KYC Verification & Customer Due Diligence (CDD)

What is Customer Due Diligence (CDD)?

Under the AUSTRAC Tranche 2 reforms, Customer Due Diligence (CDD)—commonly known as KYC (Know Your Customer)—is a mandatory obligation. It requires reporting entities to identify and verify the identity of their clients before providing any designated services. For professional services firms, this means you can no longer rely on informal relationships or simple photocopies of ID. You must establish a formal, risk-based process to verify that your clients are who they say they are.

AUSTRAC Tranche 2 Requirements for KYC

To comply with AUSTRAC requirements, your KYC process must include:

• Individual Verification: Collecting and verifying full name, date of birth, and residential address using reliable, independent source documents (e.g., passports, driver's licenses).
• Beneficial Owners: Identifying and verifying the natural persons who ultimately own or control a client entity (such as a company, trust, or partnership) with a 25% or greater interest.
• Politically Exposed Persons (PEPs): Screening clients to determine if they are PEPs (foreign, domestic, or international organisation PEPs), their close associates, or family members.
• Sanction Screening: Checking clients against the Australian DFAT Consolidated Sanctions List and global registers to ensure you are not dealing with sanctioned individuals or entities.

How CompliDesk Simplifies KYC

CompliDesk replaces manual ID collection with a secure, automated digital workflow. Instead of chasing clients for documents via insecure emails, you simply send a secure link from your CompliDesk dashboard. Clients complete biometric identity checks and upload their documents. CompliDesk automatically verifies the data, screens for PEPs and sanctions, and records the complete result in your audit trail—100% secure and compliant.

Key Benefits of CompliDesk KYC

• 100% Digital Workflow: No physical paperwork, printing, or scanning. Complete the entire process digitally.
• Biometric Matching: Matches client selfies to government-issued IDs using advanced facial recognition and liveness detection.
• Real-Time Database Checks: Instantly checks national databases, PEP lists, and global sanctions lists.
• Secure Client Experience: A mobile-friendly portal that clients can complete in under 2 minutes, enhancing your firm's professional image.

How the Feature Works

1. Initiate: Send a secure KYC request directly from the CompliDesk dashboard via SMS or email.
2. Verify: The client uploads their ID (passport, driver's license) and performs a quick biometric liveness check on their phone.
3. Screen: CompliDesk automatically verifies the ID against official sources and runs PEP/sanction checks.
4. Record: The verified profile and screening results are instantly saved to your secure, audit-ready database.

Why it Matters Under AUSTRAC Tranche 2

Tranche 2 reforms bring lawyers, conveyancers, accountants, real estate agents, TCSPs, precious metals dealers, and VASPs under the AML/CTF Act. Failing to verify a client's identity before providing a designated service is a serious compliance breach. Doing so can lead to severe civil penalties, regulatory audits, and reputational damage. CompliDesk ensures you have a legally compliant, risk-based KYC process that satisfies AUSTRAC.

Industries That Should Use It

All Tranche 2 entities must implement KYC and CDD. CompliDesk is tailored for:

• Lawyers & Conveyancers: For property transactions, trust setups, and company formations.
• Accountants & Bookkeepers: For tax planning, business structuring, and managing client funds.
• Real Estate Professionals: For buying, selling, or leasing commercial and residential property.
• Trust & Company Service Providers (TCSPs): For establishing trusts, registering companies, and providing nominee services.
• Precious Metals & Stones Dealers: For high-value transactions involving cash or bullion.
• Virtual Asset Service Providers (VASPs): For digital currency exchanges and wallet transactions.

Compliance Best Practices

• Establish clear thresholds for when Enhanced Due Diligence (EDD) is triggered (e.g., high-risk jurisdictions or PEP matches).
• Verify the identity of all beneficial owners (natural persons with 25% or more ownership or control).
• Never accept unverified photocopies of IDs; always use secure, independent sources or biometric verification.
• Train staff to identify red flags, such as clients who resist providing identification.

Frequently Asked Questions (FAQ)

What is the difference between KYC and CDD under Tranche 2?

KYC (Know Your Customer) is the process of identifying and verifying a client's identity. CDD (Customer Due Diligence) is the broader framework that includes KYC, identifying beneficial owners, understanding the nature of the business relationship, and ongoing monitoring of the client's risk profile.

How do we verify beneficial owners of trusts and companies?

For company clients, you must identify any natural person who owns or controls 25% or more of the company. For trust clients, you must identify the settlor, trustees, beneficiaries, and any other individual who exerts ultimate control over the trust. CompliDesk guides you through this process step-by-step.

When do we need to perform Enhanced Due Diligence (EDD)?

Enhanced Due Diligence (EDD) must be performed when a client is identified as high-risk, is a PEP, is from a high-risk jurisdiction, or when a suspicious matter arises. EDD involves gathering additional information, such as the source of wealth and source of funds.

How does CompliDesk protect client data?

CompliDesk uses bank-grade, end-to-end encryption to protect all client data. All information is stored in secure, Australian-based cloud servers, ensuring compliance with Australian data sovereignty and privacy laws.