The Compliance Officer myth that’s scaring agencies into closing

When we were calling agency principals before building AMLHive, one conversation stuck with me more than any other. A regional Queensland principal, five staff, twenty years in business, put it like this:

He was not being dramatic. He genuinely believed AUSTRAC Tranche 2 would require him to hire a full-time compliance professional, or retain a consultant on a monthly fee, and that the cost would not be worth three more years of trading. He had decided to wind down a business he had spent two decades building — based on a misunderstanding.

Twenty minutes later he had changed his mind. Not because I sold him anything, but because I told him what the requirement actually is.

What the law actually requires

The AML/CTF reforms require every reporting entity to designate an AML/CTF Compliance Officer. That is real, and you cannot skip it. But read the requirement closely and notice what it says — and what it doesn’t.

The compliance officer must be:

• A fit and proper person — someone of good standing, which the principal of an established agency almost always is.
• At management level — they need the authority to make the program stick. In a small agency, that is the owner or licensee in charge.
• Ordinarily resident in Australia.

Nothing in that list says “qualified”, “full-time”, “external”, or “lawyer”. It describes a person you very likely already have: you.(Source: AUSTRAC, “AML/CTF compliance officer”, retrieved 23 May 2026)

What it does not require

Here is where the myth lives. Tranche 2 does not require any of the following:

• A new full-time hire. There is no requirement to employ a dedicated compliance person. The role can be one hat worn by an existing person.
• A formal compliance qualification. The Act asks for a fit and proper person at management level — not a certificate or a law degree.
• An external consultant on retainer. Advice can help, but the named officer is internal and the role does not have to be outsourced.
• A separate compliance department. A three- person agency designates one person. That is the whole structure.

What the role actually involves

Stripped of the jargon, the compliance officer is the person who owns the agency’s AML/CTF program. Day to day and month to month, that means:

• Being AUSTRAC’s point of contact for the business.
• Making sure the program is followed — that customer checks actually happen before a designated service is provided.
• Deciding on reports — whether a suspicion meets the threshold for a Suspicious Matter Report, and ensuring it is lodged on time.
• Keeping the records — so the agency can show what it did, for the seven years AUSTRAC may ask about.
• Refreshing the risk assessment when the business changes.

It is an accountability role, not a second job. For a small agency with the right tools, the recurring effort is measured in hours a month, not days a week.

Why the myth took hold

Three things created this fear, and none of them are the law itself.

1. The framing came from banking

Most of what has been written about AML/CTF compliance officers was written for banks and large financial institutions, where the role genuinely is a full-time, qualified, often team-supported function. Lift that picture and drop it onto a five-person agency and of course it looks impossible. The Act scales; the banking image does not.

2. Fear sells

Some of the noise around Tranche 2 has come from people with something to sell — and “you’ll need to hire a compliance officer” is a more profitable message than “you can do this yourself with the right system.” We think the second message is the true one.

3. The franchisor gap

Several principals told us their network had implied a “group solution” was coming. When it didn’t — or didn’t remove their individual obligation — the vacuum filled with worst-case assumptions. Each reporting entity names its own officer; a network cannot do it for you.

If you’re a sole trader or a tiny agency

You can be your own compliance officer. A sole trader can designate themselves. A husband-and-wife agency can name one of the two. The requirement is that the role exists, is filled by a suitable person, and is registered with AUSTRAC — not that you grow headcount to fill it.

What to do this week

• Name the officer. For most independents this is you. Write it down — it belongs in your AML/CTF program.
• Register the role with AUSTRAC.When you enrol through AUSTRAC Online you provide your compliance officer’s contact details.
• Give the role a system, not a binder.The difference between “hours a month” and “impossible” is whether your checks, screening and records are automated or manual.

For the full picture of what sits under the officer, see our real estate agency obligations guide and the plain-English AUSTRAC Tranche 2 guide.