rulesmate.com.au — Compliance reference
https://rulesmate.com.au/insights/aml-compliance-officer-amlco-role-responsibilities
Printed 19 October 2026
AML/CTF Compliance Officer (AMLCO) — role and statutory responsibilities
Why every reporting entity must appoint an AML/CTF Compliance Officer and what the role covers under the AML/CTF Rules.
Statutory requirement
The reformed AML/CTF Act requires every reporting entity to designate an AML/CTF Compliance Officer (AMLCO) at management level as part of the governance of its AML/CTF program (under the former structure this sat in Part A), and to notify AUSTRAC within 14 days of designation. This designation is a fundamental requirement for compliance with the AML/CTF Act, Regulations and Rules. Reporting entities must ensure their AMLCO is appropriately appointed and has the necessary authority. AUSTRAC enrolment 31 March 2026 walkthrough
The AMLCO holds responsibility for overseeing compliance with the AML/CTF Act, Regulations and Rules. The structure of this role varies; smaller entities may designate an existing employee already in a senior compliance position, while larger entities typically establish a dedicated AMLCO function.
AUSTRAC requires the AMLCO to possess sufficient seniority and authority to direct compliance action within the reporting entity. As part of the entity's enrolment, the AMLCO's contact details must be provided to AUSTRAC.
Core responsibilities
The AMLCO has core responsibilities relating to the day-to-day oversight of an entity’s Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) program. This includes ensuring that suspicious matter reports are reviewed and lodged on time, as mandated under section 41. Similarly, the AMLCO is responsible for ensuring that threshold transaction reports (TTRs), international funds transfer instructions (IFTIs), and accounts created reports (ACRs) are lodged on time, in accordance with sections 43, 45 and 47 respectively. AUSTRAC reporting deadlines table provides further detail.
A key function of the AMLCO is to act as the principal point of contact with AUSTRAC. This facilitates communication and ensures the entity’s compliance obligations are met. The AMLCO must also ensure that transaction monitoring rules are operating and appropriately tuned to detect potential illicit activity.
Finally, the AMLCO is responsible for ensuring that enhanced customer due diligence (ECDD) is applied where required. This is a critical component of a robust AML/CTF program.
Board and senior management interaction
The AMLCO’s role involves regular interaction with the board or a senior risk/audit committee. This interaction focuses on reporting the performance of the AML/CTF program. Reporting includes updates on the AML/CTF program and its effectiveness.
Material issues require escalation to the board or senior management. These issues include significant Suspicious Matter Report (SMR) volumes, identified gaps in controls, and direct contact with regulators.
Ultimately, the governing body and senior manager remain accountable for the AML/CTF program. The AMLCO helps ensure the independent evaluation of the whole program (at least once every 3 years) is conducted and any findings are remediated.
Personal exposure
AMLCOs are exposed to personal civil penalties. Accessorial liability provisions mean an AMLCO can be held responsible personally for contraventions of the Anti-Money Laundering and Counter-Terrorism Financing Act.
Tipping-off offences, as outlined in section 123, also apply to AMLCOs. This means they are subject to the same restrictions and potential penalties as other officers regarding the disclosure of information.
AUSTRAC has demonstrated a willingness to pursue individual officers, alongside entities, when compliance failings are identified. Maintaining adequate resources and documented succession planning, alongside clear reporting lines, can provide evidence of due diligence and offer some protection against assertions of inadequate program controls.
Frequently asked
Can the AMLCO be outsourced?
The AMLCO must be employed or engaged at management level, be a fit and proper person and, where services are provided through an Australian permanent establishment, be an Australian resident. Check AUSTRAC's compliance officer guidance before relying on an outsourced arrangement — outsourcing does not transfer liability. AUSTRAC expects the AMLCO to have sufficient authority and direct accountability to the board for the function.
Does a small remitter need an AMLCO?
Yes. All reporting entities regardless of size must designate an AMLCO under Chapter 8 of the AML/CTF Rules. The size and seniority of the role can be commensurate with the business but the function cannot be omitted.
Related
Related reading
Officer due diligence under section 27: the six elements and the evidence that proves each one
Section 27 of the model WHS Act imposes a personal duty on officers. The six due diligence elements, the artefacts that evidence each, and the penalties for failure.
The Privacy Act statutory tort for serious invasions of privacy
Schedule 2 to the Privacy and Other Legislation Amendment Act 2024 created a new statutory cause of action for serious invasions of privacy. It commenced 10 June 2025. Here's the framework.
Compliance monitoring and assurance plans: designing testing that proves the controls work
Building an annual compliance monitoring plan: design vs operating effectiveness, what to test and how often, sample sizes, and recording results.
ISO 22301 business continuity and APRA CPS 230: how the standard supports the prudential requirement
How ISO 22301 business continuity management supports APRA CPS 230: impact analysis, tolerance levels, testing, service providers, and where CPS 230 goes further.
© Rules Mate · Source citations at the end · Information current as at 3 June 2026
Printed from https://rulesmate.com.au/insights/aml-compliance-officer-amlco-role-responsibilities