Source of Funds and Source of Wealth Verification: Australian AML Compliance Guide

Source of funds (SOF) and source of wealth (SOW) verification are core components of Enhanced Customer Due Diligence (ECDD) under Australia's anti-money laundering and counter-terrorism financing framework. The primary legislation is the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (AML/CTF Act), administered by AUSTRAC (Australian Transaction Reports and Analysis Centre). The AML/CTF Rules 2007 provide detailed operational requirements for reporting entities.

For a broader overview of EDD obligations, see our Enhanced Due Diligence compliance guide.

This article is provided for informational purposes only and does not constitute legal, financial, or regulatory advice. Regulatory references are accurate as of June 2, 2026. Consult qualified legal counsel for advice specific to your circumstances.

Australia's AML/CTF framework: key differences from EU and UK

Australia's AML framework has several distinct features that compliance practitioners from European jurisdictions should understand.

No general criminal standard for SOF — Unlike UK POCA or EU AMLD, the AML/CTF Act does not impose a blanket criminal law standard for SOF verification. Instead, the obligation flows from each reporting entity's risk-based AML/CTF Program, which must be approved by AUSTRAC and updated at least every three years.

Designated services — The AML/CTF Act applies to "reporting entities" that provide "designated services" listed in Table 1 of Schedule 1. This includes banks, financial advisers, bullion dealers, gambling businesses, and digital currency exchange providers.

Two-part AML/CTF Program — Every reporting entity must have a written AML/CTF Program consisting of Part A (enterprise-wide risk assessment and compliance management) and Part B (customer identification and verification, including ECDD procedures).

Privacy Act 1988 and Australian Privacy Principles (APPs) — The Privacy Act 1988 and the 13 Australian Privacy Principles (APPs) govern the collection, use, and disclosure of personal information in Australia. APP 1 (transparency), APP 3 (collection limitation), and APP 11 (security) are most directly relevant to SOF/SOW document collection.

SOF and SOW in the Australian context

Source of Funds (SOF) identifies the origin of the funds used in a specific transaction or designated service. Under AUSTRAC's ECDD Guidance, the question is: where does this specific money come from?

Source of Wealth (SOW) identifies how a customer built their total wealth. For politically exposed persons (PEPs) and high-risk customers, this requires longitudinal analysis of income sources, business activities, inheritance, and capital gains.

When is ECDD and SOF/SOW verification required in Australia?

AUSTRAC's Compliance Guidance on ECDD identifies the key triggers for enhanced due diligence, including SOF/SOW documentation.

Key ECDD triggers under the AML/CTF Act

Politically Exposed Persons (PEPs) — Chapter 4 of the AML/CTF Rules 2007 requires ECDD for all PEPs and their associates. Australia's PEP definition covers both domestic and foreign PEPs — politicians, senior public servants, executives of international organisations, senior military officers, and their immediate family members and close associates.

High-risk customers and relationships — Customers who score high in the reporting entity's risk assessment must receive ECDD. AUSTRAC's risk guidance identifies: unusual or complex business structures, customers from high-risk FATF-listed jurisdictions, cash-intensive businesses, and customers who are reluctant to provide standard identification.

High-value transactions — The AML/CTF Act requires threshold transaction reports for cash or equivalent transactions of AUD 10,000 or more. High-value non-cash transactions involving unusual patterns typically trigger SOF inquiry under the entity's risk-based program.

Suspicious matter indicators — Any circumstance that gives rise to a suspicion that a transaction may involve proceeds of crime triggers ECDD and potential suspicious matter report obligations under AML/CTF Act s. 41.

Required documents for SOF verification in Australia

Australian customer identification relies on government-issued documents distinct from European equivalents:

• Australian passport
• State or territory driver licence
• Tax File Number (TFN) — unique identifier issued by the ATO (Australian Taxation Office), equivalent to UK NI number or US SSN
• ASIC company extract — for legal entity customers (equivalent to UK Companies House certificate)

Most common fund origins and required Australian documentation

Employment income

• Recent payslips (three months)
• ATO Notice of Assessment (most recent year) — key corroborating document
• Employment contract confirming salary level

Real estate sale proceeds

• Statement of Sale (from conveyancer or solicitor)
• NSW/VIC/QLD Land Registry title transfer confirming sale
• Bank statement showing receipt from conveyancer's trust account

Business sale proceeds

• Share sale agreement or business asset sale agreement
• ASIC company search confirming deregistration or share transfer
• ATO Capital Gains Tax worksheet (Schedule 12 of tax return)

Inheritance

• Grant of Probate or Letters of Administration from state Supreme Court
• Estate distribution accounts
• Bank statement confirming receipt from estate executor or solicitor trust account

Mortgage or loan proceeds

• Letter of offer from APRA-regulated lender
• Settlement statement from solicitor
• Bank statement showing drawdown

Investment or dividend income

• Dividend reinvestment plan statement or cash dividend statement
• Annual brokerage account statement (ASX-listed securities)
• ATO Tax Statement confirming franking credits and dividend income

SOW verification: documents for establishing overall wealth in Australia

SOW red flags — AUSTRAC's typologies publications identify: wealth disproportionate to declared occupation, large unexplained transfers from overseas, heavy use of shell companies or trusts to obscure beneficial ownership, and patterns consistent with smurfing or layering.

