/kyb
+1 more

Endpoints, authentication and webhooks for developers.

Help centreOpens help.stackgo.io ↗
Search the help centre
Plain-language answers from the product’s own help articles

Product help for people already using StackGo.

What's new
  • A new look for the app23 Oct
  • A new stackgo.io23 Oct
  • Your forms, in your brand: logo, colours and font23 Oct
  • A different intake form for each way clients arrive21 Oct
+1 more

What has shipped in the product, and what to do about it.

Deep divesWhy one client is usually five recordsWhat “integrates with” actually means

Vendors & tools

See all 13

What is iPaaS? A beginner’s guide to integration platforms

iPaaS (integration platform as a service) is a vendor-managed cloud service for building and running integrations between apps, services and data.…

Three ways to connect your apps
Point-to-point codeiPaaS
Who builds itYour developersYou or a partner, in the vendor’s visual tools
Who runs and patches itYouThe iPaaS vendor
5 rows, 4 columns
Comparison table
Updated 973 words1 visual

Seamless system integration: what it is and how to do it

Updated 21 Oct 2026Comparison table +1

Onfido KYC: how it works, checks and results

Updated 21 Oct 2026Timeline

Xero client onboarding: steps for accountants

Updated 21 Oct 2026Timeline +1

Onfido document verification: how it works and is it safe?

Updated 21 Oct 2026Timeline +2

GBG identity verification: what GBG and greenID offer

Updated 21 Oct 2026Key-facts card +1

World-Check Risk Intelligence: what the database holds

Updated 21 Oct 2026Key-facts card +1

AML/CTF obligations

See all 38

ACAMS AML certification: cost, eligibility and exam

CAMS (Certified Anti-Money Laundering Specialist) is the anti-money laundering certification run by ACAMS. To earn it you need active ACAMS…

What CAMS costs, by sector
Fee (US$)Private sectorPublic sector
CAMS packageUS$2,095US$1,595
Package with Virtual ClassroomUS$2,495US$2,095
5 rows, 3 columns
The CAMS exam at a glance
Questions120
Time3.5 hours
Passing score75
WherePearson VUE test centre
+3 more facts
From package to certificate, then every three years
  1. Buy a package and join ACAMS
  2. Work through the learning path
  3. Apply with 40 eligibility credits
+2 more steps
Comparison table1 of 3
Updated 1,082 words3 visuals

AML compliance checklist for Australia: five steps

Updated 2 Nov 2026Timeline +2

AML non-compliance penalties in Australia

Updated 2 Nov 2026Key-facts card +2

TPB Code of Professional Conduct: obligations and penalties

Updated 2 Nov 2026Timeline +2

AML compliance requirements in Australia

Updated 21 Oct 2026Node flow +1

AML/CTF risk assessment: how to do one for AUSTRAC

Updated 21 Oct 2026Comparison table +2

AML compliance officer requirements in Australia

Updated 21 Oct 2026Key-facts card +1

Due diligence

See all 14

Enhanced due diligence for PEPs in Australia

Under Australia’s AML/CTF Act, a foreign politically exposed person (PEP) always triggers enhanced due diligence, and a domestic or international…

Three types of PEP, and a former PEP
TypeWhoEnhanced due diligence and senior manager approval
Foreign PEPHolds a prominent public position in a foreign country, such as a head of state, minister, supreme court judge or ambassadorAlways
Domestic PEPHolds a prominent public position in Australia, such as a member of parliament, a senior judge or the head of a state departmentWhere the customer is high risk
5 rows, 3 columns
Enhanced due diligence for a PEP, in order
  1. Establish who is a PEP
  2. Source of funds and source of wealth
  3. Senior manager approval
+1 more step
What a PEP file should show
PEP statusHow you established it
ApprovalSenior manager, before the service
Source of funds and wealthEstablished on reasonable grounds
Risk ratingThe rating and why
+1 more facts
Comparison table1 of 3
Updated 1,298 words3 visuals

FATF PEP guidance: requirements and Australian rules

Updated 2 Nov 2026Comparison table +1

Enhanced due diligence checklist for Australia

Updated 21 Oct 2026Comparison table +1

Enhanced due diligence: what it is and when it applies

Updated 2 Nov 2026Key-facts card +1

Ongoing customer due diligence: AUSTRAC compliance guide

Updated 2 Nov 2026

Enhanced due diligence vs customer due diligence: Australia

Updated 2 Nov 2026

Enhanced due diligence for high-risk customers in Australia

Updated 21 Oct 2026

Privacy & data

See all 12

Australian Privacy Principles: the 13 APPs explained

The Australian Privacy Principles are 13 legally binding rules in Schedule 1 of the Privacy Act 1988. They set how government agencies, businesses…

The Australian Privacy Principles at a glance
The law13 APPs, in Schedule 1 of the Privacy Act 1988
Who it coversGovernment agencies, and organisations with annual turnover over A$3 million
RegulatorOAIC
Access requests30 days for agencies
+1 more facts
The 13 APPs, in the five parts of Schedule 1
Part of Schedule 1APPsWhat you must do
1. Consideration of personal information privacyAPP 1 open and transparent management; APP 2 anonymity and pseudonymityKeep a clear, current privacy policy. Let people deal with you without identifying themselves where that is practicable and lawful
2. CollectionAPP 3 solicited information; APP 4 unsolicited information; APP 5 notificationCollect only what is reasonably necessary, destroy what you could not have collected, and tell people why you are collecting
5 rows, 3 columns
How a privacy complaint reaches the OAIC
  1. The person complains to your business
  2. You respond
  3. They complain to the OAIC
+1 more step
Key-facts card1 of 3
Updated 1,196 words3 visuals

