Four dimensions.
Fully assessed.
AUSTRAC requires assessment of all four risk dimensions. Skipping any one creates a gap in your program that AUSTRAC examiners will find.
Customer Risk
Systematic scoring of customer risk factors: PEP or associate status, complex corporate structures, high-risk jurisdictions, cash-intensive businesses and adverse intelligence.
Key factors
Product & Service Risk
Risk profiling of each designated service you provide — accounting for anonymity, cross-border capability, transaction speed and ML/TF misuse typologies.
Key factors
Delivery Channel Risk
Assess the risk introduced by how services reach the customer: face-to-face, fully digital, agent networks, intermediaries and automated platforms.
Key factors
Geographic Risk
Country and jurisdiction risk ratings drawn from FATF grey/black lists, OFAC country programs, AUSTRAC guidance and independent risk indices.
Key factors
Inherent risk is just the start.
Residual risk is what AUSTRAC cares about.
Inherent Risk
The ML/TF risk your business faces before any controls are applied. Determined by your customers, services, channels and geographies.
Control Effectiveness
How well your CDD, monitoring, reporting, training and governance controls mitigate your inherent risks. Rated on a calibrated effectiveness scale.
Residual Risk
Your actual remaining exposure after controls are applied. This is compared against your risk appetite statement to identify gaps requiring remediation.
Structured. Documented.
Audit-ready.
Inherent & Residual Risk
Two-stage assessment — inherent risk before controls, residual risk after — giving your board and AUSTRAC a clear picture of your actual risk exposure.
Linked to CDD Tiers
ML/TF risk assessment output directly drives CDD tier thresholds — so higher-risk customer types automatically trigger Enhanced Due Diligence.
AUSTRAC-Aligned Methodology
Assessment framework structured against AUSTRAC's published guidance for tranche 2 entities — covering all four required risk dimensions.
Triggered by Business Change
Automated alerts when you add a new service, expand to a new jurisdiction or onboard a significantly different customer segment — keeping your assessment current.
Board-Ready Reports
Executive summary and detailed working papers generated automatically — suitable for board presentation, AUSTRAC audit response and independent review.
Independent Review Ready
Assessment records structured to satisfy the mandatory 3-year independent review requirement with full methodology documentation.
Your program must reflect your actual risk
AUSTRAC's supervisory approach is explicitly risk-based. Entities with a higher ML/TF risk exposure are expected to have proportionally stronger controls. A generic, undocumented assessment is one of the most common compliance failures identified in AUSTRAC regulatory reviews.
Start Your Risk Assessment →Know your risk.
Prove you know it.
AUSTRAC-aligned ML/TF risk assessment across all four required dimensions — structured, documented and review-ready from day one.
Get Started Free →