Guides / Swootle Research / 2026-07-18

A practical guide for Australian accounting firms comparing AML software for client intake, CDD, risk review, evidence, reporting and records.

AML software for accountants in Australia: an evaluation and operating guide

AML software for accountants in Australia should help a practice apply its approved AML/CTF program to the designated services it actually provides. Useful software can coordinate service triage, customer due diligence (CDD), entity and relationship evidence, configured risk questions, staff review, approvals, and refresh work. It cannot decide whether a service is designated, supply legal advice, make the practice compliant automatically, perform every external check, or submit AUSTRAC reports unless those separate responsibilities and integrations are specifically verified.

The new AML/CTF regime for newly regulated sectors commenced on 1 July 2026. An accounting practice should start with its services and Australian connection, not with a generic “accountant” label. AUSTRAC’s professional designated services guidance explains that scope depends on the services provided and that exemptions and fact-specific limits can apply. This guide is general information, not legal advice.

This page is for accounting-practice leaders evaluating workflow support and implementation fit. For the broad Australian commercial implementation pathway, see AML/CTF implementation in Australia. For cross-sector vendor comparison and procurement evidence, use the AUSTRAC Tranche 2 software buyer guide. For the operational control sequence, use the Tranche 2 AML requirements checklist.

What accountant AML software needs to support

Accounting practices can work with individuals, companies, trusts, partnerships, SMSFs, family groups, foreign entities, and authorised representatives. The relevant service may also differ from one engagement to another. A useful system should make the following questions visible:

• Which service is being provided, and is it potentially a designated service?
• Who is the customer for the relevant service?
• Which people and entities are associated with the customer, and what role does each have?
• What information and evidence does the practice’s program require?
• Which configured risk factors require additional questions, evidence, or review?
• Who can return, approve, reject, or escalate the file?
• What information must be refreshed or monitored during the relationship?

A form can collect answers without controlling the work around them. Evaluation should therefore cover the full path from service triage to evidence review and the next accountable action.

Evaluate the workflow, not a feature list

Ask each supplier to demonstrate a representative accounting file and label every capability as configurable, provider-dependent, integration-owned, professional-service-led, or out of scope.

AUSTRAC’s current guidance says AML/CTF policies must deal with initial and ongoing CDD, risk management, reporting, records, governance, and training. Use that guidance to define the requirement; use a demonstration to establish what a product actually does.

Map accounting services before choosing the system

AUSTRAC’s professional designated services guidance includes services such as assisting with certain real estate or body-corporate transactions, managing property in connection with a transaction, arranging financing, selling a shelf company, assisting with the creation or restructuring of a body corporate or legal arrangement, acting in specified positions, and providing a registered office or principal place of business address. The list is fact-specific and includes exceptions.

Build a service matrix that records:

Routine tax, accounting, or advisory work should not be treated as automatically in or out of scope. Confirm the facts against current AUSTRAC guidance, the Act and Rules, and qualified advice where needed.

Design an accountant-specific CDD flow

The workflow should reflect the customer and service rather than force every matter through one long form. A practical path can include:

1. Service and customer context. Capture the proposed service, customer type, purpose, authority, jurisdictions, and related parties.
2. Identity and entity information. Request and verify the information required by the practice’s program for an individual, company, trust, partnership, foreign entity, or other customer type.
3. Ownership and control. Represent relevant ownership, control, trustee, beneficiary, appointor, director, shareholder, and authorised-person relationships without claiming that one field resolves every legal question.
4. Risk and enhanced CDD. Apply the practice’s configured factors, explain the route, request additional information where required, and send exceptions to the right reviewer.
5. Decision and conditions. Record whether the file is approved, rejected, paused, or escalated, who made the decision, what evidence supported it, and any conditions or follow-up.
6. Ongoing work. Define how changed information, unusual activity, new services, ownership changes, or other triggers are assessed and routed.

For a company client, the file may include registration information, directors, shareholders, controllers, beneficial-ownership information, authorised representatives, and purpose or source context where the program requires it. For a trust, the practice may need trust-party and control information, but the roles and verification steps must follow the applicable Australian requirements and the practice’s approved program. For an overseas entity, the program may require additional jurisdiction, translation, source, or review steps.