PII compliance requirements: a practical guide for Australia

Updated 2 Nov 2026Key-facts card +1

Personal information definition Australia: Privacy Act 1988

Updated 2 Nov 2026

Data privacy training for employees: how to build a program

Updated 2 Nov 2026

Data privacy vs data protection: key differences explained

Updated 2 Nov 2026

How to protect PII: 12 ways to stay compliant at work

Updated 2 Nov 2026

ISO 27001 privacy controls: Annex A 5.34 and ISO 27701 guide

Updated 2 Nov 2026

Risk & governance

See all 9

What is risk mitigation? Definition, steps and strategies

Risk mitigation is the action you take to lower the likelihood or the impact of a risk, so it sits within the level of risk you are willing to…

Four ways to respond to a risk
ResponseWhat you doExample
AvoidStop or decline the activity that creates the riskNot offering a service whose risk you cannot control
ReduceAdd controls that lower the likelihood or the consequenceApprovals and separation of duties for payments, or a disaster recovery plan
4 rows, 4 columns
The risk management process, step by step
  1. Set the context
  2. Identify risks
  3. Analyse
+3 more steps
Comparison table1 of 2
Updated 1,164 words2 visuals

Risk mitigation strategies: types, steps and examples

Updated 21 Oct 2026Comparison table +1

REI compliance checklist: how to audit your agency in NSW

Updated 2 Nov 2026

Importance of regulatory compliance: benefits & consequences

Updated 21 Oct 2026

Compliance management: what it is, frameworks and tools

Updated 2 Nov 2026

Financial services regulatory requirements in Australia

Updated 2 Nov 2026

What is regulatory risk management? Framework & examples

Updated 21 Oct 2026

Client onboarding

See all 9

What is client onboarding? Steps and templates

Client onboarding is the process that takes a new client from signed contract to their first result with your service. It covers collecting…

Five workflows, one record per client
Intake
Verify
Screen
Assess
Monitor
Re-checks keep the client current
An example first week, from signature to first result
  1. Send the welcome email and intake form
  2. Process the intake and start verification
  3. Set up system access
+3 more steps
Node flow1 of 2
Updated 1,051 words2 visuals

Customer onboarding checklist for AML/CTF in Australia

Updated 21 Oct 2026Timeline +1

10 client onboarding best practices: steps & templates

Updated 2 Nov 2026

Customer onboarding definition: key steps & best practices

Updated 21 Oct 2026

Customer onboarding best practices: a step-by-step guide

Updated 21 Oct 2026

What is client experience? Definition, examples & strategy

Updated 2 Nov 2026

How to implement client onboarding process steps that scale

Updated 21 Oct 2026

Identity verification

See all 14

What is identity verification in Australia?

Identity verification is checking, against sources you can trust, that a person exists and is who they say they are. In Australia that usually…

Four ways to verify identity in Australia
MethodWhat it checksShows the person is present?
Document check (DVS)Name, date of birth and document details on an Australian-issued ID against the issuer’s record. 14 document types; usually a yes or noNo. The DVS does not check faces
Face matchThe person’s face against the photo on their ID: in person, by video call or with biometric technology. The government FVS covers passports and WA licencesYes
4 rows, 4 columns
How an online identity check runs
  1. Consent and details
  2. Capture the ID
  3. Check the document
+2 more steps
Comparison table1 of 2
Updated 1,175 words2 visuals

Online identity verification services in Australia

Updated 21 Oct 2026Timeline +1

Identity verification services in Australia: how they work

Updated 21 Oct 2026Comparison table +2

NIST Digital Identity Guidelines: SP 800-63 explained

Updated 21 Oct 2026

Identity verification best practices: a practical playbook

Updated 2 Nov 2026

Verification of identity (VOI) requirements in Australia

Updated 21 Oct 2026

Top identity verification service providers & companies

Updated 2 Nov 2026

Screening & watchlists

See all 10

What is background screening in Australia?

Background screening is a set of checks on a person before you hire or engage them. In Australia it usually combines an identity check, a police…

Five common background checks in Australia
CheckWhat it showsWho runs it
Identity (Document Verification Service)Whether the name and date of birth on an Australian identity document match the issuer’s record. Yes or no; it does not check the photoThe Attorney-General’s Department, for approved organisations
Police checkPolice records released for the check’s purpose, after spent convictions laws applyThe ACIC with Australian police agencies, through accredited bodies
5 rows, 4 columns
Police checks in Australia
Who runs itThe ACIC, with Australian police agencies
ConsentInformed consent, for a stated purpose
TurnaroundAbout 70% within minutes
ValidityNo standard period
+2 more facts
Comparison table1 of 2
Updated 1,312 words2 visuals

Sanctions screening in Australia: how it works

Updated 2 Nov 2026Comparison table +1

United Nations sanctions list: what it is and how to use it

Updated 21 Oct 2026Comparison table

Types of background checks for employment in Australia

Updated 21 Oct 2026

OFAC sanctions list API: how to run fast compliance checks

Updated 2 Nov 2026

Sanctions screening definition: meaning, process and AML

Updated 21 Oct 2026

What is fraud detection? How it works and key tools

Updated 21 Oct 2026

Ready to make onboarding minutes, not hours?

Start free and run your first check today, or book a demo and we will walk you through it.

Start freeBook a demo

Cookie settings

Choose which optional cookies we can use. You can change this at any time from Cookie settings at the bottom of every page.