Suspicious Matter Reporting
Under the AML/CTF Act

1. Introduction

A suspicious matter report (SMR) is one of the most critical obligations under Australia's anti-money laundering and counter-terrorism financing (AML/CTF) framework. It is the primary mechanism through which reporting entities communicate concerns about potentially criminal activity to the Australian Transaction Reports and Analysis Centre (AUSTRAC).

SMRs sit at the heart of the intelligence-led approach to financial crime detection. Unlike threshold transaction reports (TTRs), which are triggered automatically when cash transactions exceed $10,000, SMRs require professional judgement. They are filed when a reporting entity forms a suspicion—on reasonable grounds—that a matter may relate to money laundering, terrorism financing, the proceeds of crime, or another offence against Commonwealth, state, or territory law.

Under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (the AML/CTF Act), the obligation to file SMRs applies to all reporting entities that provide designated services. With the expansion of Tranche 2, this now extends to accountants, lawyers, conveyancers, real estate agents, trust and company service providers, and dealers in precious stones and metals. This guide explains the suspicious matter reporting framework in detail, including the legislative triggers, filing processes, timeframes, the tipping-off prohibition, and the consequences of non-compliance.

If you are new to AML/CTF obligations under Tranche 2, we recommend reading our AUSTRAC Tranche 2 Explained guide before proceeding.

2. Legislative Basis

The suspicious matter reporting obligation is established by sections 41 to 49 of the AML/CTF Act 2006. These sections define who must report, what must be reported, and when reporting must occur.

Section 41 is the core provision. It imposes a reporting obligation on any reporting entity that provides, or has provided, a designated service. Under s41(1), a reporting entity must file an SMR with AUSTRAC if, at any time while providing or after providing a designated service, it has reasonable grounds to suspect that:

• the client, or a person on whose behalf the client is acting, is not who they claim to be;
• the provision of the service, or information the entity has about the provision of the service, may be relevant to the investigation or prosecution of a person for an offence against a Commonwealth, state, or territory law;
• the provision of the service, or information the entity has about the provision of the service, may be of assistance in the enforcement of the Proceeds of Crime Act 2002;
• the provision of the service, or information the entity has about the provision of the service, may be relevant to AUSTRAC in performing its functions.

Section 43 establishes the reporting timeframes (discussed in Section 4 below). Section 45 provides safe harbour protections for entities that file SMRs in good faith, shielding them from civil liability, breach of confidentiality actions, and professional disciplinary proceedings. Section 49 extends the obligation to attempted transactions—meaning that even if a designated service is not ultimately provided, the reporting obligation may still be triggered if you formed a suspicion during a preliminary interaction.

The AML/CTF Rules 2024 provide further detail on the practical requirements for SMR filing, including acceptable formats and information fields that must be completed.

3. What Constitutes a Suspicious Matter

The AML/CTF Act uses the phrase “reasonable grounds to suspect” as the threshold for reporting. This is intentionally set at a relatively low bar. Understanding the two limbs of the suspicion test and the “reasonable grounds” standard is essential.

The Two Limbs

A suspicious matter arises under one of two broad categories:

Limb (a): Suspicion of ML/TF or proceeds of crime. This covers situations where you suspect that a transaction, service, or related funds may be connected to money laundering, terrorism financing, or property that constitutes proceeds of an indictable offence under the Proceeds of Crime Act 2002. This is the most common basis for SMR filing.

Limb (b): Suspicion of a relevant offence. This is broader. It covers any situation where you suspect that the provision of a designated service, or information you hold about it, may be relevant to investigating or prosecuting a person for an offence against any Commonwealth, state, or territory law. This includes tax evasion offences, fraud, bribery, corruption, and other serious crimes—not just money laundering.

The “Reasonable Grounds” Standard

The “reasonable grounds to suspect” standard is an objective test. Courts have consistently interpreted it to mean that a reasonable person, in possession of the same information and in the same circumstances, would form a suspicion. Key points about this standard:

• It does not require certainty. You do not need to be sure that money laundering or another offence has occurred.
• It does not require evidence. A suspicion is less than a belief. You do not need to have gathered evidence of criminal activity.
• It is more than a mere feeling. You must be able to articulate specific facts, circumstances, or behaviours that give rise to the suspicion. A vague sense of unease, by itself, is insufficient—but it may prompt you to examine the situation further.
• It is lower than “reasonable grounds to believe.” The believe threshold implies a state of mind closer to conviction. Suspicion requires less: the possibility, not the probability, of criminal involvement.

AUSTRAC guidance consistently advises that when in doubt, you should report. The safe harbour protections under s45 mean there is no penalty for filing an SMR in good faith that turns out to be unfounded. By contrast, there are significant penalties for failing to file when the threshold was met.

4. When to File an SMR

Section 43 of the AML/CTF Act establishes two filing timeframes based on the nature of the suspicion:

When does the clock start? The statutory timeframe begins at the point when the reporting entity (or a person within the entity) forms the suspicion. This is a critical distinction: the trigger is not when the transaction occurred, nor when management reviews the suspicion, but when the suspicion itself is formed. If a junior staff member identifies a suspicious matter on Monday, the 3-business-day period starts on Monday, not when the compliance officer reviews the matter on Wednesday.

Obligation continues after the relationship ends. The reporting obligation under s41 is not limited to the duration of the client engagement. If you form a suspicion about a matter that arose during the provision of a designated service, you must file an SMR even if the client relationship has since ended. This can occur, for example, when reviewing old files as part of an internal audit or when new information comes to light about a former client.

Best practice is to file as soon as practicable once a suspicion is formed. Delay reduces the intelligence value of the report and increases the risk of non-compliance. Internal procedures should be designed to minimise the time between suspicion formation and SMR lodgement.

5. How to File an SMR

SMRs are filed electronically through the AUSTRAC Online portal. The process requires you to complete a structured form that captures the essential details of the suspicious matter.

Information Required

An SMR submitted to AUSTRAC must include:

• Reporting entity details: Your business name, ABN, AUSTRAC enrolment number, and the name and contact details of the person submitting the report.
• Subject details: The identity and details of the person or entity involved in the suspicious matter, to the extent known. This includes names, dates of birth, addresses, identification document numbers, and any other identifying information.
• Transaction details: The nature of the designated service, the date and amount of any transaction(s) involved, the accounts or parties involved, and the method of payment.
• Narrative description: This is the single most important element of the SMR. The narrative must explain, in clear and specific language, why you consider the matter suspicious. It should describe the facts and circumstances that gave rise to the suspicion, the relevant behaviours or transaction patterns observed, and any contextual information that AUSTRAC analysts will need to assess the report. Avoid vague statements such as “the transaction seemed unusual.” Instead, explain precisely what was unusual and why it was inconsistent with the client's profile, stated purpose, or normal business operations.
• Supporting documentation references: While you do not typically attach documents to the SMR form, you should reference any supporting documentation that you hold (such as identification documents, transaction records, or correspondence) so that AUSTRAC can request them if needed.

Writing an Effective Narrative

The narrative description is what transforms raw data into actionable intelligence. AUSTRAC analysts rely on the narrative to understand the context and significance of the reported matter. An effective narrative should:

• Describe the facts chronologically and specifically (dates, amounts, parties).
• Explain what the client's normal or expected behaviour would be and how the observed behaviour deviates from it.
• Identify the specific suspicious indicators (red flags) that triggered your concern.
• Avoid legal conclusions (do not state “the client is money laundering”). Instead, describe what you observed and why it is inconsistent with legitimate activity.
• Include any steps you took to resolve the suspicion (such as requesting further information from the client) and the outcome of those steps.

6. Suspicious Indicators by Profession

The types of behaviours and transaction patterns that should trigger suspicion vary by profession, reflecting the different designated services each profession provides. The following indicators are drawn from AUSTRAC guidance and FATF typology reports. They are illustrative, not exhaustive.

For a deeper look at transaction monitoring and red flags, see our blog post on SMR filing scenarios.

7. The Tipping-Off Prohibition

Section 123 of the AML/CTF Act establishes one of the most consequential provisions in the entire framework: the tipping-off offence. This section makes it a criminal offence to disclose that an SMR has been filed, is being prepared, or is being considered.

What Constitutes Tipping Off

Tipping off includes any disclosure that:

• An SMR has been filed with AUSTRAC about a person or transaction.
• An SMR is being prepared or is under consideration.
• Information has been or will be communicated to AUSTRAC in connection with a suspicious matter.

The offence extends beyond explicit statements. It can include conduct that indirectly reveals the filing, such as suddenly refusing to process a transaction after a period of normal service, or making comments that lead the client to infer that a report has been made.

Practical Guidance on Maintaining Confidentiality

• Do not inform the client that an SMR has been filed or is being considered.
• Do not alter your behaviour toward the client in a way that could signal a report has been made. Continue providing services normally unless directed otherwise by AUSTRAC or law enforcement.
• Restrict internal knowledge to the compliance officer and any staff directly involved in preparing the report. Inform other team members on a need-to-know basis only.
• Store SMR records separately from general client files to prevent accidental disclosure.
• Train staff on the tipping-off prohibition as part of your AML/CTF compliance program. Staff should understand that even casual disclosure (such as mentioning in conversation that “we had to file a report on that client”) is a criminal offence.

Exemptions

Limited exemptions to the tipping-off prohibition exist under the Act. Disclosure is permitted:

• To AUSTRAC itself, in connection with the SMR or related compliance matter.
• For the purpose of obtaining legal advice about whether an SMR should be filed or about the tipping-off obligation itself.
• For internal compliance purposes, such as escalation to the AML/CTF compliance officer or discussion within the compliance team for the purpose of making a reporting decision.
• To ASIC, APRA, or another regulator in certain prescribed circumstances.

8. Record Keeping for SMRs

Section 142 of the AML/CTF Act imposes record-keeping obligations on reporting entities. For SMRs, these requirements are particularly important given the tipping-off prohibition and the need to demonstrate compliance during any AUSTRAC audit or examination.

What Records to Maintain

• A copy of every SMR filed with AUSTRAC, including the complete narrative description and all information submitted.
• Internal notes documenting the formation of the suspicion: who formed it, when, and the specific facts or behaviours that triggered it.
• Records of internal escalation: who the matter was reported to, when, and the outcome of any internal review or discussion.
• Records of decisions not to file an SMR, where a suspicion was considered but ultimately determined not to meet the threshold. Documenting these decisions is critical for demonstrating that you applied your mind to the issue and reached a reasoned conclusion.
• Any correspondence with AUSTRAC relating to the SMR, including requests for further information.

Retention Period

SMR records must be retained for a minimum of 7 years from the date the report was made. This aligns with the general record-keeping obligations under the AML/CTF Act.

Secure Storage and Access Controls

Given the tipping-off prohibition, SMR records must be stored with appropriate security and access controls:

• SMR records should be stored separately from the general client file. If using a document management system, restrict access to the SMR folder to the AML/CTF compliance officer and authorised personnel only.
• Electronic records should be encrypted and protected by role-based access controls.
• Physical records (if any) should be stored in a locked, restricted-access location.
• Access logs should be maintained to demonstrate who accessed SMR records and when.

9. Penalties for Failure to Report

The consequences of failing to file an SMR when required are severe. The AML/CTF Act provides for both civil and criminal penalties.

Civil Penalties

Failure to file an SMR is a civil penalty provision under the AML/CTF Act. AUSTRAC can pursue civil penalty proceedings in the Federal Court. Penalties can reach:

• For a body corporate: Up to 100,000 penalty units (currently over $31 million).
• For an individual: Up to 20,000 penalty units.

The Federal Court determines the penalty amount based on the nature and extent of the contravention, the degree of culpability, the entity's compliance history, and whether the entity cooperated with AUSTRAC.

Criminal Penalties

In cases involving intentional non-reporting—where a reporting entity knowingly fails to file an SMR despite having reasonable grounds to suspect criminal activity—criminal prosecution may be pursued. Criminal penalties include imprisonment and substantial fines.

Enforcement Actions

Beyond penalties, AUSTRAC has a range of enforcement tools:

• Infringement notices: Administrative penalties for less serious breaches.
• Enforceable undertakings: Binding agreements requiring the entity to take specific remedial actions.
• Remedial directions: Formal directions to rectify compliance deficiencies.
• Registration suspension or cancellation: For serious or repeated non-compliance.

