Customer identification record for AUSTRAC
Upload a passport or ID: we read the details, you add the address and how you verified them, and you get a record to print or export.
Drag your document or click to upload
PDF or image · max 2 pages
Free trial of up to 2 pages per document.
Who has to identify customers from 1 July 2026?
Under the reformed AML/CTF Act (Amendment Act 2024), the customer due diligence rules apply from 1 July 2026 to entities providing these designated services. The regime is activity-based, not profession-based:
- Real estate: brokering the sale, purchase or transfer of real estate, or selling your own real estate without an independent agent (Table 5).
- Professional services: assisting in real estate transfers, buying or selling companies or legal arrangements, holding or managing client money or assets, equity or debt financing, and creating or restructuring companies or trusts (Table 6). Lawyers, accountants and trust and company service providers are caught only when they provide these services.
- Dealers in precious metals and stones, when a purchase involves AUD 10,000 or more in physical currency or virtual assets (Table 2, item 2).
What the record should contain
Section 28 of the Act requires you to establish, on reasonable grounds, the identity of the customer before providing the service. For an individual that means taking reasonable steps to establish that the customer is who they claim to be, collecting KYC information appropriate to the risk, and verifying it using reliable and independent data. Neither the Act nor the AML/CTF Rules 2025 prescribe a fixed list of data points for an individual, so this record covers what is usual and your AML/CTF program decides what you need:
- Full legal name and date of birth.
- Residential address (you type it in: not every document shows it).
- The document used: type, number, issuing country and expiry date.
- How you verified it, when, and who did it.
There is no 100-point check in the current Act
The 100-point check does not appear in the AML/CTF Act 2006 as amended, in the Amendment Act 2024 or in the AML/CTF Rules 2025; we searched their full text on 30 September 2026. Verification is risk-based: reliable and independent data appropriate to the ML/TF risk. Whether a document alone is enough for a given customer is a decision for your AML/CTF program, not for this tool.
How long to keep it
Section 111 requires you to keep records that demonstrate your customer due diligence, including sufficient and accurate records of the type and content of the data collected, until seven years after the business relationship ends or the occasional transaction is completed. The text does not require you to keep a copy of the identity document.
What this tool does not do
It reads the details on a document and lays them out. It does not check that the document is genuine, screen for PEPs or sanctions, assess risk, or replace your AML/CTF program or legal advice. The information is current to 30 September 2026 and comes from the Act, the Amendment Act 2024 and the AML/CTF Rules 2025 as published on legislation.gov.au. AUSTRAC guidance may add expectations that we have not read.
Frequently asked questions
Do I need a 100-point check for AUSTRAC?
Not according to the current legislation: the 100-point test is not in the AML/CTF Act, the Amendment Act 2024 or the AML/CTF Rules 2025. Section 28 asks for reasonable steps and verification with reliable and independent data appropriate to the risk.
Do I have to keep a copy of the customer's ID?
The text of the Act does not mandate a copy of the identity document. Section 111 requires records that demonstrate the type and content of the data you collected, and your AML/CTF program may require more.
How long do I keep customer identification records?
Seven years from the end of the business relationship, or from the completion of an occasional transaction (section 111).
Does it read Australian driver licences?
It reads passports, national ID cards, driver licences and residence permits from a photo or PDF. A licence has no machine-readable zone, so check the extracted fields against the card before you rely on them.
Are my customer's ID details stored?
The record is built only in your browser. The uploaded document is sent to WhappScan to read it and is not stored permanently; the free trial reads the first two pages. See the privacy notice.
Can I process many IDs at once?
With a free account you can upload IDs from the web, WhatsApp or email and export the details as a spreadsheet.