AML/CTF Compliance
Requires More Than
a Subscription.
What AUSTRAC actually demands from franchise networks and large groups — and why a platform subscription alone is not enough.
AML/CTF Act 2006 (Cth), 100,000 penalty units from 1 July 2026
Directors and COs face personal liability separately
Per day until enrolment is completed
Tranche 1 entities — same standards now apply
What AUSTRAC Actually Requires
from Your Network
From 1 July 2026, every agency in your network facilitating property sales or managing trust accounts becomes a reporting entity under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth). This is not a registration exercise — it is a continuous compliance obligation with direct personal liability for principals, directors and Compliance Officers.
The AML/CTF Rules 2025 introduced a specific Reporting Group framework for connected businesses and franchise networks. The key change effective 31 March 2026: related entities in a corporate group or control structure automatically form a reporting group unless they formally opt out in writing. Most franchise networks are already inside a reporting group — whether they know it or not.
Sources: AUSTRAC.gov.au; AML/CTF Act 2006 (Cth); AML/CTF Rules 2025; First AML Reporting Groups analysis (Sept 2025); Hall & Wilcox, AUSTRAC Core Guidance summary (Oct 2025); Grant Thornton, April 2026.
Uniformity Is the Standard.
Diversity of Execution Is the Risk.
AUSTRAC is explicit: the group program must be standardised and consistently executed across every office. This is where a platform subscription alone, without embedded human expertise enforcing group-wide standards, creates a governance risk in a franchise or multi-office environment — and where most franchise groups that have already selected a software tool may have an unaddressed gap.
- Each office nominates its own "Responsible Manager" — different roles, different capabilities, different risk tolerance
- No consistent interpretation of what triggers an SMR across offices
- Training varies by manager — one office does it quarterly, another hasn't done it since onboarding
- CDD timeframes managed differently between offices — some miss deadlines without realising
- EDD decisions made by sales agents under settlement pressure, not compliance professionals
- Annual compliance report requires someone to author it — the platform doesn't do this
- An AUSTRAC audit covers the entire network — inconsistent records across offices create cascading exposure
- If the nominated manager leaves, the compliance function is vacant — AUSTRAC must be notified within 14 days
- Software logs actions but doesn't enforce quality, judgment, or governance discipline
- Dedicated, qualified Compliance Officers assigned across the network under a single unified framework — one standard, applied everywhere. Smaller groups (up to ~20 offices) typically operate with one CO; larger networks of 30+ offices are supported by a scalable CO infrastructure, all operating independently under the same program, platform and compliance methodology. Available upon application.
- SMR and TTR decisions made by a compliance professional, not a sales agent under time pressure
- Group-wide training delivered and documented centrally — every office, same standard, same records
- CDD deadline tracking managed by the CO — not left to individual office calendars
- EDD triggered automatically and managed by the CO, with documented decisions
- Annual compliance report authored and lodged — included in the managed service
- Audit trail maintained at licence level — AUSTRAC-ready at any time, across all offices
- CO continuity managed by AML HQ — vacancy does not fall to the franchisor to resolve
- Platform + human governance = actual uniformity, not the appearance of it
How Each Platform Meets
AUSTRAC's Group Requirements
Legend: ✓ Confirmed available | ✗ Not available | ~ Partial / add-on cost / requires verification
| Requirement / Feature | AML HQ Agency |
PEXA Clear | AMLHUB | First AML |
|---|---|---|---|---|
| Human Governance — AUSTRAC Mandatory Requirements | ||||
| Named, fit & proper Compliance OfficerRequired by AUSTRAC within 28 days of enrolment | ✓Assigned CO — real person | ✗You provide your own CO | ✗Software only | ✗You provide your own CO |
| CO manages SMR/TTR lodgementsHuman judgment — not a workflow trigger | ✓CO owns end-to-end | ✗ | ✗ | ✗ |
| CO continuity managed for youVacancy must be filled — AUSTRAC notified within 14 days | ✓AML HQ manages continuity | ✗ | ✗ | ✗ |
| Annual compliance report — authored & lodgedStatutory obligation — requires a qualified person to author it | ✓Included (scheduled fee) | ✗ | ~Consulting add-on | ~Guidance only |
| Independent program evaluation — 3 yearlyRequired under AML/CTF Rules 2025 | ✓ | ✗ | ~Separate engagement | ✗ |
| Franchise & Multi-Office Group Governance | ||||
| Group-wide uniformity enforced by a professionalAUSTRAC requires consistent execution — not just access | ✓CO enforces across all offices | ✗Tool only — each user independent | ✗Dashboard per office only | ~Group workflows — no CO |
| Audit trail at licence / network levelAUSTRAC audits the network — not just the branch | ✓ | ✗ | ~Per-office only | ✓ |
