AML/CTF

AML Staff Onboarding: The Missing Compliance Control  

The newest person in your firm is often the most willing to help.

That is exactly why they can become your first AML/CTF weakness.

They reply to the client. They chase the trust deed. They upload the ID. They help prepare the file for a company set-up because everyone is busy and the work needs to move along.

Nobody intended to bypass the process.

But nobody stopped to ask whether that new employee had been trained before touching an AML/CTF function.

That is the new problem with AML staff onboarding.

Most firms have trained the people who were already in the room. The harder question is what happens to the next person who joins. 

Why new starters change the risk

From 1 July 2026, accounting firms providing designated services became reporting entities under Australia’s AML/CTF framework.

That brought obligations including a written AML/CTF program, customer due diligence, ongoing monitoring, suspicious matter reporting, staff training and record keeping.

Most firms understand the first training push.

Partners attend the training. Managers complete the assessments. Admin staff are shown the checklists. The AML/CTF Compliance Officer is appointed. The training register begins.

Then ordinary firm life resumes.

Someone resigns. A graduate starts. A client services administrator moves into a new role. A contractor is brought in for overflow. An experienced accountant joins from another practice.

That person was not there when the firm built the original workflow.

If your AML/CTF system depends on the original team staying unchanged, it is not a system.

It is a moment in time. 

AML staff onboarding is not general induction

Most accounting firms already have a staff induction process.

Laptop. Email. Practice software. Timesheets. Tax workflow. Client communication standards. Security access.

AML/CTF now needs its own gate inside that process.

Not a vague reminder. A gate.

Before a new starter performs any function connected to designated service work, the firm should confirm they have completed the training required for that function.

This matters because AML/CTF tasks can look deceptively ordinary.

Requesting documents looks like admin.
Updating a file note looks like admin.
Chasing a shareholder register looks like admin.
Asking about appointors or beneficial ownership looks like admin.

But these tasks sit inside a compliance workflow. If they are done incorrectly, the file may not show that the firm completed the required process before work commenced.

The risk is not that new staff are careless. The risk is that the firm treats AML/CTF tasks as ordinary administration before explaining what they actually mean. 

The day-one AML induction gate

A practical AML induction process starts with five questions.

Before the new starter is allocated live work, the firm should ask:

1. Will this person work on files involving designated services?
2. Will this person request or receive CDD documents?
3. Will this person communicate with clients about AML/CTF information?
4. Will this person help with beneficial ownership, risk rating, monitoring, or file evidence?
5. Will this person have access to AML/CTF records or escalation material?

If the answer to any of these is yes, the person needs role-based AML induction before that work is performed.

That induction should cover:

• what designated services mean in the firm’s actual work
• the firm’s trigger check
• the rule that minimum CDD must be completed and documented before designated service work commences
• what the person is allowed to do in their role
• what must be escalated
• what must not be said to clients where a concern has been raised
• where AML/CTF evidence is stored
• how training completion is recorded

This does not need to take days. But it does need to happen before the work commences.

Train first. Allocate the job second. 

Role-based AML training for accounting firms

Not every staff member needs the same level of AML/CTF training.

That is the point of role-based training.

A partner does not need the same induction as a graduate. A client services administrator does not need the same decision-making authority as the AML/CTF Compliance Officer.

But each person must understand the part of the workflow they touch.

Admin and client services
They need to know what documents to request, how to follow up, where to store evidence, and when an incomplete or unusual response must be escalated. They also need approved language for routine client questions.

Accountants
They need to recognise designated service triggers and scope changes. They need to understand why ordinary compliance work can become AML/CTF-relevant when the client asks for entity creation, restructuring, ownership changes or transaction support.

Managers
They need to supervise the workflow. That includes checking whether CDD is complete, reviewing beneficial ownership issues, applying the risk rating process, documenting the rationale, and escalating where required.

Partners
They need to set and protect the standard. If the firm says no CDD, no work, partners must not quietly override the process for urgent or valuable clients.

AML/CTF Compliance Officer
They need to oversee the program, escalation pathway, training evidence and higher-risk decision process.

The aim is simple. Every person should know their lanes. And they should know when to stop. 

A practical AML induction checklist

A new employee's AML training process should be practical enough to repeat every time someone joins.

Use this checklist as the base.

Before live AML/CTF work is allocated

• Confirm whether the role touches designated service work.
• Assign the relevant role-based AML/CTF training.
• Explain the firm’s trigger check in plain English.
• Show the new starter the CDD checklist and evidence location.
• Explain who can approve work at each level.
• Explain when to escalate to the AML/CTF Compliance Officer.
• Explain the tipping-off risk and the rule to stop discussing a concern with the client once escalated.
• Confirm what the new starter is not yet authorised to do.
• Record induction completion in the training register.

