Customer due diligence: protecting your business from financial crime

Understanding your customers is the first step in fighting financial crime
Customer Due Diligence (CDD) isn’t just a regulatory checkbox — it’s a crucial process that helps you verify who your customers are and ensure their funds come from legitimate sources. By taking CDD seriously, you’re not only protecting your business and clients, but also playing a vital role in preventing money laundering, fraud, and the financing of terrorism.

With the government’s Tranche 2 reforms set to extend AML/CTF obligations to new sectors such as real estate agents, lawyers, accountants, and trust service providers, understanding and applying CDD has never been more important.

What is customer due diligence?

Customer due diligence is the process of knowing who you’re doing business with. It’s about verifying a customer’s identity, understanding the nature of their activities, and assessing whether their risk profile aligns with your organisation’s appetite and obligations.

In Australia, CDD usually takes three forms:

• Standard CDD – verifying the identity of most customers through reliable documents or data.
• Simplified CDD – available in low-risk cases, where less information is needed.
• Enhanced due diligence (EDD) – required for higher-risk customers, transactions, or geographies, and involves deeper checks and ongoing monitoring.

The level of diligence applied depends on the risk — which is why CDD is often described as a risk-based approach.

Why it matters

Weak customer due diligence is one of the fastest ways criminals can exploit a business. Whether it’s organised crime groups funnelling drug proceeds through property, or overseas actors moving illicit funds through shell companies, poor checks leave organisations open to serious risk.

Key facts to consider:

• Organised crime costs Australia up to $60 billion each year. AFP
• AUSTRAC’s 2024 National Money Laundering Risk Assessment underscores that criminals persistently exploit traditional channels such as banks, remitters, casinos, as well as high-value assets like luxury goods, vehicles, and real estate. AUSTRAC NRA 2024
• In 2022–23, AUSTRAC received more than 317,000 suspicious matter reports (SMRs) — an 8% increase on the year before. AUSTRAC Annual Report 2023

These numbers highlight the scale of the challenge — and why CDD is such a critical line of defence.

What’s changing under Tranche 2 reforms

From 1 July 2026, Australia’s AML/CTF regime will expand to include previously unregulated “gatekeeper” professions such as:

• Real estate agents (including buyers’ agents and property developers)
• Lawyers and conveyancers
• Accountants
• Trust and company service providers
• Dealers in precious metals or stones

These entities must:

• Enrol with AUSTRAC
• Develop and maintain an AML/CTF compliance program
• Conduct initial and ongoing customer due diligence
• Monitor and report suspicious activity
• Maintain accurate compliance records

These changes will close long-standing gaps, bring Australia in line with international standards, and reduce the risk of professional services being exploited by money launderers and terrorist financiers.

The risks of getting it wrong

Failing to carry out proper CDD doesn’t just invite regulatory scrutiny — it can have serious consequences:

• Legal penalties: under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 and the Criminal Code Act 1995 (Cth), there are criminal penalties in addition to civil penalties.
• Reputational damage: losing public and client trust can take years to rebuild.
• Operational disruption: investigations and remediation drain resources and focus.

How to strengthen your CDD approach

To meet obligations and reduce risk, organisations should:

• Embed a risk-based framework – assess customer profiles and transactions, and tailor your CDD accordingly.
• Train your staff – ensure everyone knows what to look for and how to escalate concerns.
• Leverage technology – digital verification, transaction monitoring, and record-keeping systems help streamline compliance.
• Review regularly – compliance isn’t static. Update your processes in line with AUSTRAC guidance, new risks, and legislative changes.

Safetrac’s role in supporting you

At Safetrac, we understand that CDD can feel complex, especially for organisations new to AML/CTF obligations under Tranche 2. That’s why we provide:

• Role-specific AML/CTF training that makes obligations clear and practical.
• AML/CTF Readiness Booster – Preparing for Regulatory Change.
• A Compliance Platform that serves as the centralised hub for all your compliance training needs, streamlining training and tasks for easy auditing, reporting, and review. Easily manage course content, surveys, attestations, track staff policy acceptance, uncover knowledge gaps, and report on progress — all in one convenient platform.

Our approach is designed to support your team, reduce the burden of compliance, and help your organisation build a culture of vigilance and integrity.

Customer due diligence isn’t just a regulatory requirement — it’s essential for keeping your organisation safe from financial crime and protecting the community from its broader harm.

With Tranche 2 reforms on the horizon, now is the time to prepare. By strengthening your CDD processes and equipping your team with the right knowledge, you can turn compliance into confidence. Connect with our team today. We’re here to guide you through every part of your compliance journey.