When we were calling agency principals before building AMLHive, one conversation stuck with me more than any other. A regional Queensland principal, five staff, twenty years in business, put it like this: > "I’m 64. I’m three years from retirement. If this needs a compliance officer, I’m just closing." > > **— Regional QLD agency, 5 staff** He was not being dramatic. He genuinely believed AUSTRAC Tranche 2 would require him to hire a full-time compliance professional, or retain a consultant on a monthly fee, and that the cost would not be worth three more years of trading. He had decided to wind down a business he had spent two decades building — based on a misunderstanding. Twenty minutes later he had changed his mind. Not because I sold him anything, but because I told him what the requirement actually is. --- ## What the law actually requires The AML/CTF reforms require every reporting entity to **designate an AML/CTF Compliance Officer**. That is real, and you cannot skip it. But read the requirement closely and notice what it says — and what it doesn't. The compliance officer must be: * **A fit and proper person** — someone of good standing, which the principal of an established agency almost always is. * **At management level** — they need the authority to make the program stick. In a small agency, that is the owner or licensee in charge. * **Ordinarily resident in Australia.** Nothing in that list says "qualified", "full-time", "external", or "lawyer". It describes a person you very likely already have: **you**. (Source: AUSTRAC, "AML/CTF compliance officer", retrieved 23 May 2026) --- ## What it does *not* require Here is where the myth lives. Tranche 2 does **not** require any of the following: * **A new full-time hire.** There is no requirement to employ a dedicated compliance person. The role can be one hat worn by an existing person. * **A formal compliance qualification.** The Act asks for a fit and proper person at management level — not a certificate or a law degree. * **An external consultant on retainer.** Advice can help, but the named officer is internal and the role does not have to be outsourced. * **A separate compliance department.** A three-person agency designates one person. That is the whole structure. --- ## What the role actually involves Stripped of the jargon, the compliance officer is the person who **owns the agency’s AML/CTF program**. Day to day and month to month, that means: * **Being AUSTRAC’s point of contact** for the business. * **Making sure the program is followed** — that customer checks actually happen before a designated service is provided. * **Deciding on reports** — whether a suspicion meets the threshold for a Suspicious Matter Report, and ensuring it is lodged on time. * **Keeping the records** — so the agency can show what it did, for the seven years AUSTRAC may ask about. * **Refreshing the risk assessment** when the business changes. It is an *accountability* role, not a second job. For a small agency with the right tools, the recurring effort is measured in hours a month, not days a week. --- ## Why the myth took hold Three things created this fear, and none of them are the law itself. ### 1. The framing came from banking Most of what has been written about AML/CTF compliance officers was written for banks and large financial institutions, where the role genuinely is a full-time, qualified, often team-supported function. Lift that picture and drop it onto a five-person agency and of course it looks impossible. The Act scales; the banking image does not. ### 2. Fear sells Some of the noise around Tranche 2 has come from people with something to sell — and "you’ll need to hire a compliance officer" is a more profitable message than "you can do this yourself with the right system." We think the second message is the true one. ### 3. The franchisor gap Several principals told us their network had implied a "group solution" was coming. When it didn’t — or didn’t remove their individual obligation — the vacuum filled with worst-case assumptions. Each reporting entity names its own officer; a network cannot do it for you. --- ## If you’re a sole trader or a tiny agency You can be your own compliance officer. A sole trader can designate themselves. A husband-and-wife agency can name one of the two. The requirement is that the role exists, is filled by a suitable person, and is registered with AUSTRAC — not that you grow headcount to fill it. > **The honest summary:** if you run the agency, you are almost certainly the compliance officer. The job is to do the role properly — not to hire someone to hold the title. --- ## What to do this week * **Name the officer.** For most independents this is you. Write it down — it belongs in your AML/CTF program. * **Register the role with AUSTRAC.** When you enrol through AUSTRAC Online you provide your compliance officer’s contact details. * **Give the role a system, not a binder.** The difference between "hours a month" and "impossible" is whether your checks, screening and records are automated or manual. For the full picture of what sits under the officer, see our [real estate agency obligations guide](/Compliance/real-estate-agency-obligations) and the [plain-English AUSTRAC Tranche 2 guide](/Compliance/austrac-tranche-2-guide). > **AMLHive is the system that makes the compliance officer role a few hours a month.** Guided onboarding, automated CDD checklists, one-click sanctions and PEP screening, an AML/CTF program wizard, and an audit trail that records everything for you — built for independent agencies without a compliance team. Includes a 2-week free trial — start your trial now. [Reserve your spot.](/signup)