During the first supervised files

• Review the trigger check.
• Check that document requests are correct.
• Confirm incomplete information is identified.
• Check that evidence is stored correctly.
• Review any client communication before it is sent.
• Confirm the staff member knows when to pause and ask.

Before independent AML/CTF tasks are allowed

• Complete any required assessment.
• Record the result.
• Confirm which AML/CTF functions the person is approved to perform.
• Set the refresher training date.

This is how the firm turns training into control. Not by hoping people remember. By building a repeatable pathway. 

The AML/CTF training register for new employees

Your training register is evidence that the firm trained the people performing AML/CTF functions.

For each staff member, the register should record:

• name and role
• training modules completed
• date of completion for each module
• short scenario-based assessment result
• annual refresh due date
• trainer or training provider details

For new starters, firms should also consider recording:

• AML induction date
• role-based training assigned
• supervisor responsible for first AML/CTF files
• AML/CTF functions the person is approved to perform
• date of approval for those functions

That last point is useful. It gives managers a clear allocation rule.

If the register says the person may request CDD documents but may not complete risk ratings, the manager knows where the line is.

If the register says the person has not yet completed induction, they should not be given AML/CTF tasks.

This is not bureaucracy. It is evidence. 

Why prior experience is not enough

An experienced hire may have worked in accounting for 20 years.

That does not mean they understand your AML/CTF program.

They may have used different software. Different checklists. Different file storage. Different escalation rules. Different partner approval thresholds. Different client communication practices.

Experience helps. It does not replace induction.

The safer firm standard is that every new starter completes the firm’s AML induction before performing AML/CTF functions, regardless of seniority or background.

The same applies when a current staff member changes roles.

A person promoted from accountant to manager may now be reviewing risk ratings, supervising CDD completion or approving lower-risk matters. That is a different AML/CTF function.

Role change should trigger a training review. 

The first month matters more than the first morning

New employees do not absorb everything in day one. They are learning the people, clients, systems, workflow, and expectations of the firm. AML/CTF needs to be reinforced through supervised practice.

A simple 30-day approach works well.

Day one: Explain the firm’s AML/CTF standard and the rule that the new starter must not perform AML/CTF tasks until trained for the relevant function.

Week one: Teach designated service awareness. Use firm examples. Company set-up. Trust restructure. Registered office work. Outsourced CFO work involving payment authority. Business sale support.

Week two: Show the workflow in a supervised file. Let them see the trigger check, CDD request, beneficial ownership review, risk rating, and approval step.

Week three: Give a limited, supervised task. Review it carefully. Correct the gaps early.

Week four: Complete the assessment or competence check. Update the training register. Confirm approved AML/CTF functions.

That is how new employee AML training becomes part of operations. Not a slide deck. But a working habit. 

The culture new staff copy

New employees listen to the induction. Then they watch the partners.

If the induction says no CDD, no work, but a partner says, “Just get started, we know them,” the new starter has learned the real rule.

If the induction says escalate uncertainty, but a manager treats questions as interruptions, the new starter has learned another rule.

Do not raise problems. That is how compliance culture is weakened. Quietly.

The strongest AML/CTF training is consistent behaviour from leadership.

Staff who pause are supported.
Staff who ask questions are respected.
Staff who enforce the workflow are backed.
Staff who refuse to proceed without the required evidence are not made to feel difficult.

New people learn quickly what the firm truly values. Make sure they see the standard you wrote down. 

The new starter test

 There is a simple way to test your AML staff onboarding process.

Imagine a new employee starts next Monday.

By Friday, could they answer these questions?

• What work in this firm may trigger AML/CTF obligations?
• Who is the AML/CTF Compliance Officer?
• What must happen before designated service work commences?
• Where are CDD documents and AML/CTF evidence stored?
• What should they do if a client refuses information?
• What should they do if something does not add up?
• What AML/CTF functions are they approved to perform?
• Is their training recorded in the register?

If the answer is no, the induction is not ready.

A firm can have a written AML/CTF program and still fail at the new employee level. That is why AML staff onboarding matters.

Because the next compliance weakness may not come from the difficult client, the complex structure or the high-risk transaction.

It may come from the helpful new person who was never properly shown where the line is.

This article is general guidance only and does not constitute legal advice. Firms should confirm their specific obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) and seek independent legal advice where required.

PREVIOUS POST

How AML/CTF Compliance Can Help Accounting Firms Win Better Clients