AML risk matrix template for a micro firm
An AML risk matrix template is a grid of likelihood and consequence. For a micro firm it is stationery until you score your own designated services and write why.
Quick answer
A two-person firm does not need a bank's forty-row heat map. It needs one row for each designated service it actually provides, a likelihood, a consequence, and a sentence of reasons. The template does not supply those sentences. A senior manager approves the result, and the matrix is not the client-pays check.
People search “AML risk matrix template” when a two-person firm wants a five-by-five matrix and is about to download one built for a bank. Checked against AUSTRAC's step 2, identify and assess your risks on 4 October 2026. This is general information, not legal advice. This page does not reproduce that guidance. A fuller assessment document is the AML risk assessment template. The Tranche 2 assessment itself is the ML/TF risk assessment. The sector map is /tranche-2.
A small grid, filled by you
An AML risk matrix template has axes and empty cells. Likelihood of the harm, consequence if it happens, and the service the cell refers to. A micro firm that downloads a bank matrix imports products it does not sell. The honest version has a short list: the designated services this firm provides, and the delivery channels it actually uses.
Each cell needs a sentence. A colour with no reason is decoration. The senior manager approves the sentences. Software does not choose the colour, and a template cannot know that your work is mostly local conveyancing or mostly company formations.
- Rows are your services. If you do not provide it, it is not a row.
- Write likelihood and consequence in words. A number without a sentence will not survive a question.
- Keep customers out of the grid. The matrix is about the business. A single file's rating is a different record.
- Approve and date it. An undated download is not the assessment.
What a two-person firm actually scores
Four rows are enough when four services are the business. Adding empty banking rows makes the firm look thorough and leaves the real services unexamined. This page does not set the scores. It sets the shape.
A micro-firm matrix shape. This table does not reproduce AUSTRAC's risk assessment guidance and it is not a scored assessment.
| Row | What you write | What you leave blank |
|---|---|---|
| The service | One designated service you provide | A product from a bank template |
| Likelihood | Why it is likely or unlikely here | A colour copied from the download |
| Consequence | What goes wrong for this firm if it happens | A generic catastrophe paragraph |
| Approval | Who signed, and the date | The template's sample signature |
Where the matrix page stops
This page is the grid for a micro firm. It is not the full risk assessment. That assessment is the ML/TF risk assessment.
A longer template you still have to finish is the free risk assessment template. FreeAML does not score the cells.
What the client pays
On FreeAML the firm suite is A$0. The firm emails the client a link. Verification is client-pays. On the public list a personal KYC check is A$20 and a company or trust KYB check is A$40. Use KYB when the customer is a company or a trust. A matrix is part of the program, not a per-customer fee, so it is not billed as KYC or KYB. Confirm the live amounts on FreeAML pricing. FreeAML does not score your risks or turn a blank matrix into an assessment.
📚 Related Resources
Free KYC Check →
Verify customer identity in 60 seconds. Government ID + AML screening.
Free AML Program →
Board-ready AML/CTF Program template. All 10 AUSTRAC sections included.
Risk Assessment Generator →
AI-powered ML/TF risk assessment. 20-page compliant report in 5 minutes.
Free AML Training →
Online courses for staff. CPD-certified certificates included.
AUSTRAC Reporting Tools →
File SMRs, TTRs, IFTIs directly to AUSTRAC. Pre-filled forms.
Frequently Asked Questions
Score the services you provide. Leave the bank rows out.
The firm suite is A$0. The client pays the checks the approved program requires after you know your risks.
Open the Tranche 2 guideQuestions: team@freeaml.com.au