Skip to main content
Rules Mate

Who must detect + enhance due diligence on Domestic + Foreign PEPs?

The applicability test for Detect + enhance due diligence on Domestic + Foreign PEPs (AUSTRAC), computed across 35 industries, 9 business structures and 6 size bands.

Short answer: Some businesses

Applies when the business has an AML/CTF designated service. Where the business has aml adjacent, check whether you provide an AML/CTF designated service (AML/CTF Act s 6 tables 1–3).

What the obligation is

AML/CTF Rules require detection + EDD on Politically Exposed Persons (foreign + domestic + international organisation).

AML/CTF Rules Part 4.13 require reporting entities to detect Politically Exposed Persons (foreign PEPs + domestic PEPs + heads of international organisations) + apply Enhanced Due Diligence including senior-management approval, source of wealth + funds + ongoing review.

The applicability test

Applies when the business has an AML/CTF designated service. Where the business has aml adjacent, check whether you provide an AML/CTF designated service (AML/CTF Act s 6 tables 1–3).

How the regulator frames it: All AUSTRAC reporting entities.

What triggers it: Customer onboarding + ongoing screening.

Jurisdiction: Commonwealth law, so the test is the same in every state and territory.

Which industries are in or out

Outcome across the 35 industries Rules Mate maps (8 of 35: yes; 27 of 35: no).

Business structure and size

Structure does not change the answer in the 8 industries it can reach: for every structure the answer is "yes".

Size does not change the answer in the 8 industries it can reach: at every size band the answer is "yes".

Worked examples

Each line is one run of the Rules Mate applicability engine for a single business profile, with the reason the engine gives:

  • Pty Ltd company in real estate agents with 6–19 employees, turnover $1M–$3M: applies. Tranche 2 industry (Real estate agents) — AML/CTF reporting entity from 1 July 2026.
  • Pty Ltd company in fintech (non-bank) with 6–19 employees, turnover $1M–$3M: does not apply. Requires an AML/CTF designated service.

Answers that bring it into scope

Starting from a small or large professional services company that does not otherwise meet the test, each of these single facts changes the engine's answer:

  • The business holds an Australian financial services licence (AFSL): it becomes worth checking, because it applies only if you provide an AML/CTF designated service (AML/CTF Act s 6 tables 1–3).
  • The business issues financial products or gives financial product advice: it becomes worth checking, because it applies only if you provide an AML/CTF designated service (AML/CTF Act s 6 tables 1–3).
  • The business holds an Australian credit licence (ACL): it becomes worth checking, because it applies only if you provide an AML/CTF designated service (AML/CTF Act s 6 tables 1–3).
  • The business provides credit to customers: it becomes worth checking, because it applies only if you provide an AML/CTF designated service (AML/CTF Act s 6 tables 1–3).
  • The business deals in crypto-assets or runs a digital currency exchange: it then applies (digital currency exchange / virtual asset services — AML/CTF reporting entity).
  • The business receives large physical cash payments: it becomes worth checking, because it applies only if you provide an AML/CTF designated service (AML/CTF Act s 6 tables 1–3).
  • The business makes or receives international funds transfers: it becomes worth checking, because it applies only if you provide an AML/CTF designated service (AML/CTF Act s 6 tables 1–3).

When you need to check further

The engine shows this obligation as "check whether this applies" when a business has aml adjacent. It then applies only if you provide an AML/CTF designated service (AML/CTF Act s 6 tables 1–3). That fact is not something Rules Mate can infer from industry, structure or size.

What you must do, and when

When due
At onboarding + periodically (annual minimum for higher-risk).
Frequency
Ongoing
Evidence to keep
Screening tool integration; PEP list updates; EDD file notes; senior management approvals.
Status
Current
Priority
Critical

Penalty for not complying

Maximum penalty: Civil penalty of up to $36.4M (body corporate) or $7.28M (individual), maximum per contravention.

Audit or assurance level

Independent review. Authority: Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) ss26F(2), 26F(4)(f), 26H, 116 (compilation C62, in force 1 Jul 2026); AML/CTF Rules 2025 (F2025L01026) r5-10; AML/CTF Transitional Rules 2026 (F2026L00393) Part 7; AUSTRAC "Step 5: Conduct an independent evaluation" (last updated 31 Mar 2026).

Frequency: At least once every 3 years, at the frequency set in your AML/CTF policies (documented rationale). Transitional first-evaluation deadlines (30 Jun 2029 to 31 Dec 2030) depend on the last two digits of your AUSTRAC account number and on when you first provided the designated service.

Who can perform it: An evaluator who is independent: internal (for example internal audit) or external, but not your AML/CTF compliance officer or compliance team, and not anyone who developed the program or assessed your ML/TF risk. No mandatory qualifications. The evaluator reports in writing to your governing body and the senior manager who approves the program. Separately, AUSTRAC can require an external audit by an AUSTRAC-authorised auditor by written notice (ss161-162).

Obligations with the same applicability test

What usually applies alongside it

Across the 1,890 business profiles Rules Mate evaluates, these obligations apply to most of the businesses this one applies to, and are far more common among them than among businesses generally:

Where it sits in the corpus

Rules Mate tracks 8 published obligations tagged "aml ctf", 6 of them rated critical. For a professional services Pty Ltd company with 6–19 employees operating in every state, 0 of those apply outright. This obligation is rated critical priority, and is an ongoing duty.

Regulator, legislation and tools

Regulated by Australian Transaction Reports and Analysis Centre.

AUSTRAC: Anti-money laundering and counter-terrorism financing regulator and financial intelligence unit. Administers the AML/CTF Act, including Tranche 2 expansion from 1 July 2026.

AML/CTF Act: Federal AML/CTF regulation.

Free tools that help with this obligation:

Questions

Who must detect + enhance due diligence on Domestic + Foreign PEPs?
Applies when the business has an AML/CTF designated service. Where the business has aml adjacent, check whether you provide an AML/CTF designated service (AML/CTF Act s 6 tables 1–3).
Do sole traders need to detect + enhance due diligence on Domestic + Foreign PEPs?
Yes. Looking in the 8 industries it can reach and every size band, the engine's answer for a sole trader is: yes.
Do businesses with 1–5 employees need to detect + enhance due diligence on Domestic + Foreign PEPs?
Yes (1–5 employees, turnover $100K–$1M).
When is "Detect + enhance due diligence on Domestic + Foreign PEPs" due?
At onboarding + periodically (annual minimum for higher-risk).

Related

Sources

Computed by the Rules Mate applicability engine from the published obligation corpus; facts last checked 3 October 2026. Rules Mate is not a law firm and this is general information, not legal advice. Confirm your position with the regulator source or a qualified adviser before acting.