Accounting-specific risk and review scenarios

Test software against the work that creates friction for accounting teams rather than only a simple individual identity check.

The goal is a consistent, explainable operating path. A product should not turn a risk score into an automatic clearance or hide an unresolved evidence gap behind a completed form.

Records, provider checks, and ongoing CDD

AUSTRAC’s record-keeping guidance describes AML/CTF program records, CDD records, and transaction records, with retention rules that depend on the record class and circumstance. It also says businesses may keep records themselves or use an external provider. During evaluation, ask:

• Which record is created when a customer submits information?
• Which record shows verification, provider results, reviewer acceptance, or unresolved uncertainty?
• Can the practice retrieve the version of the program, risk factors, evidence, and decision that applied at the time?
• What is exported when a relationship changes or the supplier arrangement ends?
• Who owns retention, access, privacy, deletion, and backup responsibilities?

Ongoing CDD is broader than a periodic questionnaire. AUSTRAC describes monitoring customers for unusual transactions and behaviour, reviewing and updating KYC information and customer risk where appropriate, responding to new risks, and keeping records of how the business complied. A workflow product may support the configured review path; the practice must confirm the data sources, monitoring process, provider responsibilities, alert review, and reporting path around it.

A practical implementation sequence for accounting practices

Implement in controlled increments, with an accountable owner for each decision:

1. Scope. Complete the service matrix and record the basis for in-scope and out-of-scope conclusions.
2. Program. Confirm the risk assessment, AML/CTF program, compliance officer, senior accountability, personnel controls, reporting process, record rules, and independent-evaluation approach.
3. Flow design. Configure customer types, evidence rules, relationships, risk routes, reviewer roles, return reasons, approvals, and change paths.
4. Provider and data design. Document each external KYC, KYB, sanctions, PEP, adverse-media, registry, or monitoring dependency, including failure and human-review paths.
5. Scenario testing. Run normal, incomplete, complex-ownership, higher-risk, provider-uncertain, suspicious-activity, and post-approval change scenarios.
6. Operating review. Check that staff can find the next action, reviewers can understand the evidence and rationale, and the practice can retrieve the records its program and the law require.

This sequence supports an operating decision; it does not certify compliance or readiness. AUSTRAC’s accountant program starter kit is intended as a practical starting point for eligible small practices, but the practice must confirm suitability and customise its program.

How Swootle can support an accounting practice

Swootle can support a practice that wants to turn its approved procedures into configurable customer intake, evidence requests, relationship capture, risk routes, review tasks, approvals, and change workflows. The implementation boundary matters: provider checks, monitoring data, reporting to AUSTRAC, legal interpretation, retention decisions, and the firm’s accountable AML/CTF program remain separate responsibilities unless a specific connected service and operating arrangement is verified.

For the broad implementation proposition, continue to AML/CTF implementation in Australia. For procurement questions across products, use AUSTRAC Tranche 2 software. To map an accountant scenario with the team, book a workflow review.

Frequently asked questions

Do accountants need AML software in Australia?

No specific software product is mandatory. A practice providing a designated service with the relevant Australian connection must meet its AML/CTF obligations. Software may help apply procedures consistently, but the practice must determine scope and operate its own program.

What is the best AML software for accountants?

The best fit is the product that can demonstrate the practice’s actual service paths, customer and entity relationships, evidence states, configured risk routes, provider dependencies, human decisions, change handling, and record retrieval. A feature list or individual identity pass is not enough.

Does accountant AML software include sanctions or PEP screening?

Sometimes a workflow can connect to or record an external screening result, but coverage and execution depend on the named provider or implementation. Ask who supplies the data, which people are screened, how possible matches are reviewed, and what evidence is retained. Do not assume screening is included merely because the product has a screening field.

Can software make an accounting practice AML compliant automatically?

No. Software can support configured controls and make decisions and evidence easier to manage. It does not replace the practice’s scope analysis, AML/CTF program, accountable reviewers, provider controls, reporting decisions, legal advice, or regulator engagement.

Where should an accounting practice start?

Start with the service matrix and one representative customer journey. Then compare the workflow against the operational Tranche 2 checklist and use the AUSTRAC Tranche 2 software buyer guide if you are running a formal procurement process.