Can a sole trader be their own AML/CTF compliance officer?
An AML/CTF compliance officer in a one-person firm is often the owner. The title is allowed. The eligibility test and the customer file still have to exist.
Quick answer
Yes, a sole trader can be their own AML/CTF compliance officer. AUSTRAC expects many micro firms to put one person in the governing body, the senior manager role, and the compliance officer role. That person does not report to themselves. They still have to be eligible, keep records, and do the customer work. It is not automatic just because you are the owner.
An AML/CTF compliance officer communicates with AUSTRAC and oversees day-to-day compliance. For a sole trader the same name often sits on every governance line and also runs customer due diligence. Checked against AUSTRAC’s compliance officer page and governance for sole traders and micro businesses on 2 October 2026. This is general information, not legal advice. Who is in the regime is /tranche-2.
Three governance roles, often one person
AUSTRAC names three governance roles: the governing body, a senior manager, and the AML/CTF compliance officer. In a larger firm they are different people who report to each other. For a sole trader or micro business, one person often holds all three. If that is you, AUSTRAC says you do not report to yourself. You are still responsible for the other duties of each role. Outsourcing a role is allowed and is not required. If you outsource, you still have to make sure the person meets the eligibility rules.
The overlap in a one-person firm. The third column is the work that remains when the names match.
| Role | In a larger firm | When you are all three |
|---|---|---|
| Governing body | Oversight of the program, the Act, and the Rules, and enough authority and resources for the compliance officer | You still learn the obligations, review issues, and record that you did. AUSTRAC says control of the business generally supplies the authority and independence |
| Senior manager | Approves the policies, the risk assessment, and high-risk onboarding | You still date and version those approvals. A change of risk is written down, even though you are notifying yourself |
| AML/CTF compliance officer | Day-to-day compliance, a written report to the governing body at least every 12 months, and contact with AUSTRAC | You run the day-to-day work. AUSTRAC says an individual business whose owner is both governing body and compliance officer does not have to write that report to themselves |
Eligible is a separate question from 'I am the owner'
AUSTRAC’s eligibility list is short and it is not a courtesy title. The compliance officer is at management level, is a resident of Australia if you provide designated services at or through a permanent establishment in Australia, and is a fit and proper person. For a small business, management level can be the owner. You can be at management level with no staff under you. An external compliance officer is allowed, and they still need the authority, resources, and expertise to do the job.
- Fit and proper. Before you appoint yourself, consider competence, character, honesty, integrity, a serious-offence conviction, adverse regulatory findings, serious misconduct, bankruptcy or a personal insolvency agreement, and a conflict that creates a material risk you will not do the role properly. AUSTRAC says 'consider' is not a pass-or-fail checklist. Write what you considered.
- Not an expert on day one. AUSTRAC says a small-business officer needs enough skill to learn the risks and apply the policies, and will learn more through training. The training page for everyone else in the room is AML training for non-specialists.
- Reassess. AUSTRAC expects you to check from time to time that you are still fit and proper. If you become ineligible, you appoint someone else and tell AUSTRAC.
The same person also runs customer due diligence
Customer due diligence is not a fourth title on AUSTRAC’s governance list. In a micro firm it is still your afternoon. You are the governing body, the AML/CTF compliance officer, and the person who collects identity and writes the risk note. Those are different jobs even when the signature is the same. The file should show the check and the risk decision as two lines, so a reviewer can see you did both and did not skip one because you were busy being the other.
What the check has to establish is customer due diligence requirements. Which accounting services pull you into the regime is AML for accountants. Who does the check on a listing is AML for real estate agents. The document that names you as the officer is how to write the AML/CTF program. If a suspicion forms, the lodgement decision sits with you as compliance officer: when to lodge a suspicious matter report.
Appoint, notify, keep the record
AUSTRAC says you appoint an AML/CTF compliance officer within 28 days of providing designated services, and you notify AUSTRAC within 14 days of the appointment on the enrolment form in AUSTRAC Online. The same timing applies if the officer leaves or becomes ineligible. For newly regulated entities, AUSTRAC says you notify no later than the later of 29 July 2026 or 14 days after you enrol. Confirm those dates on their page before you diary them. Keep a record of the name, the dates you acted, how you meet the eligibility test, and what you looked at.
A partnership of two, or a company with one director and one employee, can fall off the 'one individual is the business' sentence. If you are not sure you are the case AUSTRAC describes, get advice. Do not assume the sole-trader shortcut covers a firm that has a separate governing body.
Where FreeAML fits
FreeAML is not your AML/CTF compliance officer, and it does not appoint one. The firm suite is A$0. You do not need an enterprise plan or a monthly minimum before you can send a check. Verification is client-pays by email. Amounts are on FreeAML pricing. The product stores evidence of the customer check. You still approve the program, tell AUSTRAC who the officer is, and decide whether a report is lodged.
📚 Related Resources
Free KYC Check →
Verify customer identity in 60 seconds. Government ID + AML screening.
Free AML Program →
Board-ready AML/CTF Program template. All 10 AUSTRAC sections included.
Risk Assessment Generator →
AI-powered ML/TF risk assessment. 20-page compliant report in 5 minutes.
Free AML Training →
Online courses for staff. CPD-certified certificates included.
AUSTRAC Reporting Tools →
File SMRs, TTRs, IFTIs directly to AUSTRAC. Pre-filled forms.
Frequently Asked Questions
See whether the firm is in scope first
Then send any check the program requires. The firm suite is A$0 and verification is client-pays.
Open the Tranche 2 guideQuestions: team@freeaml.com.au