A new client rings your practice. Before you can start work, you need their identity documents, details of who owns the business, and answers to a list of questions. Your admin person sends emails, chases missing documents and saves files in different places. Two weeks later, you are still waiting on one signed form. Client onboarding automation is built to make this step smoother.
For many Australian accountants, lawyers and real estate agents, this process now carries extra weight. This guide looks at AML/CTF compliance automation: how to make client onboarding faster and more consistent, while keeping the important decisions with your people. Client onboarding automation can help with the paperwork side of that.
(AML/CTF stands for anti-money laundering and counter-terrorism financing. In plain words, these are laws that require some businesses to know who their clients are and to report suspicious activity.)
What changed on 1 July 2026, and who it affects
From 1 July 2026, firms providing accounting, legal and some business structuring and advisory services, along with real estate firms and dealers in precious stones and metals, also have AML/CTF regulatory obligations (The Canberra Times). This group is often called "tranche 2", meaning the second wave of businesses brought under the laws.
AUSTRAC is the regulator, and its website sets out the detail. According to AUSTRAC, real estate agents, lawyers, conveyancers, accountants and dealers in precious metals and stones are now subject to the laws, and enrolment for businesses captured by them is a legal requirement (AUSTRAC). It also says businesses should have things such as an AML/CTF program, a compliance officer and trained staff.
Please read AUSTRAC's guidance for your own sector. Whether the laws apply to you depends on the services you provide, not just your profession. The rules are detailed, and this article cannot tell you whether you are covered or what you must do.
What we can do here is look at the practical side. A big part of compliance is paperwork and process: collecting information, checking it, keeping records and following up. That is where automation can help. That is where client onboarding automation fits.
Where manual client onboarding breaks down
Most practices already ask new clients for identification and background. The change is that the process now needs to be consistent, documented and able to stand up to review. Client onboarding automation tidies up the steps.
Manual onboarding tends to fail in the same places: Client onboarding automation targets each of these.
- Scattered documents. A passport scan sits in an email, a signed form is on someone's desktop and notes are in a notebook. Client onboarding automation collects them in one place.
- Inconsistent steps. One staff member asks for every document. Another skips a step when the client is a friend of a friend.
- Chasing by hand. Missing documents are only noticed when someone happens to look.
- Weak records. If a regulator asks what you did for a client two years ago, you cannot quickly show it. Client onboarding automation keeps a tidy trail.
- Slow starts. Clients wait days or weeks to begin, which is frustrating for them and delays your billable work. Client onboarding automation speeds this up.
For example, imagine a small accounting firm that takes on 10 new clients a month. Each onboarding takes several emails and a few phone calls. One client's identity document is out of date, and nobody notices until later. The firm cannot show a clear record of when each check was done.
The problem is not carelessness. It is that the process lives in people's heads and inboxes instead of in a system.
Client onboarding automation for AML/CTF: document collection, reminders and record keeping
Automation does not decide who is a risky client. It makes sure that the same steps happen every time, and that everything is recorded.
A well-designed onboarding flow might work like this:
- A secure client portal. The new client receives a link, fills in a structured form and uploads documents. Everything lands in one place.
- A checklist per client type. An individual, a company and a trust each need different information. The system shows the right list for each.
- Automatic reminders. If a document is missing after two days, the client gets a polite reminder by email or text. Your staff do not have to chase.
- Document reading. AI reads uploaded documents and pulls out names, dates and numbers, so staff are not retyping them. It can flag obvious problems, such as an expired document or a name that does not match the form.
- A clear audit trail. Every step is time-stamped: what was requested, what was received and who reviewed it.
- Tasks for your team. Once the file is complete, a person receives it for review and approval.
The result is a consistent process, faster starts for clients and records you can find in seconds. These are the kinds of steps we build as workflow automation.
Automation can also reduce time spent on routine calls. If you want to see how a phone assistant could take first calls from new enquirers, read our guide on AI receptionists for tradies, which covers the same technology for a different industry.
What stays with you: judgement calls and reporting decisions
It is important to be clear about what automation should not do.
The obligations sit with your business. AI can prepare information and highlight concerns, but it cannot take responsibility for compliance. People still need to make the judgement calls:
- Assessing risk. Is this client or transaction higher risk? That depends on context that a system may not see.
- Deciding on suspicious activity. Whether something is suspicious, and whether to report it, is a human decision under your program.
- Handling exceptions. A client who cannot provide a standard document needs a thoughtful alternative.
- Owning the program. Your AML/CTF program, and the person responsible for it, remain your responsibility.
Use automation to prepare and organise, and keep a person in charge of decisions. Automated flags should always be reviewed, not trusted blindly. And never let a system quietly clear or reject a client without a person looking at it.
Also, be careful about what you tell clients or staff about reporting. Some obligations involve strict confidentiality. Ask your adviser or AUSTRAC about what you can and cannot say.
Keeping client data secure
Onboarding collects some of the most sensitive information you hold: identity documents, addresses, financial details and ownership structures. Protecting this is part of your duty to your clients.
Think carefully before sending identity documents through ordinary email or public AI tools. Ask where the data is stored, who can access it and how long it is kept. In Australia, privacy law, including the Privacy Act, may apply to how you handle personal information, so check your obligations with the Office of the Australian Information Commissioner or an adviser.
For sensitive document work, a private AI set-up can keep processing within an environment you control. That reduces the number of places client data travels. Whatever you choose, use strong access controls, limit who can view files and keep a record of who opened what.
How to start
Here is a practical route for the coming weeks.
- Read AUSTRAC's guidance for your sector. Work out which of your services are covered, and speak to your adviser if you are unsure.
- Map your current onboarding. Write down each step from first contact to the start of work, and who does it.
- List what you collect. Note the information and documents you ask for, for each type of client.
- Find the gaps. Look for steps that depend on memory, steps that vary between staff and places where records are weak.
- Automate one piece. Start with document collection and reminders, which are repetitive and low risk.
- Review with your compliance officer. Make sure the new flow matches your program, and test it on a few real files.
Frequently asked questions
Does this apply to my firm?
It depends on the services you provide, not only your profession. AUSTRAC publishes guidance on who is covered, so check its website and speak to a qualified adviser.
Can automation make my firm compliant?
- Compliance depends on having the right program, people and decisions. Automation can make your processes more consistent and your records easier to find, but it does not replace your responsibilities.
Can AI decide whether a client is high risk?
It can highlight things for review, such as inconsistent details. But the risk assessment and any decision to report belong to your people, under your AML/CTF program.
Will clients be put off by an online onboarding process?
Many clients prefer it, because they can complete it when it suits them, from their phone. Keep a simple alternative for those who need help.
This article is general information, not tax or legal advice. Check current rules with AUSTRAC or a qualified adviser.
Talk to Ainrion
Not sure where to start with AML/CTF compliance automation? Book a free 30-minute call with Ainrion. We'll look at how your practice onboards clients today, show you what is worth automating, and give you a fixed quote before you commit.
