Back to Blog
Compliance
October 2, 20269 min read

Can a sole trader be their own AML/CTF compliance officer?

An AML/CTF compliance officer in a one-person firm is often the owner. The title is allowed. The eligibility test and the customer file still have to exist.

Quick answer

Yes, a sole trader can be their own AML/CTF compliance officer. AUSTRAC expects many micro firms to put one person in the governing body, the senior manager role, and the compliance officer role. That person does not report to themselves. They still have to be eligible, keep records, and do the customer work. It is not automatic just because you are the owner.

An AML/CTF compliance officer communicates with AUSTRAC and oversees day-to-day compliance. For a sole trader the same name often sits on every governance line and also runs customer due diligence. Checked against AUSTRAC’s compliance officer page and governance for sole traders and micro businesses on 2 October 2026. This is general information, not legal advice. Who is in the regime is /tranche-2.

Three governance roles, often one person

AUSTRAC names three governance roles: the governing body, a senior manager, and the AML/CTF compliance officer. In a larger firm they are different people who report to each other. For a sole trader or micro business, one person often holds all three. If that is you, AUSTRAC says you do not report to yourself. You are still responsible for the other duties of each role. Outsourcing a role is allowed and is not required. If you outsource, you still have to make sure the person meets the eligibility rules.

The overlap in a one-person firm. The third column is the work that remains when the names match.

RoleIn a larger firmWhen you are all three
Governing bodyOversight of the program, the Act, and the Rules, and enough authority and resources for the compliance officerYou still learn the obligations, review issues, and record that you did. AUSTRAC says control of the business generally supplies the authority and independence
Senior managerApproves the policies, the risk assessment, and high-risk onboardingYou still date and version those approvals. A change of risk is written down, even though you are notifying yourself
AML/CTF compliance officerDay-to-day compliance, a written report to the governing body at least every 12 months, and contact with AUSTRACYou run the day-to-day work. AUSTRAC says an individual business whose owner is both governing body and compliance officer does not have to write that report to themselves

Eligible is a separate question from 'I am the owner'

AUSTRAC’s eligibility list is short and it is not a courtesy title. The compliance officer is at management level, is a resident of Australia if you provide designated services at or through a permanent establishment in Australia, and is a fit and proper person. For a small business, management level can be the owner. You can be at management level with no staff under you. An external compliance officer is allowed, and they still need the authority, resources, and expertise to do the job.

  • Fit and proper. Before you appoint yourself, consider competence, character, honesty, integrity, a serious-offence conviction, adverse regulatory findings, serious misconduct, bankruptcy or a personal insolvency agreement, and a conflict that creates a material risk you will not do the role properly. AUSTRAC says 'consider' is not a pass-or-fail checklist. Write what you considered.
  • Not an expert on day one. AUSTRAC says a small-business officer needs enough skill to learn the risks and apply the policies, and will learn more through training. The training page for everyone else in the room is AML training for non-specialists.
  • Reassess. AUSTRAC expects you to check from time to time that you are still fit and proper. If you become ineligible, you appoint someone else and tell AUSTRAC.

The same person also runs customer due diligence

Customer due diligence is not a fourth title on AUSTRAC’s governance list. In a micro firm it is still your afternoon. You are the governing body, the AML/CTF compliance officer, and the person who collects identity and writes the risk note. Those are different jobs even when the signature is the same. The file should show the check and the risk decision as two lines, so a reviewer can see you did both and did not skip one because you were busy being the other.

What the check has to establish is customer due diligence requirements. Which accounting services pull you into the regime is AML for accountants. Who does the check on a listing is AML for real estate agents. The document that names you as the officer is how to write the AML/CTF program. If a suspicion forms, the lodgement decision sits with you as compliance officer: when to lodge a suspicious matter report.

Appoint, notify, keep the record

AUSTRAC says you appoint an AML/CTF compliance officer within 28 days of providing designated services, and you notify AUSTRAC within 14 days of the appointment on the enrolment form in AUSTRAC Online. The same timing applies if the officer leaves or becomes ineligible. For newly regulated entities, AUSTRAC says you notify no later than the later of 29 July 2026 or 14 days after you enrol. Confirm those dates on their page before you diary them. Keep a record of the name, the dates you acted, how you meet the eligibility test, and what you looked at.

A partnership of two, or a company with one director and one employee, can fall off the 'one individual is the business' sentence. If you are not sure you are the case AUSTRAC describes, get advice. Do not assume the sole-trader shortcut covers a firm that has a separate governing body.

Where FreeAML fits

FreeAML is not your AML/CTF compliance officer, and it does not appoint one. The firm suite is A$0. You do not need an enterprise plan or a monthly minimum before you can send a check. Verification is client-pays by email. Amounts are on FreeAML pricing. The product stores evidence of the customer check. You still approve the program, tell AUSTRAC who the officer is, and decide whether a report is lodged.

Frequently Asked Questions

See whether the firm is in scope first

Then send any check the program requires. The firm suite is A$0 and verification is client-pays.

Open the Tranche 2 guide

Questions: team@freeaml.com.au