Australian legal and regulatory framework

AML/CTF Act 2006 — The AML/CTF Act is the primary legislation. Non-compliance can result in civil penalties of up to 100,000 penalty units per contravention (one penalty unit = AUD 313 as of July 2023) and criminal penalties for serious offences. Proceeds of crime are dealt with under the Proceeds of Crime Act 2002 (Cth).

AUSTRAC enforcement — AUSTRAC has imposed major civil penalty orders: AUD 1.3 billion (Westpac, 2020), AUD 700 million (Commonwealth Bank, 2018), and AUD 45 million (Star Entertainment, 2023). These cases all involved ECDD and suspicious matter reporting failures, including inadequate SOF documentation for high-risk customers.

Suspicious Matter Reports (SMRs) — Under AML/CTF Act s. 41, if a reporting entity suspects that a transaction may involve proceeds of crime or be connected to money laundering or terrorism financing, it must submit an SMR to AUSTRAC. The obligation is triggered by suspicion — no minimum dollar threshold applies. Tipping off the customer is prohibited.

Privacy Act 1988 and APPs — The OAIC (Office of the Australian Information Commissioner) enforces the Privacy Act. For financial institutions collecting SOF/SOW documents, APP 3 limits collection to information reasonably necessary for the AML/CTF purpose, and APP 11 requires security measures proportionate to the sensitivity of the information.

AML/CTF Amendments (2024) — The AML/CTF Amendment Bill (2024) expands the regime to cover legal professionals, accountants, and real estate agents from mid-2026, significantly broadening the scope of entities required to conduct ECDD including SOF/SOW verification.

Automating SOF/SOW verification with CheckFile

CheckFile automates the critical steps for Australian reporting entities:

• Document authenticity verification across 3,200+ document types in 32 jurisdictions, including ATO notices, ASIC extracts, state land registry documents, and probate court records
• Structured data extraction to populate AUSTRAC-compliant ECDD case files without manual re-entry
• Cross-document consistency checks — validating that names, TFNs, amounts, and dates are consistent across ATO notices, bank statements, and sale agreements in the same EDD file
• Compliant archiving with full audit trail for AUSTRAC's seven-year record retention requirement under AML/CTF Rules 2007 Chapter 15

The platform integrates via API with PEP/sanctions screening tools and existing compliance case management systems. Learn more about our security approach and pricing, or visit CheckFile.ai.

For a complete overview of AML compliance obligations, see our anti-money laundering compliance guide.

Frequently Asked Questions

Does the AML/CTF Act require SOF verification for every transaction?

No. The obligation is risk-based: SOF documentation is required when ECDD is triggered under the reporting entity's Part B AML/CTF Program. The risk assessment must identify which customer categories, designated services, and transaction patterns trigger ECDD, including SOF inquiry. AUSTRAC assesses the adequacy of the risk assessment during compliance reviews.

What is the record retention period under Australian AML law?

AML/CTF Rules 2007 Chapter 15 requires records to be retained for seven years from the date the record was created or the transaction occurred. This includes all ECDD records, SOF/SOW documents, SMRs, and transaction monitoring records. Records must be readily accessible for AUSTRAC inspection.

What does AUSTRAC look for in an ECDD examination?

AUSTRAC focuses on: (1) whether the risk-based program correctly identifies ECDD triggers, (2) whether SOF/SOW documentation is adequate and independently corroborated, (3) whether SMRs are filed promptly when suspicion arises, (4) whether records are retained for the required period, and (5) whether ongoing monitoring procedures detect changes in customer risk profiles.

Are foreign documents acceptable for Australian SOF purposes?

Yes. Australia is a party to the Hague Apostille Convention, so documents from member countries bearing an apostille are accepted. For non-convention countries, consular certification is required. Reporting entities must assess whether foreign documents provide equivalent corroborative value to Australian equivalents and ensure non-English documents are professionally translated.

How does the 2024 AML/CTF Amendment affect SOF requirements?

The 2024 Amendment expands the reporting entity regime to include legal professionals, accountants, and real estate agents. These sectors have historically been excluded from formal AML/CTF obligations but are significant vectors for money laundering (particularly real estate). From mid-2026, lawyers, accountants, and agents facilitating property transactions will need to conduct CDD, including SOF verification for high-risk clients, consistent with the existing framework for financial institutions.