| Tiered supervision — 25+ staff / multi-branchCentralised reporting + monthly audit sampling | ✓ | ✗ | ✗ | ~Platform support only |
| Franchise compliance schedule for agreementsLegally structured document for franchise agreements | ✓Master Guide & Schedule | ✗ | ✗ | ✗ |
| Staff training delivery — uniform across networkNot just a module — documented group-wide delivery | ✓Included + add-on sessions | ~REIQ partnership | ~Separate engagement | ~Separate engagement |
| AUSTRAC audit representation & supportSupport when AUSTRAC conducts an audit | ✓Full support (scheduled fee) | ✗ | ~Consulting engagement | ✗ |
| Platform, CDD & Compliance Workflows | ||||
| Written AML/CTF program (Part A & B)Tailored per agency — not a generic template | ✓Tailored & maintained | ✗ | ~Consulting add-on | ~Framework support only |
| Digital identity verification (KYC/KYB)Individuals, companies, trusts, SMSFs | ✓GreenID — ISO 27001 | ✓FrankieOne — ISO 27001 | ✓ | ✓Incl. foreign & SMSF |
| PEP, sanctions & adverse media screening | ✓ | ✓ | ✓ | ✓ |
| Enhanced Due Diligence (EDD) — auto-triggeredOffshore buyers, PEPs, complex structures | ✓CO manages EDD decisions | ~Risk flagging only | ✓ | ✓ |
| Ongoing monitoring across transaction lifecycle | ✓ | ✓Key differentiator | ✓ | ✓ |
| 7-year record retention — Australian hostedMandatory under AML/CTF Act s.107 | ✓Sydney — confirmed | ~Confirm in writing | ~Exit fee for retention | ~Abandoned cases billed |
| Commercial — What No Other Provider Offers | ||||
| Cost-neutral option availableNet compliance cost can be reduced to zero | ✓Available for qualifying agencies | ✗ | ✗ | ✗ |
| CFO Model — compliance generates revenueEmbedded licensed finance manager — unique in market | ✓Unique — no competitor offers this | ✗ | ✗ | ✗ |
| No lock-in contract | ✓ | ✓ | ✗Exit fee: 50% annual sub | ~Annual commitment |
All competitor information from publicly available sources as at June 2026: pexaclear.com.au, amlhub.com.au, firstaml.com/au, getapp.com.au. Verify directly with each vendor. ~ = partial, add-on cost, or unconfirmed — not a claim that the feature is absent.
The Subscription Fee Is Not
the Full Cost of Compliance.
The true cost of AML/CTF compliance is not the platform subscription. It is the total cost of meeting every AUSTRAC obligation — including the Compliance Officer, the written program, the annual report, the training delivery, and the audit support. When these are factored in, a subscription-only approach requires the agency to separately fund significant additional obligations — and when that total is compared to AML HQ's all-inclusive managed service, the difference is clear. For qualifying agencies, AML HQ can be structured to be effectively cost-neutral.
Indicative figures only. Software-only costs based on market rate analysis for outsourced AML compliance services, legal program authoring, and consulting rates. All figures ex GST. AML HQ figures from published fee schedule.
From Compliance Cost to
Revenue-Generating Asset
The CFO (Compliance & Finance Officer) Model is available exclusively through AML HQ. By embedding a licensed Finance Manager who simultaneously manages AML/CTF compliance and builds a mortgage broking revenue stream under your brand, compliance cost is not merely reduced — it is converted into a commercial asset. No other AML/CTF provider in Australia offers anything comparable.
AUSTRAC Does Not Give Warnings
to Well-Resourced Networks.
AUSTRAC has imposed over $15 billion in penalties against Australian financial institutions since 2018 — including $1.3 billion against Westpac and $700 million against CBA. These were not small operators with poor intentions. They were well-resourced institutions with established compliance teams that had systemic gaps. AUSTRAC has explicitly signalled the same enforcement standards apply to Tranche 2 entities from 1 July 2026.
- AUSTRAC enforcement actions are public — media coverage of a real estate franchise penalty would be immediate and damaging to brand value, vendor relationships and property management revenue
- Enforceable undertakings require mandatory remediation at the network's cost — typically $200,000 to $500,000+ for a mid-sized franchise
- Increased regulatory supervision following an enforcement action means AUSTRAC has enhanced oversight of your network for years — affecting operations and additional compliance costs
- A compliance failure during a property transaction can delay or void settlement — creating legal exposure to vendors, purchasers and financiers simultaneously with the AUSTRAC matter
Sources: amlhouse.com.au (August 2025); amltranche.com.au (March 2026); tranchetwoconsultants.com (March 2026); corporatealliance.com (October 2025); AML/CTF Act 2006 (Cth); AUSTRAC enforcement history (public record).
The question is not whether to comply.
The question is whether your current approach will withstand an audit.
AML HQ works exclusively with real estate franchise networks and large groups to build compliance programs that are uniform, defensible and — for qualifying agencies — cost-neutral. If your network has already selected a cloud platform, we can assess the gaps and show you exactly what is missing before 1 July 2026.