AUSTRAC has publicly stated that it takes a risk-based approach to enforcement, prioritising systemic and egregious failures over minor or inadvertent breaches. However, a pattern of failing to file SMRs will attract the most serious consequences. Historical enforcement actions against major financial institutions have resulted in penalties exceeding $1 billion, demonstrating that AUSTRAC is prepared to pursue the full extent of its powers.

10. Internal Escalation Procedures

Effective internal escalation procedures are essential for translating individual suspicions into timely, well-documented SMRs. Your AML/CTF program (required under Part 7 of the Act) must include procedures for identifying, escalating, and reporting suspicious matters.

Designing an Escalation Framework

An effective internal escalation framework should address the following:

• Clear escalation pathways: Every staff member who interacts with clients or handles transactions should know exactly who to escalate a suspicion to. In most firms, this will be the designated AML/CTF compliance officer.
• Low internal threshold for escalation: Staff should be encouraged to escalate any concerns, even if they are uncertain whether the threshold for an SMR is met. The compliance officer can then make the formal assessment.
• Documented escalation process: The escalation should be recorded in writing, including the date, the identity of the person escalating, the facts giving rise to the concern, and any initial assessment by the compliance officer.
• Timely assessment: Given the statutory filing timeframes (24 hours for terrorism financing, 3 business days for other matters), the internal escalation and assessment process must be rapid. Do not allow internal bureaucracy to cause a breach of the filing deadline.

Role of the AML/CTF Compliance Officer

The AML/CTF compliance officer is the central figure in the SMR process. Their responsibilities include:

• Receiving and assessing internal escalations of potentially suspicious matters.
• Determining whether the “reasonable grounds to suspect” threshold is met.
• Preparing and lodging the SMR with AUSTRAC within the required timeframe.
• Maintaining the confidentiality of the process (tipping-off compliance).
• Keeping complete records of all assessments, including decisions not to file.

Documenting Decisions Not to Report

Not every escalated suspicion will result in an SMR. However, it is critical to document the decision-making process when you decide not to file. The documentation should include:

• The facts that were considered.
• The analysis of why the “reasonable grounds to suspect” threshold was not met.
• Any additional inquiries or checks that were performed (such as enhanced due diligence).
• The identity of the person who made the decision and the date.

This documentation protects the entity in the event of a subsequent AUSTRAC audit. It demonstrates that the entity had a functioning system for identifying and assessing suspicious matters, even if the outcome in a particular case was a decision not to report. For further guidance on building an effective compliance program, see our guides for accountants, lawyers, and real estate agents.

11. Common Mistakes

Based on AUSTRAC guidance and industry experience, the following are the most common pitfalls in suspicious matter reporting:

12. How ComplyAU Assists

ComplyAU is designed to support reporting entities in meeting their suspicious matter reporting obligations. The platform assists with—but does not replace—your professional judgement and legal obligations. Key capabilities include:

• Guided SMR workflows: Step-by-step templates that walk you through the information required for an SMR, helping you produce complete, well-structured reports with effective narrative descriptions.
• Tipping-off access controls: Role-based permissions that restrict access to SMR records to authorised compliance personnel only, reducing the risk of accidental or unauthorised disclosure.
• Internal escalation tracking: A documented escalation pathway that captures who raised a concern, when, and the compliance officer's assessment—creating the audit trail needed for AUSTRAC examinations.
• Deadline monitoring: Automated reminders linked to statutory filing timeframes, helping you avoid delayed reporting.
• Secure 7-year record retention: Encrypted, access-controlled storage for all SMR records, internal notes, and decision documentation, aligned with the retention requirements under s142 of the Act.
• Suspicious indicator checklists: Profession-specific checklists of red flags drawn from AUSTRAC guidance and FATF typologies, supporting staff in identifying matters that may warrant escalation.

ComplyAU assists you in building a robust, documented process for suspicious matter reporting. It does not make compliance decisions on your behalf and does not replace the need for qualified professional or legal advice.