AML compliance for Australian bookkeepers and BAS agents

No. BAS agent registration with the Tax Practitioners Board is independent of AML/CTF reporting-entity status. You are in scope only if you provide a designated service — most commonly receiving, holding, controlling or transferring client money or property, assisting with company or trust formation, providing a registered office, or acting as a nominee director, secretary or trustee. A BAS agent who lodges activity statements and reconciles ledgers but never touches the client's bank account or sets up entities is generally out of scope. The exposure rises sharply once you take payment authority over a client account or move into virtual CFO work.

Pure data entry, bank-feed reconciliation, BAS preparation, and management reporting — without payment authority, without entity formation, and without acting in any nominee capacity — is generally out of scope. The safest position is to make this explicit in the engagement letter: scope of work limited to bookkeeping and BAS preparation, no payment authority, no entity formation, no nominee roles. If a client later asks you to run their weekly payment file or be added as a signatory, that is the moment your scope changes and AML obligations may attach.

Holding or exercising authority to direct payments from a client's account is the core 'managing client money' designated service. The trigger is the authority itself, not the dollar value: a bookkeeper who is a co-signatory on a client operating account, or who has bank-feed-plus-payment-initiation rights, is in scope from the first payment run. Read-only bank feeds and reconciliation access on their own do not trigger the designated service. Many bookkeepers respond to Tranche 2 by removing payment authority arrangements where they can, and ring-fencing the engagements where it is genuinely needed (e.g., virtual CFO contracts) into a properly scoped AML program.

Providing a designated service without enrolling with AUSTRAC and running a program is a contravention of the AML/CTF Act, with civil penalties of up to A$22 million per contravention for body corporates and A$4.4 million for individuals. The TPB and your professional body (IPA, ICB, AAT) can also take action under fit-and-proper tests. The practical risk for sole practitioners is less the headline penalty and more (a) AUSTRAC enforceable undertakings that consume months of operating capacity, and (b) reputational impact with referrers — accountants who refer bookkeeping work will not refer to a non-compliant operator.

Yes. Several CompareAML providers are building scoped, low-touch programs for sole-trader and micro-firm bookkeepers who provide a small number of designated services on the side. The typical shape is: a scoped risk assessment, a short program document tailored to your service mix, an off-the-shelf identity verification flow integrated with Xero/MYOB/QuickBooks, and a quarterly review checklist. Costs sit at the lower end of the market — well under the A$129–A$650/month band typical for accounting firms. This is one of the segments we are actively onboarding